$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1d075ad8-69d2-4f67-b1e8-f269b1bdda72.roa File: 1d075ad8-69d2-4f67-b1e8-f269b1bdda72.roa (raw, json) Hash identifier: RwDCkoWhTxYCLEhVTsj6z3sedGIP2jTZFCdYbqwdjjI= Subject key identifier: 6F:BA:AA:AA:E7:85:BA:05:2C:DB:0D:FA:D0:A8:CD:95:09:9B:85:EE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 448190EE3EA9172EB40739E4B8496C0ED416C1A7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1d075ad8-69d2-4f67-b1e8-f269b1bdda72.roa Signing time: Mon 06 Oct 2025 15:10:06 +0000 ROA not before: Mon 06 Oct 2025 15:10:06 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:81:90:ee:3e:a9:17:2e:b4:07:39:e4:b8:49:6c:0e:d4:16:c1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 6 15:10:06 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=e46886169a050f1ba0df2046201d5d1e2cc80c788ce88b1e5afdf174a54508fa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:98:58:df:ee:15:3f:27:32:ab:54:b2:01:ad: 5f:56:57:17:55:94:1b:c5:c1:6c:e6:3f:17:d9:ef: 86:7b:28:c8:cd:7a:79:71:a5:8b:6f:71:a7:7d:5e: 68:13:fa:7d:cc:4e:f4:7b:01:50:e8:e1:d5:3e:b2: 48:cb:50:b2:a3:ba:6f:94:45:2b:68:20:6c:1f:78: 73:7e:1f:52:76:a4:a3:a5:4b:bd:96:2b:bb:aa:d7: 00:cc:3e:b7:0f:4e:14:e3:ef:fd:c9:6a:92:d3:2c: 77:28:ad:aa:93:86:56:cb:27:09:c3:16:6c:f1:51: 82:f1:02:22:15:e1:d1:ea:df:78:1e:af:2d:07:e1: 9c:07:32:23:19:31:0a:86:72:20:a5:35:ff:d7:66: 27:89:ff:1c:b3:a1:b3:ce:ef:48:e8:52:8d:6e:52: eb:ce:86:bd:96:3a:b4:39:c5:25:df:eb:36:2f:0d: 0c:42:6f:ae:5a:1c:7c:f9:5f:f8:9d:8f:6d:d3:7b: 24:b2:fa:90:2d:33:44:f4:e6:3b:8c:c1:8c:34:09: b2:1c:53:4c:4b:bd:cc:02:be:d4:8c:23:ac:0e:7d: 28:a2:9e:92:03:5f:b5:08:27:2d:50:4e:da:05:b0: 82:9a:6c:5d:d2:c0:c8:36:3e:ac:02:1a:c3:a0:d9: 50:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BA:AA:AA:E7:85:BA:05:2C:DB:0D:FA:D0:A8:CD:95:09:9B:85:EE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1d075ad8-69d2-4f67-b1e8-f269b1bdda72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:7000::/40 Signature Algorithm: sha256WithRSAEncryption 5c:c3:95:e1:01:84:7c:1c:1c:4d:2a:c1:2d:d3:3a:24:75:f5: 75:28:72:0f:12:ed:eb:12:2d:b1:50:7f:0c:22:46:38:66:f0: 5d:e7:d4:6c:76:2a:f4:4e:71:90:60:a6:02:75:6d:fe:1a:b0: 6b:31:6f:c9:b2:d8:6e:01:f1:25:13:2f:a5:64:a3:d2:4e:f0: 22:47:e5:c9:9f:0c:71:19:f3:b7:12:1b:27:61:60:16:e0:4b: bd:68:01:7a:d2:53:9c:67:3e:f5:3d:17:6d:59:4e:18:16:0a: 4f:14:38:9c:a1:25:fe:78:7d:6a:23:a3:7d:91:33:1d:f2:c7: d4:4b:64:6e:fb:84:f9:17:c0:cd:45:37:79:1e:81:3d:2d:70: fd:57:57:49:94:9a:fe:6b:a7:32:44:af:04:ea:bb:b2:74:ae: 7c:9b:36:b1:5c:64:d9:b9:b3:13:7d:20:8e:ef:e1:e1:35:b5: 9e:ad:0f:1d:69:a4:db:58:31:25:9c:f9:55:f5:04:0e:ee:1b: 3a:7d:05:07:2f:57:26:7e:95:ae:8c:44:06:d2:0b:db:ed:b2: c7:7c:b7:5d:b9:6d:38:c3:93:fc:8b:ff:57:1d:47:bb:9d:43: f8:b8:90:fb:13:0b:7a:c4:ba:d5:4f:01:62:3a:78:6e:9f:af: 60:51:5e:e6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURIGQ7j6pFy60BznkuElsDtQWwacwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNjE1MTAwNloX DTI1MTExMDIzNTk1OVowejFJMEcGA1UEBRNAZTQ2ODg2MTY5YTA1MGYxYmEwZGYy MDQ2MjAxZDVkMWUyY2M4MGM3ODhjZTg4YjFlNWFmZGYxNzRhNTQ1MDhmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1phY3+4VPycyq1SyAa1fVlcXVZQb xcFs5j8X2e+GeyjIzXp5caWLb3GnfV5oE/p9zE70ewFQ6OHVPrJIy1Cyo7pvlEUr aCBsH3hzfh9SdqSjpUu9liu7qtcAzD63D04U4+/9yWqS0yx3KK2qk4ZWyycJwxZs 8VGC8QIiFeHR6t94Hq8tB+GcBzIjGTEKhnIgpTX/12Ynif8cs6Gzzu9I6FKNblLr zoa9ljq0OcUl3+s2Lw0MQm+uWhx8+V/4nY9t03sksvqQLTNE9OY7jMGMNAmyHFNM S73MAr7UjCOsDn0oop6SA1+1CCctUE7aBbCCmmxd0sDINj6sAhrDoNlQ6wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG+6qqrnhboFLNsN+tCozZUJm4XuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFkMDc1YWQ4LTY5ZDItNGY2Ny1iMWU4LWYyNjliMWJkZGE3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9XAwDQYJKoZIhvcNAQELBQADggEBAFzDleEBhHwcHE0qwS3T OiR19XUocg8S7esSLbFQfwwiRjhm8F3n1Gx2KvROcZBgpgJ1bf4asGsxb8my2G4B 8SUTL6Vko9JO8CJH5cmfDHEZ87cSGydhYBbgS71oAXrSU5xnPvU9F21ZThgWCk8U OJyhJf54fWojo32RMx3yx9RLZG77hPkXwM1FN3kegT0tcP1XV0mUmv5rpzJErwTq u7J0rnybNrFcZNm5sxN9II7v4eE1tZ6tDx1ppNtYMSWc+VX1BA7uGzp9BQcvVyZ+ la6MRAbSC9vtssd8t125bTjDk/yL/1cdR7udQ/i4kPsTC3rEutVPAWI6eG6fr2BR XuY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:40 2025 by rpki-client