$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a894812d-493e-43f7-8c3a-76a64ad96de7.roa File: a894812d-493e-43f7-8c3a-76a64ad96de7.roa (raw, json) Hash identifier: UpWynkHRgcL/uszW2uH1VPFAqCaFGpAnwwwt67+LmrM= Subject key identifier: 5E:50:A0:19:ED:F3:8A:76:22:18:B3:93:53:AE:26:51:C0:62:E4:C2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 247453BE4973277D0C84FDF072E1D2CD3B46AA59 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a894812d-493e-43f7-8c3a-76a64ad96de7.roa Signing time: Sat 11 Oct 2025 00:00:40 +0000 ROA not before: Sat 11 Oct 2025 00:00:40 +0000 ROA not after: Sat 15 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:74:53:be:49:73:27:7d:0c:84:fd:f0:72:e1:d2:cd:3b:46:aa:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 11 00:00:40 2025 GMT Not After : Nov 15 23:59:59 2025 GMT Subject: serialNumber=7051497f414d5343e3ff19fa8c1a6774bf4288cda4b543ffad9cf8e88dbb802e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e1:a3:be:92:57:f2:09:19:c6:94:4c:9a:4e: 70:43:46:46:a9:63:b0:26:ab:71:22:6d:55:3a:76: 40:5d:3a:17:68:93:ef:d3:53:36:69:68:72:81:d3: dd:7b:d5:5d:84:f2:03:bd:11:91:8d:1b:77:f8:22: 8c:47:dd:e7:de:12:26:fb:a2:67:cb:b1:23:ef:76: 78:83:ef:bf:5c:1d:60:64:62:e4:ec:97:6f:d6:2b: 6a:ec:fd:14:99:d4:b7:2d:7a:18:da:55:da:ae:cf: d6:c0:c7:d2:a2:29:5f:c7:df:b9:c3:8d:b3:9a:dc: 92:5a:7c:5a:ad:2f:de:6c:60:df:a7:e5:fb:5b:7d: 03:b7:58:78:b7:f7:b1:08:ba:39:10:5c:67:c2:99: 9d:63:ef:be:d9:12:3c:ca:33:21:52:2f:ce:37:fd: 17:f1:05:56:49:97:af:de:5d:09:f7:53:ec:ba:2f: 11:53:bb:4d:af:38:ad:26:6f:4e:ea:57:03:1c:ef: ad:3f:e1:70:fb:ff:97:18:7c:d1:20:cb:5e:cc:9e: 2f:77:2c:1f:fc:9e:4d:98:2a:1b:7a:79:6c:33:66: b2:8f:ab:70:0d:41:d2:64:fc:c7:07:30:a0:13:55: a5:11:00:f4:d5:48:45:41:f6:6d:17:4b:92:a1:72: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:50:A0:19:ED:F3:8A:76:22:18:B3:93:53:AE:26:51:C0:62:E4:C2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a894812d-493e-43f7-8c3a-76a64ad96de7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4040::/48 Signature Algorithm: sha256WithRSAEncryption 35:e9:a7:f0:6e:10:f3:53:95:16:48:5a:cf:09:9a:41:81:e6: fa:03:11:22:ad:6e:09:d7:e3:93:9d:c8:98:7c:d3:6d:db:5d: 24:29:e3:08:49:75:19:1d:93:ca:b6:a7:dd:ab:9a:d4:ad:19: a2:92:2a:52:10:af:cd:0e:ed:4a:72:60:09:74:a7:93:30:c1: db:24:31:87:37:e3:45:42:cb:07:87:88:b4:b6:26:8e:54:70: 2f:d9:38:23:4e:37:2b:93:03:56:11:3a:b4:f0:e2:81:1a:32: 03:f2:30:a2:2a:62:83:41:e8:01:5c:54:83:9c:42:f9:50:b8: 42:bc:1e:ea:1e:c6:f5:45:46:c1:df:a8:a5:9a:09:a6:2a:f7: 8a:b4:bb:d0:8a:f8:23:90:ec:b4:2e:a5:15:f8:23:f6:7d:bb: d8:e4:d7:2b:13:8a:62:0d:90:0b:c4:ce:a5:07:e0:eb:79:a3: 19:54:8c:fe:fc:e7:82:9e:1e:ca:7b:4e:cd:ec:46:f3:e6:94: 7a:1a:83:4d:97:72:63:e9:e8:ae:be:de:03:12:7d:80:1f:81: c2:34:dc:b9:62:23:7c:bc:e6:5e:8f:dd:5c:9b:10:d3:78:f3: d1:df:c6:41:6d:62:2e:50:82:df:50:7a:14:59:d5:ae:34:da: 46:80:c4:c1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJHRTvklzJ30MhP3wcuHSzTtGqlkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMTAwMDA0MFoX DTI1MTExNTIzNTk1OVowejFJMEcGA1UEBRNANzA1MTQ5N2Y0MTRkNTM0M2UzZmYx OWZhOGMxYTY3NzRiZjQyODhjZGE0YjU0M2ZmYWQ5Y2Y4ZTg4ZGJiODAyZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouGjvpJX8gkZxpRMmk5wQ0ZGqWOw JqtxIm1VOnZAXToXaJPv01M2aWhygdPde9VdhPIDvRGRjRt3+CKMR93n3hIm+6Jn y7Ej73Z4g++/XB1gZGLk7Jdv1itq7P0UmdS3LXoY2lXars/WwMfSoilfx9+5w42z mtySWnxarS/ebGDfp+X7W30Dt1h4t/exCLo5EFxnwpmdY+++2RI8yjMhUi/ON/0X 8QVWSZev3l0J91Psui8RU7tNrzitJm9O6lcDHO+tP+Fw+/+XGHzRIMtezJ4vdywf /J5NmCobenlsM2ayj6twDUHSZPzHBzCgE1WlEQD01UhFQfZtF0uSoXJtCwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFF5QoBnt84p2Ihizk1OuJlHAYuTCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E4OTQ4MTJkLTQ5M2UtNDNmNy04YzNhLTc2YTY0YWQ5NmRlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYUBAMA0GCSqGSIb3DQEBCwUAA4IBAQA16afwbhDzU5UWSFrP CZpBgeb6AxEirW4J1+OTnciYfNNt210kKeMISXUZHZPKtqfdq5rUrRmikipSEK/N Du1KcmAJdKeTMMHbJDGHN+NFQssHh4i0tiaOVHAv2TgjTjcrkwNWETq08OKBGjID 8jCiKmKDQegBXFSDnEL5ULhCvB7qHsb1RUbB36ilmgmmKveKtLvQivgjkOy0LqUV +CP2fbvY5NcrE4piDZALxM6lB+DreaMZVIz+/OeCnh7Ke07N7Ebz5pR6GoNNl3Jj 6eiuvt4DEn2AH4HCNNy5YiN8vOZej91cmxDTePPR38ZBbWIuUILfUHoUWdWuNNpG gMTB -----END CERTIFICATE-----Generated at Mon Oct 20 07:26:58 2025 by rpki-client