$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1219e8ec-d527-4910-8cb6-e0e4e3503f2a.roa File: 1219e8ec-d527-4910-8cb6-e0e4e3503f2a.roa (raw, json) Hash identifier: d4bJObd5sV3c+3jbD6Z6JCe/xocPx4dSTtXtzkjC1N8= Subject key identifier: A2:5D:6A:D1:54:6A:04:03:BE:80:03:6F:D5:61:84:9C:F2:F8:66:C3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4BAA1482F084959E78AEB8DAFB0DDBB5351A1AC5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1219e8ec-d527-4910-8cb6-e0e4e3503f2a.roa Signing time: Mon 29 Sep 2025 15:00:55 +0000 ROA not before: Mon 29 Sep 2025 15:00:55 +0000 ROA not after: Mon 03 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da68:a0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:aa:14:82:f0:84:95:9e:78:ae:b8:da:fb:0d:db:b5:35:1a:1a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 29 15:00:55 2025 GMT Not After : Nov 3 23:59:59 2025 GMT Subject: serialNumber=386cb6e615210bb1d67da97fca9160b255d0a9aec1f9e721356d3732a204041f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:92:98:b7:f1:54:4d:aa:fb:76:89:dc:c0: 21:9d:69:78:e6:df:fc:f1:9d:c4:5e:d1:0a:da:02: c8:3b:83:50:fd:62:b5:6d:b2:75:30:0e:0a:be:63: 04:32:37:a8:f3:08:0e:2e:56:c9:88:79:0c:75:15: 6f:cd:9c:60:e7:e2:4e:70:d0:b6:f0:de:47:f4:0c: ec:a8:7d:a9:58:72:5d:ad:37:51:82:ea:9c:7b:42: 9b:a6:6d:2f:2c:e8:92:eb:c8:f5:40:38:59:21:b2: 5c:e9:c6:ae:ff:46:33:fd:3b:2b:8d:22:1a:69:44: b7:dd:0f:aa:fe:c0:9a:aa:de:19:f3:5f:c0:30:41: 15:c7:e2:f0:1a:48:04:11:09:2a:92:9a:64:02:1c: ad:47:73:f0:b4:a4:cd:70:5c:e4:d5:e6:ad:f6:04: 32:a8:03:0e:2c:74:6c:cc:5f:fc:68:ed:92:4b:82: 04:a2:33:fd:7a:0a:55:81:4c:05:24:7e:6a:e9:a8: 2d:9e:a4:43:f2:1b:d3:49:ea:b6:43:81:05:21:d1: 19:ce:3f:c1:5c:f0:a3:c5:4f:9f:c7:61:71:ea:b0: c7:84:4f:02:92:d7:92:d9:ac:7b:f2:24:70:47:67: 85:32:2c:7a:fd:c3:eb:96:d6:79:cf:ec:c9:2e:74: 6c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5D:6A:D1:54:6A:04:03:BE:80:03:6F:D5:61:84:9C:F2:F8:66:C3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1219e8ec-d527-4910-8cb6-e0e4e3503f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:a0c0::/46 Signature Algorithm: sha256WithRSAEncryption a2:0a:3c:3a:4a:aa:b9:59:31:72:e7:8a:2d:b3:ec:1c:23:8b: 84:a9:d7:39:ee:a7:2c:d9:ad:17:16:c4:ab:41:c3:cf:3a:73: 1d:2e:98:68:0c:8e:64:c5:22:32:27:fc:9d:fd:9d:ac:2f:39: 6c:0e:69:f8:e7:93:26:15:67:dd:74:f5:3e:e9:0a:bc:4c:d4: fc:ce:e6:f7:6e:95:59:b3:4b:9e:fc:ab:7d:40:c6:21:00:01: 68:4e:fc:8b:61:a1:87:2c:75:de:37:e7:e4:71:67:90:fe:d5: c7:84:8a:75:40:fe:70:9f:bc:b0:be:28:3b:d6:fe:b6:3a:a4: 77:60:8d:47:b2:25:7b:fd:50:5e:76:06:6c:af:c8:0d:ba:0f: c5:34:4d:51:7c:e3:87:a4:42:00:56:df:97:c6:0c:3b:b7:80: 76:9f:86:90:3c:fe:18:13:96:0f:4f:b9:32:b1:49:9b:b5:ec: 49:58:94:86:36:fb:f6:e7:10:84:03:11:13:19:27:90:a3:f6: ed:73:44:d6:f2:24:64:2c:5a:8f:35:25:12:a2:3c:33:e5:4f: b2:67:3b:0c:91:87:20:3d:d0:11:9c:1c:5d:f1:59:5c:cc:3d: 2f:7f:cf:7c:ed:b1:de:8b:e5:be:41:4f:77:04:ab:7a:b2:67: 2b:00:70:47 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUS6oUgvCElZ54rrja+w3btTUaGsUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkyOTE1MDA1NVoX DTI1MTEwMzIzNTk1OVowejFJMEcGA1UEBRNAMzg2Y2I2ZTYxNTIxMGJiMWQ2N2Rh OTdmY2E5MTYwYjI1NWQwYTlhZWMxZjllNzIxMzU2ZDM3MzJhMjA0MDQxZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH6SmLfxVE2q+3aJ3MAhnWl45t/8 8Z3EXtEK2gLIO4NQ/WK1bbJ1MA4KvmMEMjeo8wgOLlbJiHkMdRVvzZxg5+JOcNC2 8N5H9AzsqH2pWHJdrTdRguqce0Kbpm0vLOiS68j1QDhZIbJc6cau/0Yz/TsrjSIa aUS33Q+q/sCaqt4Z81/AMEEVx+LwGkgEEQkqkppkAhytR3PwtKTNcFzk1eat9gQy qAMOLHRszF/8aO2SS4IEojP9egpVgUwFJH5q6agtnqRD8hvTSeq2Q4EFIdEZzj/B XPCjxU+fx2Fx6rDHhE8CkteS2ax78iRwR2eFMix6/cPrltZ5z+zJLnRsDwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKJdatFUagQDvoADb9VhhJzy+GbDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEyMTllOGVjLWQ1MjctNDkxMC04Y2I2LWUwZTRlMzUwM2YyYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaKDAMA0GCSqGSIb3DQEBCwUAA4IBAQCiCjw6Sqq5WTFy54ot s+wcI4uEqdc57qcs2a0XFsSrQcPPOnMdLphoDI5kxSIyJ/yd/Z2sLzlsDmn455Mm FWfddPU+6Qq8TNT8zub3bpVZs0ue/Kt9QMYhAAFoTvyLYaGHLHXeN+fkcWeQ/tXH hIp1QP5wn7ywvig71v62OqR3YI1HsiV7/VBedgZsr8gNug/FNE1RfOOHpEIAVt+X xgw7t4B2n4aQPP4YE5YPT7kysUmbtexJWJSGNvv25xCEAxETGSeQo/btc0TW8iRk LFqPNSUSojwz5U+yZzsMkYcgPdARnBxd8VlczD0vf8987bHei+W+QU93BKt6smcr AHBH -----END CERTIFICATE-----Generated at Wed Oct 8 22:52:35 2025 by rpki-client