$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/788c3900-e4d5-439b-b231-3a69b5354901.roa File: 788c3900-e4d5-439b-b231-3a69b5354901.roa (raw, json) Hash identifier: a+ceo2bht3yfowb2PPYNiKvOYgWdPpbfZFSEd0Wzj04= Subject key identifier: 08:CD:7B:B9:1E:73:E9:82:E3:FF:D9:EA:89:C0:1E:67:2F:2C:C0:C9 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 18A57FACD5649F6F1952B3F83BD8E40571FAC702 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/788c3900-e4d5-439b-b231-3a69b5354901.roa Signing time: Sat 18 Oct 2025 00:00:34 +0000 ROA not before: Sat 18 Oct 2025 00:00:34 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8014::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a5:7f:ac:d5:64:9f:6f:19:52:b3:f8:3b:d8:e4:05:71:fa:c7:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 18 00:00:34 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=bf8c7f090133e335818936defa6eb914efe72a004c12971e9dfd1b6a1dee1f11, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:b0:59:94:a0:3b:a8:02:77:7f:4c:9e:37: 97:5b:f7:ef:05:2e:29:2f:c0:f7:af:48:41:29:72: a7:fd:23:a3:bd:e7:6a:ab:0c:bd:8a:d2:33:73:c6: 46:37:80:02:b9:db:a9:b8:96:9d:4b:e9:df:f0:7c: ad:d6:b9:75:8e:da:18:8b:57:79:6e:f9:31:be:c3: 6d:d4:8b:a7:e9:6f:a5:cb:12:d8:a0:af:26:7a:b8: b4:d4:d4:2d:7f:54:aa:28:a1:13:29:e7:c2:4c:89: e0:33:88:ff:43:38:1d:a5:1f:9a:d7:76:a4:0d:9b: e3:26:87:10:de:33:d7:5d:0a:85:51:48:10:bc:5d: da:14:37:5b:9d:b2:66:02:13:06:fd:33:22:e9:60: df:ac:0e:d3:cc:e8:d9:13:c3:21:a9:ef:49:73:b5: 29:3c:6b:7a:99:4e:b7:4d:1a:42:c7:9a:1d:12:07: d9:58:98:8f:d9:d6:7b:44:8e:bd:e0:f1:0f:53:e6: e1:42:fe:73:ba:05:ce:df:8b:1c:2d:e4:c4:9d:89: df:44:d6:ed:0f:7f:a3:68:33:ad:61:34:63:f9:68: 0c:97:4d:c5:8c:38:e3:f2:4d:ac:f6:06:4b:54:0e: b3:15:b4:6f:89:6c:10:2b:43:cc:29:23:b9:cd:59: 19:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CD:7B:B9:1E:73:E9:82:E3:FF:D9:EA:89:C0:1E:67:2F:2C:C0:C9 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/788c3900-e4d5-439b-b231-3a69b5354901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8014::/38 Signature Algorithm: sha256WithRSAEncryption 1f:84:17:c3:ed:6f:26:84:f7:51:c2:f7:07:0d:f3:db:8e:1e: 82:b5:e6:e1:10:24:91:b9:3e:34:1e:ea:46:99:75:2c:e1:00: 60:d3:c9:ac:64:13:aa:b5:53:65:0c:1d:a6:3e:17:cd:c7:94: e2:2c:be:cb:eb:fd:a4:a0:93:07:ef:5c:59:ee:e3:a1:63:01: 06:8a:51:f1:6c:fd:3e:0d:0e:7e:ee:9c:12:1b:10:a6:41:da: 4a:0d:5e:ce:8a:63:9b:72:fc:4a:99:ae:e4:8e:06:b6:44:27: 4b:d7:05:f4:13:2f:3c:71:73:3b:a4:24:52:fe:ae:e3:8f:1c: cc:8f:83:1e:4c:de:7c:37:7a:a4:c6:e5:46:da:0e:87:5d:70: c2:27:de:64:af:e7:15:e3:9e:79:2d:55:b4:6c:8d:87:31:62: 1e:4c:83:a6:5e:6d:fe:69:27:b8:2c:b4:3c:db:3b:ed:6c:44: cf:24:cf:ca:9c:88:90:0c:b2:44:65:9e:64:8c:d5:ef:31:80: 99:c0:4d:0c:79:f2:b4:63:80:3b:72:16:d1:da:4f:95:0a:f3: 20:c7:b6:a0:3b:5c:3e:9e:20:37:da:21:ef:30:33:da:9d:5f: d3:ec:e2:8e:1f:17:39:da:a8:69:5b:b9:92:c9:04:c5:b6:9a: 35:58:74:3d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGKV/rNVkn28ZUrP4O9jkBXH6xwIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MTAxODAwMDAzNFoX DTI1MTEyMjIzNTk1OVowejFJMEcGA1UEBRNAYmY4YzdmMDkwMTMzZTMzNTgxODkz NmRlZmE2ZWI5MTRlZmU3MmEwMDRjMTI5NzFlOWRmZDFiNmExZGVlMWYxMTEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzWwWZSgO6gCd39MnjeXW/fvBS4p L8D3r0hBKXKn/SOjvedqqwy9itIzc8ZGN4ACudupuJadS+nf8Hyt1rl1jtoYi1d5 bvkxvsNt1Iun6W+lyxLYoK8meri01NQtf1SqKKETKefCTIngM4j/QzgdpR+a13ak DZvjJocQ3jPXXQqFUUgQvF3aFDdbnbJmAhMG/TMi6WDfrA7TzOjZE8Mhqe9Jc7Up PGt6mU63TRpCx5odEgfZWJiP2dZ7RI694PEPU+bhQv5zugXO34scLeTEnYnfRNbt D3+jaDOtYTRj+WgMl03FjDjj8k2s9gZLVA6zFbRviWwQK0PMKSO5zVkZBQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAjNe7kec+mC4//Z6onAHmcvLMDJMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 Lzc4OGMzOTAwLWU0ZDUtNDM5Yi1iMjMxLTNhNjliNTM1NDkwMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AFAAwDQYJKoZIhvcNAQELBQADggEBAB+EF8PtbyaE91HC9wcN 89uOHoK15uEQJJG5PjQe6kaZdSzhAGDTyaxkE6q1U2UMHaY+F83HlOIsvsvr/aSg kwfvXFnu46FjAQaKUfFs/T4NDn7unBIbEKZB2koNXs6KY5ty/EqZruSOBrZEJ0vX BfQTLzxxczukJFL+ruOPHMyPgx5M3nw3eqTG5UbaDoddcMIn3mSv5xXjnnktVbRs jYcxYh5Mg6Zebf5pJ7gstDzbO+1sRM8kz8qciJAMskRlnmSM1e8xgJnATQx58rRj gDtyFtHaT5UK8yDHtqA7XD6eIDfaIe8wM9qdX9Ps4o4fFznaqGlbuZLJBMW2mjVY dD0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:37:05 2025 by rpki-client