$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c0f8903-7305-4902-a6b4-6607ce10e298.roa File: 7c0f8903-7305-4902-a6b4-6607ce10e298.roa (raw, json) Hash identifier: ciVrTXzAe0WdLibAW9V/eNFCTToxxCDQCnV0uG2rAGE= Subject key identifier: B5:71:CB:DC:47:67:26:F9:8E:EB:0D:8B:A9:F6:51:ED:1A:85:6F:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5FEC22D0F0E589E8060E542702BAD2CE1F5D7C80 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c0f8903-7305-4902-a6b4-6607ce10e298.roa Signing time: Mon 13 Oct 2025 15:20:42 +0000 ROA not before: Mon 13 Oct 2025 15:20:42 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:2020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ec:22:d0:f0:e5:89:e8:06:0e:54:27:02:ba:d2:ce:1f:5d:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:20:42 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=aee6621fdf103d2157c31c41c978e341d6b2963157d6ca66806fa33ed0cd0dfa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:3e:ce:92:25:6e:95:4c:15:9b:81:3a:14: 7b:81:b6:1b:b6:fc:a0:da:e5:15:ed:28:06:ff:f4: 92:bf:9a:9e:8d:00:81:27:46:20:0c:93:bb:54:13: 58:a3:f1:9b:61:b4:6a:ba:52:d7:42:3f:48:81:40: ba:2e:1e:c4:7e:c0:8d:16:a9:07:ec:30:75:f9:93: f5:ec:3c:fa:d7:d5:07:1c:fc:fc:9a:f5:5b:7c:d7: fb:af:16:5e:57:ea:cc:48:03:e3:62:e0:f3:6d:0f: ec:a4:30:66:a7:38:7c:00:44:cd:92:fe:50:a6:96: 81:ff:9e:74:d7:1b:1f:d9:9d:73:9f:68:eb:ad:7f: f1:d4:aa:bd:ce:f1:ba:7e:27:88:03:da:ab:92:01: 44:19:72:ed:20:27:c3:8a:13:3b:d1:37:f8:61:e8: e6:d7:a3:5b:04:23:1d:7f:cb:6e:61:29:c8:95:be: 76:01:38:90:63:db:92:cd:37:26:d1:39:d8:95:0f: ac:94:df:d6:03:ae:30:16:e0:9f:7e:f5:ae:6b:ba: 2b:74:ad:5b:e2:80:df:90:d2:8a:0b:d7:de:6f:5b: 1c:f1:66:dd:df:07:1e:96:55:ce:d4:86:6e:1c:22: 34:6d:26:a6:d5:39:ec:64:95:99:83:8c:78:b2:3a: c9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:71:CB:DC:47:67:26:F9:8E:EB:0D:8B:A9:F6:51:ED:1A:85:6F:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c0f8903-7305-4902-a6b4-6607ce10e298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:2020::/48 Signature Algorithm: sha256WithRSAEncryption 6c:c5:87:6f:84:b5:7e:d3:26:fc:c9:5f:45:f9:02:48:4a:09: 91:84:5c:f9:da:bc:8a:86:31:ec:26:0d:22:c3:e2:fe:e7:a2: 28:3d:a4:37:02:42:c0:cc:65:82:51:9e:5f:46:0d:e9:dc:fd: 22:95:d7:e7:bd:62:bd:ad:08:c1:ef:57:7e:08:3d:42:54:a9: 5b:43:3e:86:e3:d2:8f:a2:f0:80:e3:a7:31:e9:10:a2:cf:65: 3a:16:e2:0b:c5:61:4e:93:be:41:29:d7:2a:43:b3:a7:cb:e8: ea:de:d9:6a:4a:24:56:22:f5:aa:5b:d5:1c:5c:05:dd:c6:98: 5d:19:ee:27:65:d6:93:e8:85:82:c7:39:e6:4e:59:44:e0:6b: 8d:85:71:df:7e:40:93:d4:4d:6f:24:0e:76:06:88:5a:45:cf: 66:69:8e:79:ac:7a:6b:21:47:c5:4d:04:07:35:93:92:41:9e: fa:d6:f3:9e:dc:a1:ae:69:88:cd:1c:19:9c:27:06:81:66:22: 30:ef:d5:ff:f0:da:e2:9f:a4:64:b2:14:1c:a2:f8:5d:e2:e1: 19:c2:e8:97:a6:ed:3b:b6:29:63:a3:48:8a:e0:96:62:8a:a4: 1a:f8:ee:1e:b8:fe:ff:ff:17:5a:bc:c3:17:0a:8d:07:32:4e: 60:a2:f4:f5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUX+wi0PDliegGDlQnArrSzh9dfIAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1MjA0MloX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNAYWVlNjYyMWZkZjEwM2QyMTU3YzMx YzQxYzk3OGUzNDFkNmIyOTYzMTU3ZDZjYTY2ODA2ZmEzM2VkMGNkMGRmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlI+zpIlbpVMFZuBOhR7gbYbtvyg 2uUV7SgG//SSv5qejQCBJ0YgDJO7VBNYo/GbYbRqulLXQj9IgUC6Lh7EfsCNFqkH 7DB1+ZP17Dz619UHHPz8mvVbfNf7rxZeV+rMSAPjYuDzbQ/spDBmpzh8AETNkv5Q ppaB/5501xsf2Z1zn2jrrX/x1Kq9zvG6fieIA9qrkgFEGXLtICfDihM70Tf4Yejm 16NbBCMdf8tuYSnIlb52ATiQY9uSzTcm0TnYlQ+slN/WA64wFuCffvWua7ordK1b 4oDfkNKKC9feb1sc8Wbd3wcellXO1IZuHCI0bSam1TnsZJWZg4x4sjrJ2QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLVxy9xHZyb5jusNi6n2Ue0ahW8PMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdjMGY4OTAzLTczMDUtNDkwMi1hNmI0LTY2MDdjZTEwZTI5OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/yAgMA0GCSqGSIb3DQEBCwUAA4IBAQBsxYdvhLV+0yb8yV9F +QJISgmRhFz52ryKhjHsJg0iw+L+56IoPaQ3AkLAzGWCUZ5fRg3p3P0ildfnvWK9 rQjB71d+CD1CVKlbQz6G49KPovCA46cx6RCiz2U6FuILxWFOk75BKdcqQ7Ony+jq 3tlqSiRWIvWqW9UcXAXdxphdGe4nZdaT6IWCxznmTllE4GuNhXHffkCT1E1vJA52 BohaRc9maY55rHprIUfFTQQHNZOSQZ761vOe3KGuaYjNHBmcJwaBZiIw79X/8Nri n6RkshQcovhd4uEZwuiXpu07tiljo0iK4JZiiqQa+O4euP7//xdavMMXCo0HMk5g ovT1 -----END CERTIFICATE-----Generated at Mon Oct 20 12:36:32 2025 by rpki-client