$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683b0b-95dd-4486-a7c6-e2e7d85f328e.roa File: 10683b0b-95dd-4486-a7c6-e2e7d85f328e.roa (raw, json) Hash identifier: zwxA9BhFme4d7RhQqNdaMuFxY+XI9RywzeCQc4GZWPU= Subject key identifier: CD:5C:24:67:8C:DB:15:FC:EA:EE:0E:C8:0C:7B:75:0E:38:6C:26:E4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F2C41B51481506E777F76D62F4C93C31B1E14C7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683b0b-95dd-4486-a7c6-e2e7d85f328e.roa Signing time: Mon 13 Oct 2025 15:40:58 +0000 ROA not before: Mon 13 Oct 2025 15:40:58 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:2c:41:b5:14:81:50:6e:77:7f:76:d6:2f:4c:93:c3:1b:1e:14:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:40:58 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=3245ba084dca29a126ab76391fbf2dd0f8f7150ff0abfa103471e18ecbe6ce7a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a9:47:af:19:85:bb:55:17:1b:9f:28:3e:32: 63:20:41:3e:bf:50:6a:c5:6a:5a:9a:b5:16:4e:6e: 06:ac:c5:9f:9d:cf:f6:6c:c0:35:f7:9e:72:64:4e: 85:42:d7:8f:dc:ea:53:37:26:81:4b:a1:ce:a6:b5: 65:59:35:29:a0:45:f7:80:06:9d:5b:88:3d:13:ca: 0e:76:cf:5b:1e:ac:c0:50:ce:18:01:44:bb:81:70: 60:c4:21:7b:64:c6:d6:f3:7b:93:5a:aa:d9:93:d9: 27:3a:ba:95:7a:35:06:34:7d:34:99:9f:b2:df:5e: 17:de:12:37:66:ae:e0:ed:69:69:4c:fe:2a:05:4d: 30:ba:6a:5d:e2:d5:91:f8:2b:a9:d4:76:2f:ec:3f: 96:f2:73:52:84:12:b2:56:59:66:9a:3b:02:26:55: 81:e4:c0:d6:4f:e2:c0:3e:1c:67:b9:34:18:40:48: 24:48:29:49:2d:32:3e:11:b5:8f:bc:47:83:fd:64: c6:cc:5a:51:ea:5e:32:86:ff:2e:6e:80:53:5a:c2: 06:79:31:ac:5e:5a:b5:4f:e5:38:5c:40:fd:57:47: 37:99:60:e5:13:89:0f:e1:9c:8e:72:95:c8:a3:cf: f0:9f:ee:ce:46:96:81:d9:e2:29:f8:bc:00:20:17: 4d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5C:24:67:8C:DB:15:FC:EA:EE:0E:C8:0C:7B:75:0E:38:6C:26:E4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683b0b-95dd-4486-a7c6-e2e7d85f328e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:e000::/40 Signature Algorithm: sha256WithRSAEncryption 80:a4:9c:a2:5f:61:8b:48:b7:1a:8c:1f:a3:b8:5e:e4:24:d7: 41:70:be:be:ac:1d:2f:99:0e:49:fb:b6:87:bf:43:8c:de:77: 4c:7a:c7:7f:df:ca:c7:74:be:a8:bb:4a:42:88:71:0a:78:9b: 6e:ec:a0:05:9e:90:de:10:00:49:6b:b1:dc:2a:9d:8d:ee:84: 42:a7:a7:4f:0a:43:ff:0f:19:6d:f3:5c:26:ae:de:2d:dd:c9: f3:dd:33:0d:9c:c8:48:ba:32:2e:67:64:38:36:69:4c:df:b7: cc:b1:20:b3:d3:c8:b0:24:9e:4a:43:81:bb:12:bb:a1:4d:50: 16:5f:cb:a6:4c:2c:05:40:bd:72:00:2d:91:74:2e:7e:7a:7e: f9:41:9a:54:4f:97:d8:ba:0d:94:7a:04:65:45:3b:c3:9e:fe: 85:db:c0:12:9e:50:d3:05:49:40:a7:c4:7b:76:3d:d6:8f:c7: 8b:5e:88:ec:ad:48:12:da:f6:4a:0e:e1:e4:13:04:da:ea:09: 31:85:56:3f:ee:b3:b9:13:94:c0:2c:65:cd:88:10:f5:3a:59: dd:cd:a9:ef:35:cd:34:51:cc:0d:b4:8d:f4:f7:11:99:e7:3e: f6:03:be:f6:6c:54:18:9a:31:c0:0b:e2:5b:97:47:84:11:d2: 2f:d8:85:5b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfyxBtRSBUG53f3bWL0yTwxseFMcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1NDA1OFoX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNAMzI0NWJhMDg0ZGNhMjlhMTI2YWI3 NjM5MWZiZjJkZDBmOGY3MTUwZmYwYWJmYTEwMzQ3MWUxOGVjYmU2Y2U3YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtalHrxmFu1UXG58oPjJjIEE+v1Bq xWpamrUWTm4GrMWfnc/2bMA1955yZE6FQteP3OpTNyaBS6HOprVlWTUpoEX3gAad W4g9E8oOds9bHqzAUM4YAUS7gXBgxCF7ZMbW83uTWqrZk9knOrqVejUGNH00mZ+y 314X3hI3Zq7g7WlpTP4qBU0wumpd4tWR+Cup1HYv7D+W8nNShBKyVllmmjsCJlWB 5MDWT+LAPhxnuTQYQEgkSClJLTI+EbWPvEeD/WTGzFpR6l4yhv8uboBTWsIGeTGs Xlq1T+U4XED9V0c3mWDlE4kP4ZyOcpXIo8/wn+7ORpaB2eIp+LwAIBdNXQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFM1cJGeM2xX86u4OyAx7dQ44bCbkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEwNjgzYjBiLTk1ZGQtNDQ4Ni1hN2M2LWUyZTdkODVmMzI4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/+AwDQYJKoZIhvcNAQELBQADggEBAICknKJfYYtItxqMH6O4 XuQk10Fwvr6sHS+ZDkn7toe/Q4zed0x6x3/fysd0vqi7SkKIcQp4m27soAWekN4Q AElrsdwqnY3uhEKnp08KQ/8PGW3zXCau3i3dyfPdMw2cyEi6Mi5nZDg2aUzft8yx ILPTyLAknkpDgbsSu6FNUBZfy6ZMLAVAvXIALZF0Ln56fvlBmlRPl9i6DZR6BGVF O8Oe/oXbwBKeUNMFSUCnxHt2PdaPx4teiOytSBLa9koO4eQTBNrqCTGFVj/us7kT lMAsZc2IEPU6Wd3Nqe81zTRRzA20jfT3EZnnPvYDvvZsVBiaMcAL4luXR4QR0i/Y hVs= -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:35 2025 by rpki-client