$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9ba922d-bf68-4d77-858b-8fac293007e5.roa File: a9ba922d-bf68-4d77-858b-8fac293007e5.roa (raw, json) Hash identifier: 8+dNsdzzf3mVuKUVlxNl+gPQz2B4U1R4Od97cEyvdPQ= Subject key identifier: 03:E7:0B:FC:33:95:6B:0F:88:02:BB:4F:61:B9:6B:A9:6F:BB:18:92 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 616C50F06C97DAE9AE359B9881E1D7BE5FCD2A7B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9ba922d-bf68-4d77-858b-8fac293007e5.roa Signing time: Tue 14 Oct 2025 00:20:16 +0000 ROA not before: Tue 14 Oct 2025 00:20:16 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6c:50:f0:6c:97:da:e9:ae:35:9b:98:81:e1:d7:be:5f:cd:2a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 14 00:20:16 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=1a894266187d45ae81c02aa77e4b3016bb83fcf3eb72b0f6406f519dd556567c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:09:9a:f1:bd:86:77:f0:04:e6:ee:33:b5:c9: 78:68:2c:0a:ca:fa:d7:79:64:09:e0:54:85:0e:d4: 71:c6:28:5a:61:a0:54:bf:fc:b3:68:14:12:e8:ee: 67:e2:1f:21:5c:4b:5a:61:68:a5:f8:db:8e:39:c2: 41:10:6c:11:f7:ce:eb:c1:d2:38:00:68:3f:20:6e: 7e:09:96:3a:66:b0:52:91:8e:35:0a:85:2b:01:da: b7:da:fb:41:a5:bd:cd:45:89:f2:24:e1:57:3f:55: fa:7a:3c:02:a4:1a:ac:cb:77:01:0c:64:49:d0:fa: 9b:51:a7:71:10:20:81:83:87:6c:57:6d:2b:2a:b5: e8:46:c2:30:35:cf:ed:d6:11:f7:0b:f6:1d:73:3a: 4e:4a:63:e5:15:30:2a:06:af:0a:f3:fa:61:6f:24: 28:09:0d:ee:73:b4:31:9a:97:a3:5e:b6:2e:a5:1a: 9b:2b:a1:41:a9:ab:89:0c:d5:ec:c9:5e:3d:da:c2: d5:1c:da:94:1a:ba:68:e7:c1:b6:2a:81:cf:43:8e: 8a:3b:74:9d:06:26:a7:70:f3:06:f4:82:2c:97:65: d9:ab:8e:44:4f:3f:14:03:ee:41:c2:ed:79:f7:cb: 85:35:f6:08:5b:85:5c:7f:ac:3e:87:09:7b:66:49: f8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E7:0B:FC:33:95:6B:0F:88:02:BB:4F:61:B9:6B:A9:6F:BB:18:92 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9ba922d-bf68-4d77-858b-8fac293007e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7::/32 Signature Algorithm: sha256WithRSAEncryption 3e:d0:da:a8:20:54:06:2a:62:e3:74:7b:27:15:1a:a0:e0:b2: 08:12:d6:b5:85:38:ab:28:6b:0a:c8:5d:af:3f:cc:e9:fb:46: 3f:0f:4a:3d:c3:f6:42:92:d3:28:86:93:62:cc:0e:e2:1c:32: a2:c7:af:37:3f:49:cb:20:0a:96:80:6a:67:1d:7c:33:ec:5e: 79:df:b5:ab:54:38:58:30:88:94:e8:b3:24:87:3f:04:f0:8f: 2e:42:32:94:36:92:e1:92:f1:92:ac:7a:46:f0:6e:d7:f5:5b: e3:4f:08:94:1f:26:2f:2e:58:64:c3:3f:a0:58:c1:2e:bd:02: bc:84:8c:f4:66:35:84:8a:32:32:01:ed:de:6f:5b:af:cd:17: b6:e1:5c:f6:59:5d:00:c9:ee:d1:0b:ee:11:3d:a4:40:93:87: 3c:a6:2e:ff:f1:d4:92:62:72:8f:1a:e5:0f:da:58:a3:ca:4d: 8d:56:6b:57:36:89:58:e4:43:ce:ff:ae:cc:c6:bf:d5:a5:a7: 38:92:f9:87:bb:cf:dd:76:09:45:5b:ac:4a:f5:51:b0:bb:a1: 66:af:39:61:fe:ba:f7:db:e3:4a:03:92:88:67:59:5c:2a:40: 2e:ad:14:f1:59:ea:cc:bb:3d:34:01:9e:94:7a:8d:a5:f2:e4: ce:71:fd:d5 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUYWxQ8GyX2umuNZuYgeHXvl/NKnswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNDAwMjAxNloX DTI1MTExODIzNTk1OVowejFJMEcGA1UEBRNAMWE4OTQyNjYxODdkNDVhZTgxYzAy YWE3N2U0YjMwMTZiYjgzZmNmM2ViNzJiMGY2NDA2ZjUxOWRkNTU2NTY3YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gma8b2Gd/AE5u4ztcl4aCwKyvrX eWQJ4FSFDtRxxihaYaBUv/yzaBQS6O5n4h8hXEtaYWil+NuOOcJBEGwR987rwdI4 AGg/IG5+CZY6ZrBSkY41CoUrAdq32vtBpb3NRYnyJOFXP1X6ejwCpBqsy3cBDGRJ 0PqbUadxECCBg4dsV20rKrXoRsIwNc/t1hH3C/YdczpOSmPlFTAqBq8K8/phbyQo CQ3uc7QxmpejXrYupRqbK6FBqauJDNXsyV492sLVHNqUGrpo58G2KoHPQ46KO3Sd BiancPMG9IIsl2XZq45ETz8UA+5Bwu1598uFNfYIW4Vcf6w+hwl7Zkn4wQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFAPnC/wzlWsPiAK7T2G5a6lvuxiSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5YmE5MjJkLWJmNjgtNGQ3Ny04NThiLThmYWMyOTMwMDdlNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba9zANBgkqhkiG9w0BAQsFAAOCAQEAPtDaqCBUBipi43R7JxUa oOCyCBLWtYU4qyhrCshdrz/M6ftGPw9KPcP2QpLTKIaTYswO4hwyosevNz9JyyAK loBqZx18M+xeed+1q1Q4WDCIlOizJIc/BPCPLkIylDaS4ZLxkqx6RvBu1/Vb408I lB8mLy5YZMM/oFjBLr0CvISM9GY1hIoyMgHt3m9br80XtuFc9lldAMnu0QvuET2k QJOHPKYu//HUkmJyjxrlD9pYo8pNjVZrVzaJWORDzv+uzMa/1aWnOJL5h7vP3XYJ RVusSvVRsLuhZq85Yf6699vjSgOSiGdZXCpALq0U8VnqzLs9NAGelHqNpfLkznH9 1Q== -----END CERTIFICATE-----Generated at Wed Nov 5 11:32:01 2025 by rpki-client