$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbbb78e0-9689-404e-873b-b6e1797d5078.roa File: fbbb78e0-9689-404e-873b-b6e1797d5078.roa (raw, json) Hash identifier: v1d5NPrJo+8P9ONiwtpqTU7Xc3KEWU0rV8Y1O7iHTqg= Subject key identifier: A1:A2:BA:EC:49:25:61:6E:FB:92:78:D8:B3:49:FC:0F:D8:F3:09:5E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 26F738CA85C664F4DEFEF4FD08E4EF87C0BF7217 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbbb78e0-9689-404e-873b-b6e1797d5078.roa Signing time: Wed 15 Oct 2025 00:40:52 +0000 ROA not before: Wed 15 Oct 2025 00:40:52 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1e::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f7:38:ca:85:c6:64:f4:de:fe:f4:fd:08:e4:ef:87:c0:bf:72:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:40:52 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=7bfcd04bd2f6ddbcace8ac285a8701ee165047ccd38b4940cfc6c25bc971a534, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:46:69:51:73:22:7f:49:ad:b7:b2:ec:ed: 66:d8:98:14:4c:c1:f7:2c:03:13:5c:47:b1:ad:40: a9:fb:70:fa:12:f4:63:38:37:2e:53:16:47:98:c9: 04:db:6c:96:c4:49:8e:9f:22:ba:7b:1d:81:7e:c6: e4:fa:07:f7:f0:a5:f3:41:50:40:e3:2c:cd:20:2b: 3a:3e:a9:05:1b:60:49:7e:07:01:45:db:a2:45:16: e3:37:ae:a8:2c:28:44:58:ce:52:94:b6:de:8e:0d: 6f:cc:03:28:49:6f:f8:87:83:16:f5:0a:d5:2e:17: df:74:70:e6:11:d5:ee:a9:29:19:fe:9f:43:56:ff: 13:d8:f7:e5:1a:48:13:c6:03:ab:a2:da:ef:28:ac: 50:0b:04:71:5c:d6:62:e7:a8:c0:66:98:6d:f7:2b: fb:6f:63:50:1f:a7:9e:a4:c8:60:63:29:9e:8b:46: 22:a2:08:79:d5:5f:d5:d4:2c:88:2d:4c:6c:3a:ae: 81:99:50:8c:9f:c4:9e:c1:d5:ca:b7:dd:8c:0d:41: c4:53:b5:27:51:ee:9e:6d:21:60:6a:5a:0f:f6:f9: a7:09:ae:4b:61:2d:82:39:ee:d7:f2:0f:12:1a:42: f2:e2:20:5c:5f:67:8a:43:dc:76:a1:65:1f:32:41: 34:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A2:BA:EC:49:25:61:6E:FB:92:78:D8:B3:49:FC:0F:D8:F3:09:5E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbbb78e0-9689-404e-873b-b6e1797d5078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1e::/38 Signature Algorithm: sha256WithRSAEncryption a7:dc:3c:41:e8:81:c8:0d:9b:a9:d8:b0:7b:3c:e8:88:47:0b: ad:1d:f4:a2:fe:e0:c7:cb:1a:c9:be:ae:0e:fa:38:41:c2:30: 09:92:82:d9:af:fe:2d:f2:3e:88:a4:a3:a7:d6:ce:a2:ae:72: 0f:f1:ff:cd:b4:ba:58:80:dd:f4:80:b4:4b:6f:fe:b1:09:5d: ee:78:dd:ab:a2:f9:7f:df:a1:52:66:c6:9f:b0:4a:fd:8f:25: a0:4f:8f:a8:35:fd:41:b5:a8:5f:23:23:e3:68:5e:dd:be:c5: 4a:da:a4:ff:9c:05:cc:ae:81:c7:7d:0a:f0:ab:21:f0:e8:f1: ec:75:0d:39:16:19:35:46:19:06:64:eb:84:1d:37:1b:2c:ce: f3:24:d8:28:c2:29:fd:5d:f5:9f:e9:45:34:b0:23:93:90:02: 32:23:74:5c:ce:e8:fe:fb:3c:69:f3:66:70:c7:b1:c9:b0:f1: 7a:69:f5:46:74:20:bb:c1:9c:21:07:d5:44:d4:9d:ac:ff:fb: f7:61:cd:09:e3:f8:22:8a:0c:e0:9b:8c:e8:ef:30:48:84:94: ca:c1:89:90:53:3d:ae:65:4a:85:85:e4:0b:e8:42:e6:bb:5c: 40:0e:9f:50:91:ab:f8:5a:14:a6:79:c6:35:1b:39:75:a9:24: 2d:0f:12:b7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJvc4yoXGZPTe/vT9COTvh8C/chcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwNDA1MloX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAN2JmY2QwNGJkMmY2ZGRiY2FjZThh YzI4NWE4NzAxZWUxNjUwNDdjY2QzOGI0OTQwY2ZjNmMyNWJjOTcxYTUzNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1VGaVFzIn9Jrbey7O1m2JgUTMH3 LAMTXEexrUCp+3D6EvRjODcuUxZHmMkE22yWxEmOnyK6ex2Bfsbk+gf38KXzQVBA 4yzNICs6PqkFG2BJfgcBRduiRRbjN66oLChEWM5SlLbejg1vzAMoSW/4h4MW9QrV LhffdHDmEdXuqSkZ/p9DVv8T2PflGkgTxgOrotrvKKxQCwRxXNZi56jAZpht9yv7 b2NQH6eepMhgYymei0Yiogh51V/V1CyILUxsOq6BmVCMn8SewdXKt92MDUHEU7Un Ue6ebSFgaloP9vmnCa5LYS2COe7X8g8SGkLy4iBcX2eKQ9x2oWUfMkE0rQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKGiuuxJJWFu+5J42LNJ/A/Y8wleMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZiYmI3OGUwLTk2ODktNDA0ZS04NzNiLWI2ZTE3OTdkNTA3OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHgAwDQYJKoZIhvcNAQELBQADggEBAKfcPEHogcgNm6nYsHs8 6IhHC60d9KL+4MfLGsm+rg76OEHCMAmSgtmv/i3yPoiko6fWzqKucg/x/820uliA 3fSAtEtv/rEJXe543aui+X/foVJmxp+wSv2PJaBPj6g1/UG1qF8jI+NoXt2+xUra pP+cBcyugcd9CvCrIfDo8ex1DTkWGTVGGQZk64QdNxsszvMk2CjCKf1d9Z/pRTSw I5OQAjIjdFzO6P77PGnzZnDHscmw8Xpp9UZ0ILvBnCEH1UTUnaz/+/dhzQnj+CKK DOCbjOjvMEiElMrBiZBTPa5lSoWF5AvoQua7XEAOn1CRq/haFKZ5xjUbOXWpJC0P Erc= -----END CERTIFICATE-----Generated at Mon Oct 20 17:35:14 2025 by rpki-client