$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1433179c-d512-4e29-b60c-2b7b7cd25040.roa File: 1433179c-d512-4e29-b60c-2b7b7cd25040.roa (raw, json) Hash identifier: DcY8u+WfYOCUdzM6Ez8Pi02hk+q+4L6CQpY1ufMkeEc= Subject key identifier: 78:DB:08:12:24:AA:52:7E:9C:FF:AB:72:8B:81:A9:64:7C:DC:27:BE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 69CA1A2344E9CFF766FD95D8407E11AEA2E6EC2A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1433179c-d512-4e29-b60c-2b7b7cd25040.roa Signing time: Fri 19 Sep 2025 00:10:04 +0000 ROA not before: Fri 19 Sep 2025 00:10:04 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ca:1a:23:44:e9:cf:f7:66:fd:95:d8:40:7e:11:ae:a2:e6:ec:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 19 00:10:04 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=a5e097196269d398eabb2ecd49b3880422f63238a8e23c62891b43248d6840a0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1d:f0:b3:f0:06:2f:4a:c3:2b:0b:7e:1a:c1: 6c:95:c6:be:65:c5:0c:59:be:5c:54:ec:78:ae:9a: d5:1a:70:e3:da:a3:f3:49:11:73:2c:2d:c2:55:56: 1b:ac:af:c9:7b:53:03:19:82:79:08:3c:ce:c9:c1: 73:9c:8b:43:7c:14:1a:bb:30:9c:58:02:79:35:05: 88:bb:6d:d9:8c:ee:be:60:27:12:40:5c:e0:68:3a: fd:b8:5b:9f:ef:ed:78:09:8b:6a:9f:69:41:f7:f7: 15:77:f7:e2:e2:10:07:e8:c4:5d:5a:fd:3e:1f:33: dc:1c:ff:ae:02:4b:ec:7e:e3:6c:9d:69:19:e0:6d: fb:42:13:10:9a:59:aa:8b:d4:57:a2:4f:74:a3:4c: 2c:db:f4:2f:f9:32:62:f7:2c:81:16:85:a3:d3:cf: 1b:f8:a7:9a:79:53:ef:09:41:3e:de:99:2d:f4:7e: a3:d1:44:12:91:e5:02:41:56:cd:2c:6b:bf:f9:b8: 25:7c:54:f6:a8:46:59:a7:ee:b4:9a:65:2b:a6:78: a4:e0:f9:26:d0:25:4c:b7:a7:14:9d:41:7d:08:87: 48:3a:f9:14:00:37:fe:34:de:9f:99:de:40:31:ae: 48:55:69:b9:49:36:f4:8d:23:ee:a7:f8:28:49:c1: 01:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DB:08:12:24:AA:52:7E:9C:FF:AB:72:8B:81:A9:64:7C:DC:27:BE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1433179c-d512-4e29-b60c-2b7b7cd25040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:7000::/40 Signature Algorithm: sha256WithRSAEncryption 6c:25:45:f1:b1:f7:82:00:6f:75:b4:3c:05:12:41:83:95:e4: de:fd:7e:e3:a0:1c:69:3b:6c:00:69:df:d8:23:aa:1e:e1:19: f2:21:3f:54:f7:ee:02:83:17:d0:56:1d:df:6b:01:c2:c9:85: 6d:41:81:43:64:65:58:fd:ae:8b:e9:8c:04:07:b1:df:59:2c: ba:9a:06:c8:25:ec:34:82:cc:23:90:6f:80:e5:a6:ad:31:a6: 43:6d:9b:51:32:3b:d0:8d:c9:0a:db:4a:ae:19:37:a1:75:d2: f6:a7:52:4e:84:0a:ae:d2:7c:0b:7f:2c:7b:43:6d:c1:be:4d: 7d:7b:76:83:fc:f9:12:d5:60:ee:75:8f:50:84:29:31:09:7f: b9:8a:ce:24:8d:b6:47:5d:da:43:b8:7f:0d:d3:2b:32:79:ad: 27:67:c4:b8:8c:69:82:8d:ed:f4:9b:f5:30:86:ad:9e:83:ce: 5c:99:10:cd:71:6f:df:31:26:63:34:bc:b8:72:72:40:0b:53: 47:38:66:08:e8:fd:c2:e2:9b:01:a4:37:70:a3:89:b8:54:0e: 8e:91:d4:18:4d:48:52:b4:12:0a:35:ff:1f:b5:a7:91:4f:3a: db:6f:13:94:93:a1:b0:82:87:f2:7e:7e:2a:e5:48:91:0a:42: 18:00:93:ee -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUacoaI0Tpz/dm/ZXYQH4RrqLm7CowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkxOTAwMTAwNFoX DTI1MTAyNDIzNTk1OVowejFJMEcGA1UEBRNAYTVlMDk3MTk2MjY5ZDM5OGVhYmIy ZWNkNDliMzg4MDQyMmY2MzIzOGE4ZTIzYzYyODkxYjQzMjQ4ZDY4NDBhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B3ws/AGL0rDKwt+GsFslca+ZcUM Wb5cVOx4rprVGnDj2qPzSRFzLC3CVVYbrK/Je1MDGYJ5CDzOycFznItDfBQauzCc WAJ5NQWIu23ZjO6+YCcSQFzgaDr9uFuf7+14CYtqn2lB9/cVd/fi4hAH6MRdWv0+ HzPcHP+uAkvsfuNsnWkZ4G37QhMQmlmqi9RXok90o0ws2/Qv+TJi9yyBFoWj088b +KeaeVPvCUE+3pkt9H6j0UQSkeUCQVbNLGu/+bglfFT2qEZZp+60mmUrpnik4Pkm 0CVMt6cUnUF9CIdIOvkUADf+NN6fmd5AMa5IVWm5STb0jSPup/goScEB/wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHjbCBIkqlJ+nP+rcouBqWR83Ce+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE0MzMxNzljLWQ1MTItNGUyOS1iNjBjLTJiN2I3Y2QyNTA0MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+3AwDQYJKoZIhvcNAQELBQADggEBAGwlRfGx94IAb3W0PAUS QYOV5N79fuOgHGk7bABp39gjqh7hGfIhP1T37gKDF9BWHd9rAcLJhW1BgUNkZVj9 rovpjAQHsd9ZLLqaBsgl7DSCzCOQb4Dlpq0xpkNtm1EyO9CNyQrbSq4ZN6F10van Uk6ECq7SfAt/LHtDbcG+TX17doP8+RLVYO51j1CEKTEJf7mKziSNtkdd2kO4fw3T KzJ5rSdnxLiMaYKN7fSb9TCGrZ6DzlyZEM1xb98xJmM0vLhyckALU0c4Zgjo/cLi mwGkN3CjibhUDo6R1BhNSFK0Ego1/x+1p5FPOttvE5STobCCh/J+firlSJEKQhgA k+4= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:49 2025 by rpki-client