$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbe0d325-3ee6-4bbc-b300-e6afdd3c6df5.roa File: bbe0d325-3ee6-4bbc-b300-e6afdd3c6df5.roa (raw, json) Hash identifier: 8RgUEc941dof6TpfLQxk7MZkF2aNq37++c8YQ0iL2/I= Subject key identifier: A3:F0:14:F6:5B:49:6E:63:67:21:8D:C5:E9:C0:D4:34:72:59:EC:B7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2DF7DED64358DDE8234D224CDB65EC8EB6504D31 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbe0d325-3ee6-4bbc-b300-e6afdd3c6df5.roa Signing time: Wed 05 Nov 2025 00:00:12 +0000 ROA not before: Wed 05 Nov 2025 00:00:12 +0000 ROA not after: Wed 10 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:48c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f7:de:d6:43:58:dd:e8:23:4d:22:4c:db:65:ec:8e:b6:50:4d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 5 00:00:12 2025 GMT Not After : Dec 10 23:59:59 2025 GMT Subject: serialNumber=cbcfc6e41795f77afa7d7ba06fe7be4e858016f19c764e08346145ee1d4b166a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:5e:90:f6:0f:c4:fd:73:6c:78:e9:f3:e1: be:a3:61:3d:de:41:82:7b:d0:63:0f:4c:5f:ab:18: 27:dc:dd:c9:1a:24:6e:a9:dc:f8:b2:42:c7:c1:02: 06:c1:c7:91:f4:11:c1:e0:42:43:e2:83:5e:5a:3f: d0:c9:bb:bc:78:dd:45:28:99:37:b2:f5:89:1e:e5: 2e:60:c9:a6:c9:36:ec:b1:22:a1:3d:cf:28:8e:e7: 07:2b:30:4b:8a:ed:53:f4:ac:d6:30:68:2e:b1:2f: ca:d3:79:9d:b4:8c:70:9d:15:39:25:ff:76:26:18: d6:53:81:ed:ba:59:02:b9:a4:21:6e:e7:4e:a0:c2: ee:67:ae:9c:af:6d:32:71:58:e1:90:b6:b7:ed:05: cc:1c:97:68:88:83:23:fc:8d:1d:e7:d9:d6:68:86: 8c:ef:df:a0:6a:50:ee:03:c0:ba:3f:d2:e7:8f:77: 23:3d:10:06:c4:6e:6e:db:54:28:21:fc:71:88:b6: 3f:97:52:ac:8e:f0:ed:2e:78:52:d0:29:80:0b:ae: b0:3b:a0:31:91:56:8b:df:b6:fd:6c:fb:b6:d1:d9: 8e:6b:9e:61:e7:39:f4:22:0b:c0:5f:60:8e:3a:3a: a3:9a:1c:02:51:a5:2e:c8:84:bb:b7:6c:b7:67:8a: 65:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F0:14:F6:5B:49:6E:63:67:21:8D:C5:E9:C0:D4:34:72:59:EC:B7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbe0d325-3ee6-4bbc-b300-e6afdd3c6df5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:48c0::/48 Signature Algorithm: sha256WithRSAEncryption ba:38:e3:77:e6:b2:79:7c:40:d6:41:11:7e:5b:ff:4f:e1:80: b6:c8:d8:39:23:13:ca:c8:7d:3b:0d:49:46:ca:6b:5f:1c:13: f0:c7:09:55:c4:56:d4:f4:c6:63:58:cd:51:d0:8a:2f:da:ce: 04:2e:27:a0:f2:38:44:91:65:9c:dd:09:34:01:b8:8e:bc:32: 9b:d9:f5:81:bd:5b:50:a1:4a:40:c7:e0:e3:0f:8d:dc:12:18: d6:47:a4:05:c3:4b:f4:a3:b9:b4:82:f9:6e:4f:4d:51:a1:8b: bc:e9:91:e0:e5:16:05:f0:fc:26:1d:a8:b4:5d:1f:ec:48:21: b4:70:79:b8:eb:77:d2:2e:ae:6c:41:bf:79:90:69:11:11:8c: b5:1e:77:4a:fe:3b:d5:26:6f:2a:e7:47:0f:71:b6:24:57:aa: 52:dc:3f:91:99:f0:33:c1:a0:e5:e7:51:f4:d9:c3:1c:b4:66: f7:2b:87:01:b2:24:36:37:d6:af:0c:07:bd:69:03:df:f7:f2: 4e:bd:0d:22:9f:4c:66:7c:f9:48:cd:1a:f0:95:b0:75:51:6d: cf:4a:b5:cf:b6:e8:52:72:25:2c:e7:1c:84:17:d7:87:59:23: 53:60:73:56:66:c2:84:6d:eb:d5:85:ad:5a:96:4c:ab:19:d7: cc:7b:7d:6d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULffe1kNY3egjTSJM22XsjrZQTTEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNTAwMDAxMloX DTI1MTIxMDIzNTk1OVowejFJMEcGA1UEBRNAY2JjZmM2ZTQxNzk1Zjc3YWZhN2Q3 YmEwNmZlN2JlNGU4NTgwMTZmMTljNzY0ZTA4MzQ2MTQ1ZWUxZDRiMTY2YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrtekPYPxP1zbHjp8+G+o2E93kGC e9BjD0xfqxgn3N3JGiRuqdz4skLHwQIGwceR9BHB4EJD4oNeWj/Qybu8eN1FKJk3 svWJHuUuYMmmyTbssSKhPc8ojucHKzBLiu1T9KzWMGgusS/K03mdtIxwnRU5Jf92 JhjWU4HtulkCuaQhbudOoMLuZ66cr20ycVjhkLa37QXMHJdoiIMj/I0d59nWaIaM 79+galDuA8C6P9Lnj3cjPRAGxG5u21QoIfxxiLY/l1KsjvDtLnhS0CmAC66wO6Ax kVaL37b9bPu20dmOa55h5zn0IgvAX2COOjqjmhwCUaUuyIS7t2y3Z4plCwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKPwFPZbSW5jZyGNxenA1DRyWey3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JiZTBkMzI1LTNlZTYtNGJiYy1iMzAwLWU2YWZkZDNjNmRmNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0jAMA0GCSqGSIb3DQEBCwUAA4IBAQC6OON35rJ5fEDWQRF+ W/9P4YC2yNg5IxPKyH07DUlGymtfHBPwxwlVxFbU9MZjWM1R0Iov2s4ELieg8jhE kWWc3Qk0AbiOvDKb2fWBvVtQoUpAx+DjD43cEhjWR6QFw0v0o7m0gvluT01RoYu8 6ZHg5RYF8PwmHai0XR/sSCG0cHm463fSLq5sQb95kGkREYy1HndK/jvVJm8q50cP cbYkV6pS3D+RmfAzwaDl51H02cMctGb3K4cBsiQ2N9avDAe9aQPf9/JOvQ0in0xm fPlIzRrwlbB1UW3PSrXPtuhSciUs5xyEF9eHWSNTYHNWZsKEbevVha1alkyrGdfM e31t -----END CERTIFICATE-----Generated at Wed Nov 5 09:30:40 2025 by rpki-client