$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7b32e6ae-8834-4075-a1bc-36303e255087.roa File: 7b32e6ae-8834-4075-a1bc-36303e255087.roa (raw, json) Hash identifier: MVcK4d9R887h/f3I2SRXGxv8kvigZvUxtxgClC4iL3s= Subject key identifier: 08:E6:5B:06:7B:12:13:2D:D0:82:14:7E:7A:47:E7:42:96:4B:2A:FF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 418D520235150AA9B721F163571EADE8727C599F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7b32e6ae-8834-4075-a1bc-36303e255087.roa Signing time: Mon 06 Oct 2025 15:10:03 +0000 ROA not before: Mon 06 Oct 2025 15:10:03 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafd:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8d:52:02:35:15:0a:a9:b7:21:f1:63:57:1e:ad:e8:72:7c:59:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 6 15:10:03 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=a5fcd55292706ce829acfd697657d6f6831ab70258658b717ed23ecf0457a4ac, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1e:6d:a9:4a:c6:b7:f5:54:9d:db:04:c0:63: 0c:26:7c:34:25:df:ab:cb:81:38:79:1b:eb:d2:7d: ff:93:b2:a8:af:10:b3:ad:4e:c7:6d:67:b2:76:d3: fe:86:28:c0:23:7b:3e:a0:d0:6c:a1:70:31:a6:93: 37:08:21:c0:64:72:32:8a:97:3c:98:80:9a:53:0e: 37:05:9d:df:13:3e:3f:93:09:e1:75:78:b8:62:7e: d1:40:c9:82:da:bd:59:aa:78:ee:1f:9b:20:c5:57: 1a:0f:00:74:dd:04:d0:12:5a:a0:4e:26:1a:52:05: 29:b8:9f:93:e9:a6:2c:c6:80:7a:d4:7d:dd:6c:a9: c7:e9:1c:10:97:5d:a2:32:dd:01:89:78:98:7f:70: 78:cb:00:ef:1b:7b:c1:0a:c4:41:74:a7:6d:6f:eb: a2:92:d2:d1:9e:fc:47:ff:a9:ca:bb:33:90:23:b4: d4:bf:17:f0:48:fb:84:90:33:33:c3:13:b4:08:f6: 88:5c:56:20:db:e8:77:e6:b5:fb:b4:14:82:52:1b: 46:9a:2e:4c:d7:dc:8e:09:cb:6b:2f:05:8a:77:c9: 14:79:b2:cd:31:34:c2:74:0b:96:e8:f3:c6:3e:9c: 60:92:24:67:ed:36:35:5a:37:52:7f:f5:a1:48:d8: ac:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E6:5B:06:7B:12:13:2D:D0:82:14:7E:7A:47:E7:42:96:4B:2A:FF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7b32e6ae-8834-4075-a1bc-36303e255087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafd:8080::/48 Signature Algorithm: sha256WithRSAEncryption 2c:12:75:9d:7e:ed:a6:a4:46:26:1c:38:2d:77:eb:e9:07:77: 94:84:e5:db:96:01:a9:76:ba:6a:16:c1:f6:0e:92:c6:f5:8b: f7:a8:53:98:b0:d3:dd:af:32:80:63:6b:88:0e:da:0c:85:52: 7f:93:fd:50:ed:af:51:a1:f4:3c:da:e4:b6:ae:1c:a8:a9:6d: d3:f3:04:1b:44:48:68:71:ad:bd:17:41:aa:70:66:b7:c2:b3: aa:9f:24:2f:31:c1:fd:3d:9c:b7:b3:0f:e5:9d:b4:33:34:d8: e9:fd:6a:64:06:55:47:ac:80:58:54:44:36:8e:76:b7:42:c5: cc:8b:fa:b4:9b:92:99:e7:69:90:61:9f:65:1b:cb:3e:a4:f9: 5b:93:a9:39:56:e8:53:dc:ba:65:4c:f2:85:76:a9:d9:2f:f6: 05:69:f4:44:5b:c0:3e:70:71:86:ff:74:2a:6f:1d:84:a7:56: 20:b0:df:b2:1b:cb:55:d1:1c:bf:93:13:0a:2a:73:f2:26:74: a2:27:e8:dd:05:6c:dc:34:57:aa:fd:39:e2:90:a4:cb:03:85: bd:47:72:e8:d1:a2:d8:9e:10:ea:22:5d:c2:a0:04:b6:ff:ba: 16:ce:dd:ec:74:fa:97:6b:b6:70:3d:f6:5a:41:a6:29:89:77: 76:a3:da:b4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQY1SAjUVCqm3IfFjVx6t6HJ8WZ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNjE1MTAwM1oX DTI1MTExMDIzNTk1OVowejFJMEcGA1UEBRNAYTVmY2Q1NTI5MjcwNmNlODI5YWNm ZDY5NzY1N2Q2ZjY4MzFhYjcwMjU4NjU4YjcxN2VkMjNlY2YwNDU3YTRhYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh5tqUrGt/VUndsEwGMMJnw0Jd+r y4E4eRvr0n3/k7KorxCzrU7HbWeydtP+hijAI3s+oNBsoXAxppM3CCHAZHIyipc8 mICaUw43BZ3fEz4/kwnhdXi4Yn7RQMmC2r1ZqnjuH5sgxVcaDwB03QTQElqgTiYa UgUpuJ+T6aYsxoB61H3dbKnH6RwQl12iMt0BiXiYf3B4ywDvG3vBCsRBdKdtb+ui ktLRnvxH/6nKuzOQI7TUvxfwSPuEkDMzwxO0CPaIXFYg2+h35rX7tBSCUhtGmi5M 19yOCctrLwWKd8kUebLNMTTCdAuW6PPGPpxgkiRn7TY1WjdSf/WhSNisSQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAjmWwZ7EhMt0IIUfnpH50KWSyr/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdiMzJlNmFlLTg4MzQtNDA3NS1hMWJjLTM2MzAzZTI1NTA4Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/YCAMA0GCSqGSIb3DQEBCwUAA4IBAQAsEnWdfu2mpEYmHDgt d+vpB3eUhOXblgGpdrpqFsH2DpLG9Yv3qFOYsNPdrzKAY2uIDtoMhVJ/k/1Q7a9R ofQ82uS2rhyoqW3T8wQbREhoca29F0GqcGa3wrOqnyQvMcH9PZy3sw/lnbQzNNjp /WpkBlVHrIBYVEQ2jna3QsXMi/q0m5KZ52mQYZ9lG8s+pPlbk6k5VuhT3LplTPKF dqnZL/YFafREW8A+cHGG/3Qqbx2Ep1YgsN+yG8tV0Ry/kxMKKnPyJnSiJ+jdBWzc NFeq/TnikKTLA4W9R3Lo0aLYnhDqIl3CoAS2/7oWzt3sdPqXa7ZwPfZaQaYpiXd2 o9q0 -----END CERTIFICATE-----Generated at Mon Oct 20 10:00:15 2025 by rpki-client