$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5561a100-f53b-41ce-811d-3f370c91a3c3.roa File: 5561a100-f53b-41ce-811d-3f370c91a3c3.roa (raw, json) Hash identifier: lw849VKP1j17+/GxpcyLJKuJ0aL/DrjuwR5BDuwjtqE= Subject key identifier: 2F:9F:E7:31:81:FE:8C:D6:8A:86:6F:D5:D0:09:8A:31:5C:65:36:16 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7D4C43E084B016F4CE634F325C2BCB42D4616980 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5561a100-f53b-41ce-811d-3f370c91a3c3.roa Signing time: Wed 29 Oct 2025 07:39:02 +0000 ROA not before: Wed 29 Oct 2025 07:39:02 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4c:43:e0:84:b0:16:f4:ce:63:4f:32:5c:2b:cb:42:d4:61:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 07:39:02 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=1e9cf39735a292809f890b22fe7ca450983dd129297e72dcb703fd9e6a8f48c7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:38:66:85:b5:ca:95:fa:f3:d9:29:3f:aa:50: de:1e:58:e8:0b:3c:f6:3f:04:7e:44:89:6e:3d:61: a3:82:d1:92:6e:24:ce:ef:1e:97:21:07:44:70:74: ad:af:da:07:f2:7e:2a:6b:c4:c4:0d:11:3f:12:c9: 11:1a:85:6b:8d:fe:bf:f1:b7:4a:04:3c:31:29:fa: 7b:16:a0:bd:a1:6d:71:8f:7c:ac:58:6e:15:67:f6: 4d:74:10:d9:b2:75:da:0e:77:7a:49:ea:ae:57:6a: ef:43:48:93:a6:31:9c:4d:9d:82:1f:b1:3b:cf:ab: e3:54:48:4a:bb:52:37:c7:bf:cc:42:57:14:c3:dc: c1:e4:cd:b7:4a:8d:61:d4:7f:5e:d0:41:8e:28:93: f7:5d:69:31:4a:38:b8:fc:bc:cf:e0:bd:97:4f:26: fd:dc:2c:2f:3a:ff:64:2b:98:b3:06:69:37:b2:3f: aa:04:b7:a2:b2:21:34:de:ff:bd:93:5b:6e:d7:29: d9:ad:f5:ba:11:d2:12:1b:03:d5:a9:55:fe:ab:43: f4:fc:99:5a:73:93:c7:0f:b2:b0:7f:1e:9b:76:04: 9b:e1:e5:8c:ef:0c:bc:9a:30:dc:f1:7d:4e:8c:c6: 78:52:86:f3:69:59:be:85:24:14:46:95:e4:f7:ed: 7b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9F:E7:31:81:FE:8C:D6:8A:86:6F:D5:D0:09:8A:31:5C:65:36:16 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5561a100-f53b-41ce-811d-3f370c91a3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 2f:ae:99:6a:d5:47:c8:ad:29:b7:c3:cc:76:50:d4:2f:f7:c4: b3:eb:85:97:c7:ee:f0:32:5c:f8:8e:e9:fa:96:f9:8e:0b:b6: 77:ab:fd:42:08:de:14:70:81:d5:63:6e:d4:d6:73:92:87:43: 37:2e:cf:88:14:eb:1d:45:79:b5:cf:7e:13:b7:e3:bc:09:1e: 24:a9:1a:80:57:2f:a7:2e:ab:48:99:6a:56:0f:19:2d:f4:4c: df:1d:f9:8d:b7:b7:0a:e8:37:65:20:d5:12:63:33:8c:1c:98: 40:c0:28:d0:e1:f0:af:12:96:45:92:4e:23:af:e2:a1:ae:d3: ed:97:34:d7:f3:03:48:4a:78:a9:cc:b5:e5:1b:b3:ea:c7:cc: 84:ce:c1:e6:7d:bf:ce:b3:4b:4b:d5:bf:24:8c:d8:8d:28:18: 92:b6:63:b7:50:10:93:46:b2:63:4e:48:1d:6d:b9:19:a1:37: 3b:8e:af:92:f4:6d:29:de:04:09:d3:96:1b:8e:7e:db:c8:50: 93:81:65:38:77:3a:45:8a:a2:bb:d4:87:80:8d:fc:44:e2:70: e1:e6:ec:00:ee:d9:0b:6d:f4:82:97:f7:cb:52:c7:7a:cf:b4: 00:e5:13:7f:0d:c6:5d:9e:48:66:5a:46:14:3d:29:d8:af:bc: ac:56:d3:ab -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfUxD4ISwFvTOY08yXCvLQtRhaYAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTA3MzkwMloX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAMWU5Y2YzOTczNWEyOTI4MDlmODkw YjIyZmU3Y2E0NTA5ODNkZDEyOTI5N2U3MmRjYjcwM2ZkOWU2YThmNDhjNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzhmhbXKlfrz2Sk/qlDeHljoCzz2 PwR+RIluPWGjgtGSbiTO7x6XIQdEcHStr9oH8n4qa8TEDRE/EskRGoVrjf6/8bdK BDwxKfp7FqC9oW1xj3ysWG4VZ/ZNdBDZsnXaDnd6SequV2rvQ0iTpjGcTZ2CH7E7 z6vjVEhKu1I3x7/MQlcUw9zB5M23So1h1H9e0EGOKJP3XWkxSji4/LzP4L2XTyb9 3CwvOv9kK5izBmk3sj+qBLeisiE03v+9k1tu1ynZrfW6EdISGwPVqVX+q0P0/Jla c5PHD7Kwfx6bdgSb4eWM7wy8mjDc8X1OjMZ4UobzaVm+hSQURpXk9+17xwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFC+f5zGB/ozWioZv1dAJijFcZTYWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU1NjFhMTAwLWY1M2ItNDFjZS04MTFkLTNmMzcwYzkxYTNjMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6gjAMA0GCSqGSIb3DQEBCwUAA4IBAQAvrplq1UfIrSm3w8x2 UNQv98Sz64WXx+7wMlz4jun6lvmOC7Z3q/1CCN4UcIHVY27U1nOSh0M3Ls+IFOsd RXm1z34Tt+O8CR4kqRqAVy+nLqtImWpWDxkt9EzfHfmNt7cK6DdlINUSYzOMHJhA wCjQ4fCvEpZFkk4jr+KhrtPtlzTX8wNISnipzLXlG7Pqx8yEzsHmfb/Os0tL1b8k jNiNKBiStmO3UBCTRrJjTkgdbbkZoTc7jq+S9G0p3gQJ05Ybjn7byFCTgWU4dzpF iqK71IeAjfxE4nDh5uwA7tkLbfSCl/fLUsd6z7QA5RN/DcZdnkhmWkYUPSnYr7ys VtOr -----END CERTIFICATE-----Generated at Wed Nov 5 12:49:13 2025 by rpki-client