$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f0c7d8f-32e4-429a-818c-c680fe972a02.roa File: 5f0c7d8f-32e4-429a-818c-c680fe972a02.roa (raw, json) Hash identifier: oMhrS+PRtl/T1eaxoW4tzBQe6bduqg+Dxw6+OAhM738= Subject key identifier: 1D:32:C9:0E:71:3E:58:4B:71:2C:75:BD:D7:E8:CB:34:12:92:ED:91 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 14B44B8F51DFB671DC7DE88B12DC01CA27EE8FF6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f0c7d8f-32e4-429a-818c-c680fe972a02.roa Signing time: Tue 07 Oct 2025 00:00:53 +0000 ROA not before: Tue 07 Oct 2025 00:00:53 +0000 ROA not after: Tue 11 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b4:4b:8f:51:df:b6:71:dc:7d:e8:8b:12:dc:01:ca:27:ee:8f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 7 00:00:53 2025 GMT Not After : Nov 11 23:59:59 2025 GMT Subject: serialNumber=a95343f7579bace1bad13a44d84580d5ce8f647bfd86227608feda3d1ec01ea3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:45:4b:2c:b8:66:88:f6:f8:24:e5:41:77: 27:30:c4:4f:2f:36:72:a4:1a:ae:ab:19:28:32:5e: b6:1a:7b:89:88:33:e5:66:db:6a:28:c8:be:ce:e1: 86:af:5e:fd:65:dc:16:8a:e2:ae:2d:ba:79:d6:42: 65:ed:8c:23:ad:e0:62:08:9b:63:2b:7c:51:3d:9d: bc:6e:74:73:1e:df:97:d8:d9:d2:82:ce:6a:12:5c: 2c:be:62:b1:a9:91:df:3f:0e:63:eb:3e:af:d7:8e: 60:fb:08:4d:fa:3d:fd:e0:cc:94:40:6f:ef:58:ee: e9:5e:0b:f6:e1:82:97:12:b9:b3:24:ae:c2:7a:5d: b4:07:68:c1:3b:3c:97:b4:ae:6a:ca:ec:aa:05:f9: aa:33:74:39:46:22:2b:62:e4:13:38:65:fe:7e:de: 87:0a:f2:3c:48:93:07:d6:3b:d4:1b:7a:c1:07:d0: 4d:9d:51:6e:60:3e:04:d1:e1:36:39:65:a9:52:d4: 78:f2:9e:96:fd:60:6e:c1:98:ea:ee:77:94:d1:6b: 19:38:82:6a:53:1b:7c:f4:12:eb:e5:1d:f8:33:32: 38:9f:f4:d6:95:bd:2a:10:2f:99:e3:57:f3:af:17: 45:e0:bf:8c:f7:93:38:af:b2:e8:2e:f8:9e:c1:e9: e8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:32:C9:0E:71:3E:58:4B:71:2C:75:BD:D7:E8:CB:34:12:92:ED:91 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f0c7d8f-32e4-429a-818c-c680fe972a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:f000::/40 Signature Algorithm: sha256WithRSAEncryption 80:0b:b4:f2:1a:90:f1:32:56:fb:fa:e6:7a:91:7b:b2:e4:5c: 1b:c0:79:a5:03:24:71:02:0a:cd:e6:9d:90:33:51:34:72:dc: 9d:ac:44:b2:41:ed:cd:5a:98:1c:ea:b7:f6:e4:9e:d5:9d:1f: b8:ae:4e:11:9d:7f:51:53:95:88:b2:0d:50:2d:e4:7b:c3:43: 74:fb:be:40:89:60:08:10:39:63:4a:bc:a4:77:b8:28:15:01: e2:ed:f0:58:38:c4:2b:ca:a7:74:1f:2c:dc:a6:86:3c:61:b5: 7f:e1:21:85:96:ab:b8:e1:ef:30:a6:ae:38:6e:ca:85:eb:ac: f9:41:55:fa:0f:a6:84:25:15:12:fa:2e:d9:a3:a5:5c:bf:30: 37:80:99:74:9c:83:cb:95:50:8d:bb:29:74:d6:71:2d:03:4f: 52:f4:f2:b4:56:1a:86:c4:af:16:46:31:9f:5b:69:54:2f:05: 8f:af:3a:39:ca:50:b8:86:93:e2:0e:f2:77:39:b1:fe:06:0f: 09:73:02:0d:12:ae:70:59:99:3b:f5:d3:d8:6b:59:13:19:3d: d3:5a:47:11:56:37:6e:27:bc:0f:97:83:4b:c6:f9:f2:c2:48: 38:50:6f:87:26:e6:76:20:88:a6:0f:cf:a7:17:4b:43:bc:17: f8:ac:15:ca -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFLRLj1HftnHcfeiLEtwByifuj/YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNzAwMDA1M1oX DTI1MTExMTIzNTk1OVowejFJMEcGA1UEBRNAYTk1MzQzZjc1NzliYWNlMWJhZDEz YTQ0ZDg0NTgwZDVjZThmNjQ3YmZkODYyMjc2MDhmZWRhM2QxZWMwMWVhMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc1FSyy4Zoj2+CTlQXcnMMRPLzZy pBquqxkoMl62GnuJiDPlZttqKMi+zuGGr179ZdwWiuKuLbp51kJl7YwjreBiCJtj K3xRPZ28bnRzHt+X2NnSgs5qElwsvmKxqZHfPw5j6z6v145g+whN+j394MyUQG/v WO7pXgv24YKXErmzJK7Cel20B2jBOzyXtK5qyuyqBfmqM3Q5RiIrYuQTOGX+ft6H CvI8SJMH1jvUG3rBB9BNnVFuYD4E0eE2OWWpUtR48p6W/WBuwZjq7neU0WsZOIJq Uxt89BLr5R34MzI4n/TWlb0qEC+Z41fzrxdF4L+M95M4r7LoLviewenoVQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB0yyQ5xPlhLcSx1vdfoyzQSku2RMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmMGM3ZDhmLTMyZTQtNDI5YS04MThjLWM2ODBmZTk3MmEwMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9PAwDQYJKoZIhvcNAQELBQADggEBAIALtPIakPEyVvv65nqR e7LkXBvAeaUDJHECCs3mnZAzUTRy3J2sRLJB7c1amBzqt/bkntWdH7iuThGdf1FT lYiyDVAt5HvDQ3T7vkCJYAgQOWNKvKR3uCgVAeLt8Fg4xCvKp3QfLNymhjxhtX/h IYWWq7jh7zCmrjhuyoXrrPlBVfoPpoQlFRL6LtmjpVy/MDeAmXScg8uVUI27KXTW cS0DT1L08rRWGobErxZGMZ9baVQvBY+vOjnKULiGk+IO8nc5sf4GDwlzAg0SrnBZ mTv109hrWRMZPdNaRxFWN24nvA+Xg0vG+fLCSDhQb4cm5nYgiKYPz6cXS0O8F/is Fco= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:45 2025 by rpki-client