$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5330de75-901c-47df-896b-0ce5ff3b5372.roa File: 5330de75-901c-47df-896b-0ce5ff3b5372.roa (raw, json) Hash identifier: AaVULgUN+2g+7z5ArExXDEEO27ArLUuzINiN4M74IBw= Subject key identifier: 3C:04:BC:4A:AF:D0:22:5F:0D:06:39:00:C5:78:BF:87:2A:FE:73:1D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C42061D6848017D18F19CE6CCFA32D55949B1C2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5330de75-901c-47df-896b-0ce5ff3b5372.roa Signing time: Fri 03 Oct 2025 00:00:09 +0000 ROA not before: Fri 03 Oct 2025 00:00:09 +0000 ROA not after: Fri 07 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:42:06:1d:68:48:01:7d:18:f1:9c:e6:cc:fa:32:d5:59:49:b1:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 3 00:00:09 2025 GMT Not After : Nov 7 23:59:59 2025 GMT Subject: serialNumber=4f0c4f5ca542ebccc013575060f10d6b89c7794c618d8433f1609986b8a5d9f6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:a3:96:05:1e:ca:49:91:9e:63:34:38:18: 51:31:7b:4f:fb:cb:f0:59:f8:a2:eb:97:89:36:24: 20:80:7f:2d:1a:4c:f6:23:cd:05:a8:c7:8c:c8:03: 35:d8:8a:0a:f3:7c:23:6e:45:e4:a2:bf:e6:c4:2b: 8a:d1:e6:46:b0:87:c1:3d:68:91:b4:96:54:40:c2: c2:2b:8c:34:ad:68:f0:32:67:06:e7:b1:5e:58:92: 82:04:a5:fd:c7:4e:31:74:21:8e:aa:26:8a:c3:d0: 0a:bc:af:81:96:2d:8e:70:c3:e9:32:fb:3d:d6:8e: 38:73:cc:64:f1:49:21:9e:94:9a:ac:84:31:9d:0c: 57:d9:da:2d:ef:b3:d1:4c:4c:3f:2d:b3:d8:fa:9a: 28:23:d3:df:e5:55:81:a4:a5:77:54:0b:b9:28:bd: 2f:e8:87:5b:21:c1:41:a2:a1:2b:72:bf:bf:01:8e: 17:8c:91:90:82:60:68:0f:fd:5d:e6:1a:b5:03:42: 3f:db:4b:1f:57:66:e3:a0:84:ce:6e:10:a5:4c:a2: 45:ad:da:8d:45:e9:5a:67:ce:a1:c2:ef:02:98:b1: eb:41:45:8c:5e:27:f2:de:97:df:b9:14:ed:1a:61: 96:da:5b:d4:d7:14:25:45:7d:da:74:2e:23:f9:13: 83:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:04:BC:4A:AF:D0:22:5F:0D:06:39:00:C5:78:BF:87:2A:FE:73:1D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5330de75-901c-47df-896b-0ce5ff3b5372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:8800::/40 Signature Algorithm: sha256WithRSAEncryption 08:31:28:38:4e:2e:7f:3f:b4:c9:a7:f5:88:90:9d:12:56:a5: 5a:9c:b8:6d:e8:32:3f:92:b4:b1:a5:6d:cb:69:2e:da:76:6d: 53:38:8e:6e:08:df:ae:c7:e0:24:77:88:59:35:51:a7:b0:49: e7:84:fa:26:e6:2a:42:e9:a4:76:84:8c:73:1e:16:a0:13:8a: 3d:c9:db:89:af:5e:2f:4b:30:b8:e4:37:97:3f:f8:e9:ff:12: 9a:d4:43:e6:67:3b:f1:42:42:5e:f0:4c:0a:a7:36:00:18:07: 64:8c:92:d2:d4:e1:80:87:88:a2:11:62:55:c6:dd:a8:a1:16: 10:77:bb:22:de:b1:19:02:76:75:c3:a0:a1:2e:91:f1:79:bb: fe:a4:2c:2e:ba:bc:54:72:4d:ae:0c:02:d9:72:e1:d8:38:e4: 16:a1:01:24:06:12:5d:9d:f4:f1:9d:c0:86:c6:27:47:e5:a6: 51:7f:f3:7a:55:3c:fa:d8:1d:15:37:33:93:10:2b:1b:1f:8a: 67:ff:0f:e6:c2:60:6e:b7:eb:3c:6a:69:83:dd:00:83:2f:85: 83:2a:b4:f5:18:3c:67:4d:f8:df:eb:bf:c9:c8:6d:65:51:83: bc:e2:5f:80:8d:f9:68:35:24:1f:15:7b:94:8c:46:3f:f6:3a: d1:89:f2:1a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPEIGHWhIAX0Y8ZzmzPoy1VlJscIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwMzAwMDAwOVoX DTI1MTEwNzIzNTk1OVowejFJMEcGA1UEBRNANGYwYzRmNWNhNTQyZWJjY2MwMTM1 NzUwNjBmMTBkNmI4OWM3Nzk0YzYxOGQ4NDMzZjE2MDk5ODZiOGE1ZDlmNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviajlgUeykmRnmM0OBhRMXtP+8vw Wfii65eJNiQggH8tGkz2I80FqMeMyAM12IoK83wjbkXkor/mxCuK0eZGsIfBPWiR tJZUQMLCK4w0rWjwMmcG57FeWJKCBKX9x04xdCGOqiaKw9AKvK+Bli2OcMPpMvs9 1o44c8xk8UkhnpSarIQxnQxX2dot77PRTEw/LbPY+pooI9Pf5VWBpKV3VAu5KL0v 6IdbIcFBoqErcr+/AY4XjJGQgmBoD/1d5hq1A0I/20sfV2bjoITObhClTKJFrdqN RelaZ86hwu8CmLHrQUWMXify3pffuRTtGmGW2lvU1xQlRX3adC4j+RODnwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDwEvEqv0CJfDQY5AMV4v4cq/nMdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUzMzBkZTc1LTkwMWMtNDdkZi04OTZiLTBjZTVmZjNiNTM3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAIgwDQYJKoZIhvcNAQELBQADggEBAAgxKDhOLn8/tMmn9YiQ nRJWpVqcuG3oMj+StLGlbctpLtp2bVM4jm4I367H4CR3iFk1UaewSeeE+ibmKkLp pHaEjHMeFqATij3J24mvXi9LMLjkN5c/+On/EprUQ+ZnO/FCQl7wTAqnNgAYB2SM ktLU4YCHiKIRYlXG3aihFhB3uyLesRkCdnXDoKEukfF5u/6kLC66vFRyTa4MAtly 4dg45BahASQGEl2d9PGdwIbGJ0flplF/83pVPPrYHRU3M5MQKxsfimf/D+bCYG63 6zxqaYPdAIMvhYMqtPUYPGdN+N/rv8nIbWVRg7ziX4CN+Wg1JB8Ve5SMRj/2OtGJ 8ho= -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:45 2025 by rpki-client