$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b05b4-a0a1-4e31-b7b4-cc8368668534.roa File: 783b05b4-a0a1-4e31-b7b4-cc8368668534.roa (raw, json) Hash identifier: fv5cXcp/isUos7sESG6nzqkIi0fixbG20YeaLOch7es= Subject key identifier: D0:7A:DA:25:FB:0C:61:F9:B1:E6:3B:19:1A:B3:8E:31:16:D0:A9:89 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 35D1C00E0414F73D3EE3DD20EF7A8D357B784747 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b05b4-a0a1-4e31-b7b4-cc8368668534.roa Signing time: Sat 11 Oct 2025 00:10:06 +0000 ROA not before: Sat 11 Oct 2025 00:10:06 +0000 ROA not after: Sat 15 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d1:c0:0e:04:14:f7:3d:3e:e3:dd:20:ef:7a:8d:35:7b:78:47:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 11 00:10:06 2025 GMT Not After : Nov 15 23:59:59 2025 GMT Subject: serialNumber=d7cccd51944b02fe5259aed2f3dbd3a14901317e33820cdbbb5c017bae471db1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:55:80:54:0f:af:ec:9b:6e:39:2c:fc:2d: a7:f8:58:15:0e:8b:cc:08:73:0a:b4:2b:8e:e7:b3: 23:fb:b4:a6:8b:d4:31:c3:93:a0:9b:9a:b6:0b:74: 2f:6c:d6:1c:29:7e:84:35:26:83:d9:16:15:ba:fa: 28:07:04:3b:d2:08:30:71:d8:1e:26:e2:bd:dc:0f: 43:8d:8e:a9:68:c4:50:f6:b9:7a:ef:c3:dc:6e:15: bf:a0:6f:97:6d:d0:22:d6:75:65:c4:04:54:37:db: cb:ab:8c:9b:a5:4b:37:5a:8e:a5:3b:2d:ec:f2:b8: 19:2d:eb:9f:22:fd:a0:6e:16:05:db:09:60:58:7e: 7c:6d:8d:e8:2a:73:dd:14:f8:76:3b:66:2c:29:95: 8f:65:a2:2e:eb:46:b7:69:55:f6:2c:e4:a8:bc:f4: c1:6f:bf:3c:64:83:25:35:44:45:7e:33:da:f1:f4: bb:7d:86:99:f5:cf:d1:b3:0d:17:23:aa:65:ce:61: be:ff:5d:f2:26:9e:73:0d:0c:34:90:77:6e:36:ff: 14:1e:5f:80:ca:4f:6e:cc:53:dd:12:e2:b7:3a:b1: 08:e2:0e:51:96:48:a5:e6:2f:18:09:4b:4b:8f:38: 13:c9:74:87:9d:a3:b8:f2:a5:7a:bb:a5:02:76:74: a5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7A:DA:25:FB:0C:61:F9:B1:E6:3B:19:1A:B3:8E:31:16:D0:A9:89 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b05b4-a0a1-4e31-b7b4-cc8368668534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:c000::/40 Signature Algorithm: sha256WithRSAEncryption 08:ae:32:f8:86:87:07:69:67:4e:57:ca:83:1a:ba:54:69:83: 31:e2:40:7c:52:25:aa:be:c7:50:8e:a0:9d:d6:d1:e5:31:14: aa:e1:09:16:d8:d5:17:06:2e:98:ab:08:31:77:61:38:92:b6: ac:02:78:26:99:cf:1e:63:79:8f:f7:a6:23:c4:d7:f1:24:1a: 9e:f7:c4:ca:e1:ae:ce:97:84:13:7e:15:0a:23:06:eb:53:52: 7d:1d:26:64:06:ad:be:84:3a:79:d1:81:23:42:d3:d5:1c:b6: 32:8b:03:de:52:49:a3:8e:8b:5e:ed:b8:c2:38:da:c2:ff:8f: 0b:ff:ce:88:bc:f9:32:4f:3a:ce:6f:da:a1:1e:f5:a5:0f:ed: 29:8e:ef:24:40:22:76:70:0e:24:b8:b3:2c:af:65:6b:51:ef: 49:ab:fb:9d:20:60:ec:6f:e8:5f:e5:20:aa:38:8b:e1:c3:ca: be:1b:a9:a2:c0:62:8d:f9:21:e8:b8:ea:2c:ef:f7:04:6a:a2: 8f:35:c3:5b:7f:4e:c9:3b:9c:43:75:ad:51:7a:c8:fa:8c:3d: 62:88:da:fe:23:08:35:ef:4a:28:e0:2c:d8:00:d8:82:c2:28: 85:1c:6a:65:e5:00:b8:16:b8:83:f6:d7:8c:df:c5:d4:1f:f2: b3:bc:8d:e1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNdHADgQU9z0+490g73qNNXt4R0cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMTAwMTAwNloX DTI1MTExNTIzNTk1OVowejFJMEcGA1UEBRNAZDdjY2NkNTE5NDRiMDJmZTUyNTlh ZWQyZjNkYmQzYTE0OTAxMzE3ZTMzODIwY2RiYmI1YzAxN2JhZTQ3MWRiMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+BVgFQPr+ybbjks/C2n+FgVDovM CHMKtCuO57Mj+7Smi9Qxw5Ogm5q2C3QvbNYcKX6ENSaD2RYVuvooBwQ70ggwcdge JuK93A9DjY6paMRQ9rl678PcbhW/oG+XbdAi1nVlxARUN9vLq4ybpUs3Wo6lOy3s 8rgZLeufIv2gbhYF2wlgWH58bY3oKnPdFPh2O2YsKZWPZaIu60a3aVX2LOSovPTB b788ZIMlNURFfjPa8fS7fYaZ9c/Rsw0XI6plzmG+/13yJp5zDQw0kHduNv8UHl+A yk9uzFPdEuK3OrEI4g5Rlkil5i8YCUtLjzgTyXSHnaO48qV6u6UCdnSlDQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNB62iX7DGH5seY7GRqzjjEW0KmJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc4M2IwNWI0LWEwYTEtNGUzMS1iN2I0LWNjODM2ODY2ODUzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8sAwDQYJKoZIhvcNAQELBQADggEBAAiuMviGhwdpZ05XyoMa ulRpgzHiQHxSJaq+x1COoJ3W0eUxFKrhCRbY1RcGLpirCDF3YTiStqwCeCaZzx5j eY/3piPE1/EkGp73xMrhrs6XhBN+FQojButTUn0dJmQGrb6EOnnRgSNC09UctjKL A95SSaOOi17tuMI42sL/jwv/zoi8+TJPOs5v2qEe9aUP7SmO7yRAInZwDiS4syyv ZWtR70mr+50gYOxv6F/lIKo4i+HDyr4bqaLAYo35Iei46izv9wRqoo81w1t/Tsk7 nEN1rVF6yPqMPWKI2v4jCDXvSijgLNgA2ILCKIUcamXlALgWuIP214zfxdQf8rO8 jeE= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:23 2025 by rpki-client