$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1cd28abb-57aa-47ac-bde5-ce1695f1ab09.roa File: 1cd28abb-57aa-47ac-bde5-ce1695f1ab09.roa (raw, json) Hash identifier: mde5c4cI6eklDgCKOiKH6XCEWeK4Wvhu8kK84bfI1lQ= Subject key identifier: 9E:B3:7A:89:92:8C:94:ED:AC:78:F8:06:67:1C:83:D7:01:A1:5E:48 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5A00863381C418751B09086F613B13249D3868EB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1cd28abb-57aa-47ac-bde5-ce1695f1ab09.roa Signing time: Tue 07 Oct 2025 00:00:09 +0000 ROA not before: Tue 07 Oct 2025 00:00:09 +0000 ROA not after: Tue 11 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:00:86:33:81:c4:18:75:1b:09:08:6f:61:3b:13:24:9d:38:68:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 7 00:00:09 2025 GMT Not After : Nov 11 23:59:59 2025 GMT Subject: serialNumber=bad6fd2d5a80d001d9b53b35721393d46a5ece55da1c31e3a73ea6b19affdd9a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:3d:ae:0b:de:b4:7e:c6:9c:a9:56:03:b4: ae:ff:50:db:9f:8c:1a:d3:a9:bb:76:e3:08:fa:1d: 81:2d:9a:58:32:e6:02:a7:46:52:b2:62:87:00:55: 8c:a7:09:97:68:d7:e2:b1:f6:5b:e5:24:85:11:8a: c4:2b:20:78:f5:06:35:1c:85:96:ab:57:67:5c:09: a1:01:38:54:cc:2c:b8:08:d9:3e:e2:68:dc:78:b8: 49:51:c8:2f:62:4f:11:8a:2e:bc:3f:5f:ac:18:ac: e2:6f:ea:98:7a:22:03:e0:ab:0f:a9:36:76:fb:27: 61:1e:97:08:90:38:b1:5b:a8:a7:61:cb:b6:86:da: d8:c5:64:d1:7b:f5:74:20:63:43:3d:26:8f:da:0f: 91:df:33:04:da:9c:48:43:fe:64:49:ad:89:61:11: a9:e1:7a:0b:aa:c9:c0:8c:78:bd:04:19:af:71:2f: 19:31:47:e9:92:29:67:28:80:df:04:36:77:86:d6: 22:7d:e5:24:5e:04:9a:99:43:68:7f:89:8f:c6:88: 9e:b4:a5:63:5b:1e:70:85:e7:3b:25:fe:08:f2:8d: 6f:16:14:a0:ac:46:eb:b2:f5:16:76:a9:26:6b:8f: a6:f2:9e:8c:57:f4:37:45:9d:18:9e:4b:57:c5:ca: 14:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B3:7A:89:92:8C:94:ED:AC:78:F8:06:67:1C:83:D7:01:A1:5E:48 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1cd28abb-57aa-47ac-bde5-ce1695f1ab09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:6000::/40 Signature Algorithm: sha256WithRSAEncryption 22:8b:e5:f4:85:ad:5f:81:50:65:4b:09:19:e6:5c:df:2c:3b: de:6e:ab:32:46:0d:d1:82:16:db:e1:59:d4:36:e0:f1:6e:d0: 1b:67:30:65:e3:79:53:c7:c3:cf:dd:50:d1:04:c6:b9:54:f6: 5a:2d:8c:f1:d1:6e:e6:a0:9c:dd:f3:cb:31:1d:5b:2d:b1:3b: 38:59:86:e8:b5:a0:34:a1:28:2f:7b:66:48:d9:1a:6f:49:97: 81:60:c7:fc:dd:8f:be:9f:a3:59:46:c8:f1:ad:5c:88:21:a3: c5:7d:30:7d:6d:cb:f5:d3:68:a1:ff:1f:9e:51:9b:ce:a6:aa: 9a:4c:99:dc:65:38:b8:3d:46:c2:6a:b6:76:9b:c2:90:db:ee: ea:0b:60:be:3c:a6:e4:18:3a:6b:69:f1:5d:6c:2d:86:34:c6: e4:2c:6a:89:fd:71:fb:b0:72:ed:b6:2a:1a:bc:63:b7:63:cc: b0:90:79:bd:36:d5:34:7f:b1:97:95:2d:4a:f3:00:93:63:42: 1f:97:ae:dd:c9:dd:25:89:e1:9f:3f:74:c9:84:ca:6e:58:f0: e3:1c:8e:25:e0:16:48:8d:da:21:6d:1e:ce:07:4b:8a:c1:93: 17:a4:8c:06:36:e8:59:0a:16:45:55:2c:10:2e:82:7c:38:d6: 9e:c7:41:4e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWgCGM4HEGHUbCQhvYTsTJJ04aOswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNzAwMDAwOVoX DTI1MTExMTIzNTk1OVowejFJMEcGA1UEBRNAYmFkNmZkMmQ1YTgwZDAwMWQ5YjUz YjM1NzIxMzkzZDQ2YTVlY2U1NWRhMWMzMWUzYTczZWE2YjE5YWZmZGQ5YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbQ9rgvetH7GnKlWA7Su/1Dbn4wa 06m7duMI+h2BLZpYMuYCp0ZSsmKHAFWMpwmXaNfisfZb5SSFEYrEKyB49QY1HIWW q1dnXAmhAThUzCy4CNk+4mjceLhJUcgvYk8Rii68P1+sGKzib+qYeiID4KsPqTZ2 +ydhHpcIkDixW6inYcu2htrYxWTRe/V0IGNDPSaP2g+R3zME2pxIQ/5kSa2JYRGp 4XoLqsnAjHi9BBmvcS8ZMUfpkilnKIDfBDZ3htYifeUkXgSamUNof4mPxoietKVj Wx5whec7Jf4I8o1vFhSgrEbrsvUWdqkma4+m8p6MV/Q3RZ0YnktXxcoU7wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJ6zeomSjJTtrHj4Bmccg9cBoV5IMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFjZDI4YWJiLTU3YWEtNDdhYy1iZGU1LWNlMTY5NWYxYWIwOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9GAwDQYJKoZIhvcNAQELBQADggEBACKL5fSFrV+BUGVLCRnm XN8sO95uqzJGDdGCFtvhWdQ24PFu0BtnMGXjeVPHw8/dUNEExrlU9lotjPHRbuag nN3zyzEdWy2xOzhZhui1oDShKC97ZkjZGm9Jl4Fgx/zdj76fo1lGyPGtXIgho8V9 MH1ty/XTaKH/H55Rm86mqppMmdxlOLg9RsJqtnabwpDb7uoLYL48puQYOmtp8V1s LYY0xuQsaon9cfuwcu22Khq8Y7djzLCQeb021TR/sZeVLUrzAJNjQh+Xrt3J3SWJ 4Z8/dMmEym5Y8OMcjiXgFkiN2iFtHs4HS4rBkxekjAY26FkKFkVVLBAugnw41p7H QU4= -----END CERTIFICATE-----Generated at Wed Oct 8 23:16:41 2025 by rpki-client