$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa File: 4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa (raw, json) Hash identifier: cucpRQQquwy38fvWfuBLNs4x3C92k89OkxYQomNKwu4= Subject key identifier: 50:CB:52:67:A1:2F:AE:89:7F:1B:9B:F6:F4:E4:FB:F4:15:36:14:B0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0311FF801F89F6021E184D207F6BB8C058FA0304 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa Signing time: Sat 04 Oct 2025 00:10:31 +0000 ROA not before: Sat 04 Oct 2025 00:10:31 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:a080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:11:ff:80:1f:89:f6:02:1e:18:4d:20:7f:6b:b8:c0:58:fa:03:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:10:31 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=21f6aa076fdb0f5fbc2f273cbf8213b41f06165440ca6c7b94227bba69108ff2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:d9:fb:44:50:c0:52:85:e7:f3:90:f0:50: 59:0b:9c:bc:87:34:65:c0:c1:57:d2:31:98:27:dc: 56:27:22:73:13:10:04:00:a5:5b:fb:1b:a7:86:80: b0:06:d4:ef:40:85:28:54:62:8e:7c:45:7a:62:e5: 7f:6a:2c:b4:ea:5a:e9:ec:08:43:ec:9c:63:17:7f: bd:e7:0b:f7:49:87:45:5a:e6:7d:48:54:8c:a2:48: 43:f5:80:23:53:eb:58:87:d4:6c:f7:da:a4:46:ee: 20:e1:4b:52:c5:c5:cf:55:aa:21:50:45:6c:f8:93: 05:e4:0a:be:f0:a8:b1:6f:0d:ed:b6:48:ef:6b:60: 1a:27:2d:7f:c4:90:df:ea:88:3f:e9:6f:78:99:9c: 43:ce:cf:c7:dc:ee:64:5b:65:6f:16:c7:d6:ac:b5: 89:1e:81:be:cf:3f:07:26:15:6e:a0:73:f5:e1:d7: d0:d2:6e:c9:78:ae:0d:92:bb:32:8e:f0:e7:49:9b: 8d:b9:64:07:c6:52:bf:50:bd:8d:b9:8d:29:28:42: 08:0c:36:ea:68:02:3a:0f:51:b3:c9:10:38:40:24: f0:40:45:74:7e:5c:b1:84:67:d0:e4:01:7d:66:c5: 8c:15:43:b4:c4:76:33:14:df:f9:e5:9f:22:cd:6b: 2f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CB:52:67:A1:2F:AE:89:7F:1B:9B:F6:F4:E4:FB:F4:15:36:14:B0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:a080::/46 Signature Algorithm: sha256WithRSAEncryption 01:a8:33:7a:b2:6d:de:c2:38:83:ae:c0:1f:80:69:ae:0b:80: 23:75:31:ca:45:32:74:ef:30:e4:84:44:c3:b8:4e:ab:8a:bf: 88:a9:bf:60:f9:40:66:86:16:f4:f8:c8:7c:51:76:d7:8d:15: c2:98:da:b8:02:db:2c:8e:69:30:eb:e3:bb:5e:76:3c:c7:ff: 16:23:54:40:1a:70:96:63:54:aa:bd:09:21:fa:7e:b0:bc:c9: aa:25:b2:66:0b:85:7b:53:d5:d6:2a:b7:77:56:d2:fb:14:92: d6:b9:02:7c:ee:a8:3b:d5:68:17:84:b5:76:fa:4b:5a:e2:45: 80:42:6b:55:80:f6:f5:bc:17:d3:3a:ef:08:f1:46:3a:e1:a6: 37:b5:45:53:4a:c3:29:de:20:13:40:a0:13:dd:09:65:68:19: 6f:c4:7c:44:0e:4e:04:dc:2e:f9:51:a2:cd:b4:1f:fd:36:a2: 10:1c:4f:9d:ce:ff:2e:52:eb:e4:9a:57:ed:31:13:76:6b:ff: 34:85:4b:65:47:24:f9:83:81:61:92:e2:0c:f5:b3:16:d1:b5: e7:a2:8b:c0:81:3f:21:d1:5b:1b:f5:ad:e8:1f:0c:a7:a7:72: ef:fe:a4:30:0a:b4:8d:5b:24:f8:05:e8:56:78:a7:11:8c:86: 6a:de:5d:45 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAxH/gB+J9gIeGE0gf2u4wFj6AwQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNDAwMTAzMVoX DTI1MTEwODIzNTk1OVowejFJMEcGA1UEBRNAMjFmNmFhMDc2ZmRiMGY1ZmJjMmYy NzNjYmY4MjEzYjQxZjA2MTY1NDQwY2E2YzdiOTQyMjdiYmE2OTEwOGZmMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx/Z+0RQwFKF5/OQ8FBZC5y8hzRl wMFX0jGYJ9xWJyJzExAEAKVb+xunhoCwBtTvQIUoVGKOfEV6YuV/aiy06lrp7AhD 7JxjF3+95wv3SYdFWuZ9SFSMokhD9YAjU+tYh9Rs99qkRu4g4UtSxcXPVaohUEVs +JMF5Aq+8Kixbw3ttkjva2AaJy1/xJDf6og/6W94mZxDzs/H3O5kW2VvFsfWrLWJ HoG+zz8HJhVuoHP14dfQ0m7JeK4NkrsyjvDnSZuNuWQHxlK/UL2NuY0pKEIIDDbq aAI6D1GzyRA4QCTwQEV0flyxhGfQ5AF9ZsWMFUO0xHYzFN/55Z8izWsvKQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFDLUmehL66Jfxub9vTk+/QVNhSwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRhZmNmYmNjLWE2ZDItNDJkNy1iZWU1LTNiMDhiZjYyYTg2MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba86CAMA0GCSqGSIb3DQEBCwUAA4IBAQABqDN6sm3ewjiDrsAf gGmuC4AjdTHKRTJ07zDkhETDuE6rir+Iqb9g+UBmhhb0+Mh8UXbXjRXCmNq4Atss jmkw6+O7XnY8x/8WI1RAGnCWY1SqvQkh+n6wvMmqJbJmC4V7U9XWKrd3VtL7FJLW uQJ87qg71WgXhLV2+kta4kWAQmtVgPb1vBfTOu8I8UY64aY3tUVTSsMp3iATQKAT 3QllaBlvxHxEDk4E3C75UaLNtB/9NqIQHE+dzv8uUuvkmlftMRN2a/80hUtlRyT5 g4FhkuIM9bMW0bXnoovAgT8h0Vsb9a3oHwynp3Lv/qQwCrSNWyT4BehWeKcRjIZq 3l1F -----END CERTIFICATE-----Generated at Wed Oct 8 23:10:17 2025 by rpki-client