$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a47e051c-2b16-4d02-b1e0-ac267a378e13.roa File: a47e051c-2b16-4d02-b1e0-ac267a378e13.roa (raw, json) Hash identifier: 4I7IDPXNZgwOQ0MMRyYX0L0H7J7FaXSdVc1553vYHVg= Subject key identifier: DC:30:81:69:95:36:2F:8F:2C:D1:7B:00:D1:42:36:6C:B8:A2:7C:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 66418C8D1562CF9E59F12E361A8612AED434EFB9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a47e051c-2b16-4d02-b1e0-ac267a378e13.roa Signing time: Sat 11 Oct 2025 00:10:07 +0000 ROA not before: Sat 11 Oct 2025 00:10:07 +0000 ROA not after: Sat 15 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:b000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:41:8c:8d:15:62:cf:9e:59:f1:2e:36:1a:86:12:ae:d4:34:ef:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 11 00:10:07 2025 GMT Not After : Nov 15 23:59:59 2025 GMT Subject: serialNumber=1d020d4e80cc47be245d01b3ebf352edfe593d1355722b3436d985746c3d4f1e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8a:62:a3:1a:34:1e:af:9a:0a:31:dc:3d:01: fe:c4:fc:b0:79:ec:63:b8:fa:cc:1e:61:30:30:35: 03:23:86:14:98:d9:1a:29:ba:25:e6:2a:68:74:8f: e3:01:46:52:6b:04:22:68:47:e8:8d:f4:aa:0f:51: c5:73:20:63:7a:35:9e:d1:70:93:1c:e6:2b:47:6f: 22:43:50:ad:7a:06:36:fc:22:58:58:cb:7a:2f:22: 2a:98:9f:a3:88:64:56:b5:a4:19:cf:f5:0a:29:9b: a2:c9:5a:f7:67:2a:b0:d7:0e:21:51:fc:9e:13:10: 31:6f:7b:2a:08:ee:d0:5e:aa:64:d8:d4:8d:7f:0c: f4:c6:cf:6b:15:76:af:f1:52:09:14:76:62:9f:d3: b2:fe:66:ae:0a:9e:64:9e:2b:fb:b6:d5:bc:92:09: 74:ad:21:ed:77:48:d2:72:a9:72:7e:51:78:f8:71: 6d:83:54:9b:4e:57:d1:f7:98:91:5f:4d:3b:41:85: b1:51:f5:17:19:88:60:35:36:68:3e:a0:8a:14:c2: 0e:56:49:3f:c7:74:8f:52:fd:8a:71:77:fc:0b:e9: 70:98:3d:28:76:99:62:77:06:d2:b8:4a:ec:02:e4: 4f:b2:cf:63:57:d4:9a:b5:59:f7:63:e4:14:8f:b6: c0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:30:81:69:95:36:2F:8F:2C:D1:7B:00:D1:42:36:6C:B8:A2:7C:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a47e051c-2b16-4d02-b1e0-ac267a378e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:b000::/48 Signature Algorithm: sha256WithRSAEncryption 08:57:d9:5d:db:e6:e6:ea:03:83:b7:ce:11:45:f7:90:3c:92: ef:07:a8:65:a9:ea:4c:f5:ef:12:37:af:fa:4a:27:51:0a:db: e1:00:a0:a0:7e:55:a7:73:2c:c4:22:83:16:58:c8:f0:3c:a8: bf:c2:30:9e:c6:3b:b0:89:91:37:ea:47:d1:9a:ac:b8:60:95: 36:5d:55:55:d8:d6:b0:32:59:8e:f0:a2:92:eb:8c:14:56:06: 2b:30:11:8f:46:e6:26:7b:48:9b:9a:6f:9f:e7:30:15:f0:d2: ab:47:cf:cf:21:b6:49:32:61:4c:32:d1:b3:8f:7d:1a:7d:4c: 0d:ea:39:0e:8b:63:07:ee:72:44:3b:fa:84:45:2d:6f:c4:80: dd:ee:bc:12:be:10:a8:81:f8:dd:28:00:bd:a7:07:65:80:8a: cd:92:51:47:e1:72:8c:86:a0:55:b7:db:69:26:de:20:0c:f7: c4:e4:69:ae:ff:66:37:fe:ac:06:1a:ff:74:4a:b4:bc:10:24: 69:4b:b2:97:4e:5b:d9:6b:9a:b1:58:39:41:49:11:07:99:c3: 98:c9:d8:ed:c7:20:6b:c2:3d:39:03:f2:2e:56:5e:4b:65:9e: 9c:57:59:3e:5e:b2:ba:70:10:ed:b5:64:78:82:c3:2b:5b:9b: e6:f5:04:a0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZkGMjRViz55Z8S42GoYSrtQ077kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMTAwMTAwN1oX DTI1MTExNTIzNTk1OVowejFJMEcGA1UEBRNAMWQwMjBkNGU4MGNjNDdiZTI0NWQw MWIzZWJmMzUyZWRmZTU5M2QxMzU1NzIyYjM0MzZkOTg1NzQ2YzNkNGYxZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4pioxo0Hq+aCjHcPQH+xPyweexj uPrMHmEwMDUDI4YUmNkaKbol5ipodI/jAUZSawQiaEfojfSqD1HFcyBjejWe0XCT HOYrR28iQ1CtegY2/CJYWMt6LyIqmJ+jiGRWtaQZz/UKKZuiyVr3Zyqw1w4hUfye ExAxb3sqCO7QXqpk2NSNfwz0xs9rFXav8VIJFHZin9Oy/mauCp5kniv7ttW8kgl0 rSHtd0jScqlyflF4+HFtg1SbTlfR95iRX007QYWxUfUXGYhgNTZoPqCKFMIOVkk/ x3SPUv2KcXf8C+lwmD0odplidwbSuErsAuRPss9jV9SatVn3Y+QUj7bA9wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNwwgWmVNi+PLNF7ANFCNmy4onxbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E0N2UwNTFjLTJiMTYtNGQwMi1iMWUwLWFjMjY3YTM3OGUxMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9rAAMA0GCSqGSIb3DQEBCwUAA4IBAQAIV9ld2+bm6gODt84R RfeQPJLvB6hlqepM9e8SN6/6SidRCtvhAKCgflWncyzEIoMWWMjwPKi/wjCexjuw iZE36kfRmqy4YJU2XVVV2NawMlmO8KKS64wUVgYrMBGPRuYme0ibmm+f5zAV8NKr R8/PIbZJMmFMMtGzj30afUwN6jkOi2MH7nJEO/qERS1vxIDd7rwSvhCogfjdKAC9 pwdlgIrNklFH4XKMhqBVt9tpJt4gDPfE5Gmu/2Y3/qwGGv90SrS8ECRpS7KXTlvZ a5qxWDlBSREHmcOYydjtxyBrwj05A/IuVl5LZZ6cV1k+XrK6cBDttWR4gsMrW5vm 9QSg -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:53 2025 by rpki-client