$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3050c822-214a-42c8-80c6-ab24f49ef5df.roa File: 3050c822-214a-42c8-80c6-ab24f49ef5df.roa (raw, json) Hash identifier: 7KMgEJ0SrZR4ZzZ1i6fROe1SDN8RLX4SEQYjf1oqDxE= Subject key identifier: 56:44:68:11:AF:41:F3:55:C9:10:B5:C0:43:E5:43:AA:2F:6F:AE:F8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7A117F4E6EC9483BAC1D500BBCB6CCEA0743D266 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3050c822-214a-42c8-80c6-ab24f49ef5df.roa Signing time: Sat 11 Oct 2025 00:00:38 +0000 ROA not before: Sat 11 Oct 2025 00:00:38 +0000 ROA not after: Sat 15 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:11:7f:4e:6e:c9:48:3b:ac:1d:50:0b:bc:b6:cc:ea:07:43:d2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 11 00:00:38 2025 GMT Not After : Nov 15 23:59:59 2025 GMT Subject: serialNumber=0ed216fa9a342d6f7977aac4a2dfaee9decfa8adb8aa818e90fe71c56b0fb966, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:22:cd:cf:f7:ff:d3:52:ea:7a:0e:2e:ea: 6c:a8:5a:f9:bf:6f:df:94:22:9d:f3:c9:42:46:0f: 6c:3a:ae:6c:d6:eb:ab:7f:8f:9b:35:81:ce:18:da: a6:1c:48:fd:cb:f9:f4:7a:2c:74:5e:d3:e5:69:a1: b3:05:7d:f4:db:ad:6c:a7:aa:9e:f2:5b:a1:0f:54: c3:79:91:ce:2f:95:c1:79:55:5f:f2:1e:b5:64:1d: 5e:79:20:3f:58:c4:f7:3f:fa:db:35:c6:43:01:5f: 22:6f:d4:18:45:a6:6c:08:81:b1:1a:ee:a8:c2:b9: 20:d9:94:80:34:bf:23:fb:35:a0:27:91:b0:05:a6: 62:91:63:a4:f9:7f:c0:ca:4b:46:cd:62:b0:c4:18: 58:98:76:8f:11:fb:6c:2e:76:92:fe:fd:94:cd:f6: 31:bb:4e:0a:a8:c4:5b:27:25:aa:ca:85:e6:f2:1e: 1e:05:77:2f:27:54:ef:0a:0c:4b:a5:fa:2b:2e:5c: 3d:95:86:2c:70:92:b2:1a:14:38:c5:85:b9:14:22: 9b:35:30:58:c0:bd:b3:f9:e1:81:c1:b7:aa:63:0c: 54:95:d3:c0:cf:77:3c:25:71:d3:94:ad:d8:b1:8b: 65:f2:f5:b6:31:0b:45:a3:0d:cf:fb:5a:96:a5:0b: b2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:44:68:11:AF:41:F3:55:C9:10:B5:C0:43:E5:43:AA:2F:6F:AE:F8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3050c822-214a-42c8-80c6-ab24f49ef5df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:c040::/48 Signature Algorithm: sha256WithRSAEncryption 0e:b1:04:75:3c:7f:02:76:55:86:3c:58:1e:37:3e:31:6a:0a: f2:32:36:b1:a3:ef:11:94:13:93:98:ed:61:14:a0:07:ea:ae: 7e:a8:21:b7:16:2a:9a:17:71:1d:11:ee:02:ea:fd:56:d8:2f: 8d:27:3b:bf:f0:fe:d8:5e:03:79:b2:e3:01:61:fd:af:f2:76: d8:25:22:5a:dd:7b:51:a9:6e:79:c1:2b:c3:7b:cb:73:ca:1f: 5f:6d:d8:85:54:3a:c8:6e:dc:29:2d:b1:92:6b:45:e0:f1:95: 19:d5:0e:a5:ba:ec:1d:5c:17:0d:2c:4f:dc:82:13:d4:46:be: 79:bc:52:e3:93:e9:27:65:fe:f0:aa:5e:d8:c6:24:b8:a8:c4: cf:b6:d3:2a:53:71:a1:70:ce:8f:66:3a:21:4d:c4:71:15:c2: 83:d9:2f:32:ce:ec:c7:ed:a0:df:d2:8e:c5:b8:d9:c0:f1:2f: 82:e9:7b:3c:da:1e:3c:97:93:a3:d1:5f:2d:49:67:6a:d2:da: 66:a8:06:46:cf:e2:0f:02:e1:b6:5c:8c:83:45:1d:e0:ba:ee: 56:c2:22:6f:13:fb:52:e7:92:9a:70:13:d8:78:ee:6c:fa:62: e9:c1:04:c0:93:58:c0:93:0b:34:05:3c:6e:0f:15:55:76:06: 42:16:07:43 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUehF/Tm7JSDusHVALvLbM6gdD0mYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMTAwMDAzOFoX DTI1MTExNTIzNTk1OVowejFJMEcGA1UEBRNAMGVkMjE2ZmE5YTM0MmQ2Zjc5Nzdh YWM0YTJkZmFlZTlkZWNmYThhZGI4YWE4MThlOTBmZTcxYzU2YjBmYjk2NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAYizc/3/9NS6noOLupsqFr5v2/f lCKd88lCRg9sOq5s1uurf4+bNYHOGNqmHEj9y/n0eix0XtPlaaGzBX30261sp6qe 8luhD1TDeZHOL5XBeVVf8h61ZB1eeSA/WMT3P/rbNcZDAV8ib9QYRaZsCIGxGu6o wrkg2ZSANL8j+zWgJ5GwBaZikWOk+X/AyktGzWKwxBhYmHaPEftsLnaS/v2UzfYx u04KqMRbJyWqyoXm8h4eBXcvJ1TvCgxLpforLlw9lYYscJKyGhQ4xYW5FCKbNTBY wL2z+eGBwbeqYwxUldPAz3c8JXHTlK3YsYtl8vW2MQtFow3P+1qWpQuy0QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFZEaBGvQfNVyRC1wEPlQ6ovb674MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMwNTBjODIyLTIxNGEtNDJjOC04MGM2LWFiMjRmNDllZjVkZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8sBAMA0GCSqGSIb3DQEBCwUAA4IBAQAOsQR1PH8CdlWGPFge Nz4xagryMjaxo+8RlBOTmO1hFKAH6q5+qCG3FiqaF3EdEe4C6v1W2C+NJzu/8P7Y XgN5suMBYf2v8nbYJSJa3XtRqW55wSvDe8tzyh9fbdiFVDrIbtwpLbGSa0Xg8ZUZ 1Q6luuwdXBcNLE/cghPURr55vFLjk+knZf7wql7YxiS4qMTPttMqU3GhcM6PZjoh TcRxFcKD2S8yzuzH7aDf0o7FuNnA8S+C6Xs82h48l5Oj0V8tSWdq0tpmqAZGz+IP AuG2XIyDRR3guu5WwiJvE/tS55KacBPYeO5s+mLpwQTAk1jAkws0BTxuDxVVdgZC FgdD -----END CERTIFICATE-----Generated at Mon Oct 20 12:32:45 2025 by rpki-client