$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa File: 25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa (raw, json) Hash identifier: 1TLAuVcTuYRkp7BstshvfFF/KuB51pqu6wdpEuJVgOY= Subject key identifier: FC:A0:98:E9:04:B6:40:63:49:E0:A0:27:0D:16:F6:40:3B:7A:55:6A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 12DF24F7DC0CA053EDF6CEA6A03B27C55EDB92B9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa Signing time: Fri 10 Oct 2025 00:00:51 +0000 ROA not before: Fri 10 Oct 2025 00:00:51 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:df:24:f7:dc:0c:a0:53:ed:f6:ce:a6:a0:3b:27:c5:5e:db:92:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 10 00:00:51 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=20d65dcbe82ddd3bfc1f67af5ef41fef8f2ddbc06988a7eceb2e5c24bc08e0f2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:86:66:4b:56:a5:46:22:b2:dd:7e:54:43:05: b6:4b:09:e0:60:b9:88:13:98:38:ed:fd:96:39:9d: 63:f1:25:77:3e:d5:42:69:b2:16:c6:cb:ca:32:60: ac:4b:4f:64:c9:2f:95:22:37:7b:a2:2f:1b:03:d4: 06:3a:cf:90:be:b3:c9:bc:f1:60:e4:e7:a4:eb:f5: 1a:31:68:3d:56:b5:4a:71:4b:ef:31:ab:d7:b3:6a: 3a:c2:63:8e:de:02:8a:96:38:e6:8c:a8:92:8d:f5: 4b:43:69:53:a7:15:1e:8e:01:70:9c:17:9c:f0:e4: df:66:ca:53:f0:c4:01:52:d3:c1:5e:8e:ce:d0:44: da:e5:a7:4b:5c:b5:11:2a:4c:93:a7:9f:41:f8:69: c9:02:fa:67:f7:9e:d9:7e:4a:b9:23:6b:7d:7a:34: 20:da:bf:84:a7:0f:99:74:25:5b:26:73:e6:4b:89: b1:ed:69:e3:3b:2d:96:3b:37:be:64:b9:09:b5:3b: 37:1e:97:5c:4a:77:82:09:1f:bc:b4:69:da:03:97: 4c:d0:cd:77:ba:e0:b4:d3:de:66:25:57:38:26:1d: 6e:a5:a6:a2:e1:51:e6:d2:19:94:db:db:07:00:6f: 44:3d:f3:ca:84:5f:e2:a9:89:b3:fb:da:36:e4:86: 87:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A0:98:E9:04:B6:40:63:49:E0:A0:27:0D:16:F6:40:3B:7A:55:6A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:800::/48 Signature Algorithm: sha256WithRSAEncryption 87:8e:f5:16:85:f0:f1:15:09:b0:cd:58:4d:95:cb:e1:ef:fd: d7:0b:55:f6:c3:df:49:65:d9:8e:bc:d2:c3:46:df:d9:5d:65: 65:f5:1b:c0:5e:96:39:7c:76:36:b9:1d:bc:21:e1:0b:d8:d8: 55:d0:e7:a3:c6:e8:95:14:25:14:ec:16:f4:b4:f9:f4:13:2c: b7:b1:2f:29:8e:02:65:e2:39:25:eb:1f:ab:2f:71:d7:77:40: a5:c0:6c:d2:1f:82:60:56:fd:ae:fd:c1:57:75:f1:2d:49:9b: 2a:26:52:c3:6f:02:de:e1:d1:0e:c4:0c:de:84:91:2f:67:92: 4c:59:99:18:e2:bd:dd:e5:4e:79:20:23:f6:c1:a6:6a:43:9e: 3c:e8:07:65:fd:42:c9:1a:a9:dc:68:b8:26:4c:b2:8f:8d:af: a8:cf:ac:e4:72:e3:06:ce:e0:27:15:4c:ef:79:3a:ee:d5:13: 27:4d:95:7b:3b:26:26:c6:b8:11:57:5f:84:2e:a6:96:63:05: 51:88:03:05:c8:d1:56:f4:8b:99:1f:71:48:0a:81:2d:2c:af: c5:82:67:ce:19:a8:0f:4e:54:b5:a8:2e:cf:3a:ed:b4:8c:17: ed:a7:4a:42:ff:dc:6f:fa:18:02:20:0d:e3:78:db:7f:22:5e: 67:c3:b8:31 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEt8k99wMoFPt9s6moDsnxV7bkrkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMDAwMDA1MVoX DTI1MTExNDIzNTk1OVowejFJMEcGA1UEBRNAMjBkNjVkY2JlODJkZGQzYmZjMWY2 N2FmNWVmNDFmZWY4ZjJkZGJjMDY5ODhhN2VjZWIyZTVjMjRiYzA4ZTBmMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4ZmS1alRiKy3X5UQwW2SwngYLmI E5g47f2WOZ1j8SV3PtVCabIWxsvKMmCsS09kyS+VIjd7oi8bA9QGOs+QvrPJvPFg 5Oek6/UaMWg9VrVKcUvvMavXs2o6wmOO3gKKljjmjKiSjfVLQ2lTpxUejgFwnBec 8OTfZspT8MQBUtPBXo7O0ETa5adLXLURKkyTp59B+GnJAvpn957Zfkq5I2t9ejQg 2r+Epw+ZdCVbJnPmS4mx7WnjOy2WOze+ZLkJtTs3HpdcSneCCR+8tGnaA5dM0M13 uuC0095mJVc4Jh1upaai4VHm0hmU29sHAG9EPfPKhF/iqYmz+9o25IaHMwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPygmOkEtkBjSeCgJw0W9kA7elVqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI1ZDVhZDdlLWYyNWMtNDdjNi05YTllLTRlYzFkNDgyNDc2Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9ggAMA0GCSqGSIb3DQEBCwUAA4IBAQCHjvUWhfDxFQmwzVhN lcvh7/3XC1X2w99JZdmOvNLDRt/ZXWVl9RvAXpY5fHY2uR28IeEL2NhV0OejxuiV FCUU7Bb0tPn0Eyy3sS8pjgJl4jkl6x+rL3HXd0ClwGzSH4JgVv2u/cFXdfEtSZsq JlLDbwLe4dEOxAzehJEvZ5JMWZkY4r3d5U55ICP2waZqQ5486Adl/ULJGqncaLgm TLKPja+oz6zkcuMGzuAnFUzveTru1RMnTZV7OyYmxrgRV1+ELqaWYwVRiAMFyNFW 9IuZH3FICoEtLK/FgmfOGagPTlS1qC7POu20jBftp0pC/9xv+hgCIA3jeNt/Il5n w7gx -----END CERTIFICATE-----Generated at Tue Oct 21 01:36:02 2025 by rpki-client