$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b4655025-f9ac-44ff-bd1d-0e448ab6774d.roa File: b4655025-f9ac-44ff-bd1d-0e448ab6774d.roa (raw, json) Hash identifier: ttF/ZmUjQLEeLkrVwNo63PXLIPtablC/XCp3V+FCRgY= Subject key identifier: D5:97:5D:85:B2:09:82:39:3E:5C:A8:93:92:F3:46:8B:C0:D3:8E:8E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 45B0C0990A50D753D2F87E6D2B8FEBFECAB38E5D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b4655025-f9ac-44ff-bd1d-0e448ab6774d.roa Signing time: Sun 19 Oct 2025 00:00:09 +0000 ROA not before: Sun 19 Oct 2025 00:00:09 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b0:c0:99:0a:50:d7:53:d2:f8:7e:6d:2b:8f:eb:fe:ca:b3:8e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:00:09 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=9a72c19cf08507b32f15ad27561b5ddcc302f56c6f794fa2612c562081ba8f10, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3a:5e:10:34:6f:d2:9a:82:6c:a4:be:ea:02: d7:b6:e9:b3:0c:21:42:0a:4a:96:49:ab:c3:18:da: 17:0b:2e:49:87:e4:c6:b2:0e:32:d6:22:a1:90:03: ce:61:5a:d8:a1:64:fd:8a:47:6c:9a:b4:78:2d:7e: e7:ff:81:e7:17:02:45:87:e4:be:c2:60:56:c8:03: 79:ac:a6:35:5d:f1:7f:de:ee:18:8f:77:f0:76:16: 00:49:d7:e2:20:56:c8:bc:82:0e:a5:da:20:13:62: b2:1e:38:fb:d0:25:ae:7e:d0:03:0d:3f:24:71:00: 86:df:6c:24:03:f5:53:d3:ca:7a:98:b2:20:49:f8: 14:c1:94:d5:84:50:3d:eb:30:8f:64:ec:f7:3d:91: 03:b2:3d:26:c0:76:54:45:53:18:f9:6f:ff:6a:8a: 24:1c:13:3e:38:bb:23:ca:36:33:18:ea:a2:25:1e: 0c:15:a1:dc:fd:27:76:b5:14:58:98:1b:42:6e:d3: 1b:60:fd:75:d1:5d:e3:ee:27:a6:9a:b9:ec:b3:f1: 2c:41:36:57:ce:06:e0:a7:a7:fc:bc:fc:28:96:ce: 7c:58:47:a1:1a:fa:27:09:01:e7:f4:2b:f6:3a:58: 90:9b:16:1a:f0:30:60:eb:d5:64:03:8a:b6:6f:ef: da:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:97:5D:85:B2:09:82:39:3E:5C:A8:93:92:F3:46:8B:C0:D3:8E:8E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b4655025-f9ac-44ff-bd1d-0e448ab6774d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:c800::/40 Signature Algorithm: sha256WithRSAEncryption 2e:f5:8e:7c:7c:5a:7d:49:f5:60:79:aa:6a:ba:fd:81:63:bb: ed:7a:af:d6:65:25:60:59:29:8b:d9:0d:18:6f:b2:54:7c:3a: df:13:5d:c5:e7:53:45:c4:ad:f5:c0:09:e7:25:a1:28:fc:41: 9b:12:ec:85:04:86:ad:7b:e7:5f:3e:9a:02:d4:d3:d0:48:ab: bf:d5:de:f4:db:ae:5a:d5:fb:7b:f0:e7:ca:27:94:e4:a6:b9: b2:22:cf:db:f7:7b:28:be:c5:ef:5f:27:b1:69:2d:71:e5:38: 60:3b:f2:c5:24:b9:87:05:17:c6:9b:ad:b6:0a:db:09:a3:9b: 37:24:f6:0b:0d:b4:77:02:ed:bf:6f:9c:8f:98:23:19:fa:12: 6f:87:7e:55:b7:bb:ac:61:82:15:08:4b:42:d2:3a:67:d2:3e: 25:de:0f:4f:68:5f:ae:9a:19:36:b9:91:b3:59:30:22:9f:d5: 2e:b2:16:7b:c6:9b:7d:23:d4:f4:d7:c6:8f:56:e0:70:75:3f: 4a:34:b8:a6:5b:1d:a7:8c:71:58:9d:65:5c:6c:8a:4c:13:25: cb:c4:66:3b:36:d3:d7:58:ee:1f:ec:9f:23:5d:ed:36:2f:cc: 7d:e8:c1:72:63:aa:85:b2:a7:45:19:a5:d6:e0:5b:e7:82:f2: 96:b0:49:f9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURbDAmQpQ11PS+H5tK4/r/sqzjl0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxOTAwMDAwOVoX DTI1MTEyMzIzNTk1OVowejFJMEcGA1UEBRNAOWE3MmMxOWNmMDg1MDdiMzJmMTVh ZDI3NTYxYjVkZGNjMzAyZjU2YzZmNzk0ZmEyNjEyYzU2MjA4MWJhOGYxMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTpeEDRv0pqCbKS+6gLXtumzDCFC CkqWSavDGNoXCy5Jh+TGsg4y1iKhkAPOYVrYoWT9ikdsmrR4LX7n/4HnFwJFh+S+ wmBWyAN5rKY1XfF/3u4Yj3fwdhYASdfiIFbIvIIOpdogE2KyHjj70CWuftADDT8k cQCG32wkA/VT08p6mLIgSfgUwZTVhFA96zCPZOz3PZEDsj0mwHZURVMY+W//aook HBM+OLsjyjYzGOqiJR4MFaHc/Sd2tRRYmBtCbtMbYP110V3j7iemmrnss/EsQTZX zgbgp6f8vPwols58WEehGvonCQHn9Cv2OliQmxYa8DBg69VkA4q2b+/aawIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNWXXYWyCYI5Plyok5LzRovA046OMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I0NjU1MDI1LWY5YWMtNDRmZi1iZDFkLTBlNDQ4YWI2Nzc0ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7cgwDQYJKoZIhvcNAQELBQADggEBAC71jnx8Wn1J9WB5qmq6 /YFju+16r9ZlJWBZKYvZDRhvslR8Ot8TXcXnU0XErfXACecloSj8QZsS7IUEhq17 518+mgLU09BIq7/V3vTbrlrV+3vw58onlOSmubIiz9v3eyi+xe9fJ7FpLXHlOGA7 8sUkuYcFF8abrbYK2wmjmzck9gsNtHcC7b9vnI+YIxn6Em+HflW3u6xhghUIS0LS OmfSPiXeD09oX66aGTa5kbNZMCKf1S6yFnvGm30j1PTXxo9W4HB1P0o0uKZbHaeM cVidZVxsikwTJcvEZjs209dY7h/snyNd7TYvzH3owXJjqoWyp0UZpdbgW+eC8paw Sfk= -----END CERTIFICATE-----Generated at Mon Oct 20 20:32:38 2025 by rpki-client