$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/efe1334d-71f0-409b-b70a-e650ab1bb41d.roa File: efe1334d-71f0-409b-b70a-e650ab1bb41d.roa (raw, json) Hash identifier: 8KdjAHmeNGDDVXKI3yOP8x64WnHwCrnh1MVgGaGp9x8= Subject key identifier: 46:03:8A:2C:06:DA:16:F4:B2:64:F4:F1:D7:D6:06:F7:E4:7B:BE:D7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 64DA5F420B6DE55B8DC6859F9C974FB17DEE0701 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/efe1334d-71f0-409b-b70a-e650ab1bb41d.roa Signing time: Sat 04 Oct 2025 00:10:41 +0000 ROA not before: Sat 04 Oct 2025 00:10:41 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:b040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:da:5f:42:0b:6d:e5:5b:8d:c6:85:9f:9c:97:4f:b1:7d:ee:07:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:10:41 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=c475cf70c37e5baba2218043604ab6d7577bf7b5728dd6b10a3b8de92703e6b9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:90:95:86:15:b7:ba:a1:b5:1a:3d:6c:c7:ea: 1a:f8:df:26:ec:81:0a:dd:05:86:b9:d6:1f:fb:e9: e8:4a:ce:61:08:06:a8:e0:cc:1c:27:93:7d:ca:dc: 92:90:e9:15:88:cf:d0:d7:20:e5:f5:8a:f5:4f:7b: fa:c9:6a:ec:3e:24:27:b5:cb:f6:3a:01:09:ae:df: 6c:66:91:3f:ba:da:87:3d:12:63:91:e5:9d:f5:f7: aa:3d:83:aa:04:46:70:83:7d:3b:f7:29:2e:dc:d2: 3a:b9:bc:d2:90:7b:82:92:d1:1b:51:5c:5c:a0:d8: 71:86:2e:23:2e:a8:cd:5a:87:3a:6b:ef:04:9f:a7: bf:be:ed:cb:b2:74:59:22:8c:da:d4:bc:be:d9:5e: 56:65:b7:99:e6:77:93:18:ad:d8:5f:86:d0:f7:77: 42:8e:eb:68:83:44:56:85:bd:de:62:4b:80:c9:1c: 33:58:12:62:3e:8a:d1:d0:17:a4:4f:78:00:cb:3e: 49:f4:4a:5a:93:7f:e8:9c:45:5a:28:c9:b0:55:8e: 1d:44:37:bf:58:4a:f8:bc:84:35:13:ba:9f:e5:2a: 1b:c0:23:4c:f4:41:99:cd:5a:ec:3d:e6:7c:c0:23: e7:13:db:66:ae:36:ad:dc:89:09:11:c3:18:30:32: 51:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:03:8A:2C:06:DA:16:F4:B2:64:F4:F1:D7:D6:06:F7:E4:7B:BE:D7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/efe1334d-71f0-409b-b70a-e650ab1bb41d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:b040::/46 Signature Algorithm: sha256WithRSAEncryption 5a:c8:5f:97:59:28:c5:49:de:82:91:4e:b2:c3:12:6b:89:ba: 5f:f9:68:6d:7d:5b:4c:10:c2:d4:08:6a:ce:79:24:73:61:e0: 4a:86:44:d0:ee:8d:c8:6c:cf:ae:09:82:83:72:75:88:8a:59: 01:e9:51:2b:7b:e3:e3:ce:31:b8:66:86:55:07:a0:f6:b9:45: 43:f8:e7:37:82:12:bd:24:e8:ba:af:df:90:a8:a9:d9:4a:f0: 59:99:1d:95:e6:1f:e4:1b:14:a7:c0:fc:ae:5a:73:af:e5:66: 89:6e:40:13:b6:21:72:5b:06:78:2f:35:47:02:59:d2:ba:3a: 76:e5:d9:ca:50:6a:3c:f0:40:64:81:26:24:b0:d7:60:ed:dc: 2f:16:9e:6d:97:39:33:a9:48:cb:99:a8:03:cc:d7:5c:33:d3: 3a:54:3c:99:3b:e5:d3:08:67:a3:aa:fb:83:d6:1f:ce:2f:e9: 39:e4:10:a6:73:96:d2:f9:76:fe:17:fb:ab:da:32:c1:e0:3b: b3:94:c1:54:eb:6e:85:a3:a0:3b:f1:36:ed:b3:a3:4a:8c:ed: b5:0c:71:b0:72:7c:35:f2:57:e4:10:20:77:6f:b9:2e:47:cc: 41:31:d3:1c:07:0d:a5:98:6d:38:6e:78:a6:fd:e7:dd:24:31: fa:68:07:f0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZNpfQgtt5VuNxoWfnJdPsX3uBwEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNDAwMTA0MVoX DTI1MTEwODIzNTk1OVowejFJMEcGA1UEBRNAYzQ3NWNmNzBjMzdlNWJhYmEyMjE4 MDQzNjA0YWI2ZDc1NzdiZjdiNTcyOGRkNmIxMGEzYjhkZTkyNzAzZTZiOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5CVhhW3uqG1Gj1sx+oa+N8m7IEK 3QWGudYf++noSs5hCAao4MwcJ5N9ytySkOkViM/Q1yDl9Yr1T3v6yWrsPiQntcv2 OgEJrt9sZpE/utqHPRJjkeWd9feqPYOqBEZwg3079yku3NI6ubzSkHuCktEbUVxc oNhxhi4jLqjNWoc6a+8En6e/vu3LsnRZIoza1Ly+2V5WZbeZ5neTGK3YX4bQ93dC jutog0RWhb3eYkuAyRwzWBJiPorR0BekT3gAyz5J9Epak3/onEVaKMmwVY4dRDe/ WEr4vIQ1E7qf5SobwCNM9EGZzVrsPeZ8wCPnE9tmrjat3IkJEcMYMDJRtwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEYDiiwG2hb0smT08dfWBvfke77XMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VmZTEzMzRkLTcxZjAtNDA5Yi1iNzBhLWU2NTBhYjFiYjQxZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba87BAMA0GCSqGSIb3DQEBCwUAA4IBAQBayF+XWSjFSd6CkU6y wxJribpf+WhtfVtMEMLUCGrOeSRzYeBKhkTQ7o3IbM+uCYKDcnWIilkB6VEre+Pj zjG4ZoZVB6D2uUVD+Oc3ghK9JOi6r9+QqKnZSvBZmR2V5h/kGxSnwPyuWnOv5WaJ bkATtiFyWwZ4LzVHAlnSujp25dnKUGo88EBkgSYksNdg7dwvFp5tlzkzqUjLmagD zNdcM9M6VDyZO+XTCGejqvuD1h/OL+k55BCmc5bS+Xb+F/ur2jLB4DuzlMFU626F o6A78Tbts6NKjO21DHGwcnw18lfkECB3b7kuR8xBMdMcBw2lmG04bnim/efdJDH6 aAfw -----END CERTIFICATE-----Generated at Thu Oct 9 01:10:08 2025 by rpki-client