$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/11691362-f249-4ff0-bc06-ce5be5b7bbc5.roa File: 11691362-f249-4ff0-bc06-ce5be5b7bbc5.roa (raw, json) Hash identifier: XPtihDJhffm8CrPYCrrZlEOtNmfAp03Rjt1+9cNtD5k= Subject key identifier: 73:97:46:D2:DD:E1:EA:36:FC:F9:5D:33:44:A4:FF:25:C2:89:AF:3E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 738B06A5BCF5BAC6898A30D4B95B7B756FEF5EA7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/11691362-f249-4ff0-bc06-ce5be5b7bbc5.roa Signing time: Mon 13 Oct 2025 15:10:25 +0000 ROA not before: Mon 13 Oct 2025 15:10:25 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:a040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:8b:06:a5:bc:f5:ba:c6:89:8a:30:d4:b9:5b:7b:75:6f:ef:5e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:10:25 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=7bd002c1865dd34a6741a6540db3924f0be2ac6aeb820bde5ca505adbd2e03ff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:f5:e1:da:4f:0e:50:f3:c9:f1:39:30:04: 24:28:66:cc:e4:33:b2:72:9e:44:3a:42:cb:8f:d5: b3:6d:5e:47:82:d2:84:2a:33:9b:a1:97:c3:eb:9b: 5b:b1:ae:89:c5:80:64:f9:60:23:95:16:3f:76:55: 06:93:34:c1:f9:f4:fd:46:d1:7d:12:f7:ad:37:c7: 6f:71:fc:e3:d0:3e:ef:13:9c:0c:39:da:0b:2a:89: a4:6d:9e:7e:69:a0:91:e1:6d:bd:b7:34:c2:16:da: a2:f9:9f:24:6f:7a:86:9a:a2:1e:3f:b9:9f:e1:6b: 87:d4:28:71:a3:17:d1:60:21:7d:1c:be:fd:9f:d0: 7f:fc:17:71:b3:0e:ce:30:f2:90:e7:b6:6d:a2:ad: 0d:38:09:c0:a2:74:b9:27:bf:a1:d0:5e:5c:6b:3b: de:e8:fb:8d:4c:f0:63:ba:fe:ee:c7:1e:d3:75:0a: c4:82:b2:52:5e:5a:cc:ff:2a:2f:10:84:32:83:1d: 4f:d8:73:38:de:f8:fc:d1:2d:8e:ee:61:83:c2:97: b8:ed:14:40:71:bd:31:ae:03:94:e6:cf:f1:c7:7b: e2:f4:be:f8:02:b7:45:61:90:b6:37:5f:f2:8a:63: 53:94:1b:c2:1b:8b:03:c2:00:4a:a9:3c:4d:62:a4: a2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:97:46:D2:DD:E1:EA:36:FC:F9:5D:33:44:A4:FF:25:C2:89:AF:3E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/11691362-f249-4ff0-bc06-ce5be5b7bbc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:a040::/48 Signature Algorithm: sha256WithRSAEncryption 80:8d:5f:9f:98:43:82:4e:e6:db:89:a8:76:31:1b:ba:18:5e: 49:7e:17:d3:ec:15:f2:c8:e9:e6:84:e3:0c:99:85:38:4e:95: 7e:9e:27:d0:b7:fc:6d:79:b0:42:7c:ec:37:c4:9c:70:36:ec: 0d:c6:db:62:81:81:ef:b7:53:ac:3c:85:d6:3f:30:69:7f:14: 64:32:1c:c0:51:ca:a9:56:df:6c:2e:61:93:1e:18:fd:88:02: 3d:fb:2c:79:97:c7:e7:de:8a:60:b1:9b:91:71:0b:e3:bf:1b: e9:9a:9d:e2:c9:cc:18:f1:e2:0b:29:13:bf:96:df:65:9b:75: 80:a9:21:3e:a6:7f:c8:fd:81:48:6c:4f:7d:72:e1:7b:5d:2a: ed:25:fe:f0:a4:96:5e:d4:bf:30:8c:be:81:c2:9c:fc:77:31: 9b:c0:1d:9c:d0:ae:7a:ac:46:67:f8:49:1e:95:88:70:3f:22: ce:c8:a2:96:61:c3:df:fe:10:ef:2d:d0:3c:71:c0:c5:11:61: 8e:fb:c8:f3:48:42:9e:2e:f6:37:67:46:ed:75:db:82:2d:90: 83:7f:57:b4:28:da:17:b8:0d:c6:5e:41:9e:dd:1a:54:e0:2a: 82:1c:c3:bd:3a:51:f7:c5:34:69:63:f3:6b:4b:53:34:65:a7: bb:b1:6b:b9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUc4sGpbz1usaJijDUuVt7dW/vXqcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1MTAyNVoX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNAN2JkMDAyYzE4NjVkZDM0YTY3NDFh NjU0MGRiMzkyNGYwYmUyYWM2YWViODIwYmRlNWNhNTA1YWRiZDJlMDNmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2X14dpPDlDzyfE5MAQkKGbM5DOy cp5EOkLLj9WzbV5HgtKEKjOboZfD65tbsa6JxYBk+WAjlRY/dlUGkzTB+fT9RtF9 EvetN8dvcfzj0D7vE5wMOdoLKomkbZ5+aaCR4W29tzTCFtqi+Z8kb3qGmqIeP7mf 4WuH1ChxoxfRYCF9HL79n9B//Bdxsw7OMPKQ57Ztoq0NOAnAonS5J7+h0F5cazve 6PuNTPBjuv7uxx7TdQrEgrJSXlrM/yovEIQygx1P2HM43vj80S2O7mGDwpe47RRA cb0xrgOU5s/xx3vi9L74ArdFYZC2N1/yimNTlBvCG4sDwgBKqTxNYqSijwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHOXRtLd4eo2/PldM0Sk/yXCia8+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzExNjkxMzYyLWYyNDktNGZmMC1iYzA2LWNlNWJlNWI3YmJjNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOKBAMA0GCSqGSIb3DQEBCwUAA4IBAQCAjV+fmEOCTubbiah2 MRu6GF5JfhfT7BXyyOnmhOMMmYU4TpV+nifQt/xtebBCfOw3xJxwNuwNxttigYHv t1OsPIXWPzBpfxRkMhzAUcqpVt9sLmGTHhj9iAI9+yx5l8fn3opgsZuRcQvjvxvp mp3iycwY8eILKRO/lt9lm3WAqSE+pn/I/YFIbE99cuF7XSrtJf7wpJZe1L8wjL6B wpz8dzGbwB2c0K56rEZn+EkelYhwPyLOyKKWYcPf/hDvLdA8ccDFEWGO+8jzSEKe LvY3Z0btdduCLZCDf1e0KNoXuA3GXkGe3RpU4CqCHMO9OlH3xTRpY/NrS1M0Zae7 sWu5 -----END CERTIFICATE-----Generated at Mon Oct 20 15:52:49 2025 by rpki-client