$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0745dd95-a6cb-42f1-8600-7c6ba94feff9.roa File: 0745dd95-a6cb-42f1-8600-7c6ba94feff9.roa (raw, json) Hash identifier: c3IhufXzdIqn84skAqr1RJEr/7uVY/7ZIVtuoQYeKFE= Subject key identifier: C5:4A:01:B4:C0:10:2A:EB:7D:78:B6:85:DD:FD:3E:02:81:8C:0F:47 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0629413FECA2061B90D1AF62BDF337A0C472DA14 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0745dd95-a6cb-42f1-8600-7c6ba94feff9.roa Signing time: Fri 26 Sep 2025 00:01:34 +0000 ROA not before: Fri 26 Sep 2025 00:01:34 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:29:41:3f:ec:a2:06:1b:90:d1:af:62:bd:f3:37:a0:c4:72:da:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 26 00:01:34 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=65784e4e2f3542b7e5a3b5388e47cf35cbfd4f1e6ced31541757ce7c9690ce66, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:13:1c:65:dd:05:73:10:1b:17:5c:ec:99: 05:3a:66:b7:4c:8d:75:3b:56:9d:6f:a6:5f:4e:70: c9:08:01:70:28:60:85:fd:17:3b:5c:35:fd:78:8e: 9e:ef:af:e9:b0:c4:f1:d1:ab:0d:2d:e5:17:d1:11: c9:de:15:91:a9:1e:fe:8c:91:05:da:3e:91:3e:8f: 97:3e:cd:5b:6a:cc:8f:9a:a6:9f:ae:c8:a6:dd:a2: 7a:b2:2a:ce:02:0d:f0:0e:8f:d6:3d:55:e5:7b:e9: 81:c5:b3:d1:44:47:d0:2b:c6:a8:0d:71:c5:23:c8: 13:92:64:09:bb:19:3e:be:1a:d9:c0:6a:d3:9e:4c: 9c:ad:c9:09:44:83:3c:66:9f:f6:87:e4:1f:ae:54: 17:34:2b:df:64:da:a9:cd:5b:ee:56:38:aa:b9:89: 2f:80:2b:3c:59:f9:c6:30:da:e0:6e:61:38:59:d5: 1b:3d:30:84:67:ef:1b:55:23:5a:e4:69:e0:27:4d: ea:a1:a0:1b:a2:5e:03:bc:b8:fa:19:9b:88:a8:33: a0:8a:ea:f3:c4:60:ff:8b:fa:2d:c5:14:dc:17:b0: 0f:b0:9d:b4:08:75:e0:79:4a:d6:8f:59:74:71:82: a5:ca:e9:96:bd:92:d2:52:2d:c1:ee:2c:54:67:01: b1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4A:01:B4:C0:10:2A:EB:7D:78:B6:85:DD:FD:3E:02:81:8C:0F:47 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0745dd95-a6cb-42f1-8600-7c6ba94feff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:9000::/40 Signature Algorithm: sha256WithRSAEncryption 2f:48:20:cb:6c:4e:a6:b7:f7:0e:5d:a6:7b:62:c7:45:f4:62: 35:36:47:24:c6:07:74:41:cb:77:c8:43:b0:35:17:47:94:60: 2f:31:45:36:c1:da:b0:cd:67:ac:9d:b5:78:c9:1c:d6:af:d1: 9a:64:96:9e:f1:14:14:34:c5:c8:4f:26:aa:9a:f4:24:57:92: be:23:7d:4d:ac:bd:c9:d8:e3:6c:c7:86:1e:61:62:c7:6e:cb: 75:6a:1c:b5:08:63:6a:9c:02:66:81:aa:cc:c4:d8:3f:85:e3: 57:99:6b:5f:16:b8:14:a5:bf:3b:3f:ad:7c:6c:90:03:f8:da: e3:32:bd:86:07:96:e0:e8:15:47:8f:46:86:3d:16:fd:cc:a0: cf:c2:81:c3:04:1a:09:b2:18:67:d8:5a:5b:c8:2a:6c:e0:ae: b7:1c:a0:93:ed:fa:48:85:a9:40:5d:6a:81:50:0a:44:73:f4: 3d:b9:8e:24:a0:66:96:4c:26:a4:4b:bc:cd:bf:f8:05:2f:2e: 66:8a:84:00:76:d4:10:d4:27:5a:da:7f:fa:9b:59:56:f2:16: 05:c8:96:74:d2:00:25:b0:68:4a:18:9a:78:7d:98:06:78:71: 29:25:43:2d:df:f2:97:24:7b:c0:da:09:b0:a5:f2:c2:49:a6: 3e:b4:46:f0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBilBP+yiBhuQ0a9ivfM3oMRy2hQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkyNjAwMDEzNFoX DTI1MTAzMTIzNTk1OVowejFJMEcGA1UEBRNANjU3ODRlNGUyZjM1NDJiN2U1YTNi NTM4OGU0N2NmMzVjYmZkNGYxZTZjZWQzMTU0MTc1N2NlN2M5NjkwY2U2NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumkTHGXdBXMQGxdc7JkFOma3TI11 O1adb6ZfTnDJCAFwKGCF/Rc7XDX9eI6e76/psMTx0asNLeUX0RHJ3hWRqR7+jJEF 2j6RPo+XPs1basyPmqafrsim3aJ6sirOAg3wDo/WPVXle+mBxbPRREfQK8aoDXHF I8gTkmQJuxk+vhrZwGrTnkycrckJRIM8Zp/2h+QfrlQXNCvfZNqpzVvuVjiquYkv gCs8WfnGMNrgbmE4WdUbPTCEZ+8bVSNa5GngJ03qoaAbol4DvLj6GZuIqDOgiurz xGD/i/otxRTcF7APsJ20CHXgeUrWj1l0cYKlyumWvZLSUi3B7ixUZwGxJwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMVKAbTAECrrfXi2hd39PgKBjA9HMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3NDVkZDk1LWE2Y2ItNDJmMS04NjAwLTdjNmJhOTRmZWZmOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba75AwDQYJKoZIhvcNAQELBQADggEBAC9IIMtsTqa39w5dpnti x0X0YjU2RyTGB3RBy3fIQ7A1F0eUYC8xRTbB2rDNZ6ydtXjJHNav0Zpklp7xFBQ0 xchPJqqa9CRXkr4jfU2svcnY42zHhh5hYsduy3VqHLUIY2qcAmaBqszE2D+F41eZ a18WuBSlvzs/rXxskAP42uMyvYYHluDoFUePRoY9Fv3MoM/CgcMEGgmyGGfYWlvI KmzgrrccoJPt+kiFqUBdaoFQCkRz9D25jiSgZpZMJqRLvM2/+AUvLmaKhAB21BDU J1raf/qbWVbyFgXIlnTSACWwaEoYmnh9mAZ4cSklQy3f8pcke8DaCbCl8sJJpj60 RvA= -----END CERTIFICATE-----Generated at Wed Oct 8 21:30:55 2025 by rpki-client