$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d49fe9-a284-47e5-8002-41310ce8752e.roa File: f9d49fe9-a284-47e5-8002-41310ce8752e.roa (raw, json) Hash identifier: ynCSrQFpZoc/jYelod9l9+SJuuiXhlHeEPj6qtCI3aE= Subject key identifier: 63:07:5A:C2:82:35:ED:35:8A:89:F4:CD:48:BD:3C:3E:C2:03:10:07 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7A0319CFBDB6AD332E663F6BF7C5B7697CD9D685 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d49fe9-a284-47e5-8002-41310ce8752e.roa Signing time: Sat 11 Oct 2025 00:10:04 +0000 ROA not before: Sat 11 Oct 2025 00:10:04 +0000 ROA not after: Sat 15 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:03:19:cf:bd:b6:ad:33:2e:66:3f:6b:f7:c5:b7:69:7c:d9:d6:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 11 00:10:04 2025 GMT Not After : Nov 15 23:59:59 2025 GMT Subject: serialNumber=a35aa7d61eb2889685ce8efbb74718f418f1ed83cd257521f06d04137a5d14fc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:34:f8:5a:35:d6:c1:1a:72:2a:52:82:04: a9:6e:bb:e8:05:3b:e0:c7:f9:c5:e7:eb:04:d0:a4: c9:dd:d8:86:fd:78:19:3f:08:a9:d3:a3:b2:e6:73: 84:92:e5:c4:40:bc:a2:16:e5:01:48:41:7e:f3:34: fd:c2:8e:77:2c:af:e2:b2:ae:bf:5f:74:93:23:e3: 14:2a:d9:26:05:62:fe:50:cb:94:36:cf:d8:d4:ba: 61:14:a7:2c:df:23:ec:af:e9:15:22:71:ea:89:25: c2:d1:fb:01:df:a0:35:5f:c9:0d:53:d6:d0:bd:a9: 28:d0:08:96:67:f3:ba:3c:48:03:89:cf:f7:70:69: 26:32:cb:38:5d:7d:a1:b2:7c:22:f5:3f:22:0e:7a: 62:b6:c3:dc:9d:a9:41:ee:5c:ac:27:0a:6f:6a:7b: 19:fb:84:ab:47:96:a7:e5:ce:df:65:77:b9:57:76: 11:21:a6:ae:9a:81:59:0a:46:ef:d7:89:5e:de:e3: ef:8d:a9:5c:15:0c:fd:d4:69:2b:31:fd:b1:21:56: 1b:ff:d7:27:ea:69:00:3a:53:09:3a:f1:43:21:30: bc:aa:c8:36:4e:c2:5e:a5:bf:c4:7b:9b:95:d4:7c: 55:7b:f1:fa:a5:db:af:56:2d:85:0d:24:b7:1e:7f: fc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:07:5A:C2:82:35:ED:35:8A:89:F4:CD:48:BD:3C:3E:C2:03:10:07 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d49fe9-a284-47e5-8002-41310ce8752e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:1040::/48 Signature Algorithm: sha256WithRSAEncryption bd:58:96:ff:d5:96:cc:50:48:45:db:52:53:76:9d:38:d5:74: 6f:cf:f1:78:1b:17:be:7a:a1:32:6e:b7:bb:1e:34:4c:b2:a4: cf:01:c5:d0:12:3d:90:6e:36:8c:3f:53:ac:75:b8:b1:ce:e6: 72:8e:ff:c2:d9:38:c7:cb:d4:00:62:d8:20:9e:68:1c:67:fe: b9:fe:ac:24:07:7a:f9:da:17:ce:a5:14:18:20:f1:ea:d7:06: a5:4e:ee:81:bb:bc:d7:0f:e7:c3:09:a0:d1:1d:67:01:e2:24: ff:8d:38:11:0e:2a:d0:15:6e:61:a5:28:e5:5b:a4:bd:92:66: 03:67:ef:41:88:f5:ac:f4:a5:8e:18:89:d9:1e:9d:22:e7:47: ad:f4:0a:94:ca:d6:6b:68:ce:51:b2:c0:4b:87:75:7b:36:01: 11:9f:e1:3e:71:ce:d1:0c:f9:1f:73:33:84:eb:23:03:43:68: 64:0c:33:2e:32:cf:b7:52:07:03:ed:5d:cc:e0:4f:78:c1:c9: c9:a7:6d:7c:ef:30:fb:04:83:68:84:99:72:31:6b:19:8e:dc: bc:b1:86:30:a7:24:84:e4:8c:da:de:85:23:5a:36:4f:f1:b2: ef:ec:d2:25:02:8c:e2:29:5a:be:d1:73:de:32:ff:cf:d8:ca: 6d:a2:02:91 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUegMZz722rTMuZj9r98W3aXzZ1oUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMTAwMTAwNFoX DTI1MTExNTIzNTk1OVowejFJMEcGA1UEBRNAYTM1YWE3ZDYxZWIyODg5Njg1Y2U4 ZWZiYjc0NzE4ZjQxOGYxZWQ4M2NkMjU3NTIxZjA2ZDA0MTM3YTVkMTRmYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsQ0+Fo11sEacipSggSpbrvoBTvg x/nF5+sE0KTJ3diG/XgZPwip06Oy5nOEkuXEQLyiFuUBSEF+8zT9wo53LK/isq6/ X3STI+MUKtkmBWL+UMuUNs/Y1LphFKcs3yPsr+kVInHqiSXC0fsB36A1X8kNU9bQ vako0AiWZ/O6PEgDic/3cGkmMss4XX2hsnwi9T8iDnpitsPcnalB7lysJwpvansZ +4SrR5an5c7fZXe5V3YRIaaumoFZCkbv14le3uPvjalcFQz91GkrMf2xIVYb/9cn 6mkAOlMJOvFDITC8qsg2TsJepb/Ee5uV1HxVe/H6pduvVi2FDSS3Hn/8bwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGMHWsKCNe01ion0zUi9PD7CAxAHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y5ZDQ5ZmU5LWEyODQtNDdlNS04MDAyLTQxMzEwY2U4NzUyZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaABBAMA0GCSqGSIb3DQEBCwUAA4IBAQC9WJb/1ZbMUEhF21JT dp041XRvz/F4Gxe+eqEybre7HjRMsqTPAcXQEj2QbjaMP1OsdbixzuZyjv/C2TjH y9QAYtggnmgcZ/65/qwkB3r52hfOpRQYIPHq1walTu6Bu7zXD+fDCaDRHWcB4iT/ jTgRDirQFW5hpSjlW6S9kmYDZ+9BiPWs9KWOGInZHp0i50et9AqUytZraM5RssBL h3V7NgERn+E+cc7RDPkfczOE6yMDQ2hkDDMuMs+3UgcD7V3M4E94wcnJp2187zD7 BINohJlyMWsZjty8sYYwpySE5Iza3oUjWjZP8bLv7NIlAoziKVq+0XPeMv/P2Mpt ogKR -----END CERTIFICATE-----Generated at Mon Oct 20 07:22:57 2025 by rpki-client