$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9f3baba-fb82-4aed-9205-b78882941654.roa File: a9f3baba-fb82-4aed-9205-b78882941654.roa (raw, json) Hash identifier: 1wwvwrzAKdvqTl/vbvQF+KPu4jv4oJCwBVX91iUfqoU= Subject key identifier: 70:05:AE:3C:22:7E:AF:F8:80:5A:B8:62:B7:41:E8:88:17:9E:3A:39 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 11558BB499FA7A8257F8E7820B0BAC6BA238D58E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9f3baba-fb82-4aed-9205-b78882941654.roa Signing time: Mon 13 Oct 2025 15:20:09 +0000 ROA not before: Mon 13 Oct 2025 15:20:09 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:55:8b:b4:99:fa:7a:82:57:f8:e7:82:0b:0b:ac:6b:a2:38:d5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:20:09 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=b37cdd7c51163621577dfe8357e0fddd778dfa20e67daf047fff2f3038d6d35b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:b6:f8:db:34:76:7c:3a:d0:ad:e4:f7:52: 0a:78:d6:75:32:e0:c0:f1:d7:fe:e7:a8:c0:21:7e: 30:09:23:c5:d1:fb:91:62:87:d2:94:3d:e8:51:c6: 47:45:1e:67:67:1c:53:70:81:65:05:a1:87:d6:a0: 39:82:8d:dc:99:1f:36:77:2a:19:ec:d1:ff:f7:43: df:91:03:b5:0b:ce:21:a6:57:cd:9b:30:d4:91:75: c3:13:8a:9d:70:08:1d:1c:6d:36:cc:b8:0b:5a:17: 66:27:3d:45:d8:77:b5:6d:58:57:6d:c6:26:b3:ea: 46:aa:5f:3c:28:ff:50:06:4e:a5:72:f6:24:7b:67: c6:02:81:6a:8e:6e:c9:23:43:23:5a:6f:56:f3:dd: ff:22:ec:2a:a1:a2:bb:25:cf:dc:e4:27:87:5d:d9: 41:ac:31:89:47:42:df:d0:da:35:b1:dd:d3:00:a4: 74:7a:48:d4:5d:cc:3e:f2:11:4e:50:ca:cb:70:0a: 95:19:1d:c1:9c:18:af:f0:b6:b3:c9:da:73:fc:47: ec:af:5a:50:a7:0f:a2:16:bd:e8:fa:b0:e1:53:19: ba:9c:d0:fc:8d:65:6d:41:52:aa:85:53:33:59:1d: 3a:19:64:51:72:05:40:3a:b1:c4:cb:74:af:8d:46: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:05:AE:3C:22:7E:AF:F8:80:5A:B8:62:B7:41:E8:88:17:9E:3A:39 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9f3baba-fb82-4aed-9205-b78882941654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:f000::/40 Signature Algorithm: sha256WithRSAEncryption 73:44:8c:9c:ba:ee:1a:46:9d:ef:a4:b0:02:eb:20:54:f0:4a: f1:a0:e8:dc:57:34:46:54:22:f0:28:eb:84:dd:ee:d3:93:e5: c1:0b:27:b3:19:e8:6a:9e:4e:a8:76:c4:39:b1:82:af:4c:94: 10:d6:79:82:cb:41:f5:e2:43:7a:67:d9:71:61:57:18:62:d5: 21:4f:f0:63:73:9b:9b:7d:f4:36:f2:16:76:72:b0:fe:db:1b: 60:c1:3b:1a:36:84:71:75:8f:a0:f8:af:d4:31:95:ff:91:c6: 29:de:de:5f:dc:c3:f4:e9:58:65:05:a3:85:dd:3c:28:da:d3: 1f:34:1a:f5:44:bc:a2:17:b6:aa:77:ba:06:d9:0b:4d:de:a9: 7e:c9:0f:53:23:eb:d9:ab:20:6e:26:9d:8e:07:b9:e7:3c:03: 11:b4:71:aa:a1:aa:09:cf:27:63:68:c8:22:6a:29:3c:a6:76: 9c:44:58:c8:05:ef:47:2d:d1:b6:68:95:b8:94:16:4f:13:92: a5:18:cf:34:91:f7:d9:a9:55:6e:e8:f4:e7:19:35:74:0d:70: 2e:d8:1d:ad:9d:20:d2:05:f0:b8:b7:c4:9a:29:3b:77:97:f0: 75:79:2c:fe:9c:b8:0a:cf:e6:ac:66:b4:bf:37:f5:bb:81:2c: 60:c2:c3:6f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEVWLtJn6eoJX+OeCCwusa6I41Y4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1MjAwOVoX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNAYjM3Y2RkN2M1MTE2MzYyMTU3N2Rm ZTgzNTdlMGZkZGQ3NzhkZmEyMGU2N2RhZjA0N2ZmZjJmMzAzOGQ2ZDM1YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo+2+Ns0dnw60K3k91IKeNZ1MuDA 8df+56jAIX4wCSPF0fuRYofSlD3oUcZHRR5nZxxTcIFlBaGH1qA5go3cmR82dyoZ 7NH/90PfkQO1C84hplfNmzDUkXXDE4qdcAgdHG02zLgLWhdmJz1F2He1bVhXbcYm s+pGql88KP9QBk6lcvYke2fGAoFqjm7JI0MjWm9W893/IuwqoaK7Jc/c5CeHXdlB rDGJR0Lf0No1sd3TAKR0ekjUXcw+8hFOUMrLcAqVGR3BnBiv8Lazydpz/Efsr1pQ pw+iFr3o+rDhUxm6nND8jWVtQVKqhVMzWR06GWRRcgVAOrHEy3SvjUalrQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHAFrjwifq/4gFq4YrdB6IgXnjo5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5ZjNiYWJhLWZiODItNGFlZC05MjA1LWI3ODg4Mjk0MTY1NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8vAwDQYJKoZIhvcNAQELBQADggEBAHNEjJy67hpGne+ksALr IFTwSvGg6NxXNEZUIvAo64Td7tOT5cELJ7MZ6GqeTqh2xDmxgq9MlBDWeYLLQfXi Q3pn2XFhVxhi1SFP8GNzm5t99DbyFnZysP7bG2DBOxo2hHF1j6D4r9Qxlf+Rxine 3l/cw/TpWGUFo4XdPCja0x80GvVEvKIXtqp3ugbZC03eqX7JD1Mj69mrIG4mnY4H uec8AxG0caqhqgnPJ2NoyCJqKTymdpxEWMgF70ct0bZolbiUFk8TkqUYzzSR99mp VW7o9OcZNXQNcC7YHa2dINIF8Li3xJopO3eX8HV5LP6cuArP5qxmtL839buBLGDC w28= -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:03 2025 by rpki-client