$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/05228447-3f22-4780-bbc7-8543ea233efb.roa File: 05228447-3f22-4780-bbc7-8543ea233efb.roa (raw, json) Hash identifier: mv1fhF7WkXexDgrQnjyF9YllJEfxGHILZuim/sxfNME= Subject key identifier: E7:F3:4C:66:55:79:B0:74:98:86:39:A4:F0:32:0E:2C:DB:29:FF:4A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6270D7262ED09899CBC31471DE4227307ECA1020 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/05228447-3f22-4780-bbc7-8543ea233efb.roa Signing time: Tue 21 Oct 2025 00:00:46 +0000 ROA not before: Tue 21 Oct 2025 00:00:46 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:70:d7:26:2e:d0:98:99:cb:c3:14:71:de:42:27:30:7e:ca:10:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 21 00:00:46 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=6506fd6802b82a1ee2684e9afe2e122f2e54099f8bcb8779ffa6a78d0794d5a0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:ce:c5:33:3e:55:b9:38:6b:d2:1d:e8:cd: 1b:99:63:32:32:f2:9b:ae:d6:fa:b9:9e:25:2b:68: 99:70:ca:18:99:6a:0c:ee:19:73:53:76:01:97:37: 60:72:8d:7c:2f:67:13:78:36:14:1a:21:3a:cc:ee: 9f:26:73:dc:0b:75:d5:6e:41:be:6c:13:a9:62:df: 94:cc:2c:7c:3d:01:e6:25:da:b6:a7:ea:0f:11:55: fb:ef:49:91:80:74:5e:0f:25:76:a3:d5:39:fe:cf: 0b:ff:7a:52:7a:15:15:cb:72:0d:3a:73:47:51:40: 11:a1:73:4f:3b:b2:e2:b5:80:67:a9:51:54:1d:b7: 96:ab:50:e6:22:b4:a4:d4:62:5c:ac:17:ab:78:f6: 63:29:75:87:a1:d5:49:3f:b3:94:e4:af:93:43:05: d3:6a:f3:be:6c:11:bf:a5:2c:84:9a:86:74:58:32: b6:61:f2:3e:ee:f9:8a:f4:d8:dc:78:18:d9:66:24: 5b:a0:b8:06:83:bc:6a:29:ba:13:9e:50:e0:dc:00: fe:dc:d3:ed:34:01:7f:05:33:fe:ed:09:e3:6e:05: 94:5c:67:e3:21:cb:30:56:c7:40:f2:06:f6:73:c7: ae:c0:ae:e4:a1:71:9c:80:5c:fa:52:bc:df:56:f2: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F3:4C:66:55:79:B0:74:98:86:39:A4:F0:32:0E:2C:DB:29:FF:4A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/05228447-3f22-4780-bbc7-8543ea233efb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:8800::/40 Signature Algorithm: sha256WithRSAEncryption 42:bf:86:10:02:cd:10:94:a9:84:b2:2f:03:74:7f:ca:e6:93: 34:12:55:b4:d6:ae:c9:42:60:b6:ce:90:aa:e3:be:fe:a0:08: 9d:17:28:c4:47:07:24:18:80:bf:f1:7a:25:a6:47:ef:a2:de: 5e:de:40:fb:aa:c1:9d:2f:62:82:69:3c:fb:a1:dd:44:0b:c2: 56:1b:cf:f9:c8:d7:85:8c:d9:8c:13:39:cf:1b:d7:0b:c3:3c: 0d:5a:a7:57:26:ff:d9:a1:ac:b3:83:19:d1:38:56:91:b9:06: ab:ff:ad:64:01:67:8d:ec:a2:9c:a5:4f:b2:f3:b3:91:33:1a: 8d:72:68:e6:e1:30:dc:e0:5f:52:f5:ba:a7:13:68:4c:72:87: 9c:f0:32:0d:3a:6d:0e:c2:39:9e:ac:4f:84:58:2b:15:d2:e2: 66:c7:eb:68:98:bb:06:78:fb:5a:03:b2:5c:03:74:9b:da:9e: dc:6f:27:d0:98:ca:a2:13:b1:27:2e:74:a6:54:cc:f6:36:c1: 6f:7c:11:dd:3e:da:27:f2:33:c6:6a:5a:1a:7b:e2:26:61:86: 79:2a:0f:aa:93:4d:a8:3d:60:ed:05:3c:a9:b4:35:2a:09:b2: 61:6d:92:32:21:18:7b:bc:d2:f5:7a:8b:6a:d8:da:db:29:f6: 62:ca:8b:85 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYnDXJi7QmJnLwxRx3kInMH7KECAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyMTAwMDA0NloX DTI1MTEyNTIzNTk1OVowejFJMEcGA1UEBRNANjUwNmZkNjgwMmI4MmExZWUyNjg0 ZTlhZmUyZTEyMmYyZTU0MDk5ZjhiY2I4Nzc5ZmZhNmE3OGQwNzk0ZDVhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPfOxTM+Vbk4a9Id6M0bmWMyMvKb rtb6uZ4lK2iZcMoYmWoM7hlzU3YBlzdgco18L2cTeDYUGiE6zO6fJnPcC3XVbkG+ bBOpYt+UzCx8PQHmJdq2p+oPEVX770mRgHReDyV2o9U5/s8L/3pSehUVy3INOnNH UUARoXNPO7LitYBnqVFUHbeWq1DmIrSk1GJcrBerePZjKXWHodVJP7OU5K+TQwXT avO+bBG/pSyEmoZ0WDK2YfI+7vmK9NjceBjZZiRboLgGg7xqKboTnlDg3AD+3NPt NAF/BTP+7QnjbgWUXGfjIcswVsdA8gb2c8euwK7koXGcgFz6UrzfVvKflwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOfzTGZVebB0mIY5pPAyDizbKf9KMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA1MjI4NDQ3LTNmMjItNDc4MC1iYmM3LTg1NDNlYTIzM2VmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba74gwDQYJKoZIhvcNAQELBQADggEBAEK/hhACzRCUqYSyLwN0 f8rmkzQSVbTWrslCYLbOkKrjvv6gCJ0XKMRHByQYgL/xeiWmR++i3l7eQPuqwZ0v YoJpPPuh3UQLwlYbz/nI14WM2YwTOc8b1wvDPA1ap1cm/9mhrLODGdE4VpG5Bqv/ rWQBZ43sopylT7Lzs5EzGo1yaObhMNzgX1L1uqcTaExyh5zwMg06bQ7COZ6sT4RY KxXS4mbH62iYuwZ4+1oDslwDdJvantxvJ9CYyqITsScudKZUzPY2wW98Ed0+2ify M8ZqWhp74iZhhnkqD6qTTag9YO0FPKm0NSoJsmFtkjIhGHu80vV6i2rY2tsp9mLK i4U= -----END CERTIFICATE-----Generated at Wed Nov 5 07:49:02 2025 by rpki-client