$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ade3dab3-e842-4ec1-9bdb-aba4a2fddab4.roa File: ade3dab3-e842-4ec1-9bdb-aba4a2fddab4.roa (raw, json) Hash identifier: srGz/YgGy0bj4iOmrp1qCajuTf+bmNx774CJ9IhnsG4= Subject key identifier: 44:39:C1:3E:E6:F1:EF:D1:E4:97:1A:48:BF:2C:12:CB:EC:92:CB:76 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 32456F7DEDC769D8B289AE0742B8036A716BD5C1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ade3dab3-e842-4ec1-9bdb-aba4a2fddab4.roa Signing time: Sat 11 Oct 2025 00:10:37 +0000 ROA not before: Sat 11 Oct 2025 00:10:37 +0000 ROA not after: Sat 15 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:45:6f:7d:ed:c7:69:d8:b2:89:ae:07:42:b8:03:6a:71:6b:d5:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 11 00:10:37 2025 GMT Not After : Nov 15 23:59:59 2025 GMT Subject: serialNumber=53177ab521610df17e0fc84c13ec621aff31941976f5759924ceb5c50d93b963, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:39:e4:4d:c0:55:9f:e2:ee:18:87:f0:f0: 9a:66:92:6c:27:d0:36:0f:52:5d:39:44:d4:fd:3e: 06:cd:25:bb:23:e9:80:b1:bb:41:ea:a2:72:ed:09: ed:33:47:bf:0e:6d:32:63:2a:f5:ed:48:2f:c3:ca: f0:1a:15:1c:9d:47:3e:ba:55:fc:63:ef:a9:47:aa: c4:1d:f5:f1:2e:0a:53:42:ee:32:76:b3:6e:43:71: 80:1a:f6:9a:e3:09:52:fb:60:88:69:76:d2:63:fa: fe:d9:84:46:82:8e:e3:2e:58:17:cf:3f:ef:dc:2b: fc:eb:61:14:db:2a:4d:a1:82:a2:d0:9f:1a:cb:88: 0d:e4:76:0d:48:c2:2f:0e:f5:6e:f8:6d:61:a5:0c: a9:85:66:57:c3:92:fe:62:c2:e3:fa:f4:cb:c2:7c: e9:ce:5b:ac:8f:39:f2:2e:a8:62:a0:ed:eb:03:c4: 25:9b:85:a8:12:17:79:f1:6c:8c:62:54:d3:a0:8f: 71:45:59:84:e4:8e:04:ce:25:48:29:56:d1:6d:62: 89:d6:6d:2e:36:ca:27:6f:b1:d8:5a:56:9f:d6:c8: a7:78:22:02:6a:85:e9:8f:2f:25:82:54:7f:d0:ad: dd:ca:78:c6:c4:3c:29:37:44:9a:b3:80:9c:35:32: ec:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:39:C1:3E:E6:F1:EF:D1:E4:97:1A:48:BF:2C:12:CB:EC:92:CB:76 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ade3dab3-e842-4ec1-9bdb-aba4a2fddab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c080::/48 Signature Algorithm: sha256WithRSAEncryption 0a:7f:65:6f:0d:e6:d8:48:23:88:cd:26:26:bf:9e:73:e2:af: 27:95:8e:be:dc:a0:d1:ee:7d:ba:a3:92:a4:85:55:52:29:73: d1:c4:75:69:19:ef:05:55:5c:e8:0a:36:31:d2:05:20:d8:5e: 10:25:44:74:38:8f:3f:7a:a1:40:8e:20:c8:cd:31:8a:fc:10: 86:69:10:8d:e2:7a:e0:e5:6a:cc:b7:4d:7c:85:8a:57:f4:30: 8e:d9:20:b0:6f:dc:8d:6d:e8:fb:a3:8d:3d:cc:b2:6e:ad:58: e9:17:af:1b:60:d8:10:34:20:73:ef:b8:98:95:84:71:69:69: de:d6:c0:e1:00:91:49:f8:28:21:3e:23:8e:ad:52:56:6b:3b: 52:70:ec:c6:5d:44:39:2a:fb:51:1a:1d:b9:a3:a7:39:fd:9c: 9c:d3:eb:03:24:13:ca:eb:2a:da:44:81:89:6b:47:05:c1:53: fa:bd:2b:9a:9e:ce:2d:6a:32:10:e6:39:2d:53:73:e2:3c:fe: 45:cc:b7:2a:79:46:e2:cf:11:b5:1e:01:5c:9f:58:67:5b:a2: e9:03:14:76:ab:94:2d:44:9e:3a:4e:fd:39:77:46:a6:ea:35: ce:1f:2b:9d:d6:5e:5b:6a:b5:a1:f4:0e:19:a3:b0:d0:42:06: 41:bc:c0:62 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMkVvfe3Hadiyia4HQrgDanFr1cEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMTAwMTAzN1oX DTI1MTExNTIzNTk1OVowejFJMEcGA1UEBRNANTMxNzdhYjUyMTYxMGRmMTdlMGZj ODRjMTNlYzYyMWFmZjMxOTQxOTc2ZjU3NTk5MjRjZWI1YzUwZDkzYjk2MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqE55E3AVZ/i7hiH8PCaZpJsJ9A2 D1JdOUTU/T4GzSW7I+mAsbtB6qJy7QntM0e/Dm0yYyr17Ugvw8rwGhUcnUc+ulX8 Y++pR6rEHfXxLgpTQu4ydrNuQ3GAGvaa4wlS+2CIaXbSY/r+2YRGgo7jLlgXzz/v 3Cv862EU2ypNoYKi0J8ay4gN5HYNSMIvDvVu+G1hpQyphWZXw5L+YsLj+vTLwnzp zlusjznyLqhioO3rA8Qlm4WoEhd58WyMYlTToI9xRVmE5I4EziVIKVbRbWKJ1m0u Nsonb7HYWlaf1sineCICaoXpjy8lglR/0K3dynjGxDwpN0Sas4CcNTLsEwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEQ5wT7m8e/R5JcaSL8sEsvskst2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FkZTNkYWIzLWU4NDItNGVjMS05YmRiLWFiYTRhMmZkZGFiNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8CAMA0GCSqGSIb3DQEBCwUAA4IBAQAKf2VvDebYSCOIzSYm v55z4q8nlY6+3KDR7n26o5KkhVVSKXPRxHVpGe8FVVzoCjYx0gUg2F4QJUR0OI8/ eqFAjiDIzTGK/BCGaRCN4nrg5WrMt018hYpX9DCO2SCwb9yNbej7o409zLJurVjp F68bYNgQNCBz77iYlYRxaWne1sDhAJFJ+CghPiOOrVJWaztScOzGXUQ5KvtRGh25 o6c5/Zyc0+sDJBPK6yraRIGJa0cFwVP6vSuans4tajIQ5jktU3PiPP5FzLcqeUbi zxG1HgFcn1hnW6LpAxR2q5QtRJ46Tv05d0am6jXOHyud1l5barWh9A4Zo7DQQgZB vMBi -----END CERTIFICATE-----Generated at Mon Oct 20 09:50:20 2025 by rpki-client