$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04f1f81d-87d7-4c0b-a93b-e58a8b84856b.roa File: 04f1f81d-87d7-4c0b-a93b-e58a8b84856b.roa (raw, json) Hash identifier: g5AjOPOicde7eL36ToPTzCY186g3rnOyBuqnXv0hNwM= Subject key identifier: B9:47:E4:B6:E5:39:97:84:EB:D3:61:81:CA:A3:8C:80:B1:60:B3:88 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 19C6795128AEC9BC14E4B0FE86C61B41006D470F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04f1f81d-87d7-4c0b-a93b-e58a8b84856b.roa Signing time: Tue 04 Nov 2025 00:00:39 +0000 ROA not before: Tue 04 Nov 2025 00:00:39 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c6:79:51:28:ae:c9:bc:14:e4:b0:fe:86:c6:1b:41:00:6d:47:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 4 00:00:39 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=8291430d52345642ef96359a59dc658771f00a2733cd2d7d3b8fa1a1a8d84557, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:97:0b:e3:87:4b:b1:71:8b:78:c1:0c:0f:11: 99:dc:09:79:1f:9d:8d:bc:66:65:e9:9b:d3:6f:26: 4a:a7:08:56:87:f2:8a:b8:e4:74:43:fd:26:92:d0: 05:4d:bb:16:d8:25:41:8a:4d:2a:4b:a3:71:75:9e: 1e:05:da:32:6a:17:e6:a0:06:9e:b4:82:54:60:2b: eb:ae:1c:46:93:ff:7f:86:b5:dc:c8:a4:ff:2b:21: 4e:84:af:be:34:a3:05:13:96:12:b3:04:8d:b9:24: e8:fc:90:d0:fd:21:d9:c8:96:e5:8d:14:65:01:92: 21:da:d5:c2:b0:0c:dc:82:e3:20:46:c4:12:73:e2: 4b:da:fc:7b:ef:c0:c9:15:4c:47:5d:3e:2d:73:85: 6b:7b:fc:ab:3c:79:21:c4:8f:18:1c:a3:0d:ea:b6: c8:5c:60:10:81:d7:30:8f:f1:59:82:10:39:d3:11: d0:be:20:aa:9d:6b:35:f3:db:a0:90:42:70:d8:4c: 7c:22:e2:bf:b3:4a:7c:7e:b6:fc:b9:7d:a3:39:85: 82:d9:c4:c6:25:1a:da:39:6d:80:53:99:0a:9f:31: 2a:40:87:1b:ea:7c:f0:73:33:ff:f3:76:de:86:78: 01:a8:11:2f:e7:af:c8:ac:5e:06:b6:ac:2d:e2:71: fe:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:47:E4:B6:E5:39:97:84:EB:D3:61:81:CA:A3:8C:80:B1:60:B3:88 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04f1f81d-87d7-4c0b-a93b-e58a8b84856b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:28c0::/48 Signature Algorithm: sha256WithRSAEncryption 5c:f0:b5:7d:e5:f4:96:79:f4:50:40:4c:5b:d4:bb:4c:7c:4f: 8d:ca:18:92:39:30:d0:bf:29:9a:f6:9d:90:84:13:34:68:e2: 38:32:4b:40:93:63:ee:31:21:c7:a0:f3:d6:01:1b:b1:f8:03: e1:21:df:43:89:3a:f7:8e:24:08:b8:9d:05:2b:50:87:58:86: f5:08:f6:62:02:0d:c1:1b:5a:6f:99:95:9f:0b:96:08:36:3a: 43:c7:4d:5a:99:a7:4b:d9:58:f0:66:eb:42:06:dd:03:90:18: e5:35:81:6f:a0:02:d7:04:bb:5c:06:1c:7d:bd:ca:4f:8d:b1: 0e:91:10:a9:70:62:87:f3:74:41:48:e7:23:90:37:9f:88:73: 38:c0:60:dc:1d:b7:ef:69:c4:40:fe:30:b5:15:0f:e2:4a:b3: ca:fa:48:cf:42:0d:71:06:87:2c:b7:b1:56:25:a9:8d:88:8b: 65:94:b6:45:7a:c5:48:14:de:34:73:64:07:7b:a0:56:da:d3: 64:58:0c:3d:c3:77:44:08:2c:ad:c1:f0:f0:63:22:b1:6f:f0: ba:8d:10:8a:03:52:69:0a:5e:1e:0f:ea:0f:14:9e:24:81:2e: 8a:d2:8d:84:37:a5:84:b8:19:dc:4e:5c:a3:b2:e7:6f:35:88: e5:e7:8f:5b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGcZ5USiuybwU5LD+hsYbQQBtRw8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNDAwMDAzOVoX DTI1MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAODI5MTQzMGQ1MjM0NTY0MmVmOTYz NTlhNTlkYzY1ODc3MWYwMGEyNzMzY2QyZDdkM2I4ZmExYTFhOGQ4NDU1NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypcL44dLsXGLeMEMDxGZ3Al5H52N vGZl6ZvTbyZKpwhWh/KKuOR0Q/0mktAFTbsW2CVBik0qS6NxdZ4eBdoyahfmoAae tIJUYCvrrhxGk/9/hrXcyKT/KyFOhK++NKMFE5YSswSNuSTo/JDQ/SHZyJbljRRl AZIh2tXCsAzcguMgRsQSc+JL2vx778DJFUxHXT4tc4Vre/yrPHkhxI8YHKMN6rbI XGAQgdcwj/FZghA50xHQviCqnWs189ugkEJw2Ex8IuK/s0p8frb8uX2jOYWC2cTG JRraOW2AU5kKnzEqQIcb6nzwczP/83behngBqBEv56/IrF4Gtqwt4nH+UQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLlH5LblOZeE69NhgcqjjICxYLOIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA0ZjFmODFkLTg3ZDctNGMwYi1hOTNiLWU1OGE4Yjg0ODU2Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaACjAMA0GCSqGSIb3DQEBCwUAA4IBAQBc8LV95fSWefRQQExb 1LtMfE+NyhiSOTDQvyma9p2QhBM0aOI4MktAk2PuMSHHoPPWARux+APhId9DiTr3 jiQIuJ0FK1CHWIb1CPZiAg3BG1pvmZWfC5YINjpDx01amadL2VjwZutCBt0DkBjl NYFvoALXBLtcBhx9vcpPjbEOkRCpcGKH83RBSOcjkDefiHM4wGDcHbfvacRA/jC1 FQ/iSrPK+kjPQg1xBocst7FWJamNiItllLZFesVIFN40c2QHe6BW2tNkWAw9w3dE CCytwfDwYyKxb/C6jRCKA1JpCl4eD+oPFJ4kgS6K0o2EN6WEuBncTlyjsudvNYjl 549b -----END CERTIFICATE-----Generated at Wed Nov 5 12:55:19 2025 by rpki-client