$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa File: 4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa (raw, json) Hash identifier: NmAR3vo+vJxMUfre/XjgDwDSj9VguT8IdewlZBhegTU= Subject key identifier: 03:FB:1B:EF:32:8B:F4:CE:19:D5:33:C5:D8:9D:17:CF:8B:C4:44:CF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6382E61BBF7CDA90A8FE10D842ECD71FB523DD9B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa Signing time: Wed 29 Oct 2025 00:10:30 +0000 ROA not before: Wed 29 Oct 2025 00:10:30 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:a080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:82:e6:1b:bf:7c:da:90:a8:fe:10:d8:42:ec:d7:1f:b5:23:dd:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:10:30 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=cf505480c05d2516cb5e83660f62d6b636182e1d1aab54de31803f50630bc7dc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a6:f4:b5:cd:f3:4c:d8:34:62:44:f2:0e:4f: 8f:37:5c:dd:b3:49:96:cb:3a:da:04:53:76:93:93: 70:a4:1c:71:82:14:b4:a3:cf:f0:a2:61:8a:50:46: c8:00:57:88:a5:27:9c:74:17:be:eb:97:97:41:05: ff:34:2a:04:c0:3d:38:6e:84:a1:74:43:1d:24:f7: 51:a2:c0:d6:07:d4:fd:b9:cf:40:5e:10:21:dd:59: 00:76:5f:27:85:6c:8a:9f:c4:42:6a:5c:34:61:5b: 79:90:41:50:fa:cd:03:12:9b:47:ae:5d:e9:cc:63: 57:39:1c:3b:32:9a:f2:82:a2:8c:9b:83:61:39:a7: bf:85:38:47:83:19:8a:df:c1:b7:21:f0:e1:ba:94: cb:a1:9c:2e:01:27:ec:f8:06:c7:37:90:a9:85:8d: 3e:2e:ab:39:a1:be:1b:8c:de:4e:09:a0:37:ff:33: f2:a2:08:24:74:3f:25:36:f6:01:a8:3e:9c:dc:53: b8:57:83:7e:8c:ac:9b:cf:3b:20:03:3d:80:60:1f: 8d:65:e7:e9:e8:18:f5:1c:12:a2:7e:49:20:a2:fd: a6:9b:57:18:d3:1a:d7:9a:c0:dc:6a:4e:31:aa:23: 78:d0:39:a5:3e:8d:5c:d2:e1:db:28:73:00:77:7e: 51:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FB:1B:EF:32:8B:F4:CE:19:D5:33:C5:D8:9D:17:CF:8B:C4:44:CF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:a080::/46 Signature Algorithm: sha256WithRSAEncryption 41:01:13:d4:a2:45:ef:fa:25:0e:ab:67:6a:d5:24:3a:0d:e5: 3e:d9:f1:9f:3d:fc:9d:d8:17:5d:d0:0e:ac:75:d8:20:f5:a1: 8d:cb:3f:d9:e2:8d:7c:40:d3:3d:01:34:da:9e:6b:3e:2b:aa: ed:4d:23:32:5f:eb:29:71:32:cd:67:17:95:5a:7b:54:eb:bd: fd:7d:9e:d3:13:e1:f8:44:73:19:cd:23:03:43:4a:9a:6a:9c: 97:f9:c9:a2:5d:50:fa:ad:9d:dd:36:ee:7f:a0:37:f5:81:a2: 37:f4:48:f4:f6:f9:71:2f:f2:14:03:31:4c:34:52:01:67:af: ce:04:c4:25:ca:9b:9e:22:8a:5f:26:6a:7f:84:4f:4a:43:4b: 36:9c:4e:b6:f0:04:c6:48:64:c6:fa:ff:fd:bc:35:8b:f3:02: e1:e2:d4:d0:93:ec:69:b4:d3:d0:f3:fa:97:ed:47:f8:4d:6c: b2:c0:5b:19:3d:05:44:ef:00:ab:2d:16:a7:39:80:2e:3d:54: ad:15:e9:36:94:5b:ea:72:fd:60:ac:e3:75:d4:08:2a:1f:9e: ee:db:41:29:5a:2b:df:75:75:f2:9d:ca:b6:8f:e5:21:b0:49: de:41:b9:b3:b3:44:54:fa:ce:58:dc:bf:df:3d:71:f4:e3:34: 49:fd:29:7d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUY4LmG7982pCo/hDYQuzXH7Uj3ZswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTAwMTAzMFoX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAY2Y1MDU0ODBjMDVkMjUxNmNiNWU4 MzY2MGY2MmQ2YjYzNjE4MmUxZDFhYWI1NGRlMzE4MDNmNTA2MzBiYzdkYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArab0tc3zTNg0YkTyDk+PN1zds0mW yzraBFN2k5NwpBxxghS0o8/womGKUEbIAFeIpSecdBe+65eXQQX/NCoEwD04boSh dEMdJPdRosDWB9T9uc9AXhAh3VkAdl8nhWyKn8RCalw0YVt5kEFQ+s0DEptHrl3p zGNXORw7MprygqKMm4NhOae/hThHgxmK38G3IfDhupTLoZwuASfs+AbHN5CphY0+ Lqs5ob4bjN5OCaA3/zPyoggkdD8lNvYBqD6c3FO4V4N+jKybzzsgAz2AYB+NZefp 6Bj1HBKifkkgov2mm1cY0xrXmsDcak4xqiN40DmlPo1c0uHbKHMAd35RLwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAP7G+8yi/TOGdUzxdidF8+LxETPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRhZmNmYmNjLWE2ZDItNDJkNy1iZWU1LTNiMDhiZjYyYTg2MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba86CAMA0GCSqGSIb3DQEBCwUAA4IBAQBBARPUokXv+iUOq2dq 1SQ6DeU+2fGfPfyd2Bdd0A6sddgg9aGNyz/Z4o18QNM9ATTanms+K6rtTSMyX+sp cTLNZxeVWntU6739fZ7TE+H4RHMZzSMDQ0qaapyX+cmiXVD6rZ3dNu5/oDf1gaI3 9Ej09vlxL/IUAzFMNFIBZ6/OBMQlypueIopfJmp/hE9KQ0s2nE628ATGSGTG+v/9 vDWL8wLh4tTQk+xptNPQ8/qX7Uf4TWyywFsZPQVE7wCrLRanOYAuPVStFek2lFvq cv1grON11AgqH57u20EpWivfdXXyncq2j+UhsEneQbmzs0RU+s5Y3L/fPXH04zRJ /Sl9 -----END CERTIFICATE-----Generated at Wed Nov 5 19:43:01 2025 by rpki-client