$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/05f722d1-1b22-44e3-a4a2-3835d7447d1c.roa File: 05f722d1-1b22-44e3-a4a2-3835d7447d1c.roa (raw, json) Hash identifier: UY3F71/OvcvtUppFdiq2rAUNP728ITJLIw1dSdPnq5Q= Subject key identifier: 7C:3E:6A:0C:CE:B7:63:6D:12:6A:7A:F0:D6:3F:71:DB:7C:3F:5D:04 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5F5E980F93B11AC23556E3831A942AC117BF6593 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/05f722d1-1b22-44e3-a4a2-3835d7447d1c.roa Signing time: Wed 15 Oct 2025 00:10:50 +0000 ROA not before: Wed 15 Oct 2025 00:10:50 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5e:98:0f:93:b1:1a:c2:35:56:e3:83:1a:94:2a:c1:17:bf:65:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:10:50 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=986e08011cb4b767d4cd18cf7df46887c057188ed5d43acc3d1066df06333430, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0f:7a:ce:41:e4:7e:28:02:fa:a4:aa:15:af: db:47:74:0f:7d:fd:16:12:d6:26:ef:fe:93:24:4a: 7d:2d:f5:a5:4d:86:0d:1d:f7:64:92:13:9f:58:cf: 35:1c:e4:0c:1f:a4:06:2e:95:61:fa:4b:99:cd:bd: 5d:ee:54:a2:42:7a:26:8d:71:13:a8:6d:38:73:ba: 76:ff:b8:36:4d:4e:c7:4a:50:4b:23:51:e2:90:4c: 9a:af:3d:12:74:d9:7c:dd:cd:91:42:a5:b5:52:b9: f7:a9:4e:e3:af:e6:dc:4f:3d:f7:0c:c6:30:05:cc: 80:95:e8:40:26:ec:40:e5:dc:56:bb:e5:c9:4c:96: 9b:d8:9e:52:14:de:11:2e:3c:1c:d4:44:ab:34:fe: 76:10:21:d7:20:6a:fe:a3:26:47:38:1c:41:1b:8e: 31:91:27:22:e7:03:7d:45:83:c9:af:3e:3e:f7:c0: 01:fa:97:6a:c1:36:12:e9:36:af:61:95:a9:db:4c: 26:bc:c3:2f:3e:c0:6b:80:6d:6b:64:60:30:42:43: 61:e5:58:d1:b0:c6:d3:33:63:e9:c0:39:36:5b:65: 4c:30:83:77:05:d3:d9:fb:78:6b:83:0e:e2:00:41: f4:ff:0f:df:64:48:f0:1a:ca:e5:99:ed:ea:c6:27: 8f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3E:6A:0C:CE:B7:63:6D:12:6A:7A:F0:D6:3F:71:DB:7C:3F:5D:04 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/05f722d1-1b22-44e3-a4a2-3835d7447d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:c800::/40 Signature Algorithm: sha256WithRSAEncryption 3f:71:b4:96:aa:63:f0:23:fe:c4:bc:a3:7f:21:e0:67:a8:ff: e2:31:cc:6f:e2:7f:cb:20:29:f4:eb:fc:9a:ad:19:ee:77:b2: e1:7a:a0:11:75:c4:ea:ee:05:62:a6:9a:fc:ea:9c:a3:b0:bc: 7f:13:cd:c3:7e:83:fb:dd:fe:44:d4:12:82:af:2e:9e:a7:84: 66:2c:a8:b1:31:12:94:dc:7d:c2:b2:c4:1b:84:d9:3a:5c:76: a7:f6:ad:bd:37:9a:fc:af:bf:fd:97:fa:d7:60:83:18:82:11: ee:18:89:cc:a0:60:4d:b0:ea:30:0c:71:9d:d3:97:2f:bb:28: a6:06:b9:d9:62:51:dc:59:87:50:41:78:38:c1:3a:fb:71:80: e4:71:59:c1:ec:6a:53:5e:36:13:c3:15:4e:61:2c:5e:99:81: b3:4f:56:d2:f3:96:37:bb:78:40:b6:60:64:7e:bc:25:91:77: f4:be:6a:cc:b8:b6:23:3f:cb:9b:88:2a:b3:1a:3f:37:e9:e4: 88:d6:38:3b:c0:05:98:ae:6d:c3:66:5f:e2:31:48:d6:77:01: 4b:c1:ad:45:e8:bc:fd:7e:72:d5:0c:06:64:9e:12:05:43:b9: 89:9b:5f:d3:09:bc:43:26:0e:ca:4a:4b:af:f6:cc:09:07:e2: fd:12:32:85 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUX16YD5OxGsI1VuODGpQqwRe/ZZMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMTA1MFoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAOTg2ZTA4MDExY2I0Yjc2N2Q0Y2Qx OGNmN2RmNDY4ODdjMDU3MTg4ZWQ1ZDQzYWNjM2QxMDY2ZGYwNjMzMzQzMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug96zkHkfigC+qSqFa/bR3QPff0W EtYm7/6TJEp9LfWlTYYNHfdkkhOfWM81HOQMH6QGLpVh+kuZzb1d7lSiQnomjXET qG04c7p2/7g2TU7HSlBLI1HikEyarz0SdNl83c2RQqW1Urn3qU7jr+bcTz33DMYw BcyAlehAJuxA5dxWu+XJTJab2J5SFN4RLjwc1ESrNP52ECHXIGr+oyZHOBxBG44x kSci5wN9RYPJrz4+98AB+pdqwTYS6TavYZWp20wmvMMvPsBrgG1rZGAwQkNh5VjR sMbTM2PpwDk2W2VMMIN3BdPZ+3hrgw7iAEH0/w/fZEjwGsrlme3qxieP6QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHw+agzOt2NtEmp68NY/cdt8P10EMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA1ZjcyMmQxLTFiMjItNDRlMy1hNGEyLTM4MzVkNzQ0N2QxYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacMgwDQYJKoZIhvcNAQELBQADggEBAD9xtJaqY/Aj/sS8o38h 4Geo/+IxzG/if8sgKfTr/JqtGe53suF6oBF1xOruBWKmmvzqnKOwvH8TzcN+g/vd /kTUEoKvLp6nhGYsqLExEpTcfcKyxBuE2Tpcdqf2rb03mvyvv/2X+tdggxiCEe4Y icygYE2w6jAMcZ3Tly+7KKYGudliUdxZh1BBeDjBOvtxgORxWcHsalNeNhPDFU5h LF6ZgbNPVtLzlje7eEC2YGR+vCWRd/S+asy4tiM/y5uIKrMaPzfp5IjWODvABZiu bcNmX+IxSNZ3AUvBrUXovP1+ctUMBmSeEgVDuYmbX9MJvEMmDspKS6/2zAkH4v0S MoU= -----END CERTIFICATE-----Generated at Thu Nov 6 00:23:19 2025 by rpki-client