$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17fabf22-42c2-40f2-a722-0048c9eebd2c.roa File: 17fabf22-42c2-40f2-a722-0048c9eebd2c.roa (raw, json) Hash identifier: DDzgH01ATv0sCRiH5CvfFYGQ39P0cCFHJwc+RMYpYZE= Subject key identifier: 06:AA:8D:4E:18:13:5F:F4:C7:80:D9:47:EE:D1:7E:5A:DE:85:03:43 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 485DE776E3F7C2AF9DE4A1C33FE8351F2134C58F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17fabf22-42c2-40f2-a722-0048c9eebd2c.roa Signing time: Wed 15 Oct 2025 00:50:51 +0000 ROA not before: Wed 15 Oct 2025 00:50:51 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5d:e7:76:e3:f7:c2:af:9d:e4:a1:c3:3f:e8:35:1f:21:34:c5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:50:51 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=30da017d0389457e2f4d01b3dfc80c568c65c8fa2e21f64d5aed22dbfcba2f08, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:76:ca:82:db:69:c8:36:91:43:9a:33:ea: 05:41:76:63:3c:a1:e8:ec:6d:a3:e6:ce:38:39:5c: 80:47:63:9f:f0:15:85:f9:24:c0:23:d6:7e:87:7b: 29:21:e7:06:30:f4:bc:aa:51:58:0b:cf:f9:3e:87: 8f:f0:a3:84:29:48:67:7d:06:d2:1e:71:03:68:ff: 1c:d3:a0:05:44:f6:e2:ca:fc:56:ab:8e:e1:6b:3a: 20:32:ea:5f:c0:60:ad:18:7a:ea:55:1f:3c:45:fc: f1:d9:bb:be:c3:7b:ce:d0:15:0c:76:3c:34:ff:33: 8c:88:54:a5:87:a6:ae:7d:9d:2c:c9:5e:45:e9:20: a8:1a:02:62:00:57:4d:fc:63:98:a4:0c:d2:2b:92: 97:7e:24:b2:15:57:b7:23:aa:84:f5:1a:ed:ca:1c: 4c:ac:65:55:55:92:47:e6:25:f8:34:71:b9:1b:7d: be:45:a7:7f:c6:c3:a6:a1:3d:f0:ea:db:ad:45:ec: 12:be:b0:ab:1e:ce:15:27:f7:d9:6e:9d:fa:55:b3: 22:3b:98:7f:f5:90:2e:65:d9:04:fb:66:a9:1c:da: 9a:df:ff:57:ec:c7:07:27:e4:4c:c9:37:73:e1:3f: 84:b6:ee:ee:6a:02:89:60:38:36:8e:a5:d0:ef:c4: 25:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AA:8D:4E:18:13:5F:F4:C7:80:D9:47:EE:D1:7E:5A:DE:85:03:43 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17fabf22-42c2-40f2-a722-0048c9eebd2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf0::/32 Signature Algorithm: sha256WithRSAEncryption 13:f8:fd:69:5e:a2:c6:d1:97:50:25:8c:05:c5:ec:05:f1:73: 8f:1c:07:a4:f9:24:42:07:19:72:a5:ce:46:e0:9d:87:3a:c3: df:46:3f:8d:c9:0a:1f:4f:17:0a:d0:f4:93:e7:a3:55:0a:1d: 56:ea:6d:9e:a1:42:f6:78:dd:76:21:f6:d3:4a:f7:24:53:73: b7:69:28:24:e8:52:3c:02:76:53:c8:bc:be:3c:3d:a9:64:d8: 14:f1:64:70:f3:ad:f4:59:bf:65:a0:de:7a:be:4c:ac:e6:59: d6:68:18:ff:00:86:e6:0a:91:ee:19:5e:50:fe:a1:fc:8a:ac: d2:36:d6:31:8f:4f:6b:6a:79:5e:96:ac:cd:d5:0d:8f:9a:7e: 81:f1:a3:fb:88:a9:ef:31:74:c5:ec:9d:c6:98:95:8e:40:0c: bc:d4:43:2f:54:d0:07:c4:14:e9:86:da:d3:29:f2:9b:21:87: 53:63:47:33:32:62:03:42:bc:00:bf:38:b0:4e:b1:53:a1:73: b3:ea:3e:43:50:74:35:da:41:a6:12:94:db:b3:63:b5:f9:f6: 66:ed:c2:81:fa:55:6b:0d:ab:d6:dd:d3:9b:32:bd:61:c5:b4: ed:69:57:90:88:8b:0f:0c:4a:2d:76:00:fc:2f:f9:0e:68:2c: ee:34:12:70 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUSF3nduP3wq+d5KHDP+g1HyE0xY8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwNTA1MVoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAMzBkYTAxN2QwMzg5NDU3ZTJmNGQw MWIzZGZjODBjNTY4YzY1YzhmYTJlMjFmNjRkNWFlZDIyZGJmY2JhMmYwODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1N2yoLbacg2kUOaM+oFQXZjPKHo 7G2j5s44OVyAR2Of8BWF+STAI9Z+h3spIecGMPS8qlFYC8/5PoeP8KOEKUhnfQbS HnEDaP8c06AFRPbiyvxWq47hazogMupfwGCtGHrqVR88Rfzx2bu+w3vO0BUMdjw0 /zOMiFSlh6aufZ0syV5F6SCoGgJiAFdN/GOYpAzSK5KXfiSyFVe3I6qE9RrtyhxM rGVVVZJH5iX4NHG5G32+Rad/xsOmoT3w6tutRewSvrCrHs4VJ/fZbp36VbMiO5h/ 9ZAuZdkE+2apHNqa3/9X7McHJ+RMyTdz4T+Etu7uagKJYDg2jqXQ78Ql5wIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFAaqjU4YE1/0x4DZR+7RflrehQNDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE3ZmFiZjIyLTQyYzItNDBmMi1hNzIyLTAwNDhjOWVlYmQyYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba8DANBgkqhkiG9w0BAQsFAAOCAQEAE/j9aV6ixtGXUCWMBcXs BfFzjxwHpPkkQgcZcqXORuCdhzrD30Y/jckKH08XCtD0k+ejVQodVuptnqFC9njd diH200r3JFNzt2koJOhSPAJ2U8i8vjw9qWTYFPFkcPOt9Fm/ZaDeer5MrOZZ1mgY /wCG5gqR7hleUP6h/Iqs0jbWMY9Pa2p5XpaszdUNj5p+gfGj+4ip7zF0xeydxpiV jkAMvNRDL1TQB8QU6Yba0ynymyGHU2NHMzJiA0K8AL84sE6xU6Fzs+o+Q1B0NdpB phKU27Njtfn2Zu3CgfpVaw2r1t3TmzK9YcW07WlXkIiLDwxKLXYA/C/5Dmgs7jQS cA== -----END CERTIFICATE-----Generated at Tue Oct 21 01:33:57 2025 by rpki-client