$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b24fcef-3cc3-4307-8861-9377f8d833fe.roa File: 6b24fcef-3cc3-4307-8861-9377f8d833fe.roa (raw, json) Hash identifier: EmUdqTTlNmjhA3tFiIJjjGgy0cybUz8HJGRzFVQ9S4E= Subject key identifier: 9A:21:A5:64:96:A4:5A:C8:0F:A1:2F:E4:5D:AD:E7:DB:EE:FB:FB:E3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 69FDBF7A14F4F17BE6AD95DA7115BC0715C16F88 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b24fcef-3cc3-4307-8861-9377f8d833fe.roa Signing time: Fri 10 Oct 2025 00:00:06 +0000 ROA not before: Fri 10 Oct 2025 00:00:06 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:fd:bf:7a:14:f4:f1:7b:e6:ad:95:da:71:15:bc:07:15:c1:6f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 10 00:00:06 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=8dde1a24910012bcf4dc4c34b3b99c503b32ef15c2dbb9467bfc77fadb596a6d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:4d:93:79:eb:13:fa:f9:b5:dd:ca:fa:fb: d1:d3:4d:69:e4:dc:93:33:26:e8:54:cf:97:49:68: 85:0b:2e:a2:ce:2b:d1:9d:28:70:25:da:8a:40:52: 59:7f:9b:d7:5b:c3:74:0d:ee:d3:ea:c1:6b:e2:85: 6f:33:f4:bf:0c:97:84:c3:af:63:08:d4:28:1c:cd: 47:a4:ac:df:da:06:17:e3:1e:b4:e2:a4:df:fd:1a: 8f:d6:72:29:5d:8c:05:b2:2d:cb:43:ff:83:1b:36: bb:15:b6:cb:0e:a7:a8:8c:d3:7d:4d:17:23:63:ee: a2:db:4a:2a:a1:2e:d8:92:fa:b9:55:92:97:66:0a: 7c:b3:69:6c:82:a6:b8:75:9e:d3:8b:fd:aa:7d:48: 0e:61:ee:f7:ec:3d:ea:a7:5b:72:d8:86:e3:f4:25: 01:0d:f2:58:3a:1c:32:77:9b:97:44:8a:75:d1:16: da:e1:70:e6:95:97:be:1c:09:38:ee:d6:ca:de:9a: cd:49:27:75:5e:cd:9a:a2:c4:ff:11:fb:d1:e6:a6: 64:0d:2e:cf:b2:db:83:4b:d4:be:de:6a:80:27:c4: fb:66:e3:62:77:57:bc:3e:27:c7:41:db:e4:a8:36: f6:b3:d8:89:33:25:eb:2c:f4:47:7b:5e:af:72:e5: 82:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:21:A5:64:96:A4:5A:C8:0F:A1:2F:E4:5D:AD:E7:DB:EE:FB:FB:E3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b24fcef-3cc3-4307-8861-9377f8d833fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:2000::/40 Signature Algorithm: sha256WithRSAEncryption 0e:75:07:96:ce:66:6c:df:98:a5:f2:76:c4:a4:9a:7f:78:19: 2b:47:3c:1d:a4:6b:32:c6:5a:6f:a6:57:f7:41:59:dd:21:08: 47:0b:69:e8:26:6b:70:cf:fe:37:54:21:7b:13:bf:da:ef:fd: 10:51:53:f8:1e:bf:a2:ea:8e:a1:b2:cd:45:d5:ba:2d:53:fa: 63:a1:08:9f:06:80:15:5a:f2:d2:1b:fc:41:af:b2:97:2f:b5: e3:79:68:bf:69:e8:01:f2:41:ca:c0:b6:40:25:2a:6f:e7:66: 7b:cb:f6:64:7e:87:a6:f4:b7:83:fb:f0:1e:b6:d2:d1:30:51: fd:d4:22:b8:93:ed:dc:e4:dc:85:db:bd:df:0a:74:bc:4e:fc: 9b:7e:1a:f0:f3:9c:a8:10:26:8f:3d:49:48:c2:57:90:81:cd: 4b:1d:3e:4e:87:95:90:30:72:d1:42:2f:14:ea:c1:77:0e:39: d7:84:14:e8:86:85:b8:1f:3f:15:46:1a:b9:1d:32:e4:86:10: 34:60:da:81:ff:45:03:e3:09:db:54:62:4b:b0:c7:74:66:4f: fd:16:e2:df:ab:3d:10:20:c6:9f:cf:31:95:fe:e6:71:cc:41: 68:e0:ce:e0:c8:ce:17:27:86:4b:ba:84:10:67:71:13:bc:00: 8c:93:55:b7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaf2/ehT08XvmrZXacRW8BxXBb4gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMDAwMDAwNloX DTI1MTExNDIzNTk1OVowejFJMEcGA1UEBRNAOGRkZTFhMjQ5MTAwMTJiY2Y0ZGM0 YzM0YjNiOTljNTAzYjMyZWYxNWMyZGJiOTQ2N2JmYzc3ZmFkYjU5NmE2ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIpNk3nrE/r5td3K+vvR001p5NyT MyboVM+XSWiFCy6izivRnShwJdqKQFJZf5vXW8N0De7T6sFr4oVvM/S/DJeEw69j CNQoHM1HpKzf2gYX4x604qTf/RqP1nIpXYwFsi3LQ/+DGza7FbbLDqeojNN9TRcj Y+6i20oqoS7Ykvq5VZKXZgp8s2lsgqa4dZ7Ti/2qfUgOYe737D3qp1ty2Ibj9CUB DfJYOhwyd5uXRIp10Rba4XDmlZe+HAk47tbK3prNSSd1Xs2aosT/EfvR5qZkDS7P stuDS9S+3mqAJ8T7ZuNid1e8PifHQdvkqDb2s9iJMyXrLPRHe16vcuWCtQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJohpWSWpFrID6Ev5F2t59vu+/vjMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZiMjRmY2VmLTNjYzMtNDMwNy04ODYxLTkzNzdmOGQ4MzNmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9CAwDQYJKoZIhvcNAQELBQADggEBAA51B5bOZmzfmKXydsSk mn94GStHPB2kazLGWm+mV/dBWd0hCEcLaegma3DP/jdUIXsTv9rv/RBRU/gev6Lq jqGyzUXVui1T+mOhCJ8GgBVa8tIb/EGvspcvteN5aL9p6AHyQcrAtkAlKm/nZnvL 9mR+h6b0t4P78B620tEwUf3UIriT7dzk3IXbvd8KdLxO/Jt+GvDznKgQJo89SUjC V5CBzUsdPk6HlZAwctFCLxTqwXcOOdeEFOiGhbgfPxVGGrkdMuSGEDRg2oH/RQPj CdtUYkuwx3RmT/0W4t+rPRAgxp/PMZX+5nHMQWjgzuDIzhcnhku6hBBncRO8AIyT Vbc= -----END CERTIFICATE-----Generated at Sun Oct 19 23:06:22 2025 by rpki-client