$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3572061c-ed63-412c-951c-ef0215c6fe82.roa File: 3572061c-ed63-412c-951c-ef0215c6fe82.roa (raw, json) Hash identifier: D3hSjgDrBVsRd33TO6GCdbq2EGmurZxVT7AaMuolPqk= Subject key identifier: 63:79:03:CF:A4:97:90:3C:06:CA:8E:49:42:69:09:9C:DC:3F:94:EC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 61B371DC0F004587975A29B5ADE3B6D70E2F0B43 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3572061c-ed63-412c-951c-ef0215c6fe82.roa Signing time: Wed 15 Oct 2025 00:20:35 +0000 ROA not before: Wed 15 Oct 2025 00:20:35 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b3:71:dc:0f:00:45:87:97:5a:29:b5:ad:e3:b6:d7:0e:2f:0b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:20:35 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=47d0e5e417df5ccc88abac9b57b3384cba4f021c593c7eae2bce743f6203c50f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:cb:ad:b4:fb:29:12:65:20:0e:ad:37:d3: aa:3c:93:cc:82:8f:d7:0d:55:a9:8c:45:55:7c:e7: b1:e1:d0:f8:62:62:da:26:3f:ed:0e:40:3c:1e:ab: f5:17:dd:ff:55:da:80:21:d4:b7:dc:ae:0d:ff:80: 9a:41:85:fa:33:7f:4b:fb:31:36:14:88:8a:a3:88: 14:b9:e1:12:fb:db:0c:82:ab:26:81:a6:e8:0c:f1: 01:b1:41:dc:33:b1:37:bd:fd:fd:9e:75:82:7e:33: ef:5d:df:e9:4a:ae:61:bc:6d:d1:20:aa:e5:b6:0a: 79:d4:ff:ba:66:86:3f:0a:51:70:cc:fb:46:78:41: 59:23:ff:49:fc:ec:07:67:d2:33:0e:5d:37:2d:d6: 47:54:29:74:37:4b:23:67:95:3f:01:ba:69:0a:d7: 4e:da:f6:07:55:67:70:da:fc:b6:e0:bc:ac:10:04: 96:28:b1:06:7f:76:22:87:b3:49:6c:b6:0a:db:53: 16:2e:5d:af:f4:d9:97:34:0d:2b:32:9e:6a:b3:27: e8:65:43:17:e5:89:8c:7f:4f:ac:ad:b3:20:ab:15: 35:a7:80:47:e0:5e:72:65:04:f8:5c:82:99:28:9b: 3f:e1:32:d8:6f:6f:ae:a3:fc:54:07:de:72:e7:62: cc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:79:03:CF:A4:97:90:3C:06:CA:8E:49:42:69:09:9C:DC:3F:94:EC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3572061c-ed63-412c-951c-ef0215c6fe82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:2800::/40 Signature Algorithm: sha256WithRSAEncryption ca:b4:c6:26:dc:b2:c9:1c:ab:f3:cf:22:86:42:0f:ec:03:52: 73:68:10:92:87:87:7c:e7:bd:4a:50:51:33:43:b5:1d:f5:7c: 23:99:ea:d2:57:d6:98:db:8c:a5:b1:38:c3:70:6b:17:c6:c0: 03:38:68:65:23:17:e0:87:68:65:d6:8e:87:8e:c0:45:57:c7: fe:ba:e1:4b:db:16:e1:d2:9e:50:ba:7c:cf:93:99:e9:b4:a4: 8d:56:29:9f:b1:a6:83:6c:f6:77:de:90:26:15:0c:da:00:b7: be:bf:7d:3e:0f:f6:26:e3:52:a8:75:d9:74:2a:9c:66:c6:e0: 45:81:3d:60:5d:a6:44:7c:9d:54:01:b1:7a:e3:19:99:bb:62: 50:c9:0d:db:36:0b:ac:f7:5b:34:88:9f:a5:d4:d0:2f:3a:47: 0d:50:88:1e:54:92:ca:cf:e3:1a:7c:96:4f:c6:2a:52:bd:6a: 76:5c:ec:64:ff:d9:6a:c8:b6:2c:1b:13:a7:7b:ff:fc:b0:e0: 96:96:73:21:8a:43:e1:6c:14:e1:b2:66:78:f8:ba:ed:68:2f: b7:54:06:77:2f:bf:7d:58:1f:ac:a9:3a:4a:86:67:f2:4c:e9: 0b:1a:04:7f:46:46:b7:82:43:1a:77:41:e6:ba:c3:4b:24:1c: fe:08:6c:28 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYbNx3A8ARYeXWim1reO21w4vC0MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMjAzNVoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNANDdkMGU1ZTQxN2RmNWNjYzg4YWJh YzliNTdiMzM4NGNiYTRmMDIxYzU5M2M3ZWFlMmJjZTc0M2Y2MjAzYzUwZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2XLrbT7KRJlIA6tN9OqPJPMgo/X DVWpjEVVfOex4dD4YmLaJj/tDkA8Hqv1F93/VdqAIdS33K4N/4CaQYX6M39L+zE2 FIiKo4gUueES+9sMgqsmgaboDPEBsUHcM7E3vf39nnWCfjPvXd/pSq5hvG3RIKrl tgp51P+6ZoY/ClFwzPtGeEFZI/9J/OwHZ9IzDl03LdZHVCl0N0sjZ5U/AbppCtdO 2vYHVWdw2vy24LysEASWKLEGf3Yih7NJbLYK21MWLl2v9NmXNA0rMp5qsyfoZUMX 5YmMf0+srbMgqxU1p4BH4F5yZQT4XIKZKJs/4TLYb2+uo/xUB95y52LM/QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGN5A8+kl5A8BsqOSUJpCZzcP5TsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM1NzIwNjFjLWVkNjMtNDEyYy05NTFjLWVmMDIxNWM2ZmU4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9SgwDQYJKoZIhvcNAQELBQADggEBAMq0xibcsskcq/PPIoZC D+wDUnNoEJKHh3znvUpQUTNDtR31fCOZ6tJX1pjbjKWxOMNwaxfGwAM4aGUjF+CH aGXWjoeOwEVXx/664UvbFuHSnlC6fM+Tmem0pI1WKZ+xpoNs9nfekCYVDNoAt76/ fT4P9ibjUqh12XQqnGbG4EWBPWBdpkR8nVQBsXrjGZm7YlDJDds2C6z3WzSIn6XU 0C86Rw1QiB5UksrP4xp8lk/GKlK9anZc7GT/2WrItiwbE6d7//yw4JaWcyGKQ+Fs FOGyZnj4uu1oL7dUBncvv31YH6ypOkqGZ/JM6QsaBH9GRreCQxp3Qea6w0skHP4I bCg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:29:07 2025 by rpki-client