$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aa3add1b-91f1-431b-8c45-6d1d69495d8c.roa File: aa3add1b-91f1-431b-8c45-6d1d69495d8c.roa (raw, json) Hash identifier: jCMPxapK/6G9z+0iuIxVxm/kTRwmYZOETGeBDj0xX5I= Subject key identifier: 24:05:D6:41:6F:E7:D0:5A:5D:88:B0:D5:E6:9F:5A:11:F7:65:3A:E2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 049456B87855A19AA94C074DB7ADE2408D4AE455 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aa3add1b-91f1-431b-8c45-6d1d69495d8c.roa Signing time: Sat 04 Oct 2025 00:10:24 +0000 ROA not before: Sat 04 Oct 2025 00:10:24 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:94:56:b8:78:55:a1:9a:a9:4c:07:4d:b7:ad:e2:40:8d:4a:e4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:10:24 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=19ee4112a42034d8088ebe68d4f985c24f005abbcf22b891b8cf7b756670a837, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:90:90:3c:b8:41:a2:94:40:a4:7a:3e:99: 31:98:4a:67:9d:58:b9:35:4a:15:e2:b1:51:84:57: 56:c8:9d:a4:a3:27:3c:d6:de:6b:8a:1b:4c:b0:6f: 44:bd:dc:61:71:89:c6:8d:ca:89:5b:d6:86:5b:4d: ab:f9:4a:ae:3e:e0:9d:ce:09:af:8f:5c:83:92:ef: cf:e9:1c:90:0f:2b:0d:f2:7f:0d:4b:a4:0b:97:9a: 60:75:8b:6e:5d:03:5e:a7:e6:99:2f:81:38:24:03: a8:40:32:9c:f8:80:cb:b4:87:df:bc:15:b4:9f:32: 8f:94:f0:4e:64:62:b3:17:dc:a4:0e:c3:ff:5a:c1: 8e:23:3a:fb:ed:98:3b:df:a0:83:86:89:29:cc:12: ab:0b:44:43:40:a9:dc:76:3d:31:d7:38:77:c7:f4: 1a:2e:bc:c4:d1:07:22:44:4d:56:77:e9:dd:6d:7f: 8b:75:c9:58:4e:ff:78:fe:ff:f0:76:1f:05:9f:07: e4:5a:08:b6:b8:a2:c8:43:65:75:a0:8a:64:00:34: e6:62:1a:46:cb:38:70:0a:44:64:b2:60:20:8b:42: 37:08:0d:24:19:cf:46:69:a7:bb:24:53:ca:ba:c1: b9:69:f4:be:1e:be:00:d5:71:0c:a9:bb:b9:32:c8: 55:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:05:D6:41:6F:E7:D0:5A:5D:88:B0:D5:E6:9F:5A:11:F7:65:3A:E2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aa3add1b-91f1-431b-8c45-6d1d69495d8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:8000::/40 Signature Algorithm: sha256WithRSAEncryption 1a:e5:f2:ff:f1:d8:23:92:61:99:07:53:5a:bf:36:ac:b6:c5: 13:67:ef:57:0c:3d:a4:75:ac:a9:f1:3f:af:13:8d:eb:78:b3: 06:1d:4d:75:fa:96:9d:2b:3d:ca:14:3c:7d:ed:81:6b:37:08: d4:13:53:fd:66:da:bf:6e:28:94:7b:7d:d0:32:e9:90:6e:61: 68:a7:4f:64:39:25:96:2b:fa:64:bc:1c:f7:a7:1b:48:54:c1: dd:c5:55:21:62:d0:2d:7e:c5:0b:b9:ad:2c:a4:33:74:da:06: 0f:42:7a:d1:96:cc:b9:10:ba:8a:d8:86:b1:43:75:e4:6d:72: 86:10:4b:5f:34:9e:40:5a:d0:85:7a:92:71:aa:92:de:9a:36: 79:96:7b:08:c9:a4:55:8c:35:c6:f1:23:50:15:01:18:b4:84: a9:54:f1:9b:15:89:5d:5b:49:a1:25:0c:b1:8d:b1:f1:68:b2: 65:64:b2:60:86:7f:c8:c4:3d:94:25:0f:63:0c:d0:cd:d0:60: 8d:3d:21:ea:83:9c:c2:50:e9:2a:5f:8d:30:59:d4:3d:3b:2d: 98:be:bf:ed:17:4f:1a:40:e6:fc:ac:bb:7e:17:97:38:cd:75: 20:2a:b8:bd:2e:13:75:42:e1:44:c2:d4:42:1b:b6:38:f3:53: 73:07:18:c0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBJRWuHhVoZqpTAdNt63iQI1K5FUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNDAwMTAyNFoX DTI1MTEwODIzNTk1OVowejFJMEcGA1UEBRNAMTllZTQxMTJhNDIwMzRkODA4OGVi ZTY4ZDRmOTg1YzI0ZjAwNWFiYmNmMjJiODkxYjhjZjdiNzU2NjcwYTgzNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7SQkDy4QaKUQKR6PpkxmEpnnVi5 NUoV4rFRhFdWyJ2koyc81t5rihtMsG9EvdxhcYnGjcqJW9aGW02r+UquPuCdzgmv j1yDku/P6RyQDysN8n8NS6QLl5pgdYtuXQNep+aZL4E4JAOoQDKc+IDLtIffvBW0 nzKPlPBOZGKzF9ykDsP/WsGOIzr77Zg736CDhokpzBKrC0RDQKncdj0x1zh3x/Qa LrzE0QciRE1Wd+ndbX+LdclYTv94/v/wdh8FnwfkWgi2uKLIQ2V1oIpkADTmYhpG yzhwCkRksmAgi0I3CA0kGc9Gaae7JFPKusG5afS+Hr4A1XEMqbu5MshVbQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCQF1kFv59BaXYiw1eafWhH3ZTriMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FhM2FkZDFiLTkxZjEtNDMxYi04YzQ1LTZkMWQ2OTQ5NWQ4Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba84AwDQYJKoZIhvcNAQELBQADggEBABrl8v/x2COSYZkHU1q/ Nqy2xRNn71cMPaR1rKnxP68Tjet4swYdTXX6lp0rPcoUPH3tgWs3CNQTU/1m2r9u KJR7fdAy6ZBuYWinT2Q5JZYr+mS8HPenG0hUwd3FVSFi0C1+xQu5rSykM3TaBg9C etGWzLkQuorYhrFDdeRtcoYQS180nkBa0IV6knGqkt6aNnmWewjJpFWMNcbxI1AV ARi0hKlU8ZsViV1bSaElDLGNsfFosmVksmCGf8jEPZQlD2MM0M3QYI09IeqDnMJQ 6SpfjTBZ1D07LZi+v+0XTxpA5vysu34XlzjNdSAquL0uE3VC4UTC1EIbtjjzU3MH GMA= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:03 2025 by rpki-client