$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa File: 9f814f86-a00e-47ae-afd0-75d7996777e3.roa (raw, json) Hash identifier: Q4Xxrpo7b6xrs1cnca2CR8ZJIa4UXpWbAsNVvhdvwWo= Subject key identifier: DF:23:5B:70:DE:99:F8:BC:F1:28:F2:CC:7D:B0:CC:E3:3B:7D:50:DF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 226CBCAAB0C91AAD40306FB285E8F7F03707698E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa Signing time: Wed 15 Oct 2025 00:00:41 +0000 ROA not before: Wed 15 Oct 2025 00:00:41 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6c:bc:aa:b0:c9:1a:ad:40:30:6f:b2:85:e8:f7:f0:37:07:69:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:00:41 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=d1c0cd0e855bce3ec6bc91935cf822f135d44bd952e53e7d02f0136a4ebda692, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:87:4c:6d:ef:98:7c:71:f0:c6:df:c3:af:04: 1f:02:d4:db:6d:8b:c0:e6:60:7a:e1:c2:4b:70:23: bd:43:e5:1f:c8:cf:4d:16:e2:ac:16:83:84:47:04: 94:7f:fd:aa:19:54:78:c8:25:40:06:01:1c:d8:db: dd:d3:ad:17:47:83:80:db:d2:e3:81:54:d4:b2:d2: 9f:1c:e6:4c:b9:40:aa:27:a7:4f:00:5a:eb:fd:87: 14:59:9b:23:9e:75:e5:e6:fc:4c:49:04:5b:60:19: ae:e2:bc:bf:6b:e1:90:73:09:8e:33:52:ff:b9:92: cc:8c:fe:42:5a:ec:f9:2f:12:d6:78:19:42:74:86: c7:3b:bb:14:b5:c6:10:96:0e:38:42:1c:b6:9e:85: ee:26:92:da:c9:76:dd:45:4f:1d:50:86:32:8a:0c: 9a:3a:7d:07:4a:08:e1:9b:a5:52:7f:61:ee:3e:a8: db:ff:38:6c:46:39:ec:2a:4f:6c:7e:ca:0f:1f:b4: a3:51:94:a1:12:78:2d:8b:80:9f:45:74:9b:52:7a: 78:79:37:30:3c:62:ce:4c:ea:57:f0:84:34:0f:87: d1:63:4c:95:32:29:eb:d2:ab:25:34:e6:d4:ba:dd: 62:7c:18:40:27:a4:31:1f:43:c2:98:b8:4a:54:16: e0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:23:5B:70:DE:99:F8:BC:F1:28:F2:CC:7D:B0:CC:E3:3B:7D:50:DF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:9000::/40 Signature Algorithm: sha256WithRSAEncryption c8:d3:7d:ae:ef:b3:32:ec:87:67:88:a1:af:ae:e0:cc:76:98: 9f:d7:fe:01:0b:6d:19:65:c3:8d:00:e7:1b:44:f9:d8:dd:d6: b8:43:00:e2:51:b9:46:fe:ae:e1:36:96:9f:b4:02:71:91:c6: 43:6a:d9:e9:4b:b6:79:10:d7:87:b9:5f:0f:42:c3:f6:a5:32: bd:3c:17:38:e0:17:d4:b6:a9:56:5c:41:4c:d0:b0:df:fe:e2: 27:5e:9b:53:c0:8a:84:60:f4:48:23:4f:2c:72:f5:d4:c7:0b: 45:92:d3:06:e0:50:1b:5e:c6:a2:cd:7d:68:64:a9:20:68:5b: 47:0a:64:90:89:00:57:51:98:9c:fe:8d:83:01:c4:57:8f:f9: cd:2e:b4:db:76:80:03:c1:e2:aa:93:a5:fa:7a:c2:fe:2b:d7: c3:32:2c:03:ad:0d:75:1a:34:28:85:d2:15:93:d8:6a:51:ae: 26:a8:17:ee:13:f7:9c:b4:76:a9:11:82:32:66:b4:e3:82:d1: b3:77:c9:9a:65:1d:33:3c:b9:af:8f:10:dc:41:79:bf:e6:a3: d5:6a:eb:d9:72:f1:44:e5:b7:40:96:a3:c3:dd:d0:4e:40:63: cd:dd:f7:ab:11:68:54:01:4f:7b:dd:e1:74:89:73:a5:c4:0f: d0:09:21:14 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUImy8qrDJGq1AMG+yhej38DcHaY4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMDA0MVoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAZDFjMGNkMGU4NTViY2UzZWM2YmM5 MTkzNWNmODIyZjEzNWQ0NGJkOTUyZTUzZTdkMDJmMDEzNmE0ZWJkYTY5MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IdMbe+YfHHwxt/DrwQfAtTbbYvA 5mB64cJLcCO9Q+UfyM9NFuKsFoOERwSUf/2qGVR4yCVABgEc2Nvd060XR4OA29Lj gVTUstKfHOZMuUCqJ6dPAFrr/YcUWZsjnnXl5vxMSQRbYBmu4ry/a+GQcwmOM1L/ uZLMjP5CWuz5LxLWeBlCdIbHO7sUtcYQlg44Qhy2noXuJpLayXbdRU8dUIYyigya On0HSgjhm6VSf2HuPqjb/zhsRjnsKk9sfsoPH7SjUZShEngti4CfRXSbUnp4eTcw PGLOTOpX8IQ0D4fRY0yVMinr0qslNObUut1ifBhAJ6QxH0PCmLhKVBbgiQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFN8jW3Demfi88SjyzH2wzOM7fVDfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmODE0Zjg2LWEwMGUtNDdhZS1hZmQwLTc1ZDc5OTY3NzdlMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+JAwDQYJKoZIhvcNAQELBQADggEBAMjTfa7vszLsh2eIoa+u 4Mx2mJ/X/gELbRllw40A5xtE+djd1rhDAOJRuUb+ruE2lp+0AnGRxkNq2elLtnkQ 14e5Xw9Cw/alMr08FzjgF9S2qVZcQUzQsN/+4idem1PAioRg9EgjTyxy9dTHC0WS 0wbgUBtexqLNfWhkqSBoW0cKZJCJAFdRmJz+jYMBxFeP+c0utNt2gAPB4qqTpfp6 wv4r18MyLAOtDXUaNCiF0hWT2GpRriaoF+4T95y0dqkRgjJmtOOC0bN3yZplHTM8 ua+PENxBeb/mo9Vq69ly8UTlt0CWo8Pd0E5AY83d96sRaFQBT3vd4XSJc6XED9AJ IRQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:28:16 2025 by rpki-client