$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46906009-c3b9-49b3-a5f1-d017b200e422.roa File: 46906009-c3b9-49b3-a5f1-d017b200e422.roa (raw, json) Hash identifier: MhdvsFVxlmxfVMSXA7T02D46sl4/wfZWchF3w8XFgVk= Subject key identifier: F5:6F:FB:93:18:8A:F0:D9:C5:55:B9:90:44:B0:7C:F9:ED:BD:BE:49 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 559B0A1AF9845DEC518BB3A40F6D23E658606254 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46906009-c3b9-49b3-a5f1-d017b200e422.roa Signing time: Mon 13 Oct 2025 15:40:09 +0000 ROA not before: Mon 13 Oct 2025 15:40:09 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:48c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:9b:0a:1a:f9:84:5d:ec:51:8b:b3:a4:0f:6d:23:e6:58:60:62:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:40:09 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=bb02e4e72a209f0ab40393e7498f8e09de9b5b115ca4e7b21c1f2e15cb65fdba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6b:05:19:c5:b3:5d:49:56:87:d6:83:df:08: 0c:4c:d1:2b:7e:b7:e4:a4:fe:44:cc:86:e6:a7:29: 34:ee:fb:86:ca:f8:dc:4c:03:29:92:46:3f:18:7e: 37:f3:ae:86:fb:d7:f6:ed:f8:e1:28:4e:12:9b:ce: 4e:ee:28:98:1a:67:0d:24:2c:b8:84:ed:6a:41:2b: ae:d9:0e:61:ec:c3:eb:64:47:2e:5b:90:a4:e4:a4: 42:9d:7f:f1:45:dc:3c:0a:4c:13:2e:41:e4:a7:4c: 0e:21:63:39:5f:60:6e:2c:11:88:d0:45:31:e4:d3: 74:c1:7a:c0:e6:d5:3f:29:e9:0e:cd:81:5d:c2:88: 20:0a:b3:ab:d9:11:0b:6f:d3:bd:f3:31:0d:64:a2: a2:2e:3e:91:e1:2c:8b:36:cc:e1:a3:0c:cc:24:f7: 8b:f8:97:ea:e9:c2:26:42:32:d1:f2:e9:9c:34:af: 0b:bc:bf:6d:a8:f9:35:02:5d:1f:e9:68:5e:86:22: 37:5b:be:ba:97:7e:2b:4e:7f:6b:18:ac:30:fb:1f: a0:75:08:95:db:0c:67:70:af:18:30:aa:0f:b9:1a: 4f:4f:b4:49:a3:57:e4:ef:5f:51:17:3c:69:70:53: 14:17:4a:bf:ed:02:dc:60:e1:af:6a:82:1b:b9:b1: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6F:FB:93:18:8A:F0:D9:C5:55:B9:90:44:B0:7C:F9:ED:BD:BE:49 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46906009-c3b9-49b3-a5f1-d017b200e422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:48c0::/48 Signature Algorithm: sha256WithRSAEncryption 27:df:20:4c:e1:58:81:fb:d4:02:86:6f:45:4d:d1:47:32:e7: 12:bc:ef:38:4b:bf:5e:f1:f4:be:f7:0a:70:6e:93:7b:5d:c8: 22:31:43:a9:3f:81:33:a3:91:e9:b8:8b:8f:72:2f:3c:5a:61: 39:b5:ef:ab:d8:7f:9c:c3:56:c0:7a:75:7e:07:51:9f:d7:9c: f1:13:38:1f:83:c6:23:f6:eb:31:56:1a:c5:9e:c7:3b:43:35: ea:c5:66:50:ec:b9:93:fe:e8:d6:af:55:74:91:19:ba:eb:1f: c3:22:5a:d9:40:81:82:36:fb:bd:1c:2f:f4:2e:41:80:7c:34: 5b:04:34:0b:3e:be:a1:30:58:cf:15:91:ad:10:45:55:f4:ae: d2:cf:bd:86:c3:60:da:b0:8d:77:49:3b:0c:c4:aa:6a:94:fe: 88:a7:24:f6:15:53:60:38:2b:85:b5:b1:00:b4:c2:16:5d:b3: 2c:ab:3c:ad:f6:9e:2b:b4:51:04:e4:bd:e9:17:29:72:18:f1: e7:d4:31:e9:f1:43:54:51:eb:83:70:3d:af:60:1e:65:0c:5f: bc:b6:e7:db:be:16:8b:2c:96:28:9f:7a:d7:29:db:0b:04:ea: 8e:a5:32:28:44:3d:67:d7:24:5e:93:1e:79:1c:ea:39:80:e3: 4d:68:bc:00 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVZsKGvmEXexRi7OkD20j5lhgYlQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1NDAwOVoX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNAYmIwMmU0ZTcyYTIwOWYwYWI0MDM5 M2U3NDk4ZjhlMDlkZTliNWIxMTVjYTRlN2IyMWMxZjJlMTVjYjY1ZmRiYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomsFGcWzXUlWh9aD3wgMTNErfrfk pP5EzIbmpyk07vuGyvjcTAMpkkY/GH43866G+9f27fjhKE4Sm85O7iiYGmcNJCy4 hO1qQSuu2Q5h7MPrZEcuW5Ck5KRCnX/xRdw8CkwTLkHkp0wOIWM5X2BuLBGI0EUx 5NN0wXrA5tU/KekOzYFdwoggCrOr2RELb9O98zENZKKiLj6R4SyLNszhowzMJPeL +Jfq6cImQjLR8umcNK8LvL9tqPk1Al0f6WhehiI3W766l34rTn9rGKww+x+gdQiV 2wxncK8YMKoPuRpPT7RJo1fk719RFzxpcFMUF0q/7QLcYOGvaoIbubFE6wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPVv+5MYivDZxVW5kESwfPntvb5JMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ2OTA2MDA5LWMzYjktNDliMy1hNWYxLWQwMTdiMjAwZTQyMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOEjAMA0GCSqGSIb3DQEBCwUAA4IBAQAn3yBM4ViB+9QChm9F TdFHMucSvO84S79e8fS+9wpwbpN7XcgiMUOpP4Ezo5HpuIuPci88WmE5te+r2H+c w1bAenV+B1Gf15zxEzgfg8Yj9usxVhrFnsc7QzXqxWZQ7LmT/ujWr1V0kRm66x/D IlrZQIGCNvu9HC/0LkGAfDRbBDQLPr6hMFjPFZGtEEVV9K7Sz72Gw2DasI13STsM xKpqlP6IpyT2FVNgOCuFtbEAtMIWXbMsqzyt9p4rtFEE5L3pFylyGPHn1DHp8UNU UeuDcD2vYB5lDF+8tufbvhaLLJYon3rXKdsLBOqOpTIoRD1n1yRekx55HOo5gONN aLwA -----END CERTIFICATE-----Generated at Wed Nov 5 07:43:26 2025 by rpki-client