$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19919798-da5e-4a9c-94fe-dbf4e51f2afd.roa File: 19919798-da5e-4a9c-94fe-dbf4e51f2afd.roa (raw, json) Hash identifier: lTOpB0APvRPR1/kneMo1o2tVLdg421cwwBIJsGxdmVc= Subject key identifier: A7:3C:C2:A7:D8:A0:7D:1E:F9:5E:2F:E2:E3:27:B3:8B:6B:40:2C:64 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6557B0963DC299E2BA0DCD728B1DED3CBA4630E1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19919798-da5e-4a9c-94fe-dbf4e51f2afd.roa Signing time: Mon 13 Oct 2025 15:40:29 +0000 ROA not before: Mon 13 Oct 2025 15:40:29 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:8880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:57:b0:96:3d:c2:99:e2:ba:0d:cd:72:8b:1d:ed:3c:ba:46:30:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:40:29 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=b105e4c535c0626a00dda496a59ff2530409876807aab88523cc84f3021ee421, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:28:1e:9f:5f:f7:a9:a8:2c:36:1f:a4:16:5f: e6:3a:5c:a7:82:6d:5c:68:21:2d:ea:f2:84:59:43: 9b:83:b6:43:9d:d5:5e:55:0d:d9:08:c1:eb:fa:88: 95:60:92:8d:f7:f5:30:6a:9c:74:f0:cb:c8:26:01: 5d:58:06:7c:30:a0:f0:fc:79:66:e4:d0:61:a1:de: 5f:a2:ca:45:93:aa:fb:01:1a:55:42:36:b8:a5:31: be:fb:a1:3a:1b:0f:69:fc:ac:07:8d:84:c1:73:64: a7:bb:86:c3:39:e2:3a:13:ff:fb:08:f9:a3:6d:b0: 3e:a4:82:90:a7:ab:f4:7b:a9:5b:79:2b:19:a1:6a: 95:90:30:9d:65:9b:49:16:c9:0c:0b:61:f4:6f:58: 72:54:13:b0:13:77:32:ea:42:42:32:70:1a:cd:1c: cd:02:11:30:3f:ba:f0:e5:65:f4:8c:d6:e4:4d:64: 31:17:63:ab:88:91:81:f7:1f:d3:04:53:4a:11:22: 32:cb:cc:dc:89:29:cc:2a:07:6a:48:6f:26:49:7a: 9e:51:ae:8f:6d:c8:16:65:2a:b9:ae:87:62:7b:13: 35:46:e7:be:17:1f:28:72:f5:26:a5:54:3b:c4:7f: 99:5d:be:7f:ef:b3:0b:02:c8:82:3a:cd:f3:98:5c: 6d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3C:C2:A7:D8:A0:7D:1E:F9:5E:2F:E2:E3:27:B3:8B:6B:40:2C:64 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19919798-da5e-4a9c-94fe-dbf4e51f2afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:8880::/48 Signature Algorithm: sha256WithRSAEncryption 57:12:6d:9a:69:52:79:9e:9c:70:2f:03:7a:ca:70:ae:23:18: a2:58:70:21:ac:46:27:4d:62:ff:81:60:cc:6b:3c:5a:d9:8c: aa:7b:ac:9f:84:64:b0:bb:91:d8:a4:8b:f9:9e:34:3b:ab:97: fd:b7:89:d1:f9:2f:b2:f2:f2:d0:09:8f:07:be:d6:44:c7:8a: 75:de:f6:8b:6a:c4:41:b1:29:cc:6b:9d:1e:91:bf:f2:77:15: 5e:05:d7:63:b6:43:cc:a8:9f:27:68:7e:7e:c1:cd:2d:92:e8: 6e:03:38:57:81:5f:0a:e5:f9:38:6a:83:94:bf:e0:e8:7e:09: 3d:10:6e:ae:a0:27:e0:b3:65:f3:48:b1:fc:0b:30:84:41:63: fc:bb:72:20:82:89:bc:b1:94:77:ff:40:d9:f6:d6:f3:e2:9d: 63:9d:27:01:fa:6c:b0:49:dd:74:9c:84:50:46:e7:c8:3c:25: 38:3c:de:29:e9:df:e1:97:0a:3d:a0:1b:e1:03:f0:2d:6d:40: e2:0f:36:bc:9f:d4:72:48:d8:85:5f:35:da:28:03:43:68:79: 09:b0:ed:16:79:6d:18:0d:e6:44:3f:3f:24:f4:fc:32:c3:f9: 32:04:bc:36:16:5b:d2:af:08:3d:d9:f0:75:95:ec:c9:86:32: ea:3a:7c:b0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZVewlj3CmeK6Dc1yix3tPLpGMOEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1NDAyOVoX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNAYjEwNWU0YzUzNWMwNjI2YTAwZGRh NDk2YTU5ZmYyNTMwNDA5ODc2ODA3YWFiODg1MjNjYzg0ZjMwMjFlZTQyMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Cgen1/3qagsNh+kFl/mOlyngm1c aCEt6vKEWUObg7ZDndVeVQ3ZCMHr+oiVYJKN9/Uwapx08MvIJgFdWAZ8MKDw/Hlm 5NBhod5fospFk6r7ARpVQja4pTG++6E6Gw9p/KwHjYTBc2Snu4bDOeI6E//7CPmj bbA+pIKQp6v0e6lbeSsZoWqVkDCdZZtJFskMC2H0b1hyVBOwE3cy6kJCMnAazRzN AhEwP7rw5WX0jNbkTWQxF2OriJGB9x/TBFNKESIyy8zciSnMKgdqSG8mSXqeUa6P bcgWZSq5rodiexM1Rue+Fx8ocvUmpVQ7xH+ZXb5/77MLAsiCOs3zmFxtOwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKc8wqfYoH0e+V4v4uMns4trQCxkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE5OTE5Nzk4LWRhNWUtNGE5Yy05NGZlLWRiZjRlNTFmMmFmZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOIiAMA0GCSqGSIb3DQEBCwUAA4IBAQBXEm2aaVJ5npxwLwN6 ynCuIxiiWHAhrEYnTWL/gWDMazxa2Yyqe6yfhGSwu5HYpIv5njQ7q5f9t4nR+S+y 8vLQCY8HvtZEx4p13vaLasRBsSnMa50ekb/ydxVeBddjtkPMqJ8naH5+wc0tkuhu AzhXgV8K5fk4aoOUv+Dofgk9EG6uoCfgs2XzSLH8CzCEQWP8u3Iggom8sZR3/0DZ 9tbz4p1jnScB+mywSd10nIRQRufIPCU4PN4p6d/hlwo9oBvhA/AtbUDiDza8n9Ry SNiFXzXaKANDaHkJsO0WeW0YDeZEPz8k9Pwyw/kyBLw2FlvSrwg92fB1lezJhjLq Onyw -----END CERTIFICATE-----Generated at Mon Oct 20 09:49:59 2025 by rpki-client