$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/549a592b-dfbb-47ce-8c8a-e76e41c4ff18.roa File: 549a592b-dfbb-47ce-8c8a-e76e41c4ff18.roa (raw, json) Hash identifier: PlLvMrkMpBUURt//ajRBWU6LLk3W8xyaYRb5ZJ1WTIQ= Subject key identifier: 46:1C:00:3A:B4:0F:8A:8B:5A:60:7D:55:6E:C8:2B:BF:DB:BD:C1:8B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4BA50DD02248F8989AC01DBFDF1555509403FF30 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/549a592b-dfbb-47ce-8c8a-e76e41c4ff18.roa Signing time: Sun 02 Nov 2025 00:00:40 +0000 ROA not before: Sun 02 Nov 2025 00:00:40 +0000 ROA not after: Sun 07 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a5:0d:d0:22:48:f8:98:9a:c0:1d:bf:df:15:55:50:94:03:ff:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 2 00:00:40 2025 GMT Not After : Dec 7 23:59:59 2025 GMT Subject: serialNumber=5a318f9e2065313bb4a41980b132599e8dacb620d23d24ae4aed3a62f63ef705, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:9a:2d:00:1b:d4:a6:16:03:95:50:45:6c: c7:86:c7:18:47:86:92:7f:08:c7:88:3d:d0:21:ad: b4:2b:1b:80:ec:c7:9e:ec:93:e4:c2:13:52:c7:c8: 97:65:b9:09:00:e3:4d:8e:94:92:0c:e1:46:43:71: 24:d6:2b:62:9c:0c:2e:2c:c5:4b:e8:1c:77:45:d3: 52:c1:18:bc:20:b0:7b:38:57:eb:f6:0e:ef:64:77: 28:49:d0:a5:98:ac:80:ba:8f:63:b5:4b:43:46:28: a3:9c:8f:a3:6e:6f:ba:02:87:62:d0:e5:f4:90:e2: b2:56:7a:42:11:8b:41:48:a1:3a:0d:3a:5c:41:17: d2:f5:9e:1c:7b:cd:8c:28:c3:75:be:89:59:bf:77: 74:dc:8e:87:b9:e9:2b:03:66:06:55:24:50:8b:bc: 89:18:01:72:be:7f:b2:08:c3:14:39:0f:86:db:3d: 38:cd:e1:da:f8:84:23:3e:42:b3:cc:e9:4c:2a:27: 6d:f4:95:4f:e8:f5:ec:3f:ec:4b:bc:a3:27:ea:f0: 83:7a:2f:ef:2e:22:b9:86:d4:32:eb:51:e8:35:b5: 00:4e:8b:6c:01:c2:22:03:5f:7d:ad:61:23:a7:7f: 9d:87:5e:30:1d:cf:f2:79:08:ab:58:ca:ad:3a:5e: b0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1C:00:3A:B4:0F:8A:8B:5A:60:7D:55:6E:C8:2B:BF:DB:BD:C1:8B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/549a592b-dfbb-47ce-8c8a-e76e41c4ff18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:e000::/40 Signature Algorithm: sha256WithRSAEncryption b0:ce:68:c3:54:2f:bb:df:c9:91:b3:58:65:a7:fc:04:ae:15: 85:c9:10:a1:d7:d0:4c:53:a4:2d:7d:18:52:bf:73:60:db:d5: a7:72:66:65:25:dc:63:8b:c8:bb:79:67:9a:4e:a4:c2:f7:72: 35:ba:e6:63:0c:3c:3b:4c:ae:ce:6c:4e:23:ad:fc:b0:83:ad: f5:12:45:0f:5b:11:d0:7e:1c:b5:3c:e6:a3:d6:3e:71:0c:af: 1b:5c:1b:94:4b:e7:3a:45:ad:ae:2b:43:48:02:c1:72:c1:04: f0:cd:ad:a2:af:de:50:cf:64:a4:e3:32:be:77:4f:f3:b7:33: 3d:60:c3:df:49:51:37:dd:ea:fa:96:5d:33:7b:c6:75:2a:0a: 6c:0d:99:b6:8e:00:64:f4:42:6b:e4:a2:db:e3:d9:0f:f0:eb: ce:de:da:9f:6d:d1:4e:0a:53:8b:78:23:ae:ba:1b:3c:3e:85: ce:5c:19:28:9d:fd:a5:00:f3:96:fc:77:42:ec:61:89:c0:6a: 2e:13:82:11:ed:0c:86:7d:5d:d4:49:a4:8c:35:00:ad:3a:e8: fe:94:c9:01:d8:46:b1:49:f1:a9:4a:d6:84:b9:b6:3e:ef:5b: d5:60:76:ea:15:13:fb:26:02:d5:cf:e5:8e:7c:37:4a:e5:e9: 11:0f:df:2e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUS6UN0CJI+JiawB2/3xVVUJQD/zAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwMjAwMDA0MFoX DTI1MTIwNzIzNTk1OVowejFJMEcGA1UEBRNANWEzMThmOWUyMDY1MzEzYmI0YTQx OTgwYjEzMjU5OWU4ZGFjYjYyMGQyM2QyNGFlNGFlZDNhNjJmNjNlZjcwNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj6aLQAb1KYWA5VQRWzHhscYR4aS fwjHiD3QIa20KxuA7Mee7JPkwhNSx8iXZbkJAONNjpSSDOFGQ3Ek1itinAwuLMVL 6Bx3RdNSwRi8ILB7OFfr9g7vZHcoSdClmKyAuo9jtUtDRiijnI+jbm+6Aodi0OX0 kOKyVnpCEYtBSKE6DTpcQRfS9Z4ce82MKMN1volZv3d03I6HuekrA2YGVSRQi7yJ GAFyvn+yCMMUOQ+G2z04zeHa+IQjPkKzzOlMKidt9JVP6PXsP+xLvKMn6vCDei/v LiK5htQy61HoNbUATotsAcIiA199rWEjp3+dh14wHc/yeQirWMqtOl6wfwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEYcADq0D4qLWmB9VW7IK7/bvcGLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0OWE1OTJiLWRmYmItNDdjZS04YzhhLWU3NmU0MWM0ZmYxOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYOAwDQYJKoZIhvcNAQELBQADggEBALDOaMNUL7vfyZGzWGWn /ASuFYXJEKHX0ExTpC19GFK/c2Db1adyZmUl3GOLyLt5Z5pOpML3cjW65mMMPDtM rs5sTiOt/LCDrfUSRQ9bEdB+HLU85qPWPnEMrxtcG5RL5zpFra4rQ0gCwXLBBPDN raKv3lDPZKTjMr53T/O3Mz1gw99JUTfd6vqWXTN7xnUqCmwNmbaOAGT0Qmvkotvj 2Q/w687e2p9t0U4KU4t4I666Gzw+hc5cGSid/aUA85b8d0LsYYnAai4TghHtDIZ9 XdRJpIw1AK066P6UyQHYRrFJ8alK1oS5tj7vW9VgduoVE/smAtXP5Y58N0rl6REP 3y4= -----END CERTIFICATE-----Generated at Wed Nov 5 09:51:25 2025 by rpki-client