$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01ae5f9c-dce4-4b26-a79f-f6e6c911f972.roa File: 01ae5f9c-dce4-4b26-a79f-f6e6c911f972.roa (raw, json) Hash identifier: gIl2aVlNVbVeJBYnMbApqBMn3Eau9Ti/qvzBr8VqF/U= Subject key identifier: 03:A7:44:CB:46:DB:82:9D:F5:71:1E:C0:80:04:2D:44:D6:8D:BF:0E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 053207663D7AED8242FC1890B5CB949E94F5579A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01ae5f9c-dce4-4b26-a79f-f6e6c911f972.roa Signing time: Wed 08 Oct 2025 00:00:55 +0000 ROA not before: Wed 08 Oct 2025 00:00:55 +0000 ROA not after: Wed 12 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:32:07:66:3d:7a:ed:82:42:fc:18:90:b5:cb:94:9e:94:f5:57:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 8 00:00:55 2025 GMT Not After : Nov 12 23:59:59 2025 GMT Subject: serialNumber=7b35c4b889eb5a2ae8f86c339d02127fcf3ad46a15678f2b5924566a234f6832, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:e4:52:47:f8:db:e4:2b:05:96:45:65:33: 47:94:76:2b:94:63:0b:f4:87:44:04:29:9b:17:68: f8:f3:a2:25:a5:11:56:8d:b4:f1:39:70:be:50:12: 3d:14:d9:a0:9e:dc:1a:d2:c4:50:4c:80:17:d1:f1: 73:5b:46:1d:9f:e7:22:b4:99:65:13:03:9e:61:e3: 42:50:00:a0:b1:89:17:54:2d:ed:b7:6c:90:b3:99: db:2f:f1:c3:ac:69:99:e2:32:06:8c:20:5b:4f:06: 5a:79:de:bd:cc:49:13:23:81:a4:9c:74:d3:23:fb: c7:36:85:5f:08:48:b6:cf:a9:4f:6a:1a:77:5c:d1: 7d:9a:d8:7c:f5:8a:6b:8c:53:fc:ef:36:d5:99:f9: 8d:56:82:cb:7e:7c:8a:39:08:7f:50:5f:33:83:3e: 06:d5:12:be:9f:e0:7c:b2:d4:cb:8c:b6:51:28:0d: a5:a8:c4:fb:d6:48:58:3a:01:4e:c7:ce:2c:d0:70: 72:14:ec:73:45:19:75:1d:b3:f3:91:52:e5:fc:b6: cd:b5:f0:72:7b:8e:ba:70:8b:58:20:bb:ce:c0:0a: 03:6e:19:d0:f4:e8:98:46:b5:ad:59:fe:14:0f:23: d9:98:aa:4e:21:e5:e8:2d:70:dc:47:e2:e6:eb:7e: e9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A7:44:CB:46:DB:82:9D:F5:71:1E:C0:80:04:2D:44:D6:8D:BF:0E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01ae5f9c-dce4-4b26-a79f-f6e6c911f972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:4800::/40 Signature Algorithm: sha256WithRSAEncryption bb:cf:d2:06:5e:cc:b2:b6:9e:2c:c5:ef:58:83:b3:14:b9:68: e9:79:e0:51:8d:1d:f1:ee:06:35:db:4b:48:77:67:9c:64:d4: 86:5d:18:35:15:9c:7f:c1:fa:46:7b:27:fb:2f:6a:fb:07:72: b4:64:63:17:a8:e6:34:6e:2d:1b:6a:03:fe:fd:b8:9b:90:25: 39:f4:e8:e9:b2:47:c5:b9:f6:92:38:dd:f0:58:2d:4b:c5:37: 80:7b:98:bf:0f:18:89:95:28:e1:64:c8:7b:1e:08:21:ef:a6: 9d:4c:8c:9c:95:08:c9:0c:48:a5:1d:fb:66:fd:ba:10:de:ea: 7b:1c:da:b9:9e:e0:bb:be:80:73:87:5b:de:6d:c9:ea:cf:c1: 3d:72:cc:46:01:42:39:0a:91:a5:a9:18:50:cb:b9:36:08:fc: a2:42:ee:30:64:dc:fe:c9:83:66:3c:05:0b:4f:36:db:c9:43: 59:f8:57:1f:6a:e4:84:7f:f7:7b:a7:4f:95:62:92:d3:d9:53: ea:f4:98:3b:67:08:b6:b9:2a:bf:bd:a9:e0:c0:5f:16:1c:50: 54:e7:20:4f:9a:92:c5:2f:5b:f7:00:5c:b1:d1:4b:99:a2:a1: 9b:73:45:02:4c:e8:38:29:31:99:62:24:a3:d9:ce:d5:7d:e4: 78:00:88:f1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBTIHZj167YJC/BiQtcuUnpT1V5owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwODAwMDA1NVoX DTI1MTExMjIzNTk1OVowejFJMEcGA1UEBRNAN2IzNWM0Yjg4OWViNWEyYWU4Zjg2 YzMzOWQwMjEyN2ZjZjNhZDQ2YTE1Njc4ZjJiNTkyNDU2NmEyMzRmNjgzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnvkUkf42+QrBZZFZTNHlHYrlGML 9IdEBCmbF2j486IlpRFWjbTxOXC+UBI9FNmgntwa0sRQTIAX0fFzW0Ydn+citJll EwOeYeNCUACgsYkXVC3tt2yQs5nbL/HDrGmZ4jIGjCBbTwZaed69zEkTI4GknHTT I/vHNoVfCEi2z6lPahp3XNF9mth89YprjFP87zbVmfmNVoLLfnyKOQh/UF8zgz4G 1RK+n+B8stTLjLZRKA2lqMT71khYOgFOx84s0HByFOxzRRl1HbPzkVLl/LbNtfBy e466cItYILvOwAoDbhnQ9OiYRrWtWf4UDyPZmKpOIeXoLXDcR+Lm637pzwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAOnRMtG24Kd9XEewIAELUTWjb8OMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAxYWU1ZjljLWRjZTQtNGIyNi1hNzlmLWY2ZTZjOTExZjk3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYEgwDQYJKoZIhvcNAQELBQADggEBALvP0gZezLK2nizF71iD sxS5aOl54FGNHfHuBjXbS0h3Z5xk1IZdGDUVnH/B+kZ7J/svavsHcrRkYxeo5jRu LRtqA/79uJuQJTn06OmyR8W59pI43fBYLUvFN4B7mL8PGImVKOFkyHseCCHvpp1M jJyVCMkMSKUd+2b9uhDe6nsc2rme4Lu+gHOHW95tyerPwT1yzEYBQjkKkaWpGFDL uTYI/KJC7jBk3P7Jg2Y8BQtPNtvJQ1n4Vx9q5IR/93unT5ViktPZU+r0mDtnCLa5 Kr+9qeDAXxYcUFTnIE+aksUvW/cAXLHRS5mioZtzRQJM6DgpMZliJKPZztV95HgA iPE= -----END CERTIFICATE-----Generated at Wed Oct 8 21:34:26 2025 by rpki-client