$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aad75788-f501-4250-9f37-16adba579de4.roa File: aad75788-f501-4250-9f37-16adba579de4.roa (raw, json) Hash identifier: C8VnoX5CADem/1d+/6ETzJyoYXVQ8jhp1WzOHQ97Uc0= Subject key identifier: 4A:B2:50:BB:A5:A7:85:3E:FB:2D:4A:86:62:7C:71:8C:41:D6:E1:DB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 055815DCCE7DFE7EAB7634C366B382C0CF6F8D8D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aad75788-f501-4250-9f37-16adba579de4.roa Signing time: Tue 14 Oct 2025 00:10:51 +0000 ROA not before: Tue 14 Oct 2025 00:10:51 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:58:15:dc:ce:7d:fe:7e:ab:76:34:c3:66:b3:82:c0:cf:6f:8d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 14 00:10:51 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=b7c93daea9b30a6cbfa84edf0ecee6fe700d07852663582e6cfb5b59164e0cdd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:93:59:bd:6a:c6:9d:77:98:fc:84:08:1c:e4: 3d:f2:eb:8e:e5:db:cb:9c:ad:d9:18:c3:3a:64:80: 4f:3f:24:e6:d6:3a:87:88:f1:5b:30:42:23:a2:78: 31:9b:c4:d7:c6:12:06:72:2c:c1:d7:bd:44:b6:03: 67:b4:7f:27:63:b7:11:ed:3b:bf:2b:15:ef:8e:f8: f3:c9:2e:97:14:23:b2:14:5d:01:68:53:a6:79:b3: ba:89:73:ea:ea:db:6d:cb:eb:fc:b5:6f:b5:9f:3b: 8d:5a:95:3a:5f:be:60:48:45:6e:98:fc:28:a5:3b: 90:d4:bc:cf:d5:23:6d:37:c7:53:89:0c:17:da:05: be:84:12:fa:d9:58:71:62:b3:1a:b9:71:dc:c5:d2: 6d:83:76:b2:db:79:ff:22:d2:24:c5:0f:73:82:73: d7:28:1d:9c:44:46:49:ab:dd:5c:6e:c9:c7:d7:da: e7:ea:6e:fa:42:d5:71:b7:a2:70:1f:e0:7e:4e:db: 5f:f3:77:8f:6b:f8:2f:d8:a9:a0:39:e4:d2:a6:ee: 0e:a4:01:70:78:bc:b3:87:34:59:10:f6:ae:47:5c: f6:9a:68:fb:70:fe:70:e1:fa:ca:f0:07:23:65:5a: 17:4c:e5:4f:50:00:5c:a5:e9:7c:27:ad:9a:01:92: b3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B2:50:BB:A5:A7:85:3E:FB:2D:4A:86:62:7C:71:8C:41:D6:E1:DB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aad75788-f501-4250-9f37-16adba579de4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:8000::/40 Signature Algorithm: sha256WithRSAEncryption 0a:1c:c3:e4:23:4b:b3:a3:7a:20:30:a0:c5:21:31:51:83:f7: 09:ae:7d:c1:79:59:e0:fe:38:53:69:e2:45:31:4b:cb:34:b6: b0:7c:bd:37:f4:cd:94:9d:25:0b:7d:e7:48:6d:2e:24:df:89: b5:10:64:e2:b2:67:c8:70:78:1b:34:77:d6:46:11:d8:20:b5: 4b:ce:76:46:c4:59:26:ae:7c:4c:59:fe:41:8b:47:d3:4c:46: 1e:e8:8d:b5:9d:b6:22:9c:1b:91:6b:24:82:b7:20:57:e2:5c: f1:ca:df:f6:75:bf:d9:a5:17:5a:0a:f3:a4:37:1b:20:1f:aa: 27:3e:c5:3f:c9:fd:fe:73:c5:e1:46:4c:db:d6:46:90:e8:d0: 45:0d:12:b6:42:d9:4d:a2:48:00:66:f4:9f:92:c6:51:2e:44: f0:e8:e0:64:83:3d:d0:5c:34:d4:ab:f9:29:03:ed:a2:d3:6c: 1e:23:8e:ad:31:6c:e7:8a:dc:06:75:92:df:cc:de:63:b6:ea: 52:02:10:51:d9:4f:7e:9d:45:8b:d1:f7:c1:e5:13:fd:59:85: 15:3c:f9:4a:3e:5c:20:80:e8:05:3f:ae:e8:8e:1b:6c:20:5f: 5a:5d:20:12:ef:6e:33:1f:e5:2a:ff:8a:4b:c2:f1:91:d3:17: d0:57:42:4e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBVgV3M59/n6rdjTDZrOCwM9vjY0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNDAwMTA1MVoX DTI1MTExODIzNTk1OVowejFJMEcGA1UEBRNAYjdjOTNkYWVhOWIzMGE2Y2JmYTg0 ZWRmMGVjZWU2ZmU3MDBkMDc4NTI2NjM1ODJlNmNmYjViNTkxNjRlMGNkZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZNZvWrGnXeY/IQIHOQ98uuO5dvL nK3ZGMM6ZIBPPyTm1jqHiPFbMEIjongxm8TXxhIGcizB171EtgNntH8nY7cR7Tu/ KxXvjvjzyS6XFCOyFF0BaFOmebO6iXPq6ttty+v8tW+1nzuNWpU6X75gSEVumPwo pTuQ1LzP1SNtN8dTiQwX2gW+hBL62VhxYrMauXHcxdJtg3ay23n/ItIkxQ9zgnPX KB2cREZJq91cbsnH19rn6m76QtVxt6JwH+B+Tttf83ePa/gv2KmgOeTSpu4OpAFw eLyzhzRZEPauR1z2mmj7cP5w4frK8AcjZVoXTOVPUABcpel8J62aAZKzkQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEqyULulp4U++y1KhmJ8cYxB1uHbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FhZDc1Nzg4LWY1MDEtNDI1MC05ZjM3LTE2YWRiYTU3OWRlNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+4AwDQYJKoZIhvcNAQELBQADggEBAAocw+QjS7OjeiAwoMUh MVGD9wmufcF5WeD+OFNp4kUxS8s0trB8vTf0zZSdJQt950htLiTfibUQZOKyZ8hw eBs0d9ZGEdggtUvOdkbEWSaufExZ/kGLR9NMRh7ojbWdtiKcG5FrJIK3IFfiXPHK 3/Z1v9mlF1oK86Q3GyAfqic+xT/J/f5zxeFGTNvWRpDo0EUNErZC2U2iSABm9J+S xlEuRPDo4GSDPdBcNNSr+SkD7aLTbB4jjq0xbOeK3AZ1kt/M3mO26lICEFHZT36d RYvR98HlE/1ZhRU8+Uo+XCCA6AU/ruiOG2wgX1pdIBLvbjMf5Sr/ikvC8ZHTF9BX Qk4= -----END CERTIFICATE-----Generated at Mon Oct 20 23:34:42 2025 by rpki-client