$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52b4befd-8168-4da6-b46f-ec0a40b70ae0.roa File: 52b4befd-8168-4da6-b46f-ec0a40b70ae0.roa (raw, json) Hash identifier: Z5dHtjmCowrc60zuJxdNb1Tg8nHKQ9JLRbYlTJRBo5k= Subject key identifier: 12:AA:29:BE:16:B8:C7:CD:E4:19:83:C5:2E:1D:DB:5C:4A:2B:6B:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6393D09B10B2F22E31F24A64653A48FCCD965635 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52b4befd-8168-4da6-b46f-ec0a40b70ae0.roa Signing time: Tue 14 Oct 2025 00:20:15 +0000 ROA not before: Tue 14 Oct 2025 00:20:15 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:93:d0:9b:10:b2:f2:2e:31:f2:4a:64:65:3a:48:fc:cd:96:56:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 14 00:20:15 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=e5e214ece3cd60f2402bbda51a5409d765b460bf11658894c84dc5e3452b72df, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:10:34:8b:1f:ba:be:b3:c4:bb:7b:3f:eb:2d: bf:e7:c6:0b:b1:f8:bd:ff:e5:e2:67:d2:04:bc:b2: 04:78:d7:ab:dd:3a:c8:48:c6:10:67:28:2e:bf:16: 4a:70:42:1a:c5:39:d5:4d:a4:b4:6d:ab:bf:f8:0d: d1:c0:e0:b0:9b:ab:22:03:b5:d9:a8:e5:9c:70:4c: dd:c4:74:8c:3d:88:21:da:38:d7:76:ac:c8:aa:ce: a5:81:fb:26:a7:d0:54:59:bb:c2:01:18:2a:18:4e: d1:a2:87:6d:a1:e2:4f:3d:20:b7:db:0f:1a:59:1a: 7f:91:43:25:74:47:dc:8c:e4:54:9d:ab:7c:ad:0f: 80:9c:87:e0:94:1e:a2:e5:ac:88:fd:dd:62:5e:fc: 43:28:1f:4c:d6:64:3d:d4:41:9b:84:98:1c:b1:16: a9:c5:e2:60:a8:18:45:26:00:bf:d8:f5:61:11:eb: 41:14:58:51:df:4d:98:bc:50:e7:8b:d3:9b:28:22: f6:68:36:0d:8e:37:4a:bb:84:61:76:e6:1a:a3:4f: 9e:c7:41:e3:07:7b:c3:cc:26:87:e8:cb:65:3f:18: 3a:82:ba:86:7f:e8:9a:68:fa:fe:1d:8f:b0:46:7a: f1:a2:3e:d6:98:2f:a3:41:b0:53:ac:1d:09:05:dd: c4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AA:29:BE:16:B8:C7:CD:E4:19:83:C5:2E:1D:DB:5C:4A:2B:6B:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52b4befd-8168-4da6-b46f-ec0a40b70ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:7000::/40 Signature Algorithm: sha256WithRSAEncryption bf:75:ed:f5:d5:5b:a8:08:e2:6a:b4:9f:df:61:fb:70:98:fd: 7d:fb:72:a7:af:6e:56:2c:79:7c:d7:32:af:af:53:04:b5:45: 99:69:8f:9e:6d:e5:a5:c6:2e:89:fa:8f:02:4c:22:f4:24:49: 36:d9:a5:9f:ab:f9:76:eb:3b:a6:40:66:e4:25:01:16:27:ec: 68:9b:d6:33:a2:b9:a0:93:21:a3:07:27:a0:73:ed:b5:4e:03: ab:95:65:3a:d8:8b:e9:06:b6:55:92:af:14:70:02:59:42:e0: ca:d6:4f:7f:39:9c:20:ff:da:aa:ec:c0:07:b4:86:70:a4:b4: e4:f3:86:b2:ed:a1:70:13:e4:52:52:15:0d:bd:c5:37:fe:f4: c5:bc:0c:56:b1:53:09:35:8a:dd:95:06:8c:59:3b:e2:a6:c7: 99:fd:d1:8e:26:a0:2f:df:22:06:f1:92:22:d5:c4:de:06:e3: 72:91:74:16:58:5b:bc:87:67:da:99:a5:19:13:17:6c:01:76: 88:2b:83:6b:8e:bb:a8:58:19:a7:77:10:20:5a:9e:f6:82:d8: e3:f2:0c:0f:0b:3f:3e:d5:11:8f:f1:94:58:9e:5b:79:b8:c8: 93:59:e4:73:72:20:60:cb:dc:54:15:b4:20:b5:58:81:e2:92: e9:81:6b:9b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUY5PQmxCy8i4x8kpkZTpI/M2WVjUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNDAwMjAxNVoX DTI1MTExODIzNTk1OVowejFJMEcGA1UEBRNAZTVlMjE0ZWNlM2NkNjBmMjQwMmJi ZGE1MWE1NDA5ZDc2NWI0NjBiZjExNjU4ODk0Yzg0ZGM1ZTM0NTJiNzJkZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxA0ix+6vrPEu3s/6y2/58YLsfi9 /+XiZ9IEvLIEeNer3TrISMYQZyguvxZKcEIaxTnVTaS0bau/+A3RwOCwm6siA7XZ qOWccEzdxHSMPYgh2jjXdqzIqs6lgfsmp9BUWbvCARgqGE7RoodtoeJPPSC32w8a WRp/kUMldEfcjORUnat8rQ+AnIfglB6i5ayI/d1iXvxDKB9M1mQ91EGbhJgcsRap xeJgqBhFJgC/2PVhEetBFFhR302YvFDni9ObKCL2aDYNjjdKu4RhduYao0+ex0Hj B3vDzCaH6MtlPxg6grqGf+iaaPr+HY+wRnrxoj7WmC+jQbBTrB0JBd3ExQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBKqKb4WuMfN5BmDxS4d21xKK2sUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUyYjRiZWZkLTgxNjgtNGRhNi1iNDZmLWVjMGE0MGI3MGFlMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaXAwDQYJKoZIhvcNAQELBQADggEBAL917fXVW6gI4mq0n99h +3CY/X37cqevblYseXzXMq+vUwS1RZlpj55t5aXGLon6jwJMIvQkSTbZpZ+r+Xbr O6ZAZuQlARYn7Gib1jOiuaCTIaMHJ6Bz7bVOA6uVZTrYi+kGtlWSrxRwAllC4MrW T385nCD/2qrswAe0hnCktOTzhrLtoXAT5FJSFQ29xTf+9MW8DFaxUwk1it2VBoxZ O+Kmx5n90Y4moC/fIgbxkiLVxN4G43KRdBZYW7yHZ9qZpRkTF2wBdogrg2uOu6hY Gad3ECBanvaC2OPyDA8LPz7VEY/xlFieW3m4yJNZ5HNyIGDL3FQVtCC1WIHikumB a5s= -----END CERTIFICATE-----Generated at Mon Oct 20 07:20:55 2025 by rpki-client