$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/45401176-46b4-41a0-8882-3584e31e9718.roa File: 45401176-46b4-41a0-8882-3584e31e9718.roa (raw, json) Hash identifier: zexj2kCRqjHunOgUvmogss+NO4QvEsR7o4tc7fql0zk= Subject key identifier: 39:1E:72:EE:81:81:2A:91:58:14:A3:E5:78:45:56:E2:FA:B8:71:27 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4DD2311F8F89E6FAC7CE3FB3E04DEE96EC964F1B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/45401176-46b4-41a0-8882-3584e31e9718.roa Signing time: Fri 24 Oct 2025 00:00:24 +0000 ROA not before: Fri 24 Oct 2025 00:00:24 +0000 ROA not after: Fri 28 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:40c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d2:31:1f:8f:89:e6:fa:c7:ce:3f:b3:e0:4d:ee:96:ec:96:4f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 24 00:00:24 2025 GMT Not After : Nov 28 23:59:59 2025 GMT Subject: serialNumber=de4ec557e180676439c47470c3438639f54b0932d21e7cdd3c16c754455d810b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fc:a7:aa:ca:90:d4:d7:fd:de:28:1d:0f:d3: 62:6b:12:dd:49:7e:8a:e5:6b:8a:97:f5:95:f4:6c: fc:4b:82:9d:ee:b7:40:d5:ab:b4:8e:db:0f:f5:cc: 66:6f:b3:0c:fb:7c:93:8f:a5:71:10:fc:eb:4a:d6: 0e:50:d0:78:e5:48:f2:22:09:20:65:77:66:eb:06: 3f:74:f5:0a:f5:1f:41:cb:47:8c:7b:8a:3c:d0:e1: b3:74:f6:cf:47:e9:4a:bb:7c:57:f8:a6:ea:86:a0: ba:97:6a:89:39:a3:e0:df:d9:b6:ab:9e:73:ce:d6: d2:c3:57:7a:04:e9:dd:92:56:ce:ab:d6:4f:f9:9e: 25:4d:db:2a:9b:12:99:33:11:77:16:ec:a7:e2:ff: af:05:06:6d:97:46:c3:7d:8d:c4:40:01:26:87:d0: 7f:a2:19:aa:86:6c:2f:79:e4:d6:bc:de:64:ac:bb: a0:cd:1e:f0:b7:29:6d:7c:67:eb:69:07:f2:e6:13: 2e:95:6f:3b:43:75:30:3f:e0:58:ea:cb:64:d0:27: e2:c2:07:2c:26:ed:68:7d:56:37:fd:ab:31:55:f3: 5b:b6:26:c2:c0:30:78:be:f5:21:bf:29:c8:bd:9f: 18:36:8e:1f:89:e9:18:77:10:d1:7e:45:e6:a2:2d: 90:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1E:72:EE:81:81:2A:91:58:14:A3:E5:78:45:56:E2:FA:B8:71:27 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/45401176-46b4-41a0-8882-3584e31e9718.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:40c0::/46 Signature Algorithm: sha256WithRSAEncryption 40:68:87:a5:c2:44:f1:35:01:67:58:e0:7c:37:5f:d0:b5:cd: 8b:a3:f5:aa:0a:98:be:db:dc:de:03:d2:bb:9e:21:6d:99:a1: 7b:81:f6:31:37:d4:8f:52:f9:4a:8b:f7:ff:cb:03:9a:65:9d: f2:a2:6d:a6:85:31:25:cb:13:06:84:46:d6:8b:0c:47:fa:fe: 0e:2c:38:ec:33:95:bd:5f:99:1a:e3:9b:e7:e7:1e:c8:15:ea: d0:31:d4:e8:89:8d:f8:71:8d:7f:62:05:72:24:78:55:dc:df: f3:50:f4:b3:5f:83:0f:13:a9:6a:30:5c:f1:87:df:68:d4:e0: 43:95:1b:09:3b:00:b2:08:39:9d:d1:41:fe:14:5b:7d:47:68: 0d:8d:dd:63:c7:a2:34:6c:8e:af:9a:c3:52:2b:a1:bc:5c:8f: c2:03:e9:0a:35:85:33:56:88:1a:46:9e:79:3e:3c:52:6b:e5: e7:24:d6:08:ed:6c:f0:b1:35:bb:6e:45:3b:e5:e6:48:08:cd: 54:66:86:80:71:c7:1c:a6:4f:34:f4:74:0d:7e:e3:8d:de:e4: 5d:60:d7:12:2d:cb:48:a7:1c:d2:53:86:e6:05:8d:2e:67:92: a2:f8:4f:e9:57:3f:31:3a:76:eb:be:82:eb:ba:10:6c:79:cc: a7:83:46:09 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTdIxH4+J5vrHzj+z4E3uluyWTxswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyNDAwMDAyNFoX DTI1MTEyODIzNTk1OVowejFJMEcGA1UEBRNAZGU0ZWM1NTdlMTgwNjc2NDM5YzQ3 NDcwYzM0Mzg2MzlmNTRiMDkzMmQyMWU3Y2RkM2MxNmM3NTQ0NTVkODEwYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvynqsqQ1Nf93igdD9NiaxLdSX6K 5WuKl/WV9Gz8S4Kd7rdA1au0jtsP9cxmb7MM+3yTj6VxEPzrStYOUNB45UjyIgkg ZXdm6wY/dPUK9R9By0eMe4o80OGzdPbPR+lKu3xX+KbqhqC6l2qJOaPg39m2q55z ztbSw1d6BOndklbOq9ZP+Z4lTdsqmxKZMxF3Fuyn4v+vBQZtl0bDfY3EQAEmh9B/ ohmqhmwveeTWvN5krLugzR7wtyltfGfraQfy5hMulW87Q3UwP+BY6stk0Cfiwgcs Ju1ofVY3/asxVfNbtibCwDB4vvUhvynIvZ8YNo4fiekYdxDRfkXmoi2QWQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDkecu6BgSqRWBSj5XhFVuL6uHEnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ1NDAxMTc2LTQ2YjQtNDFhMC04ODgyLTM1ODRlMzFlOTcxOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaEDAMA0GCSqGSIb3DQEBCwUAA4IBAQBAaIelwkTxNQFnWOB8 N1/Qtc2Lo/WqCpi+29zeA9K7niFtmaF7gfYxN9SPUvlKi/f/ywOaZZ3yom2mhTEl yxMGhEbWiwxH+v4OLDjsM5W9X5ka45vn5x7IFerQMdToiY34cY1/YgVyJHhV3N/z UPSzX4MPE6lqMFzxh99o1OBDlRsJOwCyCDmd0UH+FFt9R2gNjd1jx6I0bI6vmsNS K6G8XI/CA+kKNYUzVogaRp55PjxSa+XnJNYI7WzwsTW7bkU75eZICM1UZoaAcccc pk809HQNfuON3uRdYNcSLctIpxzSU4bmBY0uZ5Ki+E/pVz8xOnbrvoLruhBsecyn g0YJ -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:49 2025 by rpki-client