$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa File: acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa (raw, json) Hash identifier: DbkEVrZRB95i0WlaQEhNRgqp6rMstKDf/F+KMKTUaes= Subject key identifier: DC:D0:01:A2:96:CF:DF:8D:9C:68:F1:66:19:7A:5A:E3:7A:F1:BB:1E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0256C30FF857CBF2EB68DAC0E0FA3142AF9C2C72 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa Signing time: Mon 13 Oct 2025 15:50:04 +0000 ROA not before: Mon 13 Oct 2025 15:50:04 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:56:c3:0f:f8:57:cb:f2:eb:68:da:c0:e0:fa:31:42:af:9c:2c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:50:04 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=ab33062bf289baa9d21686c5977d653d6bfe04aaeb0b9d22fc52b311b072ec05, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c0:76:46:93:be:16:e0:07:30:df:37:32:65: b0:05:2e:79:0b:28:33:0b:4b:cc:1f:b0:2b:82:09: 4c:f1:0c:d6:35:38:79:b4:5f:f7:b7:b4:61:ac:13: 81:b9:a8:d5:df:e2:c4:da:f2:76:7b:6b:e0:7d:f6: b5:54:88:de:ff:81:94:c9:bb:45:42:74:0d:43:4f: bc:c1:f8:cd:79:8f:ba:08:2c:6c:29:ae:0a:32:85: e1:ec:a7:8b:bd:db:98:93:9c:67:af:4a:08:73:b8: 24:6b:f6:79:92:c0:f5:6d:f1:ce:00:c3:2d:b5:42: 3d:76:f7:0b:76:2b:ca:41:d3:b1:8a:bc:24:62:5e: 19:f5:ee:87:a9:41:e9:a3:2f:b4:fb:27:a4:03:5f: 3a:dd:90:82:37:11:c3:89:68:37:82:81:6c:5e:58: 52:97:7a:b0:dd:44:ee:d5:cd:37:c5:55:18:f0:4a: ba:a1:d7:7d:95:b4:25:f9:b3:a1:89:a9:cb:92:5c: 29:79:7d:f6:23:ce:aa:77:22:43:cd:d0:e8:65:b4: 81:80:cf:74:5d:cf:66:72:7f:b7:52:83:c5:db:06: 3f:d3:98:de:40:00:9a:4d:39:8d:1e:5b:c3:b5:24: bf:7d:d6:54:69:25:bc:9f:47:2a:94:78:ac:5c:55: 8a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D0:01:A2:96:CF:DF:8D:9C:68:F1:66:19:7A:5A:E3:7A:F1:BB:1E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:1000::/40 Signature Algorithm: sha256WithRSAEncryption bf:40:61:1d:71:7f:07:f0:ad:ca:6c:fd:1c:f6:04:c8:46:f0: b2:d6:c1:53:1b:c5:14:ba:19:4f:66:ad:21:d8:4a:9f:76:99: 55:12:a8:53:11:9f:e8:30:16:9e:67:f3:e1:51:f1:8b:05:0f: 2f:68:4d:fb:a3:cb:c6:56:e8:ea:c9:f4:67:b9:00:7a:8e:c6: 76:0b:bc:be:15:d9:0e:0a:7c:d6:40:ea:88:e5:6b:da:29:cf: 82:09:cf:91:9d:19:20:22:bf:10:bb:ab:0e:06:5f:43:3b:bd: 41:65:81:76:1b:b9:bc:d2:c3:ef:28:a2:5d:7b:af:a4:93:01: 81:08:07:2a:cd:b0:92:bf:3d:2c:7f:e7:a4:00:fe:e3:4d:88: 38:55:1d:d2:dc:76:6d:1c:df:e5:6b:55:f2:d2:05:84:7d:7e: 5a:61:2d:b0:27:05:4e:98:29:d7:e6:14:4d:a3:1c:b4:2e:1b: b5:36:ac:8b:b8:25:34:44:cf:55:a9:fa:6e:79:d9:1d:38:e7: c6:9f:4b:1d:7c:b8:3d:f4:bf:63:ba:fc:f3:e1:d9:63:7b:ca: 74:5c:8f:2a:06:eb:84:1b:1d:d3:ed:a3:e9:8e:73:ba:b1:db: 5a:c8:d0:c3:cc:9f:dd:3f:96:a2:b2:1e:e7:f9:4d:b7:cf:e4: ee:a9:6b:3e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAlbDD/hXy/LraNrA4PoxQq+cLHIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1NTAwNFoX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNAYWIzMzA2MmJmMjg5YmFhOWQyMTY4 NmM1OTc3ZDY1M2Q2YmZlMDRhYWViMGI5ZDIyZmM1MmIzMTFiMDcyZWMwNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMB2RpO+FuAHMN83MmWwBS55Cygz C0vMH7ArgglM8QzWNTh5tF/3t7RhrBOBuajV3+LE2vJ2e2vgffa1VIje/4GUybtF QnQNQ0+8wfjNeY+6CCxsKa4KMoXh7KeLvduYk5xnr0oIc7gka/Z5ksD1bfHOAMMt tUI9dvcLdivKQdOxirwkYl4Z9e6HqUHpoy+0+yekA1863ZCCNxHDiWg3goFsXlhS l3qw3UTu1c03xVUY8Eq6odd9lbQl+bOhianLklwpeX32I86qdyJDzdDoZbSBgM90 Xc9mcn+3UoPF2wY/05jeQACaTTmNHlvDtSS/fdZUaSW8n0cqlHisXFWKhwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNzQAaKWz9+NnGjxZhl6WuN68bseMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FjZGJiZWZmLTA5OTgtNDliMi04YjVjLTJiYjExMWZjMjFjZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaABAwDQYJKoZIhvcNAQELBQADggEBAL9AYR1xfwfwrcps/Rz2 BMhG8LLWwVMbxRS6GU9mrSHYSp92mVUSqFMRn+gwFp5n8+FR8YsFDy9oTfujy8ZW 6OrJ9Ge5AHqOxnYLvL4V2Q4KfNZA6ojla9opz4IJz5GdGSAivxC7qw4GX0M7vUFl gXYbubzSw+8ool17r6STAYEIByrNsJK/PSx/56QA/uNNiDhVHdLcdm0c3+VrVfLS BYR9flphLbAnBU6YKdfmFE2jHLQuG7U2rIu4JTREz1Wp+m552R0458afSx18uD30 v2O6/PPh2WN7ynRcjyoG64QbHdPto+mOc7qx21rI0MPMn90/lqKyHuf5TbfP5O6p az4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:27:51 2025 by rpki-client