$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47371510-3a26-4c9b-a966-5e5aaf136a2f.roa File: 47371510-3a26-4c9b-a966-5e5aaf136a2f.roa (raw, json) Hash identifier: krCx23lhDUmwpP7hpJr081VWRXP4Z+KZ4xG/IlTqoms= Subject key identifier: DE:1D:FB:FF:B1:67:80:4A:4E:80:A8:CA:CE:EC:7E:64:DB:8E:CE:A6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0C17B4CE6FAAB15783ABADC94DA47988E91D99EC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47371510-3a26-4c9b-a966-5e5aaf136a2f.roa Signing time: Wed 05 Nov 2025 00:10:09 +0000 ROA not before: Wed 05 Nov 2025 00:10:09 +0000 ROA not after: Wed 10 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:17:b4:ce:6f:aa:b1:57:83:ab:ad:c9:4d:a4:79:88:e9:1d:99:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 5 00:10:09 2025 GMT Not After : Dec 10 23:59:59 2025 GMT Subject: serialNumber=e3c08bf80461a9dbf5806142eee79b5fa64eee10596dade18c98dec8691be54c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:db:68:a0:69:2b:2b:98:26:77:94:20:1f: f8:79:d7:e0:27:98:7a:93:a6:ef:f9:df:44:3f:d7: 64:cf:9e:4b:cd:3f:a2:58:c1:c2:cc:85:b2:75:0c: 77:72:11:e6:d7:1f:c7:83:dc:d2:50:b3:6d:ca:86: 88:4d:c5:af:a3:76:3d:c8:31:cd:03:7b:4b:d9:cf: 2c:51:30:17:53:98:aa:54:91:a3:5a:97:c5:20:49: cf:56:00:ee:26:06:23:0b:99:da:0d:45:ae:d7:47: 52:e6:40:a2:ad:ba:84:9d:59:78:86:a2:1e:fe:49: 40:f8:5f:d0:84:4d:dd:27:3f:13:f4:a9:bb:c2:f9: b7:c2:6b:f2:74:f0:a9:68:ab:b3:15:18:29:7f:7d: 4a:46:55:6d:ae:4f:1c:9f:2f:2b:da:7e:85:04:a0: 87:76:4b:8c:75:54:f2:b7:e7:7c:e8:78:30:46:d4: fd:34:3d:73:e7:f1:89:de:bd:50:f6:e0:3f:15:84: af:b8:4e:1f:e7:a7:92:bf:73:54:be:b2:17:87:4f: 2e:1f:dc:97:0b:eb:c2:b8:5e:09:c3:7d:bb:96:83: a3:fc:85:e3:42:45:c5:e0:a2:40:03:f8:2e:0d:c2: eb:a1:8d:9d:cb:72:71:8d:0b:f7:34:ee:8b:b9:b5: a7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1D:FB:FF:B1:67:80:4A:4E:80:A8:CA:CE:EC:7E:64:DB:8E:CE:A6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47371510-3a26-4c9b-a966-5e5aaf136a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:b040::/48 Signature Algorithm: sha256WithRSAEncryption 6d:8d:cb:10:f2:c6:70:5a:78:8c:3a:98:37:d8:d3:e4:d8:81: 50:b7:b1:58:1e:80:4f:7a:bf:8f:49:cc:59:27:bd:b2:ef:b3: 10:43:6a:7e:6f:b7:b6:9b:11:3e:70:6a:bf:bc:4e:93:6c:28: af:93:82:58:3c:6f:fd:43:7b:00:b9:41:89:49:b2:f8:f1:47: 32:93:de:cd:1a:05:95:6b:e0:0e:bb:28:11:c9:ba:41:00:8c: 4f:9a:47:5d:2d:72:b1:d5:32:2a:fc:ae:74:72:7d:55:1e:97: 49:93:6e:14:82:01:85:79:0e:37:17:39:4d:cd:7c:8c:94:1f: ad:ad:97:23:6c:cd:f2:53:3e:36:1b:cb:55:1f:ef:bb:4d:c3: aa:c4:8a:4b:54:94:db:9e:33:1b:e1:68:7c:6c:60:4d:78:88: 01:f3:ee:de:d0:e1:cc:b0:b7:4c:f5:fd:b0:10:b6:13:f3:f0: 9c:a6:8b:fb:d7:57:9d:9f:e0:0b:bc:3b:d2:48:d1:c7:4a:f0: d1:34:b7:c2:8d:76:85:bc:bf:18:5a:ec:dc:58:b8:b0:73:1b: 95:55:c2:7c:fd:69:0e:57:50:fa:3e:48:95:70:14:cc:06:00: df:ed:a5:6c:ca:8b:53:66:78:28:4b:f6:59:f4:e4:dc:27:e8: 8f:e6:51:2f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDBe0zm+qsVeDq63JTaR5iOkdmewwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNTAwMTAwOVoX DTI1MTIxMDIzNTk1OVowejFJMEcGA1UEBRNAZTNjMDhiZjgwNDYxYTlkYmY1ODA2 MTQyZWVlNzliNWZhNjRlZWUxMDU5NmRhZGUxOGM5OGRlYzg2OTFiZTU0YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0/baKBpKyuYJneUIB/4edfgJ5h6 k6bv+d9EP9dkz55LzT+iWMHCzIWydQx3chHm1x/Hg9zSULNtyoaITcWvo3Y9yDHN A3tL2c8sUTAXU5iqVJGjWpfFIEnPVgDuJgYjC5naDUWu10dS5kCirbqEnVl4hqIe /klA+F/QhE3dJz8T9Km7wvm3wmvydPCpaKuzFRgpf31KRlVtrk8cny8r2n6FBKCH dkuMdVTyt+d86HgwRtT9ND1z5/GJ3r1Q9uA/FYSvuE4f56eSv3NUvrIXh08uH9yX C+vCuF4Jw327loOj/IXjQkXF4KJAA/guDcLroY2dy3JxjQv3NO6LubWndwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFN4d+/+xZ4BKToCoys7sfmTbjs6mMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ3MzcxNTEwLTNhMjYtNGM5Yi1hOTY2LTVlNWFhZjEzNmEyZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYbBAMA0GCSqGSIb3DQEBCwUAA4IBAQBtjcsQ8sZwWniMOpg3 2NPk2IFQt7FYHoBPer+PScxZJ72y77MQQ2p+b7e2mxE+cGq/vE6TbCivk4JYPG/9 Q3sAuUGJSbL48Ucyk97NGgWVa+AOuygRybpBAIxPmkddLXKx1TIq/K50cn1VHpdJ k24UggGFeQ43FzlNzXyMlB+trZcjbM3yUz42G8tVH++7TcOqxIpLVJTbnjMb4Wh8 bGBNeIgB8+7e0OHMsLdM9f2wELYT8/Ccpov711edn+ALvDvSSNHHSvDRNLfCjXaF vL8YWuzcWLiwcxuVVcJ8/WkOV1D6PkiVcBTMBgDf7aVsyotTZngoS/ZZ9OTcJ+iP 5lEv -----END CERTIFICATE-----Generated at Wed Nov 5 07:44:43 2025 by rpki-client