$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/09befdff-9a96-4bae-899f-ded4a020e80d.roa File: 09befdff-9a96-4bae-899f-ded4a020e80d.roa (raw, json) Hash identifier: 0LaxZevRqSlAOZWWve4CWPW8uf51wThMjJH4mlDRTDs= Subject key identifier: 0E:C9:F3:6C:2F:2C:9F:FF:87:71:07:28:0C:C0:94:58:8F:96:A3:76 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3E39C6CCF6FD311B9F88723442E1C3F3C4AFB6A6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/09befdff-9a96-4bae-899f-ded4a020e80d.roa Signing time: Tue 14 Oct 2025 00:10:50 +0000 ROA not before: Tue 14 Oct 2025 00:10:50 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:39:c6:cc:f6:fd:31:1b:9f:88:72:34:42:e1:c3:f3:c4:af:b6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 14 00:10:50 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=7151515f9803cc903dc5b0ab765f3a4b5d4c0f7896a71a76b556a1b23ee4d367, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:a5:3e:b0:d5:e0:ee:1e:13:e5:a0:b3:1a: 40:55:e1:b5:db:d2:71:39:e1:e4:96:93:ee:e6:9d: da:b3:70:fe:08:fe:99:02:07:17:78:be:4e:dd:e0: 82:8d:84:09:bc:4e:8b:cc:b1:67:95:a9:1c:69:ce: e2:21:2d:80:3f:d0:79:ac:68:f7:75:70:a2:ea:a6: 1d:34:da:de:2b:2a:c6:03:cd:b0:a5:64:0f:c2:44: 83:5f:e1:5a:33:33:66:1e:9a:6a:0a:ba:e6:82:54: 0f:54:71:39:be:4c:83:f3:f6:8e:b7:ec:a7:6c:48: c7:1c:af:82:e3:92:e2:70:70:68:07:9b:49:f0:e0: 7c:d6:54:c9:ec:58:0a:72:eb:4f:23:6f:9c:d5:e3: e8:4d:69:d0:4c:4a:38:3b:30:bd:e8:a7:01:e7:50: 89:a8:89:20:fe:a5:b4:34:a6:0e:4a:7d:32:8c:1b: 01:b2:19:a4:56:8c:f3:55:d9:c2:f9:65:7b:7a:e9: 88:9a:53:5e:80:25:e8:c0:3b:bd:c2:1b:dc:90:ef: fd:42:f8:9c:b7:f2:e0:83:02:75:42:b6:4f:71:64: 7f:a6:36:5d:74:a1:f8:20:cd:04:ff:a0:9c:29:9b: 6d:c6:03:62:43:1d:b3:e0:9c:9f:f4:c6:bc:ee:41: f6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C9:F3:6C:2F:2C:9F:FF:87:71:07:28:0C:C0:94:58:8F:96:A3:76 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/09befdff-9a96-4bae-899f-ded4a020e80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:6000::/40 Signature Algorithm: sha256WithRSAEncryption a6:0e:01:fd:37:36:e0:51:ec:78:ef:69:3c:3c:80:a4:fc:cb: bd:b3:bf:07:da:f5:dd:b5:2f:21:9b:6a:a9:79:d2:f8:a9:35: b3:bd:88:18:07:93:b5:5d:f5:6d:d2:77:78:c6:ff:cf:76:24: 08:db:38:0f:1d:92:7b:24:06:1d:77:5b:a3:a5:4c:85:cf:1c: f3:08:9d:be:46:45:d4:43:65:9d:74:06:81:a3:bd:65:12:d6: b2:df:1f:c1:fb:78:a6:be:a7:18:77:36:f5:45:05:ac:ff:ad: 58:8b:11:ff:37:f4:8d:88:19:ee:e3:24:d7:e1:b7:1a:f1:41: 10:ce:ed:a6:9b:08:3a:53:b3:2b:21:03:90:0c:82:d0:54:36: aa:f2:34:b8:a2:92:09:9b:48:fc:7a:3f:a1:57:e0:71:25:d7: e1:25:52:b5:35:64:5a:75:c1:5d:34:53:a2:06:f9:5b:03:ea: 24:8c:04:4c:57:76:6e:2a:d7:9b:30:30:90:20:76:27:47:6d: ee:66:7f:7e:a4:a6:b5:0e:09:78:c6:5c:27:4e:82:20:6c:77: f5:82:50:36:fc:44:09:cb:1b:d1:99:b6:c0:51:e9:ad:f3:16: 43:11:f6:48:76:8c:c9:d0:a1:08:73:90:c0:b3:fe:0f:f5:bb: 7a:c9:76:0c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPjnGzPb9MRufiHI0QuHD88SvtqYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNDAwMTA1MFoX DTI1MTExODIzNTk1OVowejFJMEcGA1UEBRNANzE1MTUxNWY5ODAzY2M5MDNkYzVi MGFiNzY1ZjNhNGI1ZDRjMGY3ODk2YTcxYTc2YjU1NmExYjIzZWU0ZDM2NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpmlPrDV4O4eE+WgsxpAVeG129Jx OeHklpPu5p3as3D+CP6ZAgcXeL5O3eCCjYQJvE6LzLFnlakcac7iIS2AP9B5rGj3 dXCi6qYdNNreKyrGA82wpWQPwkSDX+FaMzNmHppqCrrmglQPVHE5vkyD8/aOt+yn bEjHHK+C45LicHBoB5tJ8OB81lTJ7FgKcutPI2+c1ePoTWnQTEo4OzC96KcB51CJ qIkg/qW0NKYOSn0yjBsBshmkVozzVdnC+WV7eumImlNegCXowDu9whvckO/9Qvic t/LggwJ1QrZPcWR/pjZddKH4IM0E/6CcKZttxgNiQx2z4Jyf9Ma87kH2rQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFA7J82wvLJ//h3EHKAzAlFiPlqN2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA5YmVmZGZmLTlhOTYtNGJhZS04OTlmLWRlZDRhMDIwZTgwZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+2AwDQYJKoZIhvcNAQELBQADggEBAKYOAf03NuBR7HjvaTw8 gKT8y72zvwfa9d21LyGbaql50vipNbO9iBgHk7Vd9W3Sd3jG/892JAjbOA8dknsk Bh13W6OlTIXPHPMInb5GRdRDZZ10BoGjvWUS1rLfH8H7eKa+pxh3NvVFBaz/rViL Ef839I2IGe7jJNfhtxrxQRDO7aabCDpTsyshA5AMgtBUNqryNLiikgmbSPx6P6FX 4HEl1+ElUrU1ZFp1wV00U6IG+VsD6iSMBExXdm4q15swMJAgdidHbe5mf36kprUO CXjGXCdOgiBsd/WCUDb8RAnLG9GZtsBR6a3zFkMR9kh2jMnQoQhzkMCz/g/1u3rJ dgw= -----END CERTIFICATE-----Generated at Mon Oct 20 07:20:13 2025 by rpki-client