$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5e8f8-01ee-4887-9403-cad800717cc9.roa File: 25d5e8f8-01ee-4887-9403-cad800717cc9.roa (raw, json) Hash identifier: dOFBSQLWh7rIK0Cro2bUIedvnwP5uJ9fsBWyx+hCN2I= Subject key identifier: 09:CF:8A:0F:3B:6C:B0:5C:B1:47:1A:98:37:BF:78:A1:69:54:C4:9F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 24CAFC26C0826BA0EB1F03ACF69000F6607B5A28 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5e8f8-01ee-4887-9403-cad800717cc9.roa Signing time: Wed 15 Oct 2025 00:20:28 +0000 ROA not before: Wed 15 Oct 2025 00:20:28 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ca:fc:26:c0:82:6b:a0:eb:1f:03:ac:f6:90:00:f6:60:7b:5a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:20:28 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=96ac0c5a5fee73627c56916705cc3aa74306bb117298b76f546e548fc7e05ffc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:75:d1:5a:75:3c:08:9b:b8:5e:15:e3:c1:3a: 14:0f:ce:cb:67:69:b5:77:3c:45:12:6a:1e:f8:65: cb:4f:ca:96:51:50:b3:17:6f:70:b6:ae:2d:56:b8: 98:9d:68:01:be:99:ef:a3:03:17:0d:43:19:73:da: 93:c7:27:4b:37:d2:68:47:9c:69:47:62:11:ff:e3: ef:8a:2a:51:e4:58:70:cd:cf:c5:f6:aa:1a:63:4e: 77:52:63:3f:8c:75:a5:b8:1f:dc:28:56:27:d6:10: 97:f1:1e:47:9f:22:64:c1:3b:91:a8:8e:2c:28:61: 38:e9:82:2c:b7:c6:7b:fd:e5:62:98:83:83:45:8a: 86:18:73:d1:0e:98:49:8d:3d:2a:ad:f4:02:36:8d: c7:3a:7e:59:5d:72:d0:28:44:a0:9b:c7:8f:45:35: b8:1f:35:a7:a8:28:c1:b4:b6:11:23:97:c1:dc:2c: 60:a0:ad:e3:68:e6:3c:90:b1:5b:36:b6:26:43:54: b0:ed:87:b9:a3:a7:7e:59:ac:56:3d:8a:c1:72:76: 2d:6c:b9:86:62:2c:b3:c5:0f:37:30:ac:26:5c:3a: 9a:98:02:7e:6f:71:b5:e8:bf:13:7e:c6:38:08:0e: b5:2a:94:8c:67:da:b1:93:62:78:90:a4:e2:32:ae: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CF:8A:0F:3B:6C:B0:5C:B1:47:1A:98:37:BF:78:A1:69:54:C4:9F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5e8f8-01ee-4887-9403-cad800717cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:1000::/40 Signature Algorithm: sha256WithRSAEncryption c0:08:1d:8f:51:4d:6a:6d:a9:72:e8:7f:39:2d:cd:b2:42:4d: 15:11:b3:16:fd:e9:a4:c8:cf:06:a3:3b:a7:22:17:fd:ae:c2: ce:2a:5e:d5:ba:8d:34:a1:00:b4:a3:76:2a:31:6b:67:be:aa: ec:f9:aa:c5:29:1e:7e:17:35:9f:63:72:21:ed:39:9b:c1:fc: ba:9c:6f:9e:d4:73:e4:7b:22:a9:05:1c:83:cd:e7:cd:cd:94: c1:0a:80:f8:8d:e6:f5:c7:e3:78:15:9a:c2:70:f7:dd:3f:a8: f8:8f:79:11:f5:07:2a:1d:e0:bb:ae:18:a2:ea:cd:d8:b8:9c: 7b:06:1c:db:cc:42:b0:ea:91:51:e2:66:6b:18:64:bb:f3:08: 6a:b5:33:c5:31:27:01:6c:a9:cc:76:b2:c3:1d:22:c0:79:79: f9:1e:f3:7d:a4:af:1c:34:f5:a9:16:ec:2e:c2:cc:a3:79:c5: 03:09:3c:6a:12:08:de:bb:4a:18:d0:af:ff:6f:a7:50:90:c7: 5c:62:3b:f2:cf:20:55:61:9e:88:81:e7:a7:34:c8:03:c2:d6: 34:64:21:f1:df:6f:0a:36:15:6e:a4:a4:33:81:59:08:56:de: f1:b5:eb:70:cf:67:42:40:27:83:0e:35:c6:49:8f:fa:53:a8: 65:e9:5b:dd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJMr8JsCCa6DrHwOs9pAA9mB7WigwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMjAyOFoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAOTZhYzBjNWE1ZmVlNzM2MjdjNTY5 MTY3MDVjYzNhYTc0MzA2YmIxMTcyOThiNzZmNTQ2ZTU0OGZjN2UwNWZmYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XXRWnU8CJu4XhXjwToUD87LZ2m1 dzxFEmoe+GXLT8qWUVCzF29wtq4tVriYnWgBvpnvowMXDUMZc9qTxydLN9JoR5xp R2IR/+PviipR5Fhwzc/F9qoaY053UmM/jHWluB/cKFYn1hCX8R5HnyJkwTuRqI4s KGE46YIst8Z7/eVimIODRYqGGHPRDphJjT0qrfQCNo3HOn5ZXXLQKESgm8ePRTW4 HzWnqCjBtLYRI5fB3CxgoK3jaOY8kLFbNrYmQ1Sw7Ye5o6d+WaxWPYrBcnYtbLmG YiyzxQ83MKwmXDqamAJ+b3G16L8TfsY4CA61KpSMZ9qxk2J4kKTiMq4ZnwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAnPig87bLBcsUcamDe/eKFpVMSfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI1ZDVlOGY4LTAxZWUtNDg4Ny05NDAzLWNhZDgwMDcxN2NjOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacBAwDQYJKoZIhvcNAQELBQADggEBAMAIHY9RTWptqXLofzkt zbJCTRURsxb96aTIzwajO6ciF/2uws4qXtW6jTShALSjdioxa2e+quz5qsUpHn4X NZ9jciHtOZvB/Lqcb57Uc+R7IqkFHIPN583NlMEKgPiN5vXH43gVmsJw990/qPiP eRH1Byod4LuuGKLqzdi4nHsGHNvMQrDqkVHiZmsYZLvzCGq1M8UxJwFsqcx2ssMd IsB5efke832krxw09akW7C7CzKN5xQMJPGoSCN67ShjQr/9vp1CQx1xiO/LPIFVh noiB56c0yAPC1jRkIfHfbwo2FW6kpDOBWQhW3vG163DPZ0JAJ4MONcZJj/pTqGXp W90= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:49 2025 by rpki-client