$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8149b6a0-3ee3-4471-b149-1e810ca39506.roa File: 8149b6a0-3ee3-4471-b149-1e810ca39506.roa (raw, json) Hash identifier: JZez7wLYtZwzQ3WMqhA4D5F/i0IrmoQZWvkVducSWF8= Subject key identifier: F7:68:CB:17:65:33:F4:B1:DF:5B:12:29:A8:4D:E6:29:79:A2:26:AA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7E8A9A1E7B4155EE50869EE13F368B5A45520316 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8149b6a0-3ee3-4471-b149-1e810ca39506.roa Signing time: Mon 29 Sep 2025 15:00:53 +0000 ROA not before: Mon 29 Sep 2025 15:00:53 +0000 ROA not after: Mon 03 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:a080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:8a:9a:1e:7b:41:55:ee:50:86:9e:e1:3f:36:8b:5a:45:52:03:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 29 15:00:53 2025 GMT Not After : Nov 3 23:59:59 2025 GMT Subject: serialNumber=4908a15985f95403f541a262ec8554264fefd5675ea033cc198c438ae7338fa5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:2e:8a:be:32:8c:88:58:86:4d:cb:f9:39:fb: 9a:08:68:9a:57:2c:c8:5b:b1:63:6f:b3:33:5b:84: 60:53:11:39:6e:2c:22:75:04:4f:b5:5f:8e:48:34: 50:92:53:7c:c1:09:38:59:bd:f9:c7:91:40:94:e1: 0e:1f:23:40:e5:bf:49:11:c3:19:07:9a:b1:4f:5c: 9c:62:b1:2d:00:46:84:b4:79:f9:3f:d3:23:e7:4c: 14:92:94:86:11:8b:91:1a:0a:f3:0b:77:1a:24:73: cf:2f:a2:39:48:1e:6e:48:fd:0d:86:3d:f4:3e:57: 38:77:21:a8:33:83:48:3b:32:34:5f:91:bf:e8:28: ce:4d:88:c5:04:b2:9d:88:28:cd:50:f2:2a:fc:37: a8:60:84:ed:2e:fe:a1:53:71:cd:1f:10:38:6d:36: 51:2a:56:e0:a8:88:19:40:2d:d4:fb:11:21:36:2d: d0:6f:72:60:ed:3a:ba:14:94:ca:f2:3c:73:0f:2f: 34:53:3c:02:7e:d6:96:dd:11:50:a8:5d:e9:2a:10: 51:b2:00:28:ec:a6:c9:a8:d4:75:61:f2:1f:4b:68: aa:f5:65:25:0b:be:e2:15:ef:0c:ad:32:35:46:9f: 6a:5d:07:08:ab:fe:ff:c5:75:97:b1:bd:8a:21:31: d9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:68:CB:17:65:33:F4:B1:DF:5B:12:29:A8:4D:E6:29:79:A2:26:AA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8149b6a0-3ee3-4471-b149-1e810ca39506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:a080::/46 Signature Algorithm: sha256WithRSAEncryption 60:1e:bb:5e:c9:2a:57:76:d9:33:bc:6a:36:72:33:21:ba:0e: b6:5e:51:80:c5:47:ee:ca:f7:e5:86:a8:74:65:5a:82:74:66: 7e:07:eb:61:39:53:e4:55:74:1e:14:0e:48:e0:89:e5:b1:14: 27:8e:8b:9b:d3:50:3e:1d:af:09:41:e9:ca:ec:92:6b:77:64: e7:17:55:14:be:ec:93:0c:37:d4:d0:f8:bc:06:8b:ca:ed:e7: 49:33:5d:f2:39:03:1f:a5:39:78:42:4c:ed:8d:94:de:15:b8: 94:fd:71:22:0b:bc:99:6b:0c:b5:b5:9c:3e:b0:17:f3:80:e4: 5c:f9:35:d6:01:91:c4:8d:80:da:8f:fc:84:61:6b:40:93:99: b4:a8:54:3d:01:d6:ad:fd:5e:af:31:32:cf:e7:6a:2b:bc:10: 9e:c8:45:66:26:5a:44:78:ac:30:c2:51:f3:07:e2:de:1f:b7: 31:be:d6:14:dd:3d:60:5e:80:be:83:60:e6:0e:b3:ea:a0:df: ba:b4:b8:d0:ba:18:27:a4:35:c0:30:4d:80:50:0a:f3:e8:63: bb:6b:5a:c6:08:c5:d1:2b:32:7e:e0:5e:ec:ee:b0:0b:f9:2d: 97:3f:3f:6e:3e:ee:53:08:13:a9:ab:93:a8:27:21:80:49:9e: a5:1d:e3:36 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfoqaHntBVe5Qhp7hPzaLWkVSAxYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkyOTE1MDA1M1oX DTI1MTEwMzIzNTk1OVowejFJMEcGA1UEBRNANDkwOGExNTk4NWY5NTQwM2Y1NDFh MjYyZWM4NTU0MjY0ZmVmZDU2NzVlYTAzM2NjMTk4YzQzOGFlNzMzOGZhNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/S6KvjKMiFiGTcv5OfuaCGiaVyzI W7Fjb7MzW4RgUxE5biwidQRPtV+OSDRQklN8wQk4Wb35x5FAlOEOHyNA5b9JEcMZ B5qxT1ycYrEtAEaEtHn5P9Mj50wUkpSGEYuRGgrzC3caJHPPL6I5SB5uSP0Nhj30 Plc4dyGoM4NIOzI0X5G/6CjOTYjFBLKdiCjNUPIq/DeoYITtLv6hU3HNHxA4bTZR KlbgqIgZQC3U+xEhNi3Qb3Jg7Tq6FJTK8jxzDy80UzwCftaW3RFQqF3pKhBRsgAo 7KbJqNR1YfIfS2iq9WUlC77iFe8MrTI1Rp9qXQcIq/7/xXWXsb2KITHZjQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPdoyxdlM/Sx31sSKahN5il5oiaqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgxNDliNmEwLTNlZTMtNDQ3MS1iMTQ5LTFlODEwY2EzOTUwNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaKCAMA0GCSqGSIb3DQEBCwUAA4IBAQBgHrteySpXdtkzvGo2 cjMhug62XlGAxUfuyvflhqh0ZVqCdGZ+B+thOVPkVXQeFA5I4InlsRQnjoub01A+ Ha8JQenK7JJrd2TnF1UUvuyTDDfU0Pi8BovK7edJM13yOQMfpTl4QkztjZTeFbiU /XEiC7yZawy1tZw+sBfzgORc+TXWAZHEjYDaj/yEYWtAk5m0qFQ9Adat/V6vMTLP 52orvBCeyEVmJlpEeKwwwlHzB+LeH7cxvtYU3T1gXoC+g2DmDrPqoN+6tLjQuhgn pDXAME2AUArz6GO7a1rGCMXRKzJ+4F7s7rAL+S2XPz9uPu5TCBOpq5OoJyGASZ6l HeM2 -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:20 2025 by rpki-client