$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a92f1e22-e67b-4fa9-9cac-0c0051ee13d6.roa File: a92f1e22-e67b-4fa9-9cac-0c0051ee13d6.roa (raw, json) Hash identifier: DXqdfO8nHp7TDsMSiE3lKDMhWco9TujWcqUp8dWbdmw= Subject key identifier: 82:26:7B:EA:1A:FD:BE:C6:27:66:6B:FB:A3:06:1B:74:BC:38:30:C4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2A7D2339944DBC445E8009ACF38656C1FB0DE1ED Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a92f1e22-e67b-4fa9-9cac-0c0051ee13d6.roa Signing time: Tue 14 Oct 2025 00:10:21 +0000 ROA not before: Tue 14 Oct 2025 00:10:21 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:7d:23:39:94:4d:bc:44:5e:80:09:ac:f3:86:56:c1:fb:0d:e1:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 14 00:10:21 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=b3ff23a416164b357654a70989da5746268e17082e26d1612fee40ff59517196, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:90:04:58:77:0f:aa:a3:05:d5:a5:20:c0:9d: f7:a7:b1:af:c0:c9:c9:10:72:27:c6:79:58:37:8b: 17:a1:f8:ab:e6:b4:c0:0c:ce:61:25:5c:dd:99:42: 99:b8:0e:53:d0:31:5a:b1:67:87:44:8d:7a:80:04: de:15:7d:39:1e:d9:70:14:01:a2:1e:1a:5c:dd:a6: 8d:cb:0d:25:4f:14:a8:0b:86:7a:18:dc:90:ea:b0: c4:db:91:8b:19:c4:26:38:30:d8:56:fd:29:c8:71: 2e:78:21:ad:a9:03:ee:ad:08:05:19:15:54:42:34: 89:36:6e:f3:4e:99:69:48:fc:3b:aa:51:0b:46:05: e3:aa:48:7d:15:19:fb:dc:2f:30:20:29:9c:5d:19: fe:05:ea:94:23:07:16:4b:f1:a1:c8:49:ef:03:2c: ca:58:f1:da:9e:ad:48:32:29:db:97:2d:cd:a3:43: 07:60:c3:45:21:bb:e5:16:b5:b7:f8:7a:8e:2b:65: 9e:90:1c:c4:e8:d3:46:c7:f9:5b:99:b8:c9:8f:57: 93:db:c5:9a:63:0e:42:75:d9:a1:51:6f:9a:27:83: ff:74:72:f8:a5:b9:18:b0:18:3a:ab:31:18:82:8a: e8:a7:9a:cf:80:e3:8a:53:6a:56:df:4b:eb:bb:05: c5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:26:7B:EA:1A:FD:BE:C6:27:66:6B:FB:A3:06:1B:74:BC:38:30:C4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a92f1e22-e67b-4fa9-9cac-0c0051ee13d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:8000::/40 Signature Algorithm: sha256WithRSAEncryption 76:9d:dd:80:8b:40:23:e8:ba:a1:2c:b7:cd:1b:31:fa:a5:27: 7b:a2:0f:34:0d:1f:af:76:1b:17:02:3c:ef:e7:e3:05:dc:2b: 42:8c:95:5b:21:95:3c:4b:31:e2:10:21:a9:02:18:6f:86:6d: d0:fc:7b:64:a2:72:e0:39:13:61:c4:c3:a6:25:fa:7a:8a:ed: 16:a9:52:f0:dc:e4:40:1d:8d:bc:cc:c8:9e:54:e8:84:9b:53: 20:7d:aa:59:25:7f:a7:ed:5b:54:d6:09:5b:9d:28:8e:d3:82: 46:ad:ed:47:53:db:f8:0a:d3:22:34:b6:cb:a9:11:af:80:20: 62:5a:18:7f:16:a3:9d:a1:e0:ff:6d:cc:04:70:8d:e0:fb:d1: 30:22:e0:e3:94:db:fd:b3:49:88:fb:3a:8d:4c:28:34:50:10: a2:0c:c4:0a:d2:fb:6b:71:c5:49:dd:87:d5:63:09:8c:8a:ef: f3:99:33:bf:62:13:70:b1:27:9b:a2:d2:52:9b:91:7f:d6:68: d7:b7:ce:07:bd:9e:93:07:6a:bf:b1:84:11:c9:3d:83:93:1f: a8:af:4b:5e:01:fd:9f:75:0a:2e:ca:bb:c1:bf:9c:27:0b:75: 14:73:88:eb:9d:6f:2d:9f:13:ce:27:bc:b2:b2:2e:a3:2a:7a: 6f:38:6f:95 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKn0jOZRNvERegAms84ZWwfsN4e0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNDAwMTAyMVoX DTI1MTExODIzNTk1OVowejFJMEcGA1UEBRNAYjNmZjIzYTQxNjE2NGIzNTc2NTRh NzA5ODlkYTU3NDYyNjhlMTcwODJlMjZkMTYxMmZlZTQwZmY1OTUxNzE5NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5AEWHcPqqMF1aUgwJ33p7GvwMnJ EHInxnlYN4sXofir5rTADM5hJVzdmUKZuA5T0DFasWeHRI16gATeFX05HtlwFAGi Hhpc3aaNyw0lTxSoC4Z6GNyQ6rDE25GLGcQmODDYVv0pyHEueCGtqQPurQgFGRVU QjSJNm7zTplpSPw7qlELRgXjqkh9FRn73C8wICmcXRn+BeqUIwcWS/GhyEnvAyzK WPHanq1IMinbly3No0MHYMNFIbvlFrW3+HqOK2WekBzE6NNGx/lbmbjJj1eT28Wa Yw5CddmhUW+aJ4P/dHL4pbkYsBg6qzEYgorop5rPgOOKU2pW30vruwXFhwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIIme+oa/b7GJ2Zr+6MGG3S8ODDEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5MmYxZTIyLWU2N2ItNGZhOS05Y2FjLTBjMDA1MWVlMTNkNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOIAwDQYJKoZIhvcNAQELBQADggEBAHad3YCLQCPouqEst80b MfqlJ3uiDzQNH692GxcCPO/n4wXcK0KMlVshlTxLMeIQIakCGG+GbdD8e2SicuA5 E2HEw6Yl+nqK7RapUvDc5EAdjbzMyJ5U6ISbUyB9qlklf6ftW1TWCVudKI7Tgkat 7UdT2/gK0yI0tsupEa+AIGJaGH8Wo52h4P9tzARwjeD70TAi4OOU2/2zSYj7Oo1M KDRQEKIMxArS+2txxUndh9VjCYyK7/OZM79iE3CxJ5ui0lKbkX/WaNe3zge9npMH ar+xhBHJPYOTH6ivS14B/Z91Ci7Ku8G/nCcLdRRziOudby2fE84nvLKyLqMqem84 b5U= -----END CERTIFICATE-----Generated at Mon Oct 20 07:24:53 2025 by rpki-client