$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa File: 0f3544c3-90af-45ac-b6c1-f680a3230f34.roa (raw, json) Hash identifier: ryiTP2P/TTQrRiW8EjzTBVV1tFkEfg8nPraQ6MA3ENM= Subject key identifier: EC:E4:52:80:34:6A:14:D2:AF:97:43:A9:D6:15:B1:DB:0A:F4:CE:9D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 319D4680B2EF6F858DC6D3CC75CF5F80A538B1B9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa Signing time: Sat 11 Oct 2025 00:20:12 +0000 ROA not before: Sat 11 Oct 2025 00:20:12 +0000 ROA not after: Sat 15 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9d:46:80:b2:ef:6f:85:8d:c6:d3:cc:75:cf:5f:80:a5:38:b1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 11 00:20:12 2025 GMT Not After : Nov 15 23:59:59 2025 GMT Subject: serialNumber=aa722355ad8b5c33604e62b8296477f48b28ef40928a7d27c6e27b9e31f76f52, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:72:e2:ad:ba:0d:db:14:20:71:73:5f:ef:50: 30:e0:f6:9d:57:98:ca:c7:94:b7:69:b0:a7:d8:56: 22:f2:c1:87:81:37:13:a9:43:8d:05:85:c4:f3:cd: ea:e4:02:80:0a:2f:94:4a:6b:dd:d8:4d:dd:2e:15: df:9a:e7:5b:e0:e4:78:f1:c8:94:a4:f4:db:ac:39: e7:3c:d5:1d:f3:69:83:a3:fd:d3:db:5a:2e:09:27: f1:20:0e:30:e4:e2:4a:9a:b5:59:fc:9a:47:41:db: b2:f2:b9:89:f3:7d:41:c5:b0:df:d5:4e:38:cf:d5: c8:84:df:93:90:67:7b:dd:58:11:39:96:d2:f2:64: 1b:b2:39:9e:ee:b4:69:3a:18:db:bf:4c:d1:ac:41: e8:b2:e9:31:96:87:1b:66:62:3e:16:e5:77:09:2f: 02:f5:3f:64:55:7c:0c:31:9c:76:e6:9f:64:da:6c: 09:5e:0b:ca:69:25:a9:e1:2b:e7:24:e9:63:c9:07: 22:e7:cb:63:71:94:ad:8f:dd:d5:66:d6:a7:8e:52: 53:ba:bc:47:53:d4:41:94:72:e5:71:1c:25:99:e1: d7:89:28:ff:04:39:de:53:ff:54:42:52:01:2e:b0: c6:3b:24:b9:0e:a6:6e:f1:e7:43:14:1f:e0:cf:06: 9d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E4:52:80:34:6A:14:D2:AF:97:43:A9:D6:15:B1:DB:0A:F4:CE:9D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:b040::/48 Signature Algorithm: sha256WithRSAEncryption b4:4b:43:db:0e:c7:68:67:26:e9:ee:2e:44:24:8d:eb:bf:b6: 09:0c:68:f9:9f:22:cc:37:cc:37:7f:e8:39:98:eb:2f:1e:a9: a5:b7:64:b1:c0:57:75:b4:49:48:5a:f2:11:ce:60:c1:18:dd: e7:54:60:f3:b4:39:09:83:56:1b:04:53:ea:95:54:88:2a:5c: 40:ac:50:eb:3f:bc:52:aa:c9:60:1b:f3:f5:e0:c5:89:23:d8: 1c:c8:aa:d2:73:84:67:25:88:43:ee:6b:df:b3:a0:5b:2d:04: ce:56:93:14:4d:c7:40:c2:0a:62:77:41:8f:2c:9d:3a:b9:90: 35:21:c8:69:6f:66:ff:53:14:7b:ec:b7:6c:0a:6c:74:51:2b: 49:be:da:bc:5c:7d:dc:cc:62:4f:22:a3:c7:bf:a0:70:11:c7: b8:17:af:b2:a3:22:88:80:24:26:af:56:ce:7e:bc:3d:7b:1b: 6a:3d:7f:b3:05:68:aa:9d:bc:5e:34:8f:e6:1a:a3:87:a8:48: 0f:8b:8b:08:b5:97:5e:26:ce:f3:39:3b:af:02:5a:bf:f8:a0: d4:c3:39:6f:94:6a:ed:e5:96:65:ea:10:7f:98:9b:15:16:9c: 74:10:e4:1d:81:18:22:a5:ad:5e:e3:bb:22:5f:45:f7:16:ff: f4:38:b8:e7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMZ1GgLLvb4WNxtPMdc9fgKU4sbkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMTAwMjAxMloX DTI1MTExNTIzNTk1OVowejFJMEcGA1UEBRNAYWE3MjIzNTVhZDhiNWMzMzYwNGU2 MmI4Mjk2NDc3ZjQ4YjI4ZWY0MDkyOGE3ZDI3YzZlMjdiOWUzMWY3NmY1MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHLirboN2xQgcXNf71Aw4PadV5jK x5S3abCn2FYi8sGHgTcTqUONBYXE883q5AKACi+USmvd2E3dLhXfmudb4OR48ciU pPTbrDnnPNUd82mDo/3T21ouCSfxIA4w5OJKmrVZ/JpHQduy8rmJ831BxbDf1U44 z9XIhN+TkGd73VgROZbS8mQbsjme7rRpOhjbv0zRrEHosukxlocbZmI+FuV3CS8C 9T9kVXwMMZx25p9k2mwJXgvKaSWp4SvnJOljyQci58tjcZStj93VZtanjlJTurxH U9RBlHLlcRwlmeHXiSj/BDneU/9UQlIBLrDGOyS5DqZu8edDFB/gzwadkQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOzkUoA0ahTSr5dDqdYVsdsK9M6dMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmMzU0NGMzLTkwYWYtNDVhYy1iNmMxLWY2ODBhMzIzMGYzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaALBAMA0GCSqGSIb3DQEBCwUAA4IBAQC0S0PbDsdoZybp7i5E JI3rv7YJDGj5nyLMN8w3f+g5mOsvHqmlt2SxwFd1tElIWvIRzmDBGN3nVGDztDkJ g1YbBFPqlVSIKlxArFDrP7xSqslgG/P14MWJI9gcyKrSc4RnJYhD7mvfs6BbLQTO VpMUTcdAwgpid0GPLJ06uZA1Ichpb2b/UxR77LdsCmx0UStJvtq8XH3czGJPIqPH v6BwEce4F6+yoyKIgCQmr1bOfrw9extqPX+zBWiqnbxeNI/mGqOHqEgPi4sItZde Js7zOTuvAlq/+KDUwzlvlGrt5ZZl6hB/mJsVFpx0EOQdgRgipa1e47siX0X3Fv/0 OLjn -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:11 2025 by rpki-client