$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bc4defb3-3b7f-41b0-9b47-56b4d0f50806.roa File: bc4defb3-3b7f-41b0-9b47-56b4d0f50806.roa (raw, json) Hash identifier: xsynqLKoR61ur6COucAOUsGnDD0BwY/rJV+7/R7G5WE= Subject key identifier: 8A:32:93:A2:BB:31:7A:8A:12:49:BC:1D:79:29:1B:5A:E1:5C:15:8A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 291E01F28C3886EDF81D4A4F699260B6E320B2A5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bc4defb3-3b7f-41b0-9b47-56b4d0f50806.roa Signing time: Fri 26 Sep 2025 00:01:41 +0000 ROA not before: Fri 26 Sep 2025 00:01:41 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1e:01:f2:8c:38:86:ed:f8:1d:4a:4f:69:92:60:b6:e3:20:b2:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 26 00:01:41 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=7ea50dc57577a74b1d85a539bf507f67ccedbdd808fdf975e78a901987e88707, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:7c:fd:5d:60:2b:fd:10:b2:35:e6:44:b5: f7:0b:a8:81:1b:78:2b:96:ca:82:d6:b5:70:41:c0: 33:45:b8:b1:cc:98:13:06:79:37:f8:63:8b:d6:e3: 0f:de:39:5f:cc:92:46:c0:86:38:2b:6d:d2:b7:54: 4f:7e:4b:42:f6:57:31:65:df:db:a4:29:cf:d4:24: 81:0a:14:f8:44:eb:72:85:bc:ac:6d:bd:f7:e1:ca: f4:d8:28:a3:c8:7f:6e:e7:57:e4:e0:df:69:62:87: f3:ba:70:60:e0:7b:17:bf:86:db:4e:57:aa:56:cd: 26:33:9a:b0:d2:21:4d:6d:36:11:44:57:a5:cf:f9: 6d:1f:96:ef:67:62:46:05:04:a0:7a:51:5e:c2:f2: 3f:6f:95:ba:ae:ee:b5:03:4f:56:1c:9b:b1:85:7c: 0d:2e:d8:04:43:dd:8f:2c:3c:a2:fe:59:41:ec:7d: 48:a6:2c:33:1e:f8:6a:45:cf:cd:4b:f0:97:82:8b: 77:d9:b2:fe:27:f4:d1:0a:31:1b:cf:c5:c4:ea:e4: 3d:0a:dd:da:51:85:8f:22:c4:9a:1a:eb:26:fc:df: 28:39:05:fe:98:12:89:fc:c1:71:4a:0c:e2:5a:5e: b3:33:e4:32:4b:29:06:60:b1:29:a7:6e:d0:5f:50: 8a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:32:93:A2:BB:31:7A:8A:12:49:BC:1D:79:29:1B:5A:E1:5C:15:8A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bc4defb3-3b7f-41b0-9b47-56b4d0f50806.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:a000::/40 Signature Algorithm: sha256WithRSAEncryption ac:a5:e1:e2:e2:16:cc:a1:9a:21:ed:aa:cd:90:22:68:ab:e0: b0:be:2c:04:8a:75:b9:49:82:87:8e:c2:13:03:95:66:56:1b: 78:01:9d:ca:f9:58:34:99:15:64:58:05:be:30:52:69:a5:ad: 38:e9:ba:34:5d:ba:64:a1:1b:50:b9:cc:70:0d:0f:b8:81:e4: 6c:c1:49:38:e4:74:22:7c:16:44:a2:4f:16:e8:16:23:32:31: 1e:b5:9b:ec:be:47:97:e2:b9:e1:4b:06:b0:a3:11:e6:8b:00: ad:1a:f2:24:8f:d1:b3:d7:d6:90:aa:b4:a5:85:a1:4d:00:6a: 8a:bd:53:93:cd:e2:78:9a:20:2a:3c:f8:af:f1:70:18:20:d8: b7:3c:7b:99:00:11:ce:a9:38:04:4c:8c:3e:75:d1:61:49:ab: ed:50:97:05:ad:17:89:46:7b:91:6f:11:84:68:b8:a8:91:e0: e2:0e:18:d9:02:1b:fe:64:04:26:bf:fc:20:2e:c6:be:66:78: 25:6b:50:db:a3:2e:d2:9d:f5:7d:fd:3f:9e:6c:91:3e:3d:a2: f3:e0:3c:0a:b2:a4:7b:35:d6:3d:e1:42:15:49:41:13:55:52: 20:45:13:a9:49:19:22:cc:cf:54:fc:cf:1a:bd:04:77:8a:e4: f7:31:a8:31 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKR4B8ow4hu34HUpPaZJgtuMgsqUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkyNjAwMDE0MVoX DTI1MTAzMTIzNTk1OVowejFJMEcGA1UEBRNAN2VhNTBkYzU3NTc3YTc0YjFkODVh NTM5YmY1MDdmNjdjY2VkYmRkODA4ZmRmOTc1ZTc4YTkwMTk4N2U4ODcwNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIt8/V1gK/0QsjXmRLX3C6iBG3gr lsqC1rVwQcAzRbixzJgTBnk3+GOL1uMP3jlfzJJGwIY4K23St1RPfktC9lcxZd/b pCnP1CSBChT4ROtyhbysbb334cr02CijyH9u51fk4N9pYofzunBg4HsXv4bbTleq Vs0mM5qw0iFNbTYRRFelz/ltH5bvZ2JGBQSgelFewvI/b5W6ru61A09WHJuxhXwN LtgEQ92PLDyi/llB7H1IpiwzHvhqRc/NS/CXgot32bL+J/TRCjEbz8XE6uQ9Ct3a UYWPIsSaGusm/N8oOQX+mBKJ/MFxSgziWl6zM+QySykGYLEpp27QX1CKUQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIoyk6K7MXqKEkm8HXkpG1rhXBWKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JjNGRlZmIzLTNiN2YtNDFiMC05YjQ3LTU2YjRkMGY1MDgwNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba76AwDQYJKoZIhvcNAQELBQADggEBAKyl4eLiFsyhmiHtqs2Q Imir4LC+LASKdblJgoeOwhMDlWZWG3gBncr5WDSZFWRYBb4wUmmlrTjpujRdumSh G1C5zHAND7iB5GzBSTjkdCJ8FkSiTxboFiMyMR61m+y+R5fiueFLBrCjEeaLAK0a 8iSP0bPX1pCqtKWFoU0Aaoq9U5PN4niaICo8+K/xcBgg2Lc8e5kAEc6pOARMjD51 0WFJq+1QlwWtF4lGe5FvEYRouKiR4OIOGNkCG/5kBCa//CAuxr5meCVrUNujLtKd 9X39P55skT49ovPgPAqypHs11j3hQhVJQRNVUiBFE6lJGSLMz1T8zxq9BHeK5Pcx qDE= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:09 2025 by rpki-client