$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5e7ad0b0-97f4-4102-b9b3-79840e3344da.roa File: 5e7ad0b0-97f4-4102-b9b3-79840e3344da.roa (raw, json) Hash identifier: jfcaW9kIFxcjbbEqO1/99guzu0muBDEed0X3e9zxLRs= Subject key identifier: F3:FC:1E:EE:4C:3D:51:0B:34:A5:68:47:05:F0:22:43:B0:B2:C4:0B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 27BEF273092819B68492F01658D7E4AC725704E7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5e7ad0b0-97f4-4102-b9b3-79840e3344da.roa Signing time: Wed 29 Oct 2025 00:00:53 +0000 ROA not before: Wed 29 Oct 2025 00:00:53 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:28c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:be:f2:73:09:28:19:b6:84:92:f0:16:58:d7:e4:ac:72:57:04:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:00:53 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=98b3fd5663ceb4fd7bcfb48d9129eca519e0b8d8a91953945eee38370950524e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:9f:e8:9b:82:02:9c:c8:28:ba:51:98:5d: a1:6e:4d:5d:a1:ea:01:a2:76:ec:e8:25:33:38:9c: d7:d0:b0:9c:95:6d:b4:a1:e9:91:38:b4:62:c2:81: 3c:d5:ee:0c:c2:54:fb:7f:a9:96:57:bf:c9:38:81: c5:16:c3:fc:26:69:83:a9:2a:1c:70:b7:94:86:0e: a4:2f:81:b5:75:72:b0:3a:e6:95:de:08:0c:ea:5a: 80:e0:3b:83:8a:e0:77:34:63:c9:46:51:71:59:8b: 3b:9b:34:af:92:e5:2a:14:c9:ec:d7:bf:b6:1b:1e: f7:d0:4d:c3:fe:d5:d1:ca:57:ea:1d:fc:b6:e1:68: d1:e8:8e:9d:e3:70:d5:ee:d5:f8:f9:83:58:f1:23: e7:b7:3d:3b:07:9b:a5:98:99:0b:04:a7:96:f6:72: 45:10:b9:3e:dd:46:44:03:34:3b:a3:b0:3f:4f:5e: 37:bd:3c:b5:1e:00:d9:54:74:5b:67:73:9b:5f:7f: 2c:5b:7c:75:ea:ec:69:d3:3a:38:a2:71:20:69:0b: 2c:a9:b5:e8:5a:b0:a3:ec:d7:86:16:35:0f:4f:1c: 96:7c:9d:9a:b0:77:d3:4d:d4:22:01:c6:db:61:ec: f4:03:16:3e:b2:27:86:a9:74:fb:c1:c8:90:e0:c7: 13:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FC:1E:EE:4C:3D:51:0B:34:A5:68:47:05:F0:22:43:B0:B2:C4:0B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5e7ad0b0-97f4-4102-b9b3-79840e3344da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:28c0::/46 Signature Algorithm: sha256WithRSAEncryption 23:e3:54:b7:02:32:d2:62:4a:4b:c7:bf:3d:e5:ce:41:91:ca: 8a:cd:5b:84:ea:5a:12:91:02:fb:08:18:14:38:6f:fa:a6:38: d3:65:7c:1c:f1:e0:62:1c:40:d6:e1:df:ad:1a:41:e5:cf:c2: 36:0b:67:da:ad:ac:b5:b2:1e:dd:8f:be:14:d5:aa:25:d3:d3: 00:65:d9:50:69:d4:7f:77:c4:78:88:1e:60:5e:57:06:89:af: 88:74:b9:c1:3f:d5:bf:12:fd:68:87:7c:97:b1:fc:f6:b9:e2: ef:13:4e:94:90:00:4f:02:aa:5f:a3:cc:80:6e:af:ac:b3:c5: cc:43:ea:eb:72:47:38:1b:d4:70:31:6a:c0:0b:a2:32:f4:f3: ec:f2:b0:ea:a8:f4:e9:e8:c3:58:4b:9c:8b:17:64:e6:c3:76: b6:93:02:77:dd:da:84:66:5c:47:e0:78:5c:02:dd:32:9f:00: 5c:19:29:83:e6:f0:49:70:8d:66:53:97:6e:81:06:54:38:24: 60:ab:5a:fb:d4:0c:e8:bb:17:03:d5:6b:b7:e7:ef:75:ae:0b: 47:fe:57:70:34:1c:18:09:ff:e2:f1:0e:50:ee:1c:a1:56:e9: 19:57:6c:e6:3d:73:24:25:26:42:ba:14:ac:0c:c2:2b:07:8e: a8:30:1b:7b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJ77ycwkoGbaEkvAWWNfkrHJXBOcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTAwMDA1M1oX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAOThiM2ZkNTY2M2NlYjRmZDdiY2Zi NDhkOTEyOWVjYTUxOWUwYjhkOGE5MTk1Mzk0NWVlZTM4MzcwOTUwNTI0ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUmf6JuCApzIKLpRmF2hbk1doeoB onbs6CUzOJzX0LCclW20oemROLRiwoE81e4MwlT7f6mWV7/JOIHFFsP8JmmDqSoc cLeUhg6kL4G1dXKwOuaV3ggM6lqA4DuDiuB3NGPJRlFxWYs7mzSvkuUqFMns17+2 Gx730E3D/tXRylfqHfy24WjR6I6d43DV7tX4+YNY8SPntz07B5ulmJkLBKeW9nJF ELk+3UZEAzQ7o7A/T143vTy1HgDZVHRbZ3ObX38sW3x16uxp0zo4onEgaQssqbXo WrCj7NeGFjUPTxyWfJ2asHfTTdQiAcbbYez0AxY+sieGqXT7wciQ4McT1QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPP8Hu5MPVELNKVoRwXwIkOwssQLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVlN2FkMGIwLTk3ZjQtNDEwMi1iOWIzLTc5ODQwZTMzNDRkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8yjAMA0GCSqGSIb3DQEBCwUAA4IBAQAj41S3AjLSYkpLx789 5c5BkcqKzVuE6loSkQL7CBgUOG/6pjjTZXwc8eBiHEDW4d+tGkHlz8I2C2faray1 sh7dj74U1aol09MAZdlQadR/d8R4iB5gXlcGia+IdLnBP9W/Ev1oh3yXsfz2ueLv E06UkABPAqpfo8yAbq+ss8XMQ+rrckc4G9RwMWrAC6Iy9PPs8rDqqPTp6MNYS5yL F2Tmw3a2kwJ33dqEZlxH4HhcAt0ynwBcGSmD5vBJcI1mU5dugQZUOCRgq1r71Azo uxcD1Wu35+91rgtH/ldwNBwYCf/i8Q5Q7hyhVukZV2zmPXMkJSZCuhSsDMIrB46o MBt7 -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:21 2025 by rpki-client