$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/498f6dc3-db03-415e-b534-d74ca6f01901.roa File: 498f6dc3-db03-415e-b534-d74ca6f01901.roa (raw, json) Hash identifier: w62+rzzeRz5kv+JH40/8XzoH45UQHpeYOLOi3T9Gtpw= Subject key identifier: 27:2E:38:75:7E:E5:15:B4:67:A8:D0:84:3E:E1:4D:6E:39:62:A1:C8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1E597785328BC142B1EADDADE883FBF90B32F350 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/498f6dc3-db03-415e-b534-d74ca6f01901.roa Signing time: Tue 28 Oct 2025 00:00:06 +0000 ROA not before: Tue 28 Oct 2025 00:00:06 +0000 ROA not after: Tue 02 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:59:77:85:32:8b:c1:42:b1:ea:dd:ad:e8:83:fb:f9:0b:32:f3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 28 00:00:06 2025 GMT Not After : Dec 2 23:59:59 2025 GMT Subject: serialNumber=fab372da62ab89a402d49c86773ee364661bd41b89fc7b3d834f1b926761ef90, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:87:f6:a0:97:ed:2a:3f:01:b9:b1:db:26: 37:8f:10:fd:2f:f6:36:11:cd:ec:5d:ab:9a:8c:d2: f8:33:be:d2:26:63:14:d6:34:da:3c:61:a4:2a:e9: 76:16:6e:b7:59:20:b7:f1:3c:5c:5d:ac:d1:90:d4: 56:67:65:a2:10:39:8c:95:08:f5:7d:cf:5d:07:9b: 54:1e:b8:04:29:1f:bd:3a:d3:25:f6:bc:e3:26:8c: 3e:9e:56:45:31:ee:e4:0c:75:68:c0:9e:ae:70:16: 46:fb:8d:29:87:de:19:40:c3:95:5a:b6:05:fc:60: e3:d9:42:c2:a8:4b:43:ba:ed:ac:40:8a:9d:f9:19: f7:93:a8:cd:95:42:b9:7f:43:9d:7f:00:9b:d1:2c: 4d:f4:d5:9e:76:7e:5d:70:aa:29:04:73:31:13:75: d1:35:45:08:6d:47:81:ef:b9:9c:56:be:e5:77:22: 7e:b9:cf:1a:a9:1d:b2:c9:b4:4f:0b:ee:db:21:a3: 9d:3d:d9:bf:52:d3:1c:73:1c:f8:39:09:fa:25:34: fb:8c:30:1d:be:3f:f6:fd:52:c3:11:02:51:e3:af: 85:f7:15:6a:dd:5b:98:cd:12:86:5a:e9:7d:f3:37: b1:f9:25:9f:b4:df:c4:9a:28:97:93:88:ac:a8:5c: 4c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2E:38:75:7E:E5:15:B4:67:A8:D0:84:3E:E1:4D:6E:39:62:A1:C8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/498f6dc3-db03-415e-b534-d74ca6f01901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:2000::/40 Signature Algorithm: sha256WithRSAEncryption af:69:ce:36:74:e2:2d:7e:10:fe:1d:e4:43:57:2d:3e:a1:82: a0:4d:69:12:72:50:38:74:82:9c:4c:41:d7:61:71:03:cc:08: 2c:72:26:99:de:d7:35:3d:02:b7:9d:d3:0d:f1:0a:72:f7:e0: ee:f3:56:fc:71:ef:62:95:34:30:e5:fa:29:c2:86:33:89:60: 80:7d:40:b8:c9:fd:98:df:3a:e9:f2:ba:76:2b:2c:35:b8:b8: cd:b7:b6:54:9e:c3:57:45:5c:0b:6a:5d:52:8d:a0:71:72:88: be:b6:2b:8d:01:9b:14:e4:0d:57:ac:dd:5e:21:69:6e:10:16: 4c:c8:d6:aa:68:ce:90:a4:ac:a7:5b:90:60:88:af:9e:de:6f: 16:1f:73:4b:37:64:7d:41:77:66:4a:50:43:4d:43:6f:6f:08: 3a:83:6a:ea:55:91:56:77:3a:c1:79:6a:59:58:c1:6b:3f:d8: 1f:8f:42:64:4f:51:81:cc:ac:2e:19:69:51:5f:cc:8a:81:a7: 9b:b2:86:c6:85:27:26:cc:7f:f4:99:63:a2:a9:3b:a9:97:db: ab:94:1e:80:e3:c5:b1:15:60:6d:39:70:21:1e:98:e2:3c:44: ed:4a:89:60:3d:91:8a:38:fb:fa:f3:27:e9:f0:2f:49:0d:78: 62:e6:ab:37 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHll3hTKLwUKx6t2t6IP7+Qsy81AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyODAwMDAwNloX DTI1MTIwMjIzNTk1OVowejFJMEcGA1UEBRNAZmFiMzcyZGE2MmFiODlhNDAyZDQ5 Yzg2NzczZWUzNjQ2NjFiZDQxYjg5ZmM3YjNkODM0ZjFiOTI2NzYxZWY5MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumKH9qCX7So/Abmx2yY3jxD9L/Y2 Ec3sXauajNL4M77SJmMU1jTaPGGkKul2Fm63WSC38TxcXazRkNRWZ2WiEDmMlQj1 fc9dB5tUHrgEKR+9OtMl9rzjJow+nlZFMe7kDHVowJ6ucBZG+40ph94ZQMOVWrYF /GDj2ULCqEtDuu2sQIqd+Rn3k6jNlUK5f0OdfwCb0SxN9NWedn5dcKopBHMxE3XR NUUIbUeB77mcVr7ldyJ+uc8aqR2yybRPC+7bIaOdPdm/UtMccxz4OQn6JTT7jDAd vj/2/VLDEQJR46+F9xVq3VuYzRKGWul98zex+SWftN/EmiiXk4isqFxMOQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCcuOHV+5RW0Z6jQhD7hTW45YqHIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ5OGY2ZGMzLWRiMDMtNDE1ZS1iNTM0LWQ3NGNhNmYwMTkwMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMiAwDQYJKoZIhvcNAQELBQADggEBAK9pzjZ04i1+EP4d5ENX LT6hgqBNaRJyUDh0gpxMQddhcQPMCCxyJpne1zU9Ared0w3xCnL34O7zVvxx72KV NDDl+inChjOJYIB9QLjJ/ZjfOunyunYrLDW4uM23tlSew1dFXAtqXVKNoHFyiL62 K40BmxTkDVes3V4haW4QFkzI1qpozpCkrKdbkGCIr57ebxYfc0s3ZH1Bd2ZKUENN Q29vCDqDaupVkVZ3OsF5allYwWs/2B+PQmRPUYHMrC4ZaVFfzIqBp5uyhsaFJybM f/SZY6KpO6mX26uUHoDjxbEVYG05cCEemOI8RO1KiWA9kYo4+/rzJ+nwL0kNeGLm qzc= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:45 2025 by rpki-client