$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5de23e6b-f89f-4fb1-9780-ceb677a541e6.roa File: 5de23e6b-f89f-4fb1-9780-ceb677a541e6.roa (raw, json) Hash identifier: sL6bXtqc37LYhilncWX2dVK6eYJ745Hjf/NLjSWo+c0= Subject key identifier: 87:7D:36:5E:1C:2F:DD:25:14:C0:AC:A5:F7:DB:DA:87:61:3E:BB:D4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 50B4705F40504C1636FC08F8FDFC232641F568D8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5de23e6b-f89f-4fb1-9780-ceb677a541e6.roa Signing time: Wed 29 Oct 2025 07:37:53 +0000 ROA not before: Wed 29 Oct 2025 07:37:53 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b4:70:5f:40:50:4c:16:36:fc:08:f8:fd:fc:23:26:41:f5:68:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 07:37:53 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=cd01e4c45e2dcce50fa1ad733587c7ed799eb30159c7082f83b24a3da37a3bcf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:90:11:75:23:a9:f2:e8:a1:1e:61:b7:26:23: cb:ff:bb:80:0b:f5:79:d8:32:e4:16:55:de:b1:9e: 8d:d7:b8:7f:46:ce:39:31:11:c4:51:c7:1a:7f:ea: 84:27:b3:38:05:60:ac:d1:eb:0f:b4:c7:b8:a4:23: c3:07:d2:72:7d:ad:16:9f:ee:35:57:96:f6:a7:80: d4:79:95:51:98:be:1a:e1:77:e1:55:8e:a3:de:6a: 49:9a:81:58:46:86:7e:06:e3:07:5b:fa:56:89:85: 9b:8a:2b:c4:d5:00:f4:0b:de:d9:7e:40:a2:48:b8: cd:c9:08:1e:e0:1d:bf:9c:61:f4:86:9e:77:a0:89: 64:b3:08:b4:40:d4:45:33:2d:3b:7f:7f:15:7f:4d: 2a:c7:52:bd:de:77:c7:db:e9:7e:87:3e:5d:e8:54: 79:00:01:16:4b:7e:cb:a6:1e:f0:85:ae:dd:5c:1e: a1:fd:92:0c:23:72:46:4e:3e:99:1f:f0:e7:17:ee: 12:1f:20:ed:db:b0:67:e3:79:a1:76:bb:95:49:b0: 04:5a:93:ca:d7:47:26:0e:55:dd:e7:82:68:5e:a1: e2:3a:d1:eb:8c:9f:be:68:9f:c7:b8:83:d7:94:3e: 99:a2:1b:c6:a9:c1:47:27:4c:3b:25:51:9c:d6:ce: c5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7D:36:5E:1C:2F:DD:25:14:C0:AC:A5:F7:DB:DA:87:61:3E:BB:D4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5de23e6b-f89f-4fb1-9780-ceb677a541e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 18:23:54:98:ad:21:da:92:e0:1e:48:71:9b:85:20:31:4f:82: eb:1d:d3:f3:f1:ef:05:c5:3c:34:44:8f:d9:55:c1:fa:87:57: 59:9e:8b:cf:2f:13:1d:f5:af:74:68:5a:a0:47:56:28:9a:17: 53:6b:11:6b:28:6f:c7:ab:40:ef:16:6d:75:28:3e:40:98:1f: cf:05:55:ae:34:34:5e:91:22:c1:c8:5b:bb:02:5f:2f:6f:d2: 1b:54:49:6d:f1:a8:32:28:d5:6d:7f:88:75:19:4d:11:11:04: 3a:b9:2a:a9:45:a5:ca:b4:64:71:0f:68:80:3f:84:74:12:ed: 8d:88:b6:03:bc:94:f9:db:a1:20:33:73:e7:10:82:19:e2:a0: 7b:41:77:1c:08:4f:6d:7f:9a:36:64:de:62:2d:6d:da:b5:26: 93:9a:44:8f:19:54:22:e5:5b:51:1d:5d:29:87:54:8e:89:88: 72:23:0f:8e:02:9b:70:c2:4f:a0:76:64:90:d9:af:34:f5:43: 67:26:2f:3f:f3:51:ee:97:bf:7e:fd:6e:79:71:33:62:e0:9c: 87:c8:66:bf:4e:e4:49:23:35:59:bd:42:37:49:16:2c:37:1c: 1f:ec:40:89:82:09:e3:df:47:07:43:cc:1b:3c:27:15:36:f6: 26:f1:80:62 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUULRwX0BQTBY2/Aj4/fwjJkH1aNgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTA3Mzc1M1oX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAY2QwMWU0YzQ1ZTJkY2NlNTBmYTFh ZDczMzU4N2M3ZWQ3OTllYjMwMTU5YzcwODJmODNiMjRhM2RhMzdhM2JjZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpARdSOp8uihHmG3JiPL/7uAC/V5 2DLkFlXesZ6N17h/Rs45MRHEUccaf+qEJ7M4BWCs0esPtMe4pCPDB9Jyfa0Wn+41 V5b2p4DUeZVRmL4a4XfhVY6j3mpJmoFYRoZ+BuMHW/pWiYWbiivE1QD0C97ZfkCi SLjNyQge4B2/nGH0hp53oIlkswi0QNRFMy07f38Vf00qx1K93nfH2+l+hz5d6FR5 AAEWS37Lph7wha7dXB6h/ZIMI3JGTj6ZH/DnF+4SHyDt27Bn43mhdruVSbAEWpPK 10cmDlXd54JoXqHiOtHrjJ++aJ/HuIPXlD6ZohvGqcFHJ0w7JVGc1s7FyQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFId9Nl4cL90lFMCspffb2odhPrvUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVkZTIzZTZiLWY4OWYtNGZiMS05NzgwLWNlYjY3N2E1NDFlNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6hDAMA0GCSqGSIb3DQEBCwUAA4IBAQAYI1SYrSHakuAeSHGb hSAxT4LrHdPz8e8FxTw0RI/ZVcH6h1dZnovPLxMd9a90aFqgR1YomhdTaxFrKG/H q0DvFm11KD5AmB/PBVWuNDRekSLByFu7Al8vb9IbVElt8agyKNVtf4h1GU0REQQ6 uSqpRaXKtGRxD2iAP4R0Eu2NiLYDvJT526EgM3PnEIIZ4qB7QXccCE9tf5o2ZN5i LW3atSaTmkSPGVQi5VtRHV0ph1SOiYhyIw+OAptwwk+gdmSQ2a809UNnJi8/81Hu l79+/W55cTNi4JyHyGa/TuRJIzVZvUI3SRYsNxwf7ECJggnj30cHQ8wbPCcVNvYm 8YBi -----END CERTIFICATE-----Generated at Wed Nov 5 09:28:18 2025 by rpki-client