$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa File: 612ca3c6-0251-4029-8118-ab1be2a61379.roa (raw, json) Hash identifier: Hp+1MwKuAl6+NRBfK/raeXs1u2eS0J8Yub/mbDUB3+4= Subject key identifier: 92:4E:01:23:96:AB:1C:A1:C2:F4:D6:E2:22:7C:2F:58:88:3B:EA:9B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1AFDE46481A7E783ACFFD31C0B80B8523B1B4FD2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa Signing time: Wed 05 Nov 2025 00:00:59 +0000 ROA not before: Wed 05 Nov 2025 00:00:59 +0000 ROA not after: Wed 10 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:fd:e4:64:81:a7:e7:83:ac:ff:d3:1c:0b:80:b8:52:3b:1b:4f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 5 00:00:59 2025 GMT Not After : Dec 10 23:59:59 2025 GMT Subject: serialNumber=d7da7278a7680b5604ef62fcb23caf31f7aebbbe2c6e93cadde4c8e39d1d58e5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1e:ed:46:ad:97:19:23:33:4d:a6:e1:f4:fd: 8c:60:cd:56:2d:68:b2:32:33:33:08:2e:b9:35:f0: 2c:14:11:16:22:a3:ab:db:bb:19:c5:d4:00:7c:c1: 32:84:51:d3:2a:38:db:3c:6e:a7:85:2c:c1:99:02: fe:79:40:98:49:23:5a:08:59:93:75:64:e6:57:83: 67:bc:c0:7b:7e:a8:3e:8f:e5:af:b0:8f:d1:77:3f: 77:5c:fa:8f:50:45:be:2e:db:37:fb:2d:19:d6:de: 64:d5:bd:06:20:11:4f:bb:89:50:8c:c8:d2:c8:b7: f0:b4:27:48:5c:67:ac:af:67:01:ff:0a:b0:73:05: 99:19:f8:d3:43:76:23:7e:1a:77:f1:b3:91:02:8d: 33:93:6d:84:78:99:ad:9a:20:e2:7a:fd:e1:a9:8d: 2f:bd:3b:1d:58:b0:ee:cb:ba:7e:0a:c2:8c:1f:3e: cd:49:ed:b9:ea:71:8b:1f:6b:a3:4e:15:f3:f8:46: 03:88:02:a5:0e:70:9f:67:9b:67:a5:4e:c6:79:cd: 54:19:40:43:a9:0d:96:29:22:cb:a1:86:40:96:9c: c9:16:a9:49:10:8c:e3:bc:91:8f:e5:41:6e:28:cf: 36:35:36:2d:35:8f:82:1d:5e:ab:0b:36:95:b9:90: a0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4E:01:23:96:AB:1C:A1:C2:F4:D6:E2:22:7C:2F:58:88:3B:EA:9B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4040::/48 Signature Algorithm: sha256WithRSAEncryption 9c:6f:f9:16:f3:6e:5e:7e:03:a8:7f:3b:4e:fa:97:50:03:32: 41:76:9b:d7:28:c2:f8:68:ff:ef:da:36:27:9f:6f:43:5a:41: 51:36:4b:9d:57:47:b4:11:56:ce:9a:27:ec:c2:36:92:a8:8c: b7:9a:e3:e0:4b:20:d8:17:fc:fd:d5:6a:29:db:42:f0:06:d0: fd:13:57:55:a4:4b:8f:81:2b:6a:38:25:15:e5:02:04:41:30: 50:a2:0d:fa:ce:b1:c5:bf:e2:61:86:4e:e1:20:ac:e9:76:4f: 02:e0:43:5d:47:23:ed:7e:08:73:45:d6:81:ca:e6:95:86:e6: ae:23:7a:aa:3d:18:29:87:10:7c:01:0f:e7:93:50:fc:32:ca: 02:63:3f:b7:8e:22:71:31:3c:71:4b:07:4c:12:4d:de:04:3b: 70:67:1d:5b:40:53:17:3e:c4:b5:07:c6:03:39:cb:f9:12:98: 13:48:6c:15:48:7b:02:59:23:ab:5e:67:9a:a6:cd:ca:ee:24: fe:d8:27:50:86:16:20:7e:67:17:91:2c:d0:b4:f0:c7:81:64: 0c:0a:1b:69:44:8a:18:52:c2:39:3e:00:03:ad:c3:70:cc:2a: 4a:17:d6:e8:d7:85:93:58:90:5a:2d:99:d0:65:37:6a:c9:b8: e2:98:6d:25 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGv3kZIGn54Os/9McC4C4UjsbT9IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNTAwMDA1OVoX DTI1MTIxMDIzNTk1OVowejFJMEcGA1UEBRNAZDdkYTcyNzhhNzY4MGI1NjA0ZWY2 MmZjYjIzY2FmMzFmN2FlYmJiZTJjNmU5M2NhZGRlNGM4ZTM5ZDFkNThlNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB7tRq2XGSMzTabh9P2MYM1WLWiy MjMzCC65NfAsFBEWIqOr27sZxdQAfMEyhFHTKjjbPG6nhSzBmQL+eUCYSSNaCFmT dWTmV4NnvMB7fqg+j+WvsI/Rdz93XPqPUEW+Lts3+y0Z1t5k1b0GIBFPu4lQjMjS yLfwtCdIXGesr2cB/wqwcwWZGfjTQ3Yjfhp38bORAo0zk22EeJmtmiDiev3hqY0v vTsdWLDuy7p+CsKMHz7NSe256nGLH2ujThXz+EYDiAKlDnCfZ5tnpU7Gec1UGUBD qQ2WKSLLoYZAlpzJFqlJEIzjvJGP5UFuKM82NTYtNY+CHV6rCzaVuZCgRwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJJOASOWqxyhwvTW4iJ8L1iIO+qbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxMmNhM2M2LTAyNTEtNDAyOS04MTE4LWFiMWJlMmE2MTM3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0BAMA0GCSqGSIb3DQEBCwUAA4IBAQCcb/kW825efgOofztO +pdQAzJBdpvXKML4aP/v2jYnn29DWkFRNkudV0e0EVbOmifswjaSqIy3muPgSyDY F/z91Wop20LwBtD9E1dVpEuPgStqOCUV5QIEQTBQog36zrHFv+Jhhk7hIKzpdk8C 4ENdRyPtfghzRdaByuaVhuauI3qqPRgphxB8AQ/nk1D8MsoCYz+3jiJxMTxxSwdM Ek3eBDtwZx1bQFMXPsS1B8YDOcv5EpgTSGwVSHsCWSOrXmeaps3K7iT+2CdQhhYg fmcXkSzQtPDHgWQMChtpRIoYUsI5PgADrcNwzCpKF9bo14WTWJBaLZnQZTdqybji mG0l -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:15 2025 by rpki-client