$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddbf3a2c-9a81-450f-90bf-1a2159e5b48a.roa File: ddbf3a2c-9a81-450f-90bf-1a2159e5b48a.roa (raw, json) Hash identifier: jcizWaUT8hQhIaAJ0yugjO9Eu/QbzM1mDoHBLdE5Fak= Subject key identifier: E4:2D:A1:5E:01:07:D1:A1:1D:ED:6A:21:0E:F8:F8:85:4B:EB:62:B8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6EB2FEC9E683DC35D89BF73C9A26830F5D573F9F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddbf3a2c-9a81-450f-90bf-1a2159e5b48a.roa Signing time: Wed 08 Oct 2025 00:00:58 +0000 ROA not before: Wed 08 Oct 2025 00:00:58 +0000 ROA not after: Wed 12 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b2:fe:c9:e6:83:dc:35:d8:9b:f7:3c:9a:26:83:0f:5d:57:3f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 8 00:00:58 2025 GMT Not After : Nov 12 23:59:59 2025 GMT Subject: serialNumber=7eb725fc736642ee1e1708f8bda061ddf3959168bab5015450f0ec4db624f384, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:db:a5:21:64:65:6d:d5:2b:1e:a8:1e:5c:1f: e9:06:61:be:98:a8:f1:8f:1b:8a:8f:50:63:b1:61: b9:5d:67:c1:36:c3:04:8a:20:a1:94:c1:36:75:fa: 2f:2d:53:00:4e:b5:0a:52:1d:26:d3:fd:11:05:be: 6e:1b:93:4b:3f:c2:19:33:ec:b7:98:2a:cd:f5:ce: d6:2c:27:51:be:5a:f6:b5:38:60:d5:5c:01:92:7e: b8:80:77:5d:f3:7d:79:2b:7b:16:c6:bb:93:91:e6: 58:61:d5:40:a7:82:df:8e:78:2b:08:22:0e:fe:01: 92:95:e1:36:ee:bd:5b:27:71:9f:92:ac:e6:fd:07: 5d:75:2b:3a:e1:d7:34:57:2b:d6:26:38:a9:47:7b: 0f:95:86:42:49:6b:99:49:49:95:95:88:61:cb:68: 98:00:6d:6f:5a:64:3d:96:65:96:1b:80:af:27:e5: 99:84:ce:94:0e:fd:f4:cb:bc:f5:8b:45:85:9e:32: 7d:21:e4:6a:08:70:d9:0c:01:9a:0c:98:76:53:e4: 96:de:d5:f1:b0:38:50:be:e2:5b:f8:8f:39:32:30: 23:90:ca:18:71:5e:64:fd:35:74:0a:5f:42:bb:d5: 76:a0:c9:6c:01:b9:6d:c9:c6:e5:05:c3:7d:9a:07: d7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2D:A1:5E:01:07:D1:A1:1D:ED:6A:21:0E:F8:F8:85:4B:EB:62:B8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddbf3a2c-9a81-450f-90bf-1a2159e5b48a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:1000::/40 Signature Algorithm: sha256WithRSAEncryption 70:48:4f:e8:5f:01:83:0a:e0:e1:d7:74:47:d8:5a:6e:46:78: 55:bc:e6:49:92:58:35:d5:79:d1:98:c1:64:bb:a1:74:5f:4b: 06:44:a1:9c:a0:b7:bd:bd:1f:b9:79:47:01:7d:31:56:2d:cc: 5f:2a:b1:71:78:52:fb:bb:2b:68:cd:5d:bc:a4:a1:db:57:e7: ec:f0:ae:ba:8d:6a:5c:6b:47:5c:7c:86:95:74:73:10:16:b5: 65:a6:9f:e2:f6:b4:fd:c6:7d:2f:93:2c:3b:be:7f:d4:74:c7: 6f:c2:02:71:ed:f6:57:f0:e1:d9:4e:19:00:a5:1d:7e:db:80: ef:b6:8b:54:a1:05:a7:31:fe:38:4e:4a:85:2f:1d:ba:b2:7f: 9a:88:a0:1b:ef:21:5c:cf:21:b3:61:65:f8:61:80:0a:fc:19: 2a:d3:f3:5d:f3:5e:b3:59:42:8b:81:e9:26:b9:0d:09:28:33: a4:81:20:42:9c:95:e1:34:d1:3f:07:7d:4b:51:67:28:48:72: 6b:44:3d:e0:a4:d4:76:ed:15:e0:a6:1a:df:5a:b2:25:5a:5c: cc:24:d4:10:2d:dd:ca:0c:ed:14:cf:b4:15:fc:2b:fc:69:ae: ef:98:d3:0f:a3:db:73:f9:07:6f:0b:69:94:c2:37:28:00:55: 8a:b5:fe:d6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbrL+yeaD3DXYm/c8miaDD11XP58wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAwODAwMDA1OFoX DTI1MTExMjIzNTk1OVowejFJMEcGA1UEBRNAN2ViNzI1ZmM3MzY2NDJlZTFlMTcw OGY4YmRhMDYxZGRmMzk1OTE2OGJhYjUwMTU0NTBmMGVjNGRiNjI0ZjM4NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktulIWRlbdUrHqgeXB/pBmG+mKjx jxuKj1BjsWG5XWfBNsMEiiChlME2dfovLVMATrUKUh0m0/0RBb5uG5NLP8IZM+y3 mCrN9c7WLCdRvlr2tThg1VwBkn64gHdd8315K3sWxruTkeZYYdVAp4LfjngrCCIO /gGSleE27r1bJ3Gfkqzm/QdddSs64dc0VyvWJjipR3sPlYZCSWuZSUmVlYhhy2iY AG1vWmQ9lmWWG4CvJ+WZhM6UDv30y7z1i0WFnjJ9IeRqCHDZDAGaDJh2U+SW3tXx sDhQvuJb+I85MjAjkMoYcV5k/TV0Cl9Cu9V2oMlsAbltycblBcN9mgfXnQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOQtoV4BB9GhHe1qIQ74+IVL62K4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RkYmYzYTJjLTlhODEtNDUwZi05MGJmLTFhMjE1OWU1YjQ4YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYBAwDQYJKoZIhvcNAQELBQADggEBAHBIT+hfAYMK4OHXdEfY Wm5GeFW85kmSWDXVedGYwWS7oXRfSwZEoZygt729H7l5RwF9MVYtzF8qsXF4Uvu7 K2jNXbykodtX5+zwrrqNalxrR1x8hpV0cxAWtWWmn+L2tP3GfS+TLDu+f9R0x2/C AnHt9lfw4dlOGQClHX7bgO+2i1ShBacx/jhOSoUvHbqyf5qIoBvvIVzPIbNhZfhh gAr8GSrT813zXrNZQouB6Sa5DQkoM6SBIEKcleE00T8HfUtRZyhIcmtEPeCk1Hbt FeCmGt9asiVaXMwk1BAt3coM7RTPtBX8K/xpru+Y0w+j23P5B28LaZTCNygAVYq1 /tY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:46 2025 by rpki-client