$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47474093-258c-498a-bd3d-047521af5d87.roa File: 47474093-258c-498a-bd3d-047521af5d87.roa (raw, json) Hash identifier: DZ4hGEYWPxZj8LiBv2i4ctG3ffN1ZCSKkrlld/sxMy8= Subject key identifier: 07:32:EE:A3:49:28:C1:54:DD:3D:79:95:7F:FE:C0:8A:65:0D:7D:72 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 47E7AFA0C77E5342C981534A777A1E7A8E9E431C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47474093-258c-498a-bd3d-047521af5d87.roa Signing time: Tue 07 Oct 2025 00:00:47 +0000 ROA not before: Tue 07 Oct 2025 00:00:47 +0000 ROA not after: Tue 11 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e7:af:a0:c7:7e:53:42:c9:81:53:4a:77:7a:1e:7a:8e:9e:43:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 7 00:00:47 2025 GMT Not After : Nov 11 23:59:59 2025 GMT Subject: serialNumber=48af2373bf426503a158641d5130a3956c7ae1ff9fd2bd362e27fb8751d3966e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f6:8d:5b:28:d9:00:81:b5:43:53:58:c2:f5: b6:0d:ab:3b:86:3c:f7:6d:43:9e:f2:e8:3c:e4:3a: 5b:22:37:fd:45:48:dd:cd:a3:c5:bd:c7:b9:7a:01: 26:56:dc:a4:87:5c:d0:b2:b8:b9:de:96:e6:22:b8: 96:9a:a6:b7:5d:c3:dc:34:5f:bf:ca:5a:92:71:a5: 7e:8a:da:24:e5:50:05:3a:cb:b9:ba:09:9d:13:c9: 49:50:71:f3:de:03:0c:06:75:b2:2a:2d:04:4f:9d: 8f:3b:4b:d1:c6:b9:89:08:a0:99:a8:81:01:20:b3: 18:e8:91:4d:0f:f9:26:e1:82:eb:f3:c2:a8:37:11: d8:76:79:43:05:45:48:5e:7b:1d:84:7a:4e:74:9a: 6c:56:e5:67:ff:53:51:6d:73:b2:e2:29:3b:58:b0: c2:5f:76:f9:8f:e5:f9:bf:00:ee:e5:c6:b6:d1:73: 3d:28:fc:19:0f:06:a0:54:51:7e:92:5a:e4:2a:75: 4a:6e:19:1c:6b:d0:bb:bc:29:90:e9:c2:b7:5d:1f: 17:72:2e:1e:17:08:74:29:87:b6:a1:32:10:b2:34: a5:17:bc:31:b1:0f:74:c2:39:32:a7:76:e6:c0:1e: 3e:6c:e6:f6:3b:3e:55:fd:d5:e2:49:e8:1a:07:bd: ea:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:32:EE:A3:49:28:C1:54:DD:3D:79:95:7F:FE:C0:8A:65:0D:7D:72 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47474093-258c-498a-bd3d-047521af5d87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:f000::/40 Signature Algorithm: sha256WithRSAEncryption 6f:ae:dd:51:fe:09:95:38:af:05:91:f6:06:82:26:58:4d:62: 56:bb:bc:fc:15:3d:09:52:35:39:11:50:41:ca:b9:22:92:39: 81:8e:3c:ed:31:57:9b:34:23:46:df:62:97:56:79:b6:a9:ed: ee:0f:3e:f4:74:bf:26:30:8c:c7:2b:ec:60:13:9b:46:bd:f4: 0a:0c:1f:f2:49:c8:4e:20:87:9b:82:e7:f3:d5:a0:76:fb:10: 30:80:31:ed:6e:f5:65:26:2e:88:03:a9:86:26:d1:f7:2a:a0: b0:d7:09:20:b4:5c:c0:ef:ff:96:7f:f6:d9:cd:ca:7d:fa:a0: 8b:0b:34:71:04:60:12:f3:e5:3f:37:f0:d8:4a:fe:4d:a6:c3: c9:48:60:8e:8e:fa:b0:72:9a:92:18:92:28:c3:ca:cf:01:04: 00:a0:e2:e1:16:21:0a:44:5a:4d:59:26:91:b1:0f:57:15:0d: e7:47:27:18:66:b0:fa:7d:6c:07:01:4a:35:82:c4:e2:1c:48: b3:fe:32:b2:6a:ec:d0:e7:95:d1:71:e4:1e:2f:80:b4:9d:59: 92:94:f4:58:f1:68:4b:d8:d5:c1:b5:7b:c6:bd:2b:78:7f:60: b7:2a:de:a2:bd:c4:e9:dd:6a:7d:93:a5:07:64:66:1e:97:9c: 06:71:1b:7d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUR+evoMd+U0LJgVNKd3oeeo6eQxwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNzAwMDA0N1oX DTI1MTExMTIzNTk1OVowejFJMEcGA1UEBRNANDhhZjIzNzNiZjQyNjUwM2ExNTg2 NDFkNTEzMGEzOTU2YzdhZTFmZjlmZDJiZDM2MmUyN2ZiODc1MWQzOTY2ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPaNWyjZAIG1Q1NYwvW2Das7hjz3 bUOe8ug85DpbIjf9RUjdzaPFvce5egEmVtykh1zQsri53pbmIriWmqa3XcPcNF+/ ylqScaV+itok5VAFOsu5ugmdE8lJUHHz3gMMBnWyKi0ET52PO0vRxrmJCKCZqIEB ILMY6JFND/km4YLr88KoNxHYdnlDBUVIXnsdhHpOdJpsVuVn/1NRbXOy4ik7WLDC X3b5j+X5vwDu5ca20XM9KPwZDwagVFF+klrkKnVKbhkca9C7vCmQ6cK3XR8Xci4e Fwh0KYe2oTIQsjSlF7wxsQ90wjkyp3bmwB4+bOb2Oz5V/dXiSegaB73qswIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAcy7qNJKMFU3T15lX/+wIplDX1yMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ3NDc0MDkzLTI1OGMtNDk4YS1iZDNkLTA0NzUyMWFmNWQ4Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaufAwDQYJKoZIhvcNAQELBQADggEBAG+u3VH+CZU4rwWR9gaC JlhNYla7vPwVPQlSNTkRUEHKuSKSOYGOPO0xV5s0I0bfYpdWebap7e4PPvR0vyYw jMcr7GATm0a99AoMH/JJyE4gh5uC5/PVoHb7EDCAMe1u9WUmLogDqYYm0fcqoLDX CSC0XMDv/5Z/9tnNyn36oIsLNHEEYBLz5T838NhK/k2mw8lIYI6O+rBympIYkijD ys8BBACg4uEWIQpEWk1ZJpGxD1cVDedHJxhmsPp9bAcBSjWCxOIcSLP+MrJq7NDn ldFx5B4vgLSdWZKU9FjxaEvY1cG1e8a9K3h/YLcq3qK9xOndan2TpQdkZh6XnAZx G30= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:23 2025 by rpki-client