$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa File: 2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa (raw, json) Hash identifier: z68tJxKDUMnOtSt2kjC0p1oqImHErLmUzugE54ZObss= Subject key identifier: 62:2E:70:0A:3E:1F:DF:74:AD:4A:8D:93:B5:4B:A6:6F:A0:2C:9F:7D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4631A3003665B1CCCC4E5D2CE0632E1DB77037C9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa Signing time: Wed 15 Oct 2025 00:50:28 +0000 ROA not before: Wed 15 Oct 2025 00:50:28 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da11:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:31:a3:00:36:65:b1:cc:cc:4e:5d:2c:e0:63:2e:1d:b7:70:37:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:50:28 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=cd0819671a7502238ffe5b629ec5f727d4bcf36fc6fd7bd71b49abb075d6378f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:81:93:6a:ae:a2:a9:6e:ef:d6:7b:8f:91: be:e7:1c:51:1d:04:d1:39:21:60:3c:b3:81:ac:f2: cf:17:66:02:0b:da:5b:08:0f:5c:2c:f6:b4:9b:7d: 02:b5:f4:21:0f:38:1f:a5:73:55:54:40:22:e7:1c: d1:2e:78:db:dc:d3:90:77:f9:cd:e5:10:2f:17:a7: 1b:f2:cd:b7:56:80:7f:2c:98:5f:0a:ed:74:5a:e4: bf:92:d7:d0:23:b2:30:3c:e7:c8:79:c3:49:3d:7c: de:f8:4c:0c:89:d5:5d:ce:74:aa:ac:68:a6:f0:9f: d5:2e:a6:49:62:4d:66:b1:e1:37:cf:f0:b9:bb:b2: f9:ae:ed:7b:e3:68:b6:ef:fb:d8:c8:8f:94:31:d5: a7:60:46:46:73:de:4f:96:39:8b:5b:fb:ab:4d:a4: 39:9a:28:be:9b:e3:f7:3a:3e:48:bc:8d:c5:da:36: 14:91:b8:d4:7c:a1:81:ac:2b:cf:ac:fd:16:07:10: 20:96:c1:d1:e2:13:20:37:10:d1:f5:b2:21:df:4d: e9:30:1d:7d:c3:cb:d6:02:d1:54:76:b9:a8:9d:46: 53:38:72:24:5d:3a:c1:fd:89:31:ca:7e:df:7c:a4: 7a:9b:7b:b3:b0:9d:c5:41:74:7b:57:76:28:7f:a7: 4c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2E:70:0A:3E:1F:DF:74:AD:4A:8D:93:B5:4B:A6:6F:A0:2C:9F:7D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da11:800::/38 Signature Algorithm: sha256WithRSAEncryption a2:5e:81:18:ef:58:e0:0d:41:82:90:fa:b7:ec:85:f6:a5:34: 26:a2:44:7d:34:06:20:b6:70:04:06:d6:25:07:08:12:02:63: 2c:77:ac:88:ab:22:bb:75:df:60:09:26:a3:68:c0:6e:0e:2c: 2b:5d:a1:53:1e:cf:1f:56:60:b8:b6:c9:13:e4:e3:69:99:5a: ca:62:cf:b4:f5:7b:71:f5:cc:9f:51:ac:af:27:5f:29:eb:95: 36:51:95:e8:cf:89:cd:1c:27:0f:ba:d4:a4:5b:88:ca:6c:91: d0:56:b6:70:f3:45:70:0e:ea:21:3e:0f:0a:38:01:23:63:f8: 88:7f:34:b9:ed:fb:5d:4e:60:45:e3:26:9d:0b:51:be:16:94: 54:b8:b7:61:81:79:0a:ea:f8:0b:8e:78:9f:1d:43:89:cb:3f: fe:30:92:f8:04:13:33:d5:cd:a0:79:e4:1f:05:b9:2c:b0:36: 25:c9:bb:55:21:97:96:92:f2:ad:9d:2c:de:da:08:87:41:2a: 9c:ef:45:bd:56:f4:90:c3:71:71:3d:2f:d7:1d:9a:7d:07:4f: b6:53:07:35:ea:16:c0:b9:99:bf:09:5b:c4:cb:90:ca:fb:2b: 59:19:61:be:fa:a2:09:fb:bf:9b:22:e8:47:cb:3b:b7:04:4a: 95:7d:14:2c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURjGjADZlsczMTl0s4GMuHbdwN8kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwNTAyOFoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAY2QwODE5NjcxYTc1MDIyMzhmZmU1 YjYyOWVjNWY3MjdkNGJjZjM2ZmM2ZmQ3YmQ3MWI0OWFiYjA3NWQ2Mzc4ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC6Bk2quoqlu79Z7j5G+5xxRHQTR OSFgPLOBrPLPF2YCC9pbCA9cLPa0m30CtfQhDzgfpXNVVEAi5xzRLnjb3NOQd/nN 5RAvF6cb8s23VoB/LJhfCu10WuS/ktfQI7IwPOfIecNJPXze+EwMidVdznSqrGim 8J/VLqZJYk1mseE3z/C5u7L5ru1742i27/vYyI+UMdWnYEZGc95PljmLW/urTaQ5 mii+m+P3Oj5IvI3F2jYUkbjUfKGBrCvPrP0WBxAglsHR4hMgNxDR9bIh303pMB19 w8vWAtFUdrmonUZTOHIkXTrB/Ykxyn7ffKR6m3uzsJ3FQXR7V3Yof6dM5QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGIucAo+H990rUqNk7VLpm+gLJ99MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIyMTg2NDRmLWJjMTEtNDkyZC1iOWE5LThkMThkNWJlYmQ2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEQgwDQYJKoZIhvcNAQELBQADggEBAKJegRjvWOANQYKQ+rfs hfalNCaiRH00BiC2cAQG1iUHCBICYyx3rIirIrt132AJJqNowG4OLCtdoVMezx9W YLi2yRPk42mZWspiz7T1e3H1zJ9RrK8nXynrlTZRlejPic0cJw+61KRbiMpskdBW tnDzRXAO6iE+Dwo4ASNj+Ih/NLnt+11OYEXjJp0LUb4WlFS4t2GBeQrq+AuOeJ8d Q4nLP/4wkvgEEzPVzaB55B8FuSywNiXJu1Uhl5aS8q2dLN7aCIdBKpzvRb1W9JDD cXE9L9cdmn0HT7ZTBzXqFsC5mb8JW8TLkMr7K1kZYb76ogn7v5si6EfLO7cESpV9 FCw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:56:32 2025 by rpki-client