$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa File: d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa (raw, json) Hash identifier: US8AQW3wM4jbfeHVNKRCBFRUrpZFGvFRL7sh2JJ8WHI= Subject key identifier: 78:EA:55:F3:D7:4E:CB:BF:BF:63:51:35:C8:86:20:A7:4A:08:A4:9F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1484F308D68DB8BAC9005F045C58660B020DBEF5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa Signing time: Mon 13 Oct 2025 15:40:34 +0000 ROA not before: Mon 13 Oct 2025 15:40:34 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:8880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:84:f3:08:d6:8d:b8:ba:c9:00:5f:04:5c:58:66:0b:02:0d:be:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:40:34 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=712bafe7250d19bd66148ccda25f62f13c6ed281f7305a8c3aab5cee6c0cb4bf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:b8:b9:fa:82:7e:3e:8d:99:aa:29:76:62: e9:c1:e4:ac:76:95:ea:4d:c2:77:73:8b:f2:20:dc: 4e:4f:9b:3a:ee:29:b1:82:ba:e5:29:d7:80:5e:cc: 8d:5b:ea:3b:70:53:24:b8:a1:3f:ea:24:82:27:5d: 43:74:92:9a:9e:77:f1:c7:de:c6:80:a6:16:7a:6a: f5:26:3b:e9:5a:a3:64:df:db:da:3a:99:c4:5e:92: c2:4f:55:fb:21:ff:af:44:30:46:6f:ca:b2:db:27: 7a:ce:32:c1:49:8c:56:6c:34:e6:7a:fd:50:dc:a6: 44:87:d0:d3:ba:c1:c6:57:b0:54:2a:00:91:a3:c4: 6e:f8:64:76:c7:d9:9a:31:1f:bb:00:75:b7:2d:2a: 24:ed:8f:52:22:9c:55:2e:2e:2e:49:61:c9:40:20: 6b:11:c3:d4:e4:b0:9c:89:57:43:33:e8:0e:a7:b9: 3e:4f:57:b4:37:0a:77:95:32:a9:ba:ac:02:5f:c0: 0a:f9:f7:39:9e:b1:f3:c6:3f:9d:17:6d:1d:d5:eb: b7:60:63:63:1b:4d:e0:b3:fd:59:99:6f:84:05:23: 70:2d:5d:05:92:6e:a6:54:85:51:04:eb:49:86:c4: 17:28:4d:59:43:74:ee:75:1a:eb:9e:5b:42:62:41: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EA:55:F3:D7:4E:CB:BF:BF:63:51:35:C8:86:20:A7:4A:08:A4:9F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:8880::/48 Signature Algorithm: sha256WithRSAEncryption 05:de:1a:bc:31:f8:f7:1d:e9:b7:28:fd:81:53:84:1a:ab:88: a6:12:b5:2b:b7:2a:f1:10:3c:c0:6c:ca:50:ec:27:44:b8:fc: ce:4d:41:e1:ca:3c:c8:22:82:97:13:b1:aa:cd:f7:2b:36:10: f5:5f:4d:64:03:c6:5f:8a:2d:88:2d:e0:17:40:50:8e:59:a8: 9e:be:f7:d8:ba:2a:71:ef:89:98:ad:1e:54:9a:af:72:07:42: a1:fb:f8:91:91:33:78:c5:6f:d6:4a:9d:36:a7:41:17:2a:ce: 41:29:a9:c7:39:90:86:7d:b1:b6:d6:d4:27:33:f0:47:8d:fc: 90:cd:53:3e:f6:fa:43:c7:19:0e:45:c4:df:e1:f8:8f:dd:4b: 03:af:a8:4b:2c:3b:e8:6b:3e:9a:f6:19:0a:3c:38:8b:d6:63: ed:54:a9:2b:94:09:92:d7:87:a2:0f:7c:48:70:27:28:42:2c: 9c:37:e1:00:4d:86:38:3a:96:0d:33:9b:ff:85:8b:0d:f3:0f: 25:d4:48:66:d1:81:0c:43:c7:c0:ed:ea:e3:2f:12:bf:b7:ee: c1:bb:7b:fb:f5:a6:fe:58:4d:41:f4:a2:b1:8b:b4:34:67:93: a7:70:b1:b1:3a:07:74:d6:3f:0b:9d:f0:fc:f9:7f:e6:27:1d: bd:dc:1f:08 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFITzCNaNuLrJAF8EXFhmCwINvvUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1NDAzNFoX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNANzEyYmFmZTcyNTBkMTliZDY2MTQ4 Y2NkYTI1ZjYyZjEzYzZlZDI4MWY3MzA1YThjM2FhYjVjZWU2YzBjYjRiZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqve4ufqCfj6NmaopdmLpweSsdpXq TcJ3c4vyINxOT5s67imxgrrlKdeAXsyNW+o7cFMkuKE/6iSCJ11DdJKannfxx97G gKYWemr1JjvpWqNk39vaOpnEXpLCT1X7If+vRDBGb8qy2yd6zjLBSYxWbDTmev1Q 3KZEh9DTusHGV7BUKgCRo8Ru+GR2x9maMR+7AHW3LSok7Y9SIpxVLi4uSWHJQCBr EcPU5LCciVdDM+gOp7k+T1e0Nwp3lTKpuqwCX8AK+fc5nrHzxj+dF20d1eu3YGNj G03gs/1ZmW+EBSNwLV0Fkm6mVIVRBOtJhsQXKE1ZQ3TudRrrnltCYkFE+QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHjqVfPXTsu/v2NRNciGIKdKCKSfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q1MWY2YTg2LWQzZTMtNDQ2Yy1hNTM4LTQ2ZjJhN2U3NzI0YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYYiAMA0GCSqGSIb3DQEBCwUAA4IBAQAF3hq8Mfj3Hem3KP2B U4Qaq4imErUrtyrxEDzAbMpQ7CdEuPzOTUHhyjzIIoKXE7GqzfcrNhD1X01kA8Zf ii2ILeAXQFCOWaievvfYuipx74mYrR5Umq9yB0Kh+/iRkTN4xW/WSp02p0EXKs5B KanHOZCGfbG21tQnM/BHjfyQzVM+9vpDxxkORcTf4fiP3UsDr6hLLDvoaz6a9hkK PDiL1mPtVKkrlAmS14eiD3xIcCcoQiycN+EATYY4OpYNM5v/hYsN8w8l1Ehm0YEM Q8fA7erjLxK/t+7Bu3v79ab+WE1B9KKxi7Q0Z5OncLGxOgd01j8LnfD8+X/mJx29 3B8I -----END CERTIFICATE-----Generated at Mon Oct 20 12:32:01 2025 by rpki-client