$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa File: 2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa (raw, json) Hash identifier: A1sQlQjKBwu9nAzrw53F3XJ0hZqQ4OZB/PXzNhw0jig= Subject key identifier: DE:76:97:FF:2D:8A:1A:9D:FA:80:37:B8:45:E2:11:FA:A3:CB:E6:99 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3518148C1296CF22E873978DF796F43D27D70C91 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa Signing time: Wed 15 Oct 2025 00:20:09 +0000 ROA not before: Wed 15 Oct 2025 00:20:09 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:18:14:8c:12:96:cf:22:e8:73:97:8d:f7:96:f4:3d:27:d7:0c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:20:09 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=1ebfa2d2c7eb76f75cfa61ca01bf34d02727657c07a68645c856288375752563, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e7:41:20:e1:c3:68:ed:2d:23:28:9f:db:fe: 1c:a8:cf:c1:a5:55:94:5d:33:e4:e1:1b:94:f6:c9: 7e:7e:fb:9a:72:f6:a9:dd:ba:0c:50:ea:75:7b:82: f6:94:00:0c:79:fb:e9:e6:b3:da:82:52:2c:23:aa: a1:0f:f8:9b:22:fe:e6:f0:a9:22:81:68:29:aa:bd: 11:7a:15:ce:ec:ee:81:66:3f:1b:5e:a5:64:20:73: a1:f3:8a:7f:5b:6b:15:61:9e:e0:cb:5d:e3:da:9a: 69:65:08:65:e7:d8:db:d0:3f:7d:db:35:a6:2d:46: 45:3d:17:d9:ce:76:d4:38:3d:1b:e6:1f:f6:13:d5: 13:12:56:2f:7d:bf:e0:a7:33:36:91:10:b2:c4:62: a2:f3:db:cf:a3:d3:28:a6:7f:43:06:c8:bf:c8:b4: c4:97:3e:d9:b2:96:1b:d2:39:d5:95:77:c0:60:8e: 87:24:a5:9c:4b:56:3a:81:23:76:7e:13:5b:72:07: de:84:af:44:52:2d:46:f9:cb:6c:fd:fe:55:60:87: f7:e7:40:7a:76:32:b7:71:90:98:3f:c1:43:3c:1d: 5c:e7:25:67:bf:96:af:91:b8:09:9d:5b:1c:f4:85: 2b:a0:4c:d6:b6:e3:2f:b1:f0:e9:6c:be:6c:21:e9: 05:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:76:97:FF:2D:8A:1A:9D:FA:80:37:B8:45:E2:11:FA:A3:CB:E6:99 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:6000::/40 Signature Algorithm: sha256WithRSAEncryption ad:41:72:a9:4e:32:ac:18:21:e2:45:66:9a:a0:99:d9:c9:1c: 26:14:4b:88:9d:1e:8b:3b:56:6a:cb:8f:16:26:99:82:4a:64: 41:d9:d7:f6:06:2b:6f:90:6b:ef:7a:85:ff:98:e4:60:1a:80: 8f:64:5b:44:d1:63:be:fd:d9:46:cf:16:a5:9a:8d:2d:f9:77: 79:ac:eb:e9:b9:9e:3d:65:55:ab:d0:1f:81:61:9d:fd:21:f5: 31:1c:bb:0b:3d:0f:67:b0:c0:b4:f7:1a:8e:85:93:7b:75:56: 92:14:7e:ee:72:3f:35:58:98:09:7c:51:1a:cf:3c:d6:ea:d9: a2:37:9f:dd:b2:8d:3f:35:3b:a9:95:12:77:31:6e:bf:51:15: d9:3d:44:bf:39:89:93:a6:6a:81:d2:7c:cd:17:57:f1:a3:79: a5:f4:d0:38:48:dd:dc:40:f5:ee:e7:8f:a1:46:96:81:71:c1: d7:ea:7b:b3:da:0f:af:52:44:2e:d4:a7:c3:7d:6b:75:dc:d1: e4:36:2f:38:6c:ce:e1:ee:26:30:01:04:31:3c:10:68:a7:d7: dc:6f:6f:96:c0:06:81:1b:70:ef:aa:7c:ed:ca:38:36:76:24: 7b:88:98:52:b7:9d:48:65:10:03:8d:2c:3a:7d:85:9f:37:41: ba:e7:21:22 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNRgUjBKWzyLoc5eN95b0PSfXDJEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMjAwOVoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAMWViZmEyZDJjN2ViNzZmNzVjZmE2 MWNhMDFiZjM0ZDAyNzI3NjU3YzA3YTY4NjQ1Yzg1NjI4ODM3NTc1MjU2MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3edBIOHDaO0tIyif2/4cqM/BpVWU XTPk4RuU9sl+fvuacvap3boMUOp1e4L2lAAMefvp5rPaglIsI6qhD/ibIv7m8Kki gWgpqr0RehXO7O6BZj8bXqVkIHOh84p/W2sVYZ7gy13j2pppZQhl59jb0D992zWm LUZFPRfZznbUOD0b5h/2E9UTElYvfb/gpzM2kRCyxGKi89vPo9Mopn9DBsi/yLTE lz7ZspYb0jnVlXfAYI6HJKWcS1Y6gSN2fhNbcgfehK9EUi1G+cts/f5VYIf350B6 djK3cZCYP8FDPB1c5yVnv5avkbgJnVsc9IUroEzWtuMvsfDpbL5sIekF4QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFN52l/8tihqd+oA3uEXiEfqjy+aZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlN2ZmZTI3LWJiOWYtNDAyZS04ZjkwLTA4OTQ1YTRkOTFlZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNmAwDQYJKoZIhvcNAQELBQADggEBAK1BcqlOMqwYIeJFZpqg mdnJHCYUS4idHos7VmrLjxYmmYJKZEHZ1/YGK2+Qa+96hf+Y5GAagI9kW0TRY779 2UbPFqWajS35d3ms6+m5nj1lVavQH4Fhnf0h9TEcuws9D2ewwLT3Go6Fk3t1VpIU fu5yPzVYmAl8URrPPNbq2aI3n92yjT81O6mVEncxbr9RFdk9RL85iZOmaoHSfM0X V/GjeaX00DhI3dxA9e7nj6FGloFxwdfqe7PaD69SRC7Up8N9a3Xc0eQ2LzhszuHu JjABBDE8EGin19xvb5bABoEbcO+qfO3KODZ2JHuImFK3nUhlEAONLDp9hZ83Qbrn ISI= -----END CERTIFICATE-----Generated at Mon Oct 20 07:24:55 2025 by rpki-client