$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/999295ac-d636-4755-94c3-3c615012f6dd.roa File: 999295ac-d636-4755-94c3-3c615012f6dd.roa (raw, json) Hash identifier: ObYoQPsws2BpSnxH0XlCgdq+LD9E88WkJOj24ojma1g= Subject key identifier: C6:4D:95:89:8D:CF:7A:A6:1D:62:7A:DE:0A:1A:0F:F4:12:47:2C:53 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 60E052E70E8B13988370C5C73C6BA5B336F9C01E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/999295ac-d636-4755-94c3-3c615012f6dd.roa Signing time: Sat 20 Sep 2025 00:21:14 +0000 ROA not before: Sat 20 Sep 2025 00:21:14 +0000 ROA not after: Sat 25 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e0:52:e7:0e:8b:13:98:83:70:c5:c7:3c:6b:a5:b3:36:f9:c0:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 20 00:21:14 2025 GMT Not After : Oct 25 23:59:59 2025 GMT Subject: serialNumber=b6c44b1e6fea228ba2fb803d22f995319ea35e176ea521f9bc807e1a052a1e8f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:19:46:f7:4b:7d:d1:dc:33:df:2b:29:86:37: 79:91:4f:56:27:0a:72:da:f6:24:fa:18:37:9c:34: f3:e2:c0:a6:46:a7:b5:22:cf:28:dc:6b:fb:92:9f: 0d:33:43:9e:f0:68:bd:43:26:be:25:af:f6:4e:05: cf:9b:f4:72:f5:9e:e5:e8:c6:84:7a:d7:90:57:27: e6:1b:c3:e9:a6:a3:22:e3:94:63:98:51:30:25:99: a1:68:fc:3c:3a:81:4b:ed:e5:f5:70:1a:2e:7f:34: 0b:5e:eb:f9:03:44:20:4b:53:84:e1:40:ed:6c:f9: 47:7b:83:04:6d:aa:35:5a:b9:16:17:01:6b:e4:ac: a5:9d:ef:bd:4a:a5:99:0d:45:f0:c9:82:41:6f:a0: df:64:5f:a1:75:44:ff:cb:9f:38:9c:83:27:9d:8a: 60:77:6f:c5:9b:91:19:92:8e:a8:d2:32:af:e1:d0: df:b2:ca:33:40:cb:e6:b4:2f:ca:7d:87:4a:0b:bd: 39:57:a7:b3:97:a3:5c:59:2d:48:6f:d8:8d:d9:76: 1f:6b:aa:1f:05:29:6d:57:ac:60:8c:0f:21:8d:cb: 15:45:1d:4f:47:05:7a:d5:86:a7:05:c0:4b:2b:4a: 47:92:11:f6:b3:95:23:7a:86:eb:d4:37:2f:8b:60: c8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4D:95:89:8D:CF:7A:A6:1D:62:7A:DE:0A:1A:0F:F4:12:47:2C:53 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/999295ac-d636-4755-94c3-3c615012f6dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:f000::/40 Signature Algorithm: sha256WithRSAEncryption a4:53:5e:d4:f6:52:6d:44:23:75:a6:de:8e:f9:79:aa:f3:fb: 02:8d:15:74:6b:86:e3:5b:cf:47:d0:72:5c:a6:10:f8:28:76: f1:10:68:fe:dd:86:5c:17:3a:66:dc:ea:e0:3a:d4:52:0b:18: 0a:c6:29:78:6c:40:1f:58:de:14:2b:b5:be:96:71:6f:6d:b3: 87:40:61:8a:40:db:e9:a3:4f:9a:b6:28:61:59:19:6c:a1:06: fd:1e:de:59:8e:c3:2d:6b:90:76:1c:8c:b3:71:62:fd:77:da: 02:a5:0f:c1:40:29:83:b9:7d:1b:b6:09:ec:2d:4d:9c:ad:84: 20:7d:20:11:b1:40:9d:1b:72:ca:c3:bb:98:d5:3f:42:a0:49: 1e:a8:70:b1:92:b7:1f:76:d5:da:ed:59:fe:67:bd:69:83:1d: c8:29:a0:c3:1c:0c:2c:83:cd:d0:1f:6f:4c:85:28:51:30:a8: e2:48:3a:67:79:44:09:32:ba:f0:d2:72:d9:5d:45:45:9a:44: ed:6b:78:0e:06:66:fe:72:a5:dd:78:42:44:c5:2f:16:aa:86: 1e:10:3f:b9:a8:e6:ad:6f:8d:14:98:71:2e:68:63:aa:d8:b9: 21:9f:69:76:d8:c1:cd:88:48:7e:86:31:dd:e3:76:d7:0d:fd: b0:88:58:c4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYOBS5w6LE5iDcMXHPGulszb5wB4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkyMDAwMjExNFoX DTI1MTAyNTIzNTk1OVowejFJMEcGA1UEBRNAYjZjNDRiMWU2ZmVhMjI4YmEyZmI4 MDNkMjJmOTk1MzE5ZWEzNWUxNzZlYTUyMWY5YmM4MDdlMWEwNTJhMWU4ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BlG90t90dwz3ysphjd5kU9WJwpy 2vYk+hg3nDTz4sCmRqe1Is8o3Gv7kp8NM0Oe8Gi9Qya+Ja/2TgXPm/Ry9Z7l6MaE eteQVyfmG8PppqMi45RjmFEwJZmhaPw8OoFL7eX1cBoufzQLXuv5A0QgS1OE4UDt bPlHe4MEbao1WrkWFwFr5Kylne+9SqWZDUXwyYJBb6DfZF+hdUT/y584nIMnnYpg d2/Fm5EZko6o0jKv4dDfssozQMvmtC/KfYdKC705V6ezl6NcWS1Ib9iN2XYfa6of BSltV6xgjA8hjcsVRR1PRwV61YanBcBLK0pHkhH2s5Ujeobr1Dcvi2DI7QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMZNlYmNz3qmHWJ63goaD/QSRyxTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5OTI5NWFjLWQ2MzYtNDc1NS05NGMzLTNjNjE1MDEyZjZkZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoPAwDQYJKoZIhvcNAQELBQADggEBAKRTXtT2Um1EI3Wm3o75 earz+wKNFXRrhuNbz0fQclymEPgodvEQaP7dhlwXOmbc6uA61FILGArGKXhsQB9Y 3hQrtb6WcW9ts4dAYYpA2+mjT5q2KGFZGWyhBv0e3lmOwy1rkHYcjLNxYv132gKl D8FAKYO5fRu2CewtTZythCB9IBGxQJ0bcsrDu5jVP0KgSR6ocLGStx921drtWf5n vWmDHcgpoMMcDCyDzdAfb0yFKFEwqOJIOmd5RAkyuvDSctldRUWaRO1reA4GZv5y pd14QkTFLxaqhh4QP7mo5q1vjRSYcS5oY6rYuSGfaXbYwc2ISH6GMd3jdtcN/bCI WMQ= -----END CERTIFICATE-----Generated at Wed Oct 8 23:16:19 2025 by rpki-client