$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab279dc8-b610-47db-a5fb-551af77a6140.roa File: ab279dc8-b610-47db-a5fb-551af77a6140.roa (raw, json) Hash identifier: PH0ct7W4mTlQUp/uaIYCccjL/rlra4r3yTmnk/0w5nA= Subject key identifier: 8A:06:53:CB:9A:37:3F:B0:49:A1:89:EE:4F:44:60:BF:04:D3:BB:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7DCBDDB9B08EF40860EEDC05A3146DBD33CD5B77 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab279dc8-b610-47db-a5fb-551af77a6140.roa Signing time: Wed 29 Oct 2025 07:39:02 +0000 ROA not before: Wed 29 Oct 2025 07:39:02 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:cb:dd:b9:b0:8e:f4:08:60:ee:dc:05:a3:14:6d:bd:33:cd:5b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 07:39:02 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=37c8346276c6ff47cae86cce922cf6aebd2dc9a71da2cd8726d801d77dd0b409, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:f1:93:eb:ed:d7:c9:b8:71:43:a1:09:b5: 01:b5:70:86:23:e0:6e:1f:bb:eb:c3:89:93:e1:14: 4d:18:61:7d:9b:ea:63:3f:76:c3:4d:1c:ee:90:e6: fe:92:28:5d:10:6c:3a:25:1f:f5:36:45:f7:b8:28: b4:3e:48:12:cb:f4:8e:fe:d4:88:52:b7:77:36:54: ec:5b:e7:7b:2d:ab:f9:e2:e7:de:df:ab:93:bf:f6: d9:b3:4e:5a:b5:6d:5d:e8:c4:4b:c7:38:b3:01:2f: 65:aa:9e:d6:c4:56:18:ec:8e:72:95:32:83:db:5b: da:17:6b:b5:32:45:40:a3:df:be:ec:86:16:7c:84: bd:55:24:3b:bb:dd:69:8b:69:af:c6:b2:8b:06:58: 4f:29:81:7b:4c:70:b0:45:82:11:08:da:5f:9d:c8: 40:3c:9d:5a:89:fc:85:6d:58:4d:a2:ec:4c:a6:47: c7:6b:9f:c8:13:b4:12:d2:d9:ae:d1:ec:d6:f6:9a: 18:45:09:72:e1:3a:d9:45:e6:68:33:62:4e:34:76: 35:50:8b:5c:9d:c1:03:93:91:74:a4:09:95:59:b3: 7b:11:d5:37:c4:61:23:8b:85:46:40:0e:76:d9:09: d5:c5:48:92:7e:10:c3:8b:a8:40:ae:de:09:9e:ff: 2b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:06:53:CB:9A:37:3F:B0:49:A1:89:EE:4F:44:60:BF:04:D3:BB:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab279dc8-b610-47db-a5fb-551af77a6140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:9040::/48 Signature Algorithm: sha256WithRSAEncryption 21:d7:7e:cd:21:7d:49:7f:47:83:dc:31:d9:2f:5b:85:17:05: 4f:f7:50:c2:07:18:59:ba:89:ed:22:9b:48:17:2b:bd:01:8b: 54:88:80:fc:7b:8a:64:1f:32:15:cb:a7:97:ad:3a:5a:9d:aa: 1d:6b:97:84:2c:43:3a:49:2e:d0:25:ac:91:e0:e3:da:b2:9f: 01:a7:73:55:94:7f:f5:0b:38:f5:b3:62:89:78:45:bb:22:f5: cd:81:39:ab:44:5c:42:b9:1e:ea:c6:dd:f1:5f:14:31:ef:4c: 90:7d:01:69:da:05:c8:75:9e:5e:ee:12:bf:8e:eb:35:8b:df: 23:e6:8d:52:33:91:bb:ff:75:4f:82:8b:07:61:e8:cc:e2:12: 0b:8c:48:c9:80:f9:1f:4f:f8:8b:1b:1e:d0:fb:d8:96:79:2f: 5c:a2:b4:06:05:f0:cd:c8:9b:54:dd:75:98:1e:22:da:38:85: 72:0c:eb:0c:34:fc:db:ef:d8:c7:e8:20:e0:2d:a0:07:7b:a9: 3b:c3:0d:57:04:08:67:f6:c9:59:c7:60:3d:72:9e:a2:f9:95: 6b:bc:fd:cd:fe:22:e7:cc:51:8e:f0:dd:2d:3c:a5:7a:98:a9: 67:ff:70:2c:ea:0a:ac:29:5c:06:f0:45:f3:6b:63:e1:b8:fb: 8c:c6:ff:3f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfcvdubCO9Ahg7twFoxRtvTPNW3cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTA3MzkwMloX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAMzdjODM0NjI3NmM2ZmY0N2NhZTg2 Y2NlOTIyY2Y2YWViZDJkYzlhNzFkYTJjZDg3MjZkODAxZDc3ZGQwYjQwOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqLxk+vt18m4cUOhCbUBtXCGI+Bu H7vrw4mT4RRNGGF9m+pjP3bDTRzukOb+kihdEGw6JR/1NkX3uCi0PkgSy/SO/tSI Urd3NlTsW+d7Lav54ufe36uTv/bZs05atW1d6MRLxzizAS9lqp7WxFYY7I5ylTKD 21vaF2u1MkVAo9++7IYWfIS9VSQ7u91pi2mvxrKLBlhPKYF7THCwRYIRCNpfnchA PJ1aifyFbVhNouxMpkfHa5/IE7QS0tmu0ezW9poYRQly4TrZReZoM2JONHY1UItc ncEDk5F0pAmVWbN7EdU3xGEji4VGQA522QnVxUiSfhDDi6hArt4Jnv8rNQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIoGU8uaNz+wSaGJ7k9EYL8E07sPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FiMjc5ZGM4LWI2MTAtNDdkYi1hNWZiLTU1MWFmNzdhNjE0MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6pBAMA0GCSqGSIb3DQEBCwUAA4IBAQAh137NIX1Jf0eD3DHZ L1uFFwVP91DCBxhZuontIptIFyu9AYtUiID8e4pkHzIVy6eXrTpanaoda5eELEM6 SS7QJayR4OPasp8Bp3NVlH/1Czj1s2KJeEW7IvXNgTmrRFxCuR7qxt3xXxQx70yQ fQFp2gXIdZ5e7hK/jus1i98j5o1SM5G7/3VPgosHYejM4hILjEjJgPkfT/iLGx7Q +9iWeS9corQGBfDNyJtU3XWYHiLaOIVyDOsMNPzb79jH6CDgLaAHe6k7ww1XBAhn 9slZx2A9cp6i+ZVrvP3N/iLnzFGO8N0tPKV6mKln/3As6gqsKVwG8EXza2PhuPuM xv8/ -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:30 2025 by rpki-client