$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46835a14-57fe-48d1-ae85-3d28b4e62ca1.roa File: 46835a14-57fe-48d1-ae85-3d28b4e62ca1.roa (raw, json) Hash identifier: Ii7HcfuLBQstnHkjnjDZwSEXeFrgcjGznvYexr8cFbg= Subject key identifier: 1E:B5:B6:A7:C6:8F:29:EF:7D:34:41:48:AE:8D:43:AF:C0:66:0A:4A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3FA6D0F79F109FFE4B63E6D82157E43DA2F422E4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46835a14-57fe-48d1-ae85-3d28b4e62ca1.roa Signing time: Fri 26 Sep 2025 00:00:14 +0000 ROA not before: Fri 26 Sep 2025 00:00:14 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a6:d0:f7:9f:10:9f:fe:4b:63:e6:d8:21:57:e4:3d:a2:f4:22:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 26 00:00:14 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=989df7b21440e7a3a3c3dfdfe08ea879b9e735b8a1fbc01a6bd443331223b5dd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:c8:2c:27:b7:a4:2f:35:9c:70:6f:12:01: 77:86:5c:6e:97:d8:4f:b6:69:b7:d4:87:18:d0:b7: d8:54:b3:21:f6:7d:f1:84:f2:12:23:1a:9f:d0:ca: 31:d1:42:39:99:93:c7:f4:ea:e0:20:4a:65:63:37: f5:3b:5f:b8:a9:b6:82:b4:35:a0:0a:a2:ff:83:1d: 62:9f:03:bf:7e:89:da:23:27:77:b0:96:f1:8a:c6: b1:96:2d:4a:fc:1b:bc:1f:da:7b:d3:2d:2d:53:62: 63:b8:66:f2:4f:6c:3d:4b:23:9d:32:a7:02:f8:b3: ef:2e:e5:fc:63:8e:3e:1e:f9:76:d8:a7:f4:fd:72: b5:58:dc:ca:70:de:de:33:f8:07:96:88:76:84:5b: 02:b0:57:2f:6a:15:60:11:14:de:df:67:1b:b5:77: 4f:91:bc:91:2f:af:f0:76:b3:f9:48:b7:a4:29:73: ba:b6:eb:b3:64:d9:5a:fe:2b:1b:3a:b1:14:91:cd: 31:93:9b:52:93:a9:4e:58:e4:85:8b:90:d7:fc:6c: 16:93:d9:7b:07:1c:f3:43:7b:1e:69:70:09:00:b6: 82:f8:41:a9:f6:65:5e:3c:65:15:d2:00:9b:81:23: ee:a6:00:86:fb:d4:a3:57:af:00:5f:bd:b1:8d:4c: 08:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B5:B6:A7:C6:8F:29:EF:7D:34:41:48:AE:8D:43:AF:C0:66:0A:4A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46835a14-57fe-48d1-ae85-3d28b4e62ca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:c000::/40 Signature Algorithm: sha256WithRSAEncryption bc:02:3e:b5:df:d5:2a:44:f3:55:a8:78:59:19:ed:46:1e:80: ae:d1:b6:94:a9:48:72:f6:55:e0:84:89:12:42:db:b6:a7:31: c9:ee:32:15:4e:83:e1:a7:97:2d:2a:fa:2e:4e:9f:99:bf:b5: 42:a0:d7:12:41:90:f1:35:2b:33:45:fd:5e:3e:df:cf:ea:f9: 0d:f9:90:d8:b3:07:a7:95:01:d3:b3:ed:44:47:da:47:ca:e7: 96:d0:ed:26:45:ae:59:07:77:61:aa:07:69:c3:e6:75:51:08: be:7b:81:94:e3:54:83:6c:ee:01:0b:e0:4d:32:b6:1a:cd:f0: 67:e6:44:ed:f0:71:30:9c:f6:7d:8a:f3:40:bb:00:90:8a:91: e7:b0:b4:82:cd:a8:9f:27:6c:87:9a:62:b5:b4:a9:f5:c8:be: c1:c1:00:ec:26:e1:1f:7c:7a:ad:61:5a:ea:84:52:6a:0f:83: 6d:0e:60:ae:68:19:8e:59:14:6e:3c:6f:43:69:34:d6:42:d5: ff:0e:e2:23:ac:be:6d:f7:a6:c3:46:80:23:ac:ba:7f:cd:6d: 94:93:9a:f4:be:b8:10:67:c7:1e:32:1c:fc:a6:ab:cd:e2:f4: d3:fa:fb:4f:f8:f4:39:8c:22:f8:de:d7:9f:3e:d1:a7:d2:76: 40:77:91:98 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUP6bQ958Qn/5LY+bYIVfkPaL0IuQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkyNjAwMDAxNFoX DTI1MTAzMTIzNTk1OVowejFJMEcGA1UEBRNAOTg5ZGY3YjIxNDQwZTdhM2EzYzNk ZmRmZTA4ZWE4NzliOWU3MzViOGExZmJjMDFhNmJkNDQzMzMxMjIzYjVkZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRrILCe3pC81nHBvEgF3hlxul9hP tmm31IcY0LfYVLMh9n3xhPISIxqf0Mox0UI5mZPH9OrgIEplYzf1O1+4qbaCtDWg CqL/gx1inwO/fonaIyd3sJbxisaxli1K/Bu8H9p70y0tU2JjuGbyT2w9SyOdMqcC +LPvLuX8Y44+Hvl22Kf0/XK1WNzKcN7eM/gHloh2hFsCsFcvahVgERTe32cbtXdP kbyRL6/wdrP5SLekKXO6tuuzZNla/isbOrEUkc0xk5tSk6lOWOSFi5DX/GwWk9l7 BxzzQ3seaXAJALaC+EGp9mVePGUV0gCbgSPupgCG+9SjV68AX72xjUwITwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB61tqfGjynvfTRBSK6NQ6/AZgpKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ2ODM1YTE0LTU3ZmUtNDhkMS1hZTg1LTNkMjhiNGU2MmNhMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba78AwDQYJKoZIhvcNAQELBQADggEBALwCPrXf1SpE81WoeFkZ 7UYegK7RtpSpSHL2VeCEiRJC27anMcnuMhVOg+Gnly0q+i5On5m/tUKg1xJBkPE1 KzNF/V4+38/q+Q35kNizB6eVAdOz7URH2kfK55bQ7SZFrlkHd2GqB2nD5nVRCL57 gZTjVINs7gEL4E0ythrN8GfmRO3wcTCc9n2K80C7AJCKkeewtILNqJ8nbIeaYrW0 qfXIvsHBAOwm4R98eq1hWuqEUmoPg20OYK5oGY5ZFG48b0NpNNZC1f8O4iOsvm33 psNGgCOsun/NbZSTmvS+uBBnxx4yHPymq83i9NP6+0/49DmMIvje158+0afSdkB3 kZg= -----END CERTIFICATE-----Generated at Mon Oct 20 09:56:26 2025 by rpki-client