$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa File: 92488c39-e92d-4c20-9728-7956e83ecf4e.roa (raw, json) Hash identifier: DbK4Mhe1JFxPdo5c3TVsLegWJw6k71/Wp8s6rZMdJ/A= Subject key identifier: DD:7F:7F:2B:AA:47:90:61:F1:AE:5F:AD:F1:77:D6:57:AF:2D:A0:07 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 729679DB3D33D8C0A56FBEA6BB2FA4E70EB90F2D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa Signing time: Wed 15 Oct 2025 00:40:56 +0000 ROA not before: Wed 15 Oct 2025 00:40:56 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da19:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:96:79:db:3d:33:d8:c0:a5:6f:be:a6:bb:2f:a4:e7:0e:b9:0f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:40:56 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=fc052fe8bfa8e3a0752e2b97b07350784579ea3ac3b0c3f1eebcde329a5ab777, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:45:ea:78:3b:2d:61:34:82:f2:55:99:e0:ac: 5b:bf:69:6d:8c:13:52:53:78:9c:ba:43:0c:dd:ab: cb:a1:68:e5:d5:83:25:79:75:80:74:88:09:bb:95: b8:23:e1:ed:ab:bb:dd:f5:36:27:62:aa:ee:37:6a: 67:97:09:c2:24:31:b8:ac:d1:04:4b:14:52:cc:9e: 73:86:79:92:ae:74:fa:d1:ed:ce:82:76:5b:4e:de: 90:fd:46:a1:46:3d:0a:e7:aa:b5:3d:9a:83:8e:be: 16:38:64:af:7f:c4:be:eb:4b:11:a4:b7:ca:b2:a5: 5d:55:62:55:a0:c4:1c:9d:9c:21:89:1c:d9:02:2e: df:f8:30:5f:10:fc:8b:5f:f5:14:48:84:75:64:73: 57:77:e6:58:4e:31:ed:43:4e:d1:6a:0b:42:40:11: 18:20:0b:a6:9b:f9:e7:67:fe:44:aa:f3:e5:39:60: c9:be:22:60:5d:6d:7e:ba:02:4a:3c:b1:ab:42:83: 5e:19:a1:6d:c3:00:74:4d:28:22:3e:51:eb:ea:3a: 71:60:8e:ff:bc:f7:2e:2b:2d:d2:4b:93:3d:a6:40: f4:31:fe:b3:b1:7b:0a:39:7e:7e:9f:be:d4:b2:7b: 48:ba:b3:8e:77:b7:d7:e8:ad:10:8b:5b:09:53:ab: 57:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7F:7F:2B:AA:47:90:61:F1:AE:5F:AD:F1:77:D6:57:AF:2D:A0:07 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da19:400::/38 Signature Algorithm: sha256WithRSAEncryption 7a:76:77:14:07:61:b3:e4:46:05:bd:10:7a:ec:b7:e3:b6:56: 44:16:f2:4f:cd:79:61:91:71:c8:ca:24:b7:c2:3e:33:66:8e: d9:e8:94:66:86:f9:a2:54:5b:72:00:cd:55:35:31:0a:04:cd: e4:9b:1a:4c:80:ac:bf:e7:21:06:51:0b:1b:39:07:84:9d:e5: 4f:4e:ec:f6:b1:e8:71:a2:55:34:df:7b:43:53:5d:cb:0a:bf: c7:b1:50:0c:a8:92:e4:01:e0:70:2f:89:24:1d:84:9a:1a:cd: 29:29:d9:fd:f7:69:9b:0e:4e:3f:63:4f:b1:94:d5:9d:4c:fb: 8b:ca:1b:ba:0d:f9:d3:54:8c:e3:d9:6d:a9:44:f8:12:91:6b: 5e:50:ef:49:9b:58:4e:b6:8c:ae:22:8a:a1:59:30:76:e0:ef: 9a:be:48:b3:e4:dd:aa:48:16:8b:f8:35:49:a1:84:e3:a1:a8: 4e:52:32:e8:a7:fe:aa:be:e5:64:66:05:71:8e:4f:4c:98:55: 5b:33:c0:04:35:b3:67:8b:b1:0a:92:50:bf:97:89:4d:6e:19: 1c:da:7c:82:2a:82:bc:c6:7f:08:2f:9f:8e:c3:33:4f:20:fa: 88:e9:e4:a2:ff:96:70:0a:5c:50:02:bf:94:09:a9:fb:39:d8: e1:57:fb:aa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcpZ52z0z2MClb76muy+k5w65Dy0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwNDA1NloX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAZmMwNTJmZThiZmE4ZTNhMDc1MmUy Yjk3YjA3MzUwNzg0NTc5ZWEzYWMzYjBjM2YxZWViY2RlMzI5YTVhYjc3NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEXqeDstYTSC8lWZ4Kxbv2ltjBNS U3icukMM3avLoWjl1YMleXWAdIgJu5W4I+Htq7vd9TYnYqruN2pnlwnCJDG4rNEE SxRSzJ5zhnmSrnT60e3OgnZbTt6Q/UahRj0K56q1PZqDjr4WOGSvf8S+60sRpLfK sqVdVWJVoMQcnZwhiRzZAi7f+DBfEPyLX/UUSIR1ZHNXd+ZYTjHtQ07RagtCQBEY IAumm/nnZ/5EqvPlOWDJviJgXW1+ugJKPLGrQoNeGaFtwwB0TSgiPlHr6jpxYI7/ vPcuKy3SS5M9pkD0Mf6zsXsKOX5+n77UsntIurOOd7fX6K0Qi1sJU6tXTwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFN1/fyuqR5Bh8a5frfF31levLaAHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkyNDg4YzM5LWU5MmQtNGMyMC05NzI4LTc5NTZlODNlY2Y0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGQQwDQYJKoZIhvcNAQELBQADggEBAHp2dxQHYbPkRgW9EHrs t+O2VkQW8k/NeWGRccjKJLfCPjNmjtnolGaG+aJUW3IAzVU1MQoEzeSbGkyArL/n IQZRCxs5B4Sd5U9O7Pax6HGiVTTfe0NTXcsKv8exUAyokuQB4HAviSQdhJoazSkp 2f33aZsOTj9jT7GU1Z1M+4vKG7oN+dNUjOPZbalE+BKRa15Q70mbWE62jK4iiqFZ MHbg75q+SLPk3apIFov4NUmhhOOhqE5SMuin/qq+5WRmBXGOT0yYVVszwAQ1s2eL sQqSUL+XiU1uGRzafIIqgrzGfwgvn47DM08g+ojp5KL/lnAKXFACv5QJqfs52OFX +6o= -----END CERTIFICATE-----Generated at Wed Nov 5 09:49:45 2025 by rpki-client