$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07945819-d82c-427a-b71b-535d57170872.roa File: 07945819-d82c-427a-b71b-535d57170872.roa (raw, json) Hash identifier: qfpIM2AYSDIMLbyEdKwEnAExbBT+6lGmvOVN6Y+FaCE= Subject key identifier: C4:75:39:F6:E3:0F:7D:6D:F9:78:BC:34:E0:F6:28:5F:A9:48:31:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 451F1ABA4489C9AB03BB46D72D938723CE5D7696 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07945819-d82c-427a-b71b-535d57170872.roa Signing time: Fri 19 Sep 2025 00:10:20 +0000 ROA not before: Fri 19 Sep 2025 00:10:20 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:1f:1a:ba:44:89:c9:ab:03:bb:46:d7:2d:93:87:23:ce:5d:76:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 19 00:10:20 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=00d0a1c9e5f1c2d3c5fc4e015c36140dbb99f1e20a7757c64e2a939d8234efda, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ac:fc:f8:6a:e3:19:1f:fa:b0:6e:69:8e:45: 89:31:8d:6e:4a:f8:dd:1e:00:f2:4b:46:1a:8a:98: 55:c6:7b:0b:69:be:5b:50:3d:b3:09:80:d7:73:a2: e7:6e:4f:a8:4b:ae:55:96:87:03:6a:de:6d:b9:f8: 0a:c7:d6:91:e2:91:d6:9a:fb:d0:f1:52:7e:7c:ac: 9d:7b:c9:36:b6:db:9d:6a:b8:bb:c9:f9:45:17:d2: 62:fc:28:00:35:e5:9d:04:ba:25:70:b9:27:1c:a9: d9:ab:b4:27:7a:46:cb:e5:07:3c:3d:74:f5:98:f9: ec:66:5b:a0:d0:a6:da:09:15:66:25:27:3a:2b:b9: d8:08:b3:36:a6:98:8f:c5:98:04:d1:99:31:79:51: 3e:ee:71:84:d9:2a:13:09:64:93:4a:f0:3b:18:ca: a3:ef:f2:68:1d:6e:21:7c:40:d1:a0:31:bf:19:6c: 69:2c:37:fb:8d:3a:c2:a7:1a:85:bd:54:f0:3b:68: 84:3d:e0:0a:3e:00:30:bc:21:d0:b6:d9:c4:2a:c4: a0:e3:ee:96:40:00:ee:11:5c:37:28:00:a4:ab:d3: 26:7f:53:5b:2a:c3:eb:94:39:b5:d0:8e:2a:fd:13: 83:18:f0:b5:52:ec:1a:2a:27:13:ea:2f:db:d2:2f: 18:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:75:39:F6:E3:0F:7D:6D:F9:78:BC:34:E0:F6:28:5F:A9:48:31:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07945819-d82c-427a-b71b-535d57170872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:b000::/40 Signature Algorithm: sha256WithRSAEncryption 8e:f8:41:91:33:3e:44:32:91:ec:29:f8:50:b3:12:7f:db:df: a0:aa:42:e4:39:5a:71:c4:b4:25:64:ba:a7:ef:2e:c7:74:b1: a5:1d:15:c5:b8:64:2a:91:eb:80:2a:f8:36:0b:36:bc:58:ec: c6:5c:b9:7f:b3:64:3d:86:ea:9f:84:52:ea:cc:ba:54:04:af: 0a:15:d8:3b:d1:17:c1:83:7e:27:c7:01:58:81:5d:a1:31:2e: 74:5e:84:9f:b6:79:9f:38:69:bd:6e:3a:4b:cc:de:99:e5:3b: 28:02:14:de:1c:da:a5:40:e1:a5:63:c3:30:6c:d5:51:c4:0d: 17:a0:6a:63:6d:f6:a6:f2:67:78:d7:a9:29:a5:0f:4b:d4:fd: 91:a3:dd:df:76:e2:de:3c:53:df:1f:69:e5:ac:90:8a:30:76: 85:36:f2:ca:67:fa:e6:25:12:ca:ed:c9:88:ea:58:ee:bc:d9: 01:9c:1f:ef:95:18:63:5a:05:fb:de:cb:31:ca:72:6d:14:19: ae:87:e9:ea:26:de:e9:fd:d8:f3:80:6e:ab:2e:ca:93:e4:80: f6:c7:fb:cf:ac:3f:92:27:6a:dc:c9:f1:f4:00:2a:17:d7:1e: 36:cf:88:54:10:28:ed:fd:28:d4:33:80:e5:92:53:f1:c1:f4: dd:7c:95:8a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURR8aukSJyasDu0bXLZOHI85ddpYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkxOTAwMTAyMFoX DTI1MTAyNDIzNTk1OVowejFJMEcGA1UEBRNAMDBkMGExYzllNWYxYzJkM2M1ZmM0 ZTAxNWMzNjE0MGRiYjk5ZjFlMjBhNzc1N2M2NGUyYTkzOWQ4MjM0ZWZkYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqz8+GrjGR/6sG5pjkWJMY1uSvjd HgDyS0YaiphVxnsLab5bUD2zCYDXc6Lnbk+oS65VlocDat5tufgKx9aR4pHWmvvQ 8VJ+fKyde8k2ttudari7yflFF9Ji/CgANeWdBLolcLknHKnZq7QnekbL5Qc8PXT1 mPnsZlug0KbaCRVmJSc6K7nYCLM2ppiPxZgE0ZkxeVE+7nGE2SoTCWSTSvA7GMqj 7/JoHW4hfEDRoDG/GWxpLDf7jTrCpxqFvVTwO2iEPeAKPgAwvCHQttnEKsSg4+6W QADuEVw3KACkq9Mmf1NbKsPrlDm10I4q/RODGPC1UuwaKicT6i/b0i8YDwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMR1OfbjD31t+Xi8NOD2KF+pSDEUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3OTQ1ODE5LWQ4MmMtNDI3YS1iNzFiLTUzNWQ1NzE3MDg3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaabAwDQYJKoZIhvcNAQELBQADggEBAI74QZEzPkQykewp+FCz En/b36CqQuQ5WnHEtCVkuqfvLsd0saUdFcW4ZCqR64Aq+DYLNrxY7MZcuX+zZD2G 6p+EUurMulQErwoV2DvRF8GDfifHAViBXaExLnRehJ+2eZ84ab1uOkvM3pnlOygC FN4c2qVA4aVjwzBs1VHEDRegamNt9qbyZ3jXqSmlD0vU/ZGj3d924t48U98faeWs kIowdoU28spn+uYlEsrtyYjqWO682QGcH++VGGNaBfveyzHKcm0UGa6H6eom3un9 2POAbqsuypPkgPbH+8+sP5InatzJ8fQAKhfXHjbPiFQQKO39KNQzgOWSU/HB9N18 lYo= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:28 2025 by rpki-client