$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9bdc82f-e634-4725-a517-9af23893bdd0.roa File: e9bdc82f-e634-4725-a517-9af23893bdd0.roa (raw, json) Hash identifier: 5u7B8aonT5DJYM7jGazqWLRzYzC+qBF2YoYx1eNC51o= Subject key identifier: 0A:BD:20:37:BE:0A:63:E8:BF:D5:40:7C:36:8A:64:91:56:0F:AE:90 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 087779D2599AFA3AF97FB89F06878B91FBCED5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9bdc82f-e634-4725-a517-9af23893bdd0.roa Signing time: Tue 14 Oct 2025 00:00:44 +0000 ROA not before: Tue 14 Oct 2025 00:00:44 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:77:79:d2:59:9a:fa:3a:f9:7f:b8:9f:06:87:8b:91:fb:ce:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 14 00:00:44 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=5762b5f7ee73e8dd96699e9bee88a6a5c47e77ee07635843631e300b33463250, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:50:20:63:1e:ed:f1:48:30:95:22:70:18:3e: 00:8c:3b:d0:70:7d:7b:f9:13:fa:3e:8a:83:18:f6: e3:f3:a9:19:f7:24:b7:3f:00:4b:57:54:91:85:2a: af:4e:c7:45:49:4d:71:f6:71:12:29:63:c3:e5:d2: 8b:ac:cb:51:bd:6e:7b:17:bc:22:f8:85:eb:e1:71: f6:15:a4:22:ab:a2:cb:57:60:d8:b1:7c:2a:c5:bf: 84:fa:e0:51:af:17:0b:82:c3:7b:1f:3b:65:5a:f3: 6e:35:58:5b:25:37:41:05:bc:5f:d6:9b:d8:2c:de: ec:9c:1e:f1:42:42:98:19:0c:92:f7:0b:de:1c:95: 43:bd:c2:95:dc:a4:16:1d:a4:66:90:3e:bb:7d:13: 38:1e:8b:ec:e9:35:f6:4f:3b:5f:24:1f:71:5e:bf: 0e:cc:11:7f:0c:90:a0:05:b8:62:c7:3a:45:5b:06: 8d:e7:34:03:ab:a6:19:e8:ad:c5:3c:b0:e1:72:48: 5f:fa:68:48:77:f1:fa:b5:5b:e6:cf:b4:f1:08:e4: 04:6d:ec:82:33:cb:7f:71:71:39:0f:82:11:e8:12: 6a:5e:ae:84:8d:90:a8:73:c6:d5:fa:1d:5e:9a:1a: 09:19:be:b0:34:c8:cb:c3:7f:5b:43:ea:bc:71:4e: d8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BD:20:37:BE:0A:63:E8:BF:D5:40:7C:36:8A:64:91:56:0F:AE:90 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9bdc82f-e634-4725-a517-9af23893bdd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:2000::/40 Signature Algorithm: sha256WithRSAEncryption 08:3d:18:a4:dd:1f:1e:0f:63:d5:1d:cd:cd:2f:81:d0:0c:b8: 35:35:aa:91:35:fb:36:44:79:8c:f4:ef:27:36:bc:99:80:fd: 81:7f:46:f7:b5:fb:75:13:80:d6:56:9f:24:34:d0:bd:b4:54: 3c:52:a8:c3:3b:0e:73:19:5a:f1:4b:05:84:53:b9:8e:02:b8: 6c:98:b9:25:bf:4c:22:d8:72:36:5e:a0:0e:ba:11:c9:a1:86: 84:b1:b9:5e:66:58:d7:76:8d:55:e6:34:6c:e1:4c:3e:47:3c: be:9d:bd:c1:5c:63:56:53:86:b0:d6:73:3a:49:db:2e:ea:e7: d7:06:cb:30:76:91:66:cf:1f:06:90:c0:02:41:8e:90:7f:ab: ee:31:48:8e:48:f6:63:e6:a1:7b:57:64:a8:24:47:15:ae:63: 1d:51:a7:f5:e3:c6:9c:37:08:a6:5f:2c:73:67:68:0b:e4:74: 31:c2:91:bb:b0:1f:10:2f:8e:4f:3e:e0:c9:65:52:81:ba:b3: 74:ff:eb:76:c2:52:d2:f8:b7:94:74:90:1a:c6:82:78:70:4e: 21:53:fc:a0:67:40:ae:35:15:65:49:ac:eb:10:50:e4:ff:f4: bd:4b:87:08:64:d3:6e:b5:ee:19:78:be:30:44:d2:b9:6f:b0: 2f:16:51:eb -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgITCHd50lma+jr5f7ifBoeLkfvO1TANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjUxMDE0MDAwMDQ0WhcN MjUxMTE4MjM1OTU5WjB6MUkwRwYDVQQFE0A1NzYyYjVmN2VlNzNlOGRkOTY2OTll OWJlZTg4YTZhNWM0N2U3N2VlMDc2MzU4NDM2MzFlMzAwYjMzNDYzMjUwMS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRUCBjHu3xSDCVInAYPgCMO9BwfXv5 E/o+ioMY9uPzqRn3JLc/AEtXVJGFKq9Ox0VJTXH2cRIpY8Pl0ousy1G9bnsXvCL4 hevhcfYVpCKrostXYNixfCrFv4T64FGvFwuCw3sfO2Va8241WFslN0EFvF/Wm9gs 3uycHvFCQpgZDJL3C94clUO9wpXcpBYdpGaQPrt9Ezgei+zpNfZPO18kH3Fevw7M EX8MkKAFuGLHOkVbBo3nNAOrphnorcU8sOFySF/6aEh38fq1W+bPtPEI5ARt7IIz y39xcTkPghHoEmperoSNkKhzxtX6HV6aGgkZvrA0yMvDf1tD6rxxTtjFAgMBAAGj ggJKMIICRjAdBgNVHQ4EFgQUCr0gN74KY+i/1UB8NopkkVYPrpAwHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv ZTliZGM4MmYtZTYzNC00NzI1LWE1MTctOWFmMjM4OTNiZGQwLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkBtryIDANBgkqhkiG9w0BAQsFAAOCAQEACD0YpN0fHg9j1R3NzS+B 0Ay4NTWqkTX7NkR5jPTvJza8mYD9gX9G97X7dROA1lafJDTQvbRUPFKowzsOcxla 8UsFhFO5jgK4bJi5Jb9MIthyNl6gDroRyaGGhLG5XmZY13aNVeY0bOFMPkc8vp29 wVxjVlOGsNZzOknbLurn1wbLMHaRZs8fBpDAAkGOkH+r7jFIjkj2Y+ahe1dkqCRH Fa5jHVGn9ePGnDcIpl8sc2doC+R0McKRu7AfEC+OTz7gyWVSgbqzdP/rdsJS0vi3 lHSQGsaCeHBOIVP8oGdArjUVZUms6xBQ5P/0vUuHCGTTbrXuGXi+METSuW+wLxZR 6w== -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:05 2025 by rpki-client