$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ff3d168-754a-40d4-ad25-8b3a7db40970.roa File: 9ff3d168-754a-40d4-ad25-8b3a7db40970.roa (raw, json) Hash identifier: 4ecUYK3qi2xvp2LY/uV7KR83PkaA1KBF+GMnPgmojX4= Subject key identifier: B0:9D:8D:43:0C:AF:12:C7:0E:EB:80:77:0E:53:8C:97:C6:5D:73:E5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0E5E37C32A300CBB0679E4631AA25F78478B78D8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ff3d168-754a-40d4-ad25-8b3a7db40970.roa Signing time: Sat 04 Oct 2025 00:10:49 +0000 ROA not before: Sat 04 Oct 2025 00:10:49 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:5e:37:c3:2a:30:0c:bb:06:79:e4:63:1a:a2:5f:78:47:8b:78:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:10:49 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=7b02a14ab6150cf8bf2b6691c2bed0900532cbb6943a734606d607fce133fc52, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:89:d3:b7:10:4c:4a:07:91:a9:5c:38:05:cc: 53:3f:cc:b3:51:cf:3d:8b:e2:c1:ec:a7:31:21:be: f1:79:1a:d7:2a:7a:b5:33:98:bd:b7:80:42:1f:ab: 24:7c:59:da:4e:ba:5a:9d:1c:5f:35:e1:69:6a:1a: 2c:95:e6:29:98:c2:4a:0b:91:e0:55:6c:e7:75:27: 04:df:53:25:b5:b9:31:2f:b8:0d:d3:77:c0:27:20: b3:93:8b:37:2c:63:17:54:57:6b:c4:d2:8c:e0:3a: 28:2c:b5:b8:ab:53:39:70:bb:78:34:23:1f:7e:d7: 0a:42:c7:c2:b0:d1:60:63:83:89:4d:66:f5:c0:c6: 24:24:bc:12:e9:75:d0:cc:25:01:8e:9a:00:d8:f1: 0a:2d:04:4a:c2:0f:6a:9d:66:64:f6:c4:af:a4:30: 5c:e6:59:1c:c8:e7:1b:57:0e:50:1e:53:46:70:09: 06:fc:07:ec:7f:dd:94:93:5d:f1:a7:c2:96:4e:6e: 3f:a9:75:5d:f8:fc:77:a9:03:a8:90:fa:e0:24:de: e4:31:1d:4c:cb:ac:28:e4:a2:7c:b8:e8:f5:ff:4c: ae:06:a7:c4:c3:50:db:33:b2:0a:dd:7d:74:82:63: 2b:cb:eb:49:b6:15:0d:5a:d9:91:eb:2c:14:e5:25: a5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9D:8D:43:0C:AF:12:C7:0E:EB:80:77:0E:53:8C:97:C6:5D:73:E5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ff3d168-754a-40d4-ad25-8b3a7db40970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:7000::/40 Signature Algorithm: sha256WithRSAEncryption 12:da:01:df:39:48:dc:8f:f1:d4:25:55:06:00:51:43:35:13: 7f:25:a2:ac:0f:43:a4:a8:11:ee:ea:b6:7a:69:65:40:5d:dd: 99:c7:be:c3:db:dc:fc:08:dc:f8:9f:9b:bc:6b:d4:20:9d:ff: 83:48:b3:79:9b:11:42:18:82:91:f1:e9:1f:f9:73:ca:9c:8a: 57:9c:69:f9:9d:4e:e8:3b:94:a9:95:2d:83:a8:12:9c:e2:71: d3:2a:c9:20:61:b3:a6:98:5a:9c:27:f8:4b:d9:59:1a:38:d2: 1c:6d:ac:a6:52:e8:2d:42:b9:8a:d3:a9:4d:ea:f7:c3:69:bd: 8f:69:f1:57:ba:cf:1c:f2:6f:af:0b:8b:94:5e:a3:ad:98:34: 3d:d8:5d:18:ea:09:e0:f6:71:c6:78:60:dd:cc:ca:9f:17:a1: 32:3e:f6:08:b8:b4:4c:7c:55:4f:ea:9e:c7:98:f7:6c:58:b5: cf:10:35:08:6f:31:b8:03:3d:ea:23:de:0e:f7:3c:c1:ac:01: d8:0e:97:e8:f6:a3:06:72:19:0f:21:26:fe:d6:a6:cb:be:a4: e3:82:eb:88:26:bf:4e:1a:c7:3a:fc:b5:6e:14:3a:18:53:9d: 59:14:26:e8:d9:62:a6:62:c3:f6:44:ec:2d:8f:25:71:b4:0d: 31:ea:c0:d8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDl43wyowDLsGeeRjGqJfeEeLeNgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwNDAwMTA0OVoX DTI1MTEwODIzNTk1OVowejFJMEcGA1UEBRNAN2IwMmExNGFiNjE1MGNmOGJmMmI2 NjkxYzJiZWQwOTAwNTMyY2JiNjk0M2E3MzQ2MDZkNjA3ZmNlMTMzZmM1MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkonTtxBMSgeRqVw4BcxTP8yzUc89 i+LB7KcxIb7xeRrXKnq1M5i9t4BCH6skfFnaTrpanRxfNeFpahosleYpmMJKC5Hg VWzndScE31MltbkxL7gN03fAJyCzk4s3LGMXVFdrxNKM4DooLLW4q1M5cLt4NCMf ftcKQsfCsNFgY4OJTWb1wMYkJLwS6XXQzCUBjpoA2PEKLQRKwg9qnWZk9sSvpDBc 5lkcyOcbVw5QHlNGcAkG/Afsf92Uk13xp8KWTm4/qXVd+Px3qQOokPrgJN7kMR1M y6wo5KJ8uOj1/0yuBqfEw1DbM7IK3X10gmMry+tJthUNWtmR6ywU5SWllwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLCdjUMMrxLHDuuAdw5TjJfGXXPlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmZjNkMTY4LTc1NGEtNDBkNC1hZDI1LThiM2E3ZGI0MDk3MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauHAwDQYJKoZIhvcNAQELBQADggEBABLaAd85SNyP8dQlVQYA UUM1E38loqwPQ6SoEe7qtnppZUBd3ZnHvsPb3PwI3Pifm7xr1CCd/4NIs3mbEUIY gpHx6R/5c8qcilecafmdTug7lKmVLYOoEpzicdMqySBhs6aYWpwn+EvZWRo40hxt rKZS6C1CuYrTqU3q98NpvY9p8Ve6zxzyb68Li5Reo62YND3YXRjqCeD2ccZ4YN3M yp8XoTI+9gi4tEx8VU/qnseY92xYtc8QNQhvMbgDPeoj3g73PMGsAdgOl+j2owZy GQ8hJv7Wpsu+pOOC64gmv04axzr8tW4UOhhTnVkUJujZYqZiw/ZE7C2PJXG0DTHq wNg= -----END CERTIFICATE-----Generated at Mon Oct 20 07:31:00 2025 by rpki-client