$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/add5cc6a-7ce6-4c3c-925b-feadc7007109.roa File: add5cc6a-7ce6-4c3c-925b-feadc7007109.roa (raw, json) Hash identifier: tD1BgvozcQV/KtnaRA8ums6dB2ECPvYNNfoU7tqlrSU= Subject key identifier: 43:ED:B8:78:90:37:C5:41:2E:48:BF:8B:91:6E:AE:D7:26:76:CB:5D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1A11D73CD442993031A6561FC858C914EE13A477 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/add5cc6a-7ce6-4c3c-925b-feadc7007109.roa Signing time: Sun 19 Oct 2025 00:00:06 +0000 ROA not before: Sun 19 Oct 2025 00:00:06 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:11:d7:3c:d4:42:99:30:31:a6:56:1f:c8:58:c9:14:ee:13:a4:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:00:06 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=6c27f59e5ffe2dfb35fc8137198b86c111893b74c3515e19fca49e4983711492, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e8:a2:72:22:a7:5f:a8:8f:60:5a:87:c6:d9: ab:47:77:fc:43:3c:c0:24:1e:2e:e4:0a:28:8a:12: cf:d9:b3:29:6a:10:0a:36:cd:b9:39:77:22:75:7a: b5:8c:20:68:79:f0:87:c2:46:65:cf:df:31:f8:c2: b9:d2:df:a4:8c:f7:85:2e:23:63:9f:18:9d:e3:01: f6:f7:2d:b9:05:ba:6f:2e:ba:80:4e:b3:92:12:39: f5:e6:30:91:3c:e6:29:da:ae:8a:c8:41:6b:39:8b: 96:4f:39:f4:cd:f0:39:41:10:3f:2d:c8:f3:24:20: 6f:07:fd:4a:cc:d4:0f:98:9c:c7:ff:92:2c:78:59: 3b:94:e0:6b:1b:3c:f9:ab:65:2c:a0:a8:b1:a4:7b: 81:3f:4c:68:a1:be:a7:10:86:b3:96:52:d3:64:da: d8:ec:82:12:9f:6a:67:2e:13:c9:7c:92:a4:97:a3: b8:1a:43:cb:c2:d2:be:84:18:e5:98:6d:5c:3d:a6: 86:3f:5d:ed:4b:ac:28:69:17:6d:d9:00:1a:c0:10: 29:01:2c:cc:d4:a9:b5:f1:67:4f:25:1f:69:28:b8: 05:fc:31:08:5d:cd:9c:c9:54:e5:ca:3b:e3:54:d0: a1:d0:1b:6a:b4:e5:ac:9e:b1:a1:7b:1f:1f:f1:e2: 0b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:ED:B8:78:90:37:C5:41:2E:48:BF:8B:91:6E:AE:D7:26:76:CB:5D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/add5cc6a-7ce6-4c3c-925b-feadc7007109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:2800::/40 Signature Algorithm: sha256WithRSAEncryption 0f:ef:0d:9a:99:fc:b2:24:f9:47:53:8b:32:96:80:bf:90:96: 21:9d:91:72:84:28:b0:4c:11:f0:b1:77:4a:ac:aa:06:20:b9: ea:74:8a:3e:73:a4:10:c3:8a:90:de:2c:00:1a:c2:63:d6:86: 22:05:b7:11:d7:b8:ee:82:3d:5f:3e:70:6d:96:e8:44:2c:5e: 65:f1:32:d0:3d:db:40:50:50:f6:f6:f5:7c:43:ae:a9:d8:d1: 6c:c4:a8:91:03:a0:f1:64:92:4d:1a:e0:d5:cf:9d:74:47:88: 2e:ba:60:ee:5d:ff:b2:bb:6e:a8:7d:53:0a:b4:67:ec:7c:dd: 8e:ad:5c:9a:f6:4f:2b:ee:a8:ca:7a:5a:af:c7:94:6e:8c:f9: 3d:d4:63:15:95:26:7a:16:fb:ca:d1:32:f1:a2:29:eb:92:f4: 3d:95:6b:a7:2c:4c:32:52:ff:25:95:07:ad:2c:fc:df:81:e2: 84:f6:d6:5f:76:42:2e:95:7d:e4:a7:8c:1f:15:7d:29:ce:b6: 0a:2f:0e:f6:49:82:8a:f9:98:6b:a3:89:72:3a:c0:b6:56:77: a3:6d:24:c7:cc:59:9c:13:03:a3:28:e8:00:9c:56:a2:39:3c: e1:9d:ee:86:8a:43:3f:bf:df:01:e9:74:78:b7:ed:e5:96:05: 16:b8:34:0d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGhHXPNRCmTAxplYfyFjJFO4TpHcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxOTAwMDAwNloX DTI1MTEyMzIzNTk1OVowejFJMEcGA1UEBRNANmMyN2Y1OWU1ZmZlMmRmYjM1ZmM4 MTM3MTk4Yjg2YzExMTg5M2I3NGMzNTE1ZTE5ZmNhNDllNDk4MzcxMTQ5MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOiiciKnX6iPYFqHxtmrR3f8QzzA JB4u5AooihLP2bMpahAKNs25OXcidXq1jCBoefCHwkZlz98x+MK50t+kjPeFLiNj nxid4wH29y25BbpvLrqATrOSEjn15jCRPOYp2q6KyEFrOYuWTzn0zfA5QRA/Lcjz JCBvB/1KzNQPmJzH/5IseFk7lOBrGzz5q2UsoKixpHuBP0xoob6nEIazllLTZNrY 7IISn2pnLhPJfJKkl6O4GkPLwtK+hBjlmG1cPaaGP13tS6woaRdt2QAawBApASzM 1Km18WdPJR9pKLgF/DEIXc2cyVTlyjvjVNCh0BtqtOWsnrGhex8f8eILAwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEPtuHiQN8VBLki/i5FurtcmdstdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FkZDVjYzZhLTdjZTYtNGMzYy05MjViLWZlYWRjNzAwNzEwOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7SgwDQYJKoZIhvcNAQELBQADggEBAA/vDZqZ/LIk+UdTizKW gL+QliGdkXKEKLBMEfCxd0qsqgYguep0ij5zpBDDipDeLAAawmPWhiIFtxHXuO6C PV8+cG2W6EQsXmXxMtA920BQUPb29XxDrqnY0WzEqJEDoPFkkk0a4NXPnXRHiC66 YO5d/7K7bqh9Uwq0Z+x83Y6tXJr2TyvuqMp6Wq/HlG6M+T3UYxWVJnoW+8rRMvGi KeuS9D2Va6csTDJS/yWVB60s/N+B4oT21l92Qi6VfeSnjB8VfSnOtgovDvZJgor5 mGujiXI6wLZWd6NtJMfMWZwTA6Mo6ACcVqI5POGd7oaKQz+/3wHpdHi37eWWBRa4 NA0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:27:22 2025 by rpki-client