$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f173998-8628-44e7-98de-49838888c622.roa File: 0f173998-8628-44e7-98de-49838888c622.roa (raw, json) Hash identifier: WUzNjfdsbyjpQIY5AKvCVCApdg0ulJH3+KpEHSKqsOA= Subject key identifier: F4:D0:FF:5E:ED:45:DE:09:38:AE:B4:1C:26:FF:0A:B3:23:97:56:74 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42F9B58A4960D4292C0E2BF7E4905ABA6F114263 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f173998-8628-44e7-98de-49838888c622.roa Signing time: Tue 14 Oct 2025 00:10:11 +0000 ROA not before: Tue 14 Oct 2025 00:10:11 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f9:b5:8a:49:60:d4:29:2c:0e:2b:f7:e4:90:5a:ba:6f:11:42:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 14 00:10:11 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=6cbc3065ecea2fb8ccc5a23c7cfd63c499bf19afaa1c08f9a9531c8f6dbb939d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:44:8f:9b:ca:ad:2a:51:21:44:74:e9:2b: f0:13:d0:f8:0a:64:7a:dc:d6:d9:15:82:3e:04:4c: f5:22:20:43:d0:55:8a:ed:ed:fe:d7:c1:07:da:93: 79:67:9d:83:c1:8e:92:7e:96:31:3f:94:46:ed:d9: 5b:aa:db:fa:2c:d6:6d:63:25:95:76:06:75:f0:9d: c6:c2:10:02:ae:56:b9:5f:46:fa:20:52:64:3f:fe: 99:d2:13:9f:a4:27:df:d7:6d:77:b8:21:07:18:38: 5a:37:0e:4e:89:bd:27:6d:c8:74:5f:c1:4c:76:c9: 16:d0:2d:db:e9:2c:04:00:a2:a7:f9:64:91:ca:96: 2b:45:18:06:be:4e:27:2a:2c:09:41:08:5f:02:ff: 01:bb:f5:c9:51:1f:8b:7a:a0:8a:ab:4e:6c:e4:10: fc:c7:e2:4f:74:e5:f8:ac:00:25:be:4a:bd:40:87: d2:39:c0:47:56:9f:9a:fb:72:0b:e8:91:fd:e1:09: 51:6b:f7:5e:17:81:f5:d5:da:61:98:f2:36:e1:78: 80:62:0b:c5:80:01:78:24:2c:19:7d:b1:2d:b8:5f: 03:87:10:91:51:24:f0:a9:e8:15:b5:62:f0:73:f7: 2c:66:e1:95:01:9b:d1:0d:6c:96:78:dc:de:a0:27: 47:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D0:FF:5E:ED:45:DE:09:38:AE:B4:1C:26:FF:0A:B3:23:97:56:74 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f173998-8628-44e7-98de-49838888c622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:c800::/40 Signature Algorithm: sha256WithRSAEncryption 26:57:f2:bb:db:d6:28:c1:4d:af:c1:46:86:52:39:fa:21:c3: f8:00:bd:a4:04:f0:27:14:47:2d:21:34:1b:94:06:b3:0b:06: a6:a5:55:3a:58:19:39:e8:06:6d:e0:d5:95:1d:eb:63:f1:2c: 1b:d9:a4:b3:b9:41:fc:41:05:16:82:a6:7b:90:dd:42:84:f6: 7c:fb:be:00:de:6e:e7:e0:2c:5c:eb:ef:ce:b4:27:f6:73:be: 42:d2:dd:97:a9:6e:d9:a4:4d:0b:3b:72:e1:c2:d6:83:ac:2c: 74:bf:00:e5:60:c9:18:3f:f0:af:1b:0a:f1:7d:7d:d2:41:70: e7:8f:b4:ca:93:4c:ac:77:83:2e:d6:76:63:87:b9:15:7e:e8: 86:12:02:5e:e7:ba:79:d2:70:0f:ee:bc:3d:61:34:1d:da:d2: bd:b5:9a:52:27:e8:62:ea:14:e1:8f:f6:10:cf:eb:5c:38:06: e7:47:c2:1d:ad:4a:5d:f1:b2:0c:30:74:40:d5:12:bf:ca:07: 7c:38:af:2e:7c:a4:84:bf:7f:7e:00:81:79:9b:2a:8d:16:10: 50:ac:e8:6a:3c:37:f7:50:c2:a4:9d:87:40:9b:0f:27:08:b9: 20:ff:22:71:90:cb:91:bd:db:7e:e9:75:29:54:dc:99:be:ff: 3b:e3:8a:9e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQvm1iklg1CksDiv35JBaum8RQmMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNDAwMTAxMVoX DTI1MTExODIzNTk1OVowejFJMEcGA1UEBRNANmNiYzMwNjVlY2VhMmZiOGNjYzVh MjNjN2NmZDYzYzQ5OWJmMTlhZmFhMWMwOGY5YTk1MzFjOGY2ZGJiOTM5ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9VEj5vKrSpRIUR06SvwE9D4CmR6 3NbZFYI+BEz1IiBD0FWK7e3+18EH2pN5Z52DwY6SfpYxP5RG7dlbqtv6LNZtYyWV dgZ18J3GwhACrla5X0b6IFJkP/6Z0hOfpCff1213uCEHGDhaNw5Oib0nbch0X8FM dskW0C3b6SwEAKKn+WSRypYrRRgGvk4nKiwJQQhfAv8Bu/XJUR+LeqCKq05s5BD8 x+JPdOX4rAAlvkq9QIfSOcBHVp+a+3IL6JH94QlRa/deF4H11dphmPI24XiAYgvF gAF4JCwZfbEtuF8DhxCRUSTwqegVtWLwc/csZuGVAZvRDWyWeNzeoCdH5QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPTQ/17tRd4JOK60HCb/CrMjl1Z0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmMTczOTk4LTg2MjgtNDRlNy05OGRlLTQ5ODM4ODg4YzYyMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOMgwDQYJKoZIhvcNAQELBQADggEBACZX8rvb1ijBTa/BRoZS Ofohw/gAvaQE8CcURy0hNBuUBrMLBqalVTpYGTnoBm3g1ZUd62PxLBvZpLO5QfxB BRaCpnuQ3UKE9nz7vgDebufgLFzr7860J/ZzvkLS3ZepbtmkTQs7cuHC1oOsLHS/ AOVgyRg/8K8bCvF9fdJBcOePtMqTTKx3gy7WdmOHuRV+6IYSAl7nunnScA/uvD1h NB3a0r21mlIn6GLqFOGP9hDP61w4BudHwh2tSl3xsgwwdEDVEr/KB3w4ry58pIS/ f34AgXmbKo0WEFCs6Go8N/dQwqSdh0CbDycIuSD/InGQy5G9237pdSlU3Jm+/zvj ip4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:03:44 2025 by rpki-client