$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/64f65495-d8de-4492-a38d-c668479818e2.roa File: 64f65495-d8de-4492-a38d-c668479818e2.roa (raw, json) Hash identifier: 49f6wgnXN9FmCnNxpTaqCHiZXs4Zd8WQ13WKrttePfY= Subject key identifier: 0A:5C:1C:A1:A5:68:D6:CD:D6:97:E8:E5:83:14:61:D8:E2:A0:5E:C5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 02973799D0D93FFA1493CB33634FBF3C8EAF4D66 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/64f65495-d8de-4492-a38d-c668479818e2.roa Signing time: Tue 21 Oct 2025 00:00:09 +0000 ROA not before: Tue 21 Oct 2025 00:00:09 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:97:37:99:d0:d9:3f:fa:14:93:cb:33:63:4f:bf:3c:8e:af:4d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 21 00:00:09 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=1e1d12cf53279bc5b529ec2f1dda62d5030b4ee08dd07d1eec0b932ac86072b2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:03:0e:66:06:4f:7a:6f:c7:d9:b6:d7:b4: 8d:b9:b3:a5:f8:fd:53:35:b2:11:f7:89:07:d2:56: 78:32:f7:ca:24:34:62:60:03:e3:c6:cd:57:40:21: 2b:45:3d:b5:9b:fc:7c:0b:e8:a6:f0:ba:9b:62:72: 9b:9b:3b:53:c3:26:e6:0b:3b:73:a9:94:e6:73:64: a3:d2:17:99:26:74:97:77:2f:5d:ae:01:21:19:10: 51:6e:41:a1:2f:9c:da:3f:ba:e2:a3:76:28:a8:68: 00:4c:4b:28:94:26:af:6e:d0:a7:d8:88:33:7b:68: da:e4:15:d5:c0:92:c2:6f:0f:25:b1:37:52:c6:c5: 0c:49:36:75:a1:3d:a6:25:51:c1:a5:af:ae:20:93: 50:b2:61:56:b7:b5:8b:db:6a:78:0c:38:3a:fa:14: 05:32:71:79:7c:ea:0d:e8:28:d6:64:1a:d3:2b:bf: c0:63:f4:66:c1:03:a9:29:c5:76:a1:f0:a9:ed:5f: 7e:81:65:57:1c:b1:85:e4:e6:d9:7a:83:d3:b8:4c: 58:fa:29:b0:bb:57:31:7f:a8:57:62:b7:a5:00:16: 16:eb:18:0d:e7:5e:8e:85:39:df:86:b5:42:6a:3b: 7f:a5:a7:4a:51:0a:45:24:2f:7a:5f:fa:38:1f:25: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5C:1C:A1:A5:68:D6:CD:D6:97:E8:E5:83:14:61:D8:E2:A0:5E:C5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/64f65495-d8de-4492-a38d-c668479818e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:800::/40 Signature Algorithm: sha256WithRSAEncryption b3:2a:e2:0e:b6:b1:dc:97:95:10:47:4f:92:e1:70:69:ac:0f: 0e:eb:fd:d7:a6:61:3c:61:ed:59:93:72:ec:f8:d6:37:dd:5a: cd:44:ea:09:c2:6d:02:be:68:e3:8c:2a:cb:cd:93:42:cf:04: c3:a8:2b:ad:eb:bb:6b:a6:48:35:c0:46:2b:09:27:75:80:25: 0c:49:a5:64:cd:90:56:62:80:53:fb:11:73:a8:17:67:f2:6a: 29:3b:66:2c:9a:0b:1e:e1:f4:29:0b:60:18:19:6e:17:12:c1: fd:bb:18:71:c0:7f:01:85:a0:2c:45:2b:75:8d:e6:a0:3f:7c: 85:f5:18:01:8c:a4:cc:09:e1:a4:bd:75:33:c2:37:cf:31:45: 0d:cf:4a:d3:81:0b:51:b3:39:54:02:7c:38:12:23:ef:c6:cd: f7:de:69:56:1d:cc:f4:0b:45:7f:b1:c5:16:82:c3:59:4c:c8: 01:a8:cb:0b:5a:49:17:49:10:85:c5:44:34:7c:6a:b2:bb:a5: 2b:5c:ee:b1:ec:40:88:3a:58:f6:27:55:77:cf:5c:e6:03:c1: f9:29:f0:1c:de:84:70:7c:ab:dc:3b:b8:69:6d:61:9a:c6:66: bf:4b:0e:7b:10:44:85:f2:04:0d:b7:b7:4e:0c:7b:5a:02:7d: 55:9c:7f:46 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUApc3mdDZP/oUk8szY0+/PI6vTWYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyMTAwMDAwOVoX DTI1MTEyNTIzNTk1OVowejFJMEcGA1UEBRNAMWUxZDEyY2Y1MzI3OWJjNWI1Mjll YzJmMWRkYTYyZDUwMzBiNGVlMDhkZDA3ZDFlZWMwYjkzMmFjODYwNzJiMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDoDDmYGT3pvx9m217SNubOl+P1T NbIR94kH0lZ4MvfKJDRiYAPjxs1XQCErRT21m/x8C+im8LqbYnKbmztTwybmCztz qZTmc2Sj0heZJnSXdy9drgEhGRBRbkGhL5zaP7rio3YoqGgATEsolCavbtCn2Igz e2ja5BXVwJLCbw8lsTdSxsUMSTZ1oT2mJVHBpa+uIJNQsmFWt7WL22p4DDg6+hQF MnF5fOoN6CjWZBrTK7/AY/RmwQOpKcV2ofCp7V9+gWVXHLGF5ObZeoPTuExY+imw u1cxf6hXYrelABYW6xgN516OhTnfhrVCajt/padKUQpFJC96X/o4HyU4dwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFApcHKGlaNbN1pfo5YMUYdjioF7FMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY0ZjY1NDk1LWQ4ZGUtNDQ5Mi1hMzhkLWM2Njg0Nzk4MThlMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7wgwDQYJKoZIhvcNAQELBQADggEBALMq4g62sdyXlRBHT5Lh cGmsDw7r/demYTxh7VmTcuz41jfdWs1E6gnCbQK+aOOMKsvNk0LPBMOoK63ru2um SDXARisJJ3WAJQxJpWTNkFZigFP7EXOoF2fyaik7ZiyaCx7h9CkLYBgZbhcSwf27 GHHAfwGFoCxFK3WN5qA/fIX1GAGMpMwJ4aS9dTPCN88xRQ3PStOBC1GzOVQCfDgS I+/GzffeaVYdzPQLRX+xxRaCw1lMyAGoywtaSRdJEIXFRDR8arK7pStc7rHsQIg6 WPYnVXfPXOYDwfkp8BzehHB8q9w7uGltYZrGZr9LDnsQRIXyBA23t04Me1oCfVWc f0Y= -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:27 2025 by rpki-client