$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/831d319a-d7bd-48a2-8eee-31ff33384c47.roa File: 831d319a-d7bd-48a2-8eee-31ff33384c47.roa (raw, json) Hash identifier: v5VZyV9oruaTV8P6NA5gxMNIWYkOS1s9GVRaNqYM0KA= Subject key identifier: B8:92:BF:59:C6:1C:A2:99:18:C7:D6:8E:7B:5C:43:00:A5:06:62:2E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 12813A70CB7C72130924DDA22C15EA2000A62493 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/831d319a-d7bd-48a2-8eee-31ff33384c47.roa Signing time: Fri 10 Oct 2025 00:00:09 +0000 ROA not before: Fri 10 Oct 2025 00:00:09 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:81:3a:70:cb:7c:72:13:09:24:dd:a2:2c:15:ea:20:00:a6:24:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 10 00:00:09 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=e854561177b9f5af002d2ae34564e93d0e305c10eb07d15fce09f5858348de2c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:44:aa:9c:10:9d:59:74:d7:07:ec:ac:f0: 7a:0a:b4:f0:3e:b2:03:25:41:fb:3a:d4:ae:4a:32: 0b:da:e3:c8:6b:d7:bb:1f:35:93:ff:77:80:88:dd: 40:2e:13:36:9e:3c:52:38:7a:8f:16:55:2f:4e:ee: 9e:2b:16:8f:04:1e:c3:60:2f:ee:ab:2a:82:23:17: 57:66:51:1c:a9:79:60:bd:1d:8b:20:2b:af:2e:32: f3:5e:ea:e7:9e:11:0b:2d:c4:00:ef:c3:7d:7e:19: bc:fe:b3:43:08:84:95:3a:cb:d7:7e:93:0c:64:75: 8e:e9:0e:3d:07:bd:43:06:e2:de:ae:df:0b:2e:c2: ed:22:b4:b8:0b:31:83:73:18:48:33:d7:2f:61:63: 26:da:22:64:98:b9:ea:9c:e2:76:3f:8e:fc:f2:e1: 0f:77:e5:e1:7e:9c:a9:d9:34:15:ed:c9:03:36:f0: f5:d6:96:59:0f:ba:27:f7:cd:49:07:19:37:c0:cb: 6b:b5:ae:0e:cb:5b:ac:c4:14:cd:fa:54:c2:c4:d7: e5:c8:2b:ef:ac:8d:2d:3e:fd:5a:e4:95:66:7c:1a: 54:60:8e:e5:d5:18:10:d9:8b:82:51:c9:9b:e4:0c: 47:2e:7d:88:eb:4b:ee:df:53:15:5b:3a:30:08:e2: 76:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:92:BF:59:C6:1C:A2:99:18:C7:D6:8E:7B:5C:43:00:A5:06:62:2E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/831d319a-d7bd-48a2-8eee-31ff33384c47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:1000::/40 Signature Algorithm: sha256WithRSAEncryption 4d:3f:98:17:eb:73:df:63:9b:22:8e:10:83:8e:80:eb:a5:d5: 1e:59:ad:94:f2:8f:97:d3:e1:4b:3a:f2:e1:ee:85:79:d2:56: 5b:79:1d:a3:36:3a:d3:8f:26:3b:f3:79:eb:65:d1:a2:80:5a: 04:34:a8:51:ff:aa:ce:8b:b4:a1:62:7a:6b:4d:bc:2e:de:ba: 2c:6e:68:15:16:61:87:7a:0e:ca:9f:4b:ed:87:8b:12:25:00: e1:28:96:5a:a2:59:1a:5c:ec:12:b7:56:26:40:f5:18:3d:d1: c6:e6:33:41:89:b7:75:fe:7b:69:e1:75:f4:35:8e:a5:a1:14: 5a:4b:12:6a:dd:69:24:d6:ba:22:1e:ad:92:21:9b:b4:cb:ee: 78:ad:bc:0b:15:17:d3:8a:69:d0:cd:5d:24:dc:10:92:8b:55: b8:a3:5c:3d:7c:50:29:dc:a6:9a:bb:1f:ba:d5:09:84:8e:16: 54:7d:c6:2a:5e:f9:f1:62:04:50:24:13:6a:3d:1c:c9:d8:b0: d1:2f:dd:f0:8d:5a:d5:e0:84:6e:99:c6:ac:04:80:81:41:c6: 99:b6:30:bd:3d:2f:7b:fa:fa:45:3f:6c:28:04:03:1c:26:ce: 59:91:ca:f5:ff:ce:40:24:6a:28:da:78:f6:34:9d:62:4f:7d: 4a:bc:88:c0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEoE6cMt8chMJJN2iLBXqIACmJJMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMDAwMDAwOVoX DTI1MTExNDIzNTk1OVowejFJMEcGA1UEBRNAZTg1NDU2MTE3N2I5ZjVhZjAwMmQy YWUzNDU2NGU5M2QwZTMwNWMxMGViMDdkMTVmY2UwOWY1ODU4MzQ4ZGUyYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNZEqpwQnVl01wfsrPB6CrTwPrID JUH7OtSuSjIL2uPIa9e7HzWT/3eAiN1ALhM2njxSOHqPFlUvTu6eKxaPBB7DYC/u qyqCIxdXZlEcqXlgvR2LICuvLjLzXurnnhELLcQA78N9fhm8/rNDCISVOsvXfpMM ZHWO6Q49B71DBuLert8LLsLtIrS4CzGDcxhIM9cvYWMm2iJkmLnqnOJ2P4788uEP d+Xhfpyp2TQV7ckDNvD11pZZD7on981JBxk3wMtrta4Oy1usxBTN+lTCxNflyCvv rI0tPv1a5JVmfBpUYI7l1RgQ2YuCUcmb5AxHLn2I60vu31MVWzowCOJ2wwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLiSv1nGHKKZGMfWjntcQwClBmIuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzMWQzMTlhLWQ3YmQtNDhhMi04ZWVlLTMxZmYzMzM4NGM0Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9BAwDQYJKoZIhvcNAQELBQADggEBAE0/mBfrc99jmyKOEIOO gOul1R5ZrZTyj5fT4Us68uHuhXnSVlt5HaM2OtOPJjvzeetl0aKAWgQ0qFH/qs6L tKFiemtNvC7euixuaBUWYYd6DsqfS+2HixIlAOEollqiWRpc7BK3ViZA9Rg90cbm M0GJt3X+e2nhdfQ1jqWhFFpLEmrdaSTWuiIerZIhm7TL7nitvAsVF9OKadDNXSTc EJKLVbijXD18UCncppq7H7rVCYSOFlR9xipe+fFiBFAkE2o9HMnYsNEv3fCNWtXg hG6ZxqwEgIFBxpm2ML09L3v6+kU/bCgEAxwmzlmRyvX/zkAkaijaePY0nWJPfUq8 iMA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:37:12 2025 by rpki-client