$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d9174a7-34d8-412c-b0b9-d4b3d78f5705.roa File: 9d9174a7-34d8-412c-b0b9-d4b3d78f5705.roa (raw, json) Hash identifier: m6FMUgsmBjdYqDEtlNxVYC46khIzC7ajpRHuyN8AqGk= Subject key identifier: 36:34:4E:D7:4F:97:F1:F5:2E:B1:AF:06:05:69:8B:57:77:40:AB:B7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7D995B4BB07C1F851A9B6211BE63C06C82AB954D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d9174a7-34d8-412c-b0b9-d4b3d78f5705.roa Signing time: Wed 29 Oct 2025 07:37:56 +0000 ROA not before: Wed 29 Oct 2025 07:37:56 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:99:5b:4b:b0:7c:1f:85:1a:9b:62:11:be:63:c0:6c:82:ab:95:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 07:37:56 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=a76901090c972e0c4583bd17cb91262dd437d365e99fe5b7feaa19c68187f722, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:fe:56:bc:b4:06:70:38:2d:de:3a:51:06: 45:d7:83:1c:59:0f:4b:b7:3f:da:8a:c0:2b:ad:04: 23:aa:31:68:f2:92:73:d0:19:ed:94:3b:51:6b:ec: 9f:8f:b5:54:8d:57:7c:d2:fc:bb:21:c4:be:d6:04: be:f4:fc:b5:cd:d3:41:89:f4:a5:2a:4d:7a:80:7c: 9a:78:c6:b4:c9:6b:70:5a:67:01:0b:9d:e1:22:3b: e3:ae:2e:e6:d9:1f:bb:96:aa:18:3e:89:44:58:cc: 1a:d6:17:21:a5:8d:da:18:cb:7d:69:21:d2:c0:52: 41:0c:b7:0a:7d:18:cd:e4:db:81:aa:10:60:fa:f9: 02:d1:ca:92:0f:70:2d:a2:35:6c:6f:3b:0c:30:08: c0:65:95:1a:0a:87:72:ff:6c:bd:f8:e0:36:f8:4d: 06:3f:02:92:98:46:e2:0e:3f:81:79:86:4b:c8:50: 29:76:71:33:79:5a:f6:31:56:9d:b8:7b:61:40:9e: ac:8a:70:a8:f2:29:95:35:78:da:9f:30:39:58:bc: 17:20:75:bb:ff:10:79:9e:bd:47:96:4f:91:59:5c: 9a:b5:8c:18:b3:01:44:77:8c:18:41:5c:c0:f6:ae: b1:57:2a:40:71:3b:e3:6b:60:d1:21:32:d6:13:65: cf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:34:4E:D7:4F:97:F1:F5:2E:B1:AF:06:05:69:8B:57:77:40:AB:B7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d9174a7-34d8-412c-b0b9-d4b3d78f5705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:4020::/48 Signature Algorithm: sha256WithRSAEncryption 7e:a4:f2:65:cf:33:32:cc:9a:50:c0:1a:29:50:d0:7a:c5:19: 77:43:ba:88:62:92:26:38:1f:bb:5a:29:a9:26:05:f6:f5:5d: 02:28:a9:28:47:c1:e2:ae:c2:06:21:93:f6:fc:8d:df:cc:5e: 4a:50:16:e3:cd:b2:6f:cf:1f:5e:d3:89:78:d5:11:c0:42:6f: b7:42:71:48:b4:5b:8c:43:4a:6c:09:a1:c8:ed:d3:f9:75:b1: 8c:fd:02:ef:68:ff:bb:30:8f:3b:52:b3:d8:e2:e9:5b:58:d5: 8e:fe:ec:ee:bc:14:0b:7c:9e:da:22:f1:c5:cc:e8:f0:97:3a: 18:f1:d0:98:61:19:58:a2:08:05:1c:88:be:5e:41:ed:14:eb: fb:0f:74:11:3e:f8:7d:d6:91:78:ab:4b:f8:a3:07:83:85:52: 83:9f:80:38:15:af:95:b6:b9:62:be:2c:5e:4e:cc:fd:e4:05: 5d:14:da:ce:73:02:f7:41:7d:e7:12:41:74:40:78:d3:f2:b6: d8:6e:7f:a4:b9:98:72:d6:5e:8d:87:ce:77:39:e4:39:3f:af: ac:e2:aa:6e:9e:ff:20:67:c4:e2:a2:0b:43:0a:bb:a9:1c:fe: 51:08:72:3b:43:4f:2f:13:5f:61:62:8c:92:c2:0d:38:71:73: 15:f2:df:74 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfZlbS7B8H4Uam2IRvmPAbIKrlU0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTA3Mzc1NloX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAYTc2OTAxMDkwYzk3MmUwYzQ1ODNi ZDE3Y2I5MTI2MmRkNDM3ZDM2NWU5OWZlNWI3ZmVhYTE5YzY4MTg3ZjcyMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXr+Vry0BnA4Ld46UQZF14McWQ9L tz/aisArrQQjqjFo8pJz0BntlDtRa+yfj7VUjVd80vy7IcS+1gS+9Py1zdNBifSl Kk16gHyaeMa0yWtwWmcBC53hIjvjri7m2R+7lqoYPolEWMwa1hchpY3aGMt9aSHS wFJBDLcKfRjN5NuBqhBg+vkC0cqSD3AtojVsbzsMMAjAZZUaCody/2y9+OA2+E0G PwKSmEbiDj+BeYZLyFApdnEzeVr2MVaduHthQJ6sinCo8imVNXjanzA5WLwXIHW7 /xB5nr1Hlk+RWVyatYwYswFEd4wYQVzA9q6xVypAcTvja2DRITLWE2XPPQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDY0TtdPl/H1LrGvBgVpi1d3QKu3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkOTE3NGE3LTM0ZDgtNDEyYy1iMGI5LWQ0YjNkNzhmNTcwNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6kAgMA0GCSqGSIb3DQEBCwUAA4IBAQB+pPJlzzMyzJpQwBop UNB6xRl3Q7qIYpImOB+7WimpJgX29V0CKKkoR8HirsIGIZP2/I3fzF5KUBbjzbJv zx9e04l41RHAQm+3QnFItFuMQ0psCaHI7dP5dbGM/QLvaP+7MI87UrPY4ulbWNWO /uzuvBQLfJ7aIvHFzOjwlzoY8dCYYRlYoggFHIi+XkHtFOv7D3QRPvh91pF4q0v4 oweDhVKDn4A4Fa+VtrlivixeTsz95AVdFNrOcwL3QX3nEkF0QHjT8rbYbn+kuZhy 1l6Nh853OeQ5P6+s4qpunv8gZ8TiogtDCrupHP5RCHI7Q08vE19hYoySwg04cXMV 8t90 -----END CERTIFICATE-----Generated at Wed Nov 5 10:56:09 2025 by rpki-client