$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683670-b448-4b46-8e10-aa3682be179f.roa File: 10683670-b448-4b46-8e10-aa3682be179f.roa (raw, json) Hash identifier: LLLLm1cPniWxhXqNmDe/ttAoABiI5A21RcsmvN3e04Y= Subject key identifier: 15:57:27:3F:1C:C0:93:AB:55:43:CC:15:00:D7:64:FC:2F:31:08:D4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A67580E1ECB057BF6F270457B0B81F54D14D057 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683670-b448-4b46-8e10-aa3682be179f.roa Signing time: Mon 13 Oct 2025 15:21:07 +0000 ROA not before: Mon 13 Oct 2025 15:21:07 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:67:58:0e:1e:cb:05:7b:f6:f2:70:45:7b:0b:81:f5:4d:14:d0:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:21:07 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=620c9d0808c2228a7c87d5debccfe63bdcc9100d2d1bdabf2ace224c9e6c73f0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:c8:34:6c:42:7b:56:51:24:79:a5:66:18: 10:f5:e0:43:8b:8d:77:39:fc:79:84:84:41:56:84: 5d:4b:84:1c:99:9b:da:46:9d:ad:a3:5c:0a:a3:9e: 5a:3e:85:af:4f:61:73:a1:1f:b3:d6:89:f2:5f:51: f4:4a:fd:0a:63:d9:a0:2a:27:be:fb:c2:48:59:8c: ff:95:d9:ab:ad:14:74:fe:bf:57:53:20:0b:c4:e8: cd:9e:e7:81:27:e4:fc:ee:ee:89:f1:a2:3f:ec:e2: 90:84:3a:1d:02:7f:b5:d4:b0:9c:b3:c4:01:b1:75: 3f:25:d0:af:ce:92:05:08:6e:3e:0a:90:d3:d6:12: 37:04:ef:64:4f:37:b8:29:d5:11:b4:ee:a3:09:09: 3e:44:19:0f:ea:b1:dc:02:d2:9a:d3:18:92:ba:19: c2:81:9b:40:7a:a8:68:38:61:13:77:b6:2b:97:51: b0:15:ad:b5:77:cf:b3:24:b5:41:51:46:38:f0:3a: 59:c0:24:cc:28:20:82:55:4e:ec:91:41:07:68:f8: 7f:92:d2:ce:25:54:7a:60:07:2d:c5:9e:05:a5:62: e5:cf:5b:56:10:53:f1:48:7f:b4:bb:fe:53:52:d8: a1:2f:33:ac:47:29:6c:b3:d9:78:79:85:9c:14:bf: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:57:27:3F:1C:C0:93:AB:55:43:CC:15:00:D7:64:FC:2F:31:08:D4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683670-b448-4b46-8e10-aa3682be179f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:840::/48 Signature Algorithm: sha256WithRSAEncryption 7c:4c:68:78:f3:58:c8:dd:4c:8b:fe:0a:07:b6:e8:11:91:34: be:52:43:b4:6b:6e:6a:d1:80:97:a9:cc:66:d1:05:35:3c:3f: 4e:3b:2d:4f:fe:d4:db:05:57:71:4e:7e:0c:62:ce:c2:ab:11: c7:08:bf:5d:b3:1f:b1:5e:86:4b:a2:b5:9f:40:5c:3e:cf:73: e2:71:b0:4f:d3:7c:bf:f8:9e:07:b8:92:a1:88:b6:8b:57:e6: 30:95:c1:7b:dd:5b:30:77:93:78:08:83:b0:88:3e:dc:07:26: df:dc:3b:83:b9:80:5d:92:be:84:48:7a:32:bc:03:93:f0:a2: 5d:41:8d:37:94:6a:e2:73:0c:b5:f1:ad:60:41:15:e4:47:57: d8:e3:37:c8:c7:be:da:af:62:c4:0a:dc:ab:d6:6e:a0:5f:f9: 6d:61:ac:1c:3c:55:58:58:19:1f:c4:22:f1:f0:c0:57:51:53: 8f:bc:84:e4:f9:df:83:77:94:3e:fc:50:fe:89:10:27:6a:85: 32:5d:f1:c9:c9:d0:cc:89:5d:75:e7:48:02:fb:31:86:9c:66: 02:a9:f2:25:b0:fe:f4:0f:49:55:14:46:22:dc:de:87:50:89: 4c:43:e1:21:06:79:ec:b2:86:30:4c:80:35:5d:32:fc:39:08: 81:98:f1:44 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCmdYDh7LBXv28nBFewuB9U0U0FcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1MjEwN1oX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNANjIwYzlkMDgwOGMyMjI4YTdjODdk NWRlYmNjZmU2M2JkY2M5MTAwZDJkMWJkYWJmMmFjZTIyNGM5ZTZjNzNmMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEDINGxCe1ZRJHmlZhgQ9eBDi413 Ofx5hIRBVoRdS4QcmZvaRp2to1wKo55aPoWvT2FzoR+z1onyX1H0Sv0KY9mgKie+ +8JIWYz/ldmrrRR0/r9XUyALxOjNnueBJ+T87u6J8aI/7OKQhDodAn+11LCcs8QB sXU/JdCvzpIFCG4+CpDT1hI3BO9kTze4KdURtO6jCQk+RBkP6rHcAtKa0xiSuhnC gZtAeqhoOGETd7Yrl1GwFa21d8+zJLVBUUY48DpZwCTMKCCCVU7skUEHaPh/ktLO JVR6YActxZ4FpWLlz1tWEFPxSH+0u/5TUtihLzOsRylss9l4eYWcFL85LQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBVXJz8cwJOrVUPMFQDXZPwvMQjUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEwNjgzNjcwLWI0NDgtNGI0Ni04ZTEwLWFhMzY4MmJlMTc5Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAAhAMA0GCSqGSIb3DQEBCwUAA4IBAQB8TGh481jI3UyL/goH tugRkTS+UkO0a25q0YCXqcxm0QU1PD9OOy1P/tTbBVdxTn4MYs7CqxHHCL9dsx+x XoZLorWfQFw+z3PicbBP03y/+J4HuJKhiLaLV+YwlcF73Vswd5N4CIOwiD7cBybf 3DuDuYBdkr6ESHoyvAOT8KJdQY03lGricwy18a1gQRXkR1fY4zfIx77ar2LECtyr 1m6gX/ltYawcPFVYWBkfxCLx8MBXUVOPvITk+d+Dd5Q+/FD+iRAnaoUyXfHJydDM iV1150gC+zGGnGYCqfIlsP70D0lVFEYi3N6HUIlMQ+EhBnnssoYwTIA1XTL8OQiB mPFE -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:25 2025 by rpki-client