$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa File: b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa (raw, json) Hash identifier: jcbU7f7g5emZgei925Y7YP9zG1q/QaEFDC7g0XHf4xI= Subject key identifier: 5C:DE:BE:BC:CC:7E:29:90:C7:47:30:C1:B4:F3:5E:27:55:2F:44:55 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 03F90F5743EC9B6923EE0149B4B49CAA3E60104C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa Signing time: Tue 14 Oct 2025 00:10:07 +0000 ROA not before: Tue 14 Oct 2025 00:10:07 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f9:0f:57:43:ec:9b:69:23:ee:01:49:b4:b4:9c:aa:3e:60:10:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 14 00:10:07 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=0f1594f616f76656e205a9b57c8086729e9bc8e4583fd0f5045bd4039f088f9f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:56:ca:1b:22:fe:27:67:64:16:39:87:be: ad:7d:57:39:98:d3:3a:41:4f:d2:e6:12:8f:bc:81: b0:00:46:5c:6b:bb:4a:ac:46:47:a6:34:05:56:31: 74:29:b9:66:d4:90:ab:08:98:9a:ba:be:4c:ad:66: 2f:ff:17:df:8d:a5:16:02:e9:1c:18:7b:77:81:ba: 22:89:2f:f9:a2:7f:88:ae:18:76:52:21:41:20:05: fd:95:86:a1:91:35:c8:db:93:00:82:98:9d:49:2c: 83:80:f3:73:5e:b8:c2:24:40:91:c7:c6:6e:21:e2: 49:da:5e:7e:2d:1f:c0:f3:86:26:70:85:9e:34:3a: 2c:c5:b2:51:88:fc:5f:f6:3c:03:9a:fc:55:b8:be: eb:cc:4f:0e:5c:3b:05:1d:26:72:9b:bd:60:19:ce: ce:8b:b0:4a:f9:bc:27:54:7d:3a:d4:6e:0c:1e:95: e2:bd:98:6b:4f:16:38:7a:4f:fa:32:a6:c5:b9:02: 16:c2:c8:36:91:d1:f4:f6:04:f3:c9:64:e9:fd:5b: ca:28:eb:f7:6c:07:bf:ca:68:56:6c:7c:cf:6f:42: 3c:5d:9d:44:0c:ad:8e:41:cd:f1:d8:c2:3c:91:dd: 02:da:48:a7:46:ea:42:05:db:b4:f2:77:2c:b6:9a: 9b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DE:BE:BC:CC:7E:29:90:C7:47:30:C1:B4:F3:5E:27:55:2F:44:55 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2000::/40 Signature Algorithm: sha256WithRSAEncryption ca:d1:20:1d:8e:04:98:62:c5:4e:48:43:90:af:97:35:7f:99: fe:24:b5:5e:a1:bb:ed:48:ac:a9:a0:d5:0b:f3:d1:9c:c5:e2: 06:4c:28:15:16:4d:fc:ca:63:0b:56:0a:0c:31:eb:df:da:5d: 15:41:c0:ee:d0:dc:44:10:aa:2e:95:f0:25:a5:f6:9b:2c:c8: f5:e3:44:3c:e0:24:6d:a7:62:f8:a2:7c:52:a7:65:c9:29:ee: dd:60:a6:ef:e7:1a:19:8e:a4:38:a0:10:c9:0b:56:51:0c:eb: bc:be:62:ed:e0:5b:54:51:33:3d:b5:1f:3c:b8:06:56:4f:5c: ed:6e:5f:ca:67:a7:43:ca:cc:50:99:ef:3a:4f:1d:45:8d:ca: 05:39:67:43:c1:71:40:04:1b:ea:24:43:cd:08:9a:9c:47:07: e0:61:2a:e7:32:bf:d1:d4:7f:6c:bb:8c:82:d1:b3:1f:d9:ae: 30:21:93:eb:71:44:90:30:22:36:22:ac:60:1b:6e:b5:5b:48: 60:45:37:77:9e:f8:57:75:63:7f:c9:12:b8:30:08:83:85:e8: 6e:77:95:16:2f:a5:a6:73:ed:bb:f8:12:b2:1a:17:6e:cb:ac: 99:fc:88:96:2f:4b:5b:d6:af:dc:38:d4:59:5d:39:fa:d6:b1: aa:86:7e:4a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUA/kPV0Psm2kj7gFJtLScqj5gEEwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNDAwMTAwN1oX DTI1MTExODIzNTk1OVowejFJMEcGA1UEBRNAMGYxNTk0ZjYxNmY3NjY1NmUyMDVh OWI1N2M4MDg2NzI5ZTliYzhlNDU4M2ZkMGY1MDQ1YmQ0MDM5ZjA4OGY5ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjxWyhsi/idnZBY5h76tfVc5mNM6 QU/S5hKPvIGwAEZca7tKrEZHpjQFVjF0Kblm1JCrCJiaur5MrWYv/xffjaUWAukc GHt3gboiiS/5on+Irhh2UiFBIAX9lYahkTXI25MAgpidSSyDgPNzXrjCJECRx8Zu IeJJ2l5+LR/A84YmcIWeNDosxbJRiPxf9jwDmvxVuL7rzE8OXDsFHSZym71gGc7O i7BK+bwnVH061G4MHpXivZhrTxY4ek/6MqbFuQIWwsg2kdH09gTzyWTp/VvKKOv3 bAe/ymhWbHzPb0I8XZ1EDK2OQc3x2MI8kd0C2kinRupCBdu08ncstpqbswIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFzevrzMfimQx0cwwbTzXidVL0RVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I4NjhlMTEyLTJjNjgtNGRjNS1iMjlmLThjNjRjNGUwOWMwNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaACAwDQYJKoZIhvcNAQELBQADggEBAMrRIB2OBJhixU5IQ5Cv lzV/mf4ktV6hu+1IrKmg1Qvz0ZzF4gZMKBUWTfzKYwtWCgwx69/aXRVBwO7Q3EQQ qi6V8CWl9pssyPXjRDzgJG2nYviifFKnZckp7t1gpu/nGhmOpDigEMkLVlEM67y+ Yu3gW1RRMz21Hzy4BlZPXO1uX8pnp0PKzFCZ7zpPHUWNygU5Z0PBcUAEG+okQ80I mpxHB+BhKucyv9HUf2y7jILRsx/ZrjAhk+txRJAwIjYirGAbbrVbSGBFN3ee+Fd1 Y3/JErgwCIOF6G53lRYvpaZz7bv4ErIaF27LrJn8iJYvS1vWr9w41FldOfrWsaqG fko= -----END CERTIFICATE-----Generated at Mon Oct 20 07:24:42 2025 by rpki-client