$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7169bc70-b9db-4e83-beac-24cc0c5a1537.roa File: 7169bc70-b9db-4e83-beac-24cc0c5a1537.roa (raw, json) Hash identifier: P2NMaU3IY1H4ywrsesdssT7B+zo0th/XxFWPVj6/9U8= Subject key identifier: 32:D7:D5:C0:FA:55:51:0A:00:9A:51:48:2C:A7:9B:85:31:48:E7:79 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 48598807530C76FFA545F767EBF3D531A6D00F57 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7169bc70-b9db-4e83-beac-24cc0c5a1537.roa Signing time: Wed 15 Oct 2025 00:10:35 +0000 ROA not before: Wed 15 Oct 2025 00:10:35 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:59:88:07:53:0c:76:ff:a5:45:f7:67:eb:f3:d5:31:a6:d0:0f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:10:35 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=bb9ad634df6c1b418e06c30e9c502cf3e5977cf466f599be2ae1db6a23882658, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:e4:c5:38:5b:d6:71:bb:c4:7a:e2:27:ee: 98:18:e2:de:73:bb:c4:8f:fa:29:c6:2a:e1:40:b5: c2:48:25:49:e8:91:c0:fd:3c:1b:7c:56:32:8a:a2: fa:5a:04:98:e0:1b:fc:33:e8:f2:09:2f:2d:f1:9b: c6:c8:93:53:56:1d:52:f8:10:c8:80:0e:99:1d:57: 31:b5:ee:ce:e7:aa:96:ad:73:82:ae:57:f2:a0:23: 92:99:7e:6e:94:0f:d7:93:ca:8f:cc:99:46:83:9a: 4d:ae:e2:14:b5:d9:0e:9d:a4:4e:ed:26:40:c8:93: 73:d2:cc:08:cd:ca:7d:cd:7b:ce:e0:7f:f4:80:74: 53:5a:28:f5:45:e2:61:f4:76:aa:ef:18:b2:4a:66: a7:c4:36:58:af:9c:b7:73:1f:8b:5c:a8:2c:6a:3d: ad:c7:42:89:e8:f0:eb:9f:2b:51:93:23:e6:8f:ef: 5e:95:df:e6:b2:a7:e2:10:47:24:fc:a5:4d:b5:44: b2:98:2e:41:e8:20:43:ea:1f:3f:8e:ff:a2:78:21: 13:46:98:b8:55:65:87:9d:ce:9e:43:46:f2:9c:5e: dc:51:f4:9f:e9:25:02:f8:b7:5f:06:b7:ef:01:2f: f7:b9:b1:85:dc:c4:3c:8e:19:19:45:45:29:3f:cb: 44:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D7:D5:C0:FA:55:51:0A:00:9A:51:48:2C:A7:9B:85:31:48:E7:79 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7169bc70-b9db-4e83-beac-24cc0c5a1537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:8000::/40 Signature Algorithm: sha256WithRSAEncryption 8b:92:f6:88:4b:5b:63:b3:74:ae:b9:a6:14:86:d6:f2:e4:e4: f5:9e:e2:25:b4:6a:08:8d:98:62:7b:00:f3:f6:e9:e1:0e:7d: 45:dc:30:df:1a:af:34:36:c5:b6:a0:26:38:e7:45:e1:04:f8: 39:a5:63:a5:5e:cc:c2:85:ee:b5:33:41:7f:7a:e2:fa:c2:ff: 2a:35:73:4c:02:ae:86:5a:ed:17:da:4b:ce:82:56:d9:7c:73: 2b:36:94:41:02:8a:c3:a8:35:c0:2f:7c:3f:25:32:cf:31:28: ed:e7:58:fe:13:1c:04:8b:ae:63:89:c7:8f:bd:a3:3d:4c:54: 81:b2:62:a0:16:10:fe:7d:c6:68:08:ea:e3:9b:62:6b:f8:9c: ca:dd:45:a2:94:be:e8:68:f2:e2:5c:71:4f:36:3c:73:bb:61: 2c:6f:0c:df:83:43:97:c5:4c:35:a9:23:ae:01:1c:d2:e3:e8: 19:ba:41:ee:63:9c:8e:f3:90:87:4c:a3:a8:2c:56:df:c3:8a: cb:0a:22:32:87:e6:9a:df:88:fc:c3:4a:11:20:7c:91:9d:f5: 89:f0:47:47:82:34:1f:04:01:5e:4e:94:3f:b9:70:d0:c9:34: dc:17:cd:dd:5b:c7:d0:60:39:6d:6a:27:ba:10:cb:16:5d:96: d1:ce:a7:5f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSFmIB1MMdv+lRfdn6/PVMabQD1cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMTAzNVoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAYmI5YWQ2MzRkZjZjMWI0MThlMDZj MzBlOWM1MDJjZjNlNTk3N2NmNDY2ZjU5OWJlMmFlMWRiNmEyMzg4MjY1ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmzkxThb1nG7xHriJ+6YGOLec7vE j/opxirhQLXCSCVJ6JHA/TwbfFYyiqL6WgSY4Bv8M+jyCS8t8ZvGyJNTVh1S+BDI gA6ZHVcxte7O56qWrXOCrlfyoCOSmX5ulA/Xk8qPzJlGg5pNruIUtdkOnaRO7SZA yJNz0swIzcp9zXvO4H/0gHRTWij1ReJh9Haq7xiySmanxDZYr5y3cx+LXKgsaj2t x0KJ6PDrnytRkyPmj+9eld/msqfiEEck/KVNtUSymC5B6CBD6h8/jv+ieCETRpi4 VWWHnc6eQ0bynF7cUfSf6SUC+LdfBrfvAS/3ubGF3MQ8jhkZRUUpP8tETwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDLX1cD6VVEKAJpRSCynm4UxSOd5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcxNjliYzcwLWI5ZGItNGU4My1iZWFjLTI0Y2MwYzVhMTUzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNoAwDQYJKoZIhvcNAQELBQADggEBAIuS9ohLW2OzdK65phSG 1vLk5PWe4iW0agiNmGJ7APP26eEOfUXcMN8arzQ2xbagJjjnReEE+DmlY6VezMKF 7rUzQX964vrC/yo1c0wCroZa7RfaS86CVtl8cys2lEECisOoNcAvfD8lMs8xKO3n WP4THASLrmOJx4+9oz1MVIGyYqAWEP59xmgI6uObYmv4nMrdRaKUvuho8uJccU82 PHO7YSxvDN+DQ5fFTDWpI64BHNLj6Bm6Qe5jnI7zkIdMo6gsVt/DissKIjKH5prf iPzDShEgfJGd9YnwR0eCNB8EAV5OlD+5cNDJNNwXzd1bx9BgOW1qJ7oQyxZdltHO p18= -----END CERTIFICATE-----Generated at Mon Oct 20 07:26:10 2025 by rpki-client