$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42ad6457-9831-48b3-bc79-de5f9459d461.roa File: 42ad6457-9831-48b3-bc79-de5f9459d461.roa (raw, json) Hash identifier: UZN+Ms+As+bgx6AG6lTZIwit17S97KjK78sO+QY6D9E= Subject key identifier: 56:B2:C9:D4:27:86:BA:F3:18:B0:08:F2:11:59:97:2F:49:C9:8A:70 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3DD64FDFC02A48396BC7775AAD8148235BC3BFFB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42ad6457-9831-48b3-bc79-de5f9459d461.roa Signing time: Wed 15 Oct 2025 00:40:37 +0000 ROA not before: Wed 15 Oct 2025 00:40:37 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da12:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d6:4f:df:c0:2a:48:39:6b:c7:77:5a:ad:81:48:23:5b:c3:bf:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:40:37 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=aea61b33a695d0cc43d266dbd0da10d69d7639ae978a3a909b560c2d39d530ff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6a:b9:2b:61:a5:2e:15:a6:a7:d6:2a:88:da: 9e:2d:b1:fc:da:0a:df:b5:34:09:5d:b5:e3:30:f5: 91:e8:7b:7c:b4:d5:f0:3c:b5:53:3e:80:3d:a9:f0: da:a6:81:a6:a1:bc:9b:95:e7:f0:91:09:af:4b:6d: fb:a1:94:73:1a:a1:82:cf:dd:91:f2:32:32:46:6a: 4b:55:a6:32:70:67:4b:ec:a3:41:40:a7:12:16:af: 1e:cd:ed:b4:d1:11:a8:73:39:c4:c2:ff:37:17:67: 47:8f:07:ab:98:f2:f7:b9:f2:a8:51:22:11:39:a1: 0f:f5:4f:90:61:b2:48:61:f5:93:1b:0b:f3:bd:13: 09:26:0c:bd:e3:91:65:86:67:d7:ca:d1:3a:8a:24: 5d:d8:41:91:72:70:af:a9:ea:2e:23:98:68:5a:06: 02:c7:89:cc:81:3b:9a:61:a9:13:61:be:e8:e5:a8: 6d:43:47:41:ac:13:93:eb:ae:87:84:fc:e0:3f:82: 4a:2d:61:fd:dc:16:bc:0e:59:c5:4c:15:fc:ce:fa: 7b:6e:ed:15:14:d8:47:bc:f7:4c:b8:98:27:ad:8d: 9a:f7:7e:f1:37:b3:a9:91:0b:51:9f:0c:f8:16:fc: 02:d5:cc:10:8b:a2:6e:43:ca:3f:6a:91:d0:36:cc: a8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B2:C9:D4:27:86:BA:F3:18:B0:08:F2:11:59:97:2F:49:C9:8A:70 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42ad6457-9831-48b3-bc79-de5f9459d461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da12:8000::/36 Signature Algorithm: sha256WithRSAEncryption 83:5d:9f:6f:fc:d8:cf:14:57:15:7a:3d:fe:f5:ca:6e:d1:b2: 3b:3d:9a:b8:fd:f0:e9:12:97:0a:8e:f1:0a:9f:67:06:a5:e8: 2d:02:3d:9a:b2:30:95:02:a3:9f:ac:eb:8d:6e:cc:27:53:bd: 1c:35:f2:bc:ad:9f:51:2f:6c:19:30:6a:37:24:dd:b9:6f:2e: 39:59:2d:55:67:9c:ba:50:22:45:46:e4:8e:35:53:28:44:0a: 1b:f4:65:22:9f:10:01:92:8d:9c:a9:51:b0:5d:b9:cb:68:0d: f5:86:78:a7:f5:7e:8c:14:6d:a5:4b:25:29:3f:86:22:f0:15: 1a:74:8a:e1:bf:9c:7a:5e:61:4a:6b:6d:b4:fa:eb:73:25:d2: 3c:f4:39:49:15:eb:9b:26:80:f7:b5:1f:1b:55:ce:89:96:41: 03:ba:c2:9f:5e:7e:bb:76:f0:9e:48:b3:52:07:6d:68:22:71: 91:c4:ba:64:71:45:78:bf:0d:f1:fc:2f:db:18:c6:5a:37:77: fd:5a:89:a1:3a:3d:37:a7:d6:c7:05:78:8c:a4:f9:e9:54:43: ee:90:bf:c9:65:fa:fa:0d:ae:c7:1e:c4:c6:64:f6:ab:1b:bb: c6:9a:bf:e5:3b:25:25:65:e0:20:fc:e2:55:8c:24:d3:0f:cb: 51:90:9e:54 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPdZP38AqSDlrx3darYFII1vDv/swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwNDAzN1oX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAYWVhNjFiMzNhNjk1ZDBjYzQzZDI2 NmRiZDBkYTEwZDY5ZDc2MzlhZTk3OGEzYTkwOWI1NjBjMmQzOWQ1MzBmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2q5K2GlLhWmp9YqiNqeLbH82grf tTQJXbXjMPWR6Ht8tNXwPLVTPoA9qfDapoGmobyblefwkQmvS237oZRzGqGCz92R 8jIyRmpLVaYycGdL7KNBQKcSFq8eze200RGocznEwv83F2dHjwermPL3ufKoUSIR OaEP9U+QYbJIYfWTGwvzvRMJJgy945FlhmfXytE6iiRd2EGRcnCvqeouI5hoWgYC x4nMgTuaYakTYb7o5ahtQ0dBrBOT666HhPzgP4JKLWH93Ba8DlnFTBX8zvp7bu0V FNhHvPdMuJgnrY2a937xN7OpkQtRnwz4FvwC1cwQi6JuQ8o/apHQNsyo6wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFayydQnhrrzGLAI8hFZly9JyYpwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQyYWQ2NDU3LTk4MzEtNDhiMy1iYzc5LWRlNWY5NDU5ZDQ2MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaEoAwDQYJKoZIhvcNAQELBQADggEBAINdn2/82M8UVxV6Pf71 ym7Rsjs9mrj98OkSlwqO8QqfZwal6C0CPZqyMJUCo5+s641uzCdTvRw18rytn1Ev bBkwajck3blvLjlZLVVnnLpQIkVG5I41UyhEChv0ZSKfEAGSjZypUbBductoDfWG eKf1fowUbaVLJSk/hiLwFRp0iuG/nHpeYUprbbT663Ml0jz0OUkV65smgPe1HxtV zomWQQO6wp9efrt28J5Is1IHbWgicZHEumRxRXi/DfH8L9sYxlo3d/1aiaE6PTen 1scFeIyk+elUQ+6Qv8ll+voNrscexMZk9qsbu8aav+U7JSVl4CD84lWMJNMPy1GQ nlQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:57 2025 by rpki-client