$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/69a3a15e-217b-47dc-aafb-8e9dde29170d.roa File: 69a3a15e-217b-47dc-aafb-8e9dde29170d.roa (raw, json) Hash identifier: 4Nba6cqrs3IkfAQMQbUxj2aZBRTJWikKaWhAIxxneAU= Subject key identifier: 89:61:F5:EB:7B:E5:4D:43:63:D1:B5:0E:14:A0:61:2E:6D:64:C2:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42D334ED6C6B198F5E6AF2E62381CD23801691E2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/69a3a15e-217b-47dc-aafb-8e9dde29170d.roa Signing time: Fri 31 Oct 2025 00:00:23 +0000 ROA not before: Fri 31 Oct 2025 00:00:23 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d3:34:ed:6c:6b:19:8f:5e:6a:f2:e6:23:81:cd:23:80:16:91:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 31 00:00:23 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=f556edacd367204026545a2d63b7a524e9d5954f3dd8558acaa4788a04bf49e7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:31:ff:d9:c2:f5:ca:c8:8c:1f:04:3d:24: 19:2e:bc:c1:58:a3:47:8d:3d:cd:48:91:69:ee:97: 08:25:52:c8:37:af:5d:17:5f:fe:d8:a7:b2:92:58: dd:a6:65:fe:8b:07:4a:83:8d:6c:b2:97:be:b5:18: a8:31:72:5f:2d:dd:19:56:76:ba:1c:29:27:7d:6b: 72:99:65:3e:8b:d7:b4:54:4c:fc:d6:2e:71:65:82: dc:e6:c9:df:02:bb:33:01:9d:e4:ad:61:9b:9a:53: dd:fe:f0:06:b9:7c:97:be:ae:ab:1d:15:c2:64:00: 97:91:67:a8:03:51:32:3c:57:c1:64:e7:80:7f:3c: 66:f5:aa:51:9d:50:a4:22:33:45:05:6f:dd:07:14: 14:a5:8d:2a:0b:ec:69:51:f8:3e:a4:bb:cc:f8:f3: f0:a9:35:b8:b5:2e:79:e5:59:57:81:9a:e4:e8:f7: 8a:20:03:4d:9b:59:f2:80:0e:e3:75:7b:ca:86:c9: 49:62:5b:8c:98:e4:4c:f3:47:c6:0d:4f:26:6b:c4: 99:2e:be:d9:03:dc:11:66:cf:6e:fc:11:b0:6a:7c: c2:e1:0a:53:c0:27:b8:a8:46:45:0b:79:c9:bb:a2: d4:8d:48:68:b6:28:3a:2c:bf:82:e7:da:50:a4:76: a8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:61:F5:EB:7B:E5:4D:43:63:D1:B5:0E:14:A0:61:2E:6D:64:C2:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/69a3a15e-217b-47dc-aafb-8e9dde29170d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:8000::/40 Signature Algorithm: sha256WithRSAEncryption 2f:1a:02:e1:06:89:23:54:5d:cc:35:63:8c:4f:3c:56:0e:2f: b5:d8:c2:b9:0f:9d:9f:f9:b1:47:56:5f:00:0b:90:5c:e1:ac: e7:b7:80:ae:46:a9:f0:44:b8:31:86:69:a5:37:81:b8:d6:02: b9:c7:c2:0f:45:38:63:19:e2:01:a1:fc:41:90:f2:61:dd:af: e6:f1:ee:08:91:a5:e4:e0:77:2e:9a:ab:a4:18:9c:85:a9:0e: 3e:d6:66:d1:cb:4a:72:51:be:1c:31:0f:7d:9c:55:43:d5:09: 34:2c:fc:af:06:d1:7f:b3:14:77:6c:4a:ab:3a:57:2d:dd:e5: 37:ad:30:45:1a:b9:81:e6:31:35:d8:9e:60:f3:40:00:8e:57: 39:cd:30:10:5d:43:aa:cd:12:75:14:cd:40:a0:ca:12:94:a5: 29:fa:13:a2:b6:45:55:26:5f:f3:81:4b:a9:19:fd:60:ac:ab: 82:5b:c5:9f:6a:5d:c8:1d:b9:e1:22:59:ff:3e:2d:58:32:5a: 05:19:ad:16:49:5d:74:b4:0b:82:9d:d4:d6:67:6a:a3:95:74: 2a:7d:62:4f:fc:3d:57:49:a1:8a:c8:3b:0d:6c:9f:0d:7a:39: cb:af:4d:d4:a0:fd:0b:e5:40:9f:6e:e7:a5:62:ad:ef:f7:2b: 74:53:be:64 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQtM07WxrGY9eavLmI4HNI4AWkeIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAzMTAwMDAyM1oX DTI1MTIwNTIzNTk1OVowejFJMEcGA1UEBRNAZjU1NmVkYWNkMzY3MjA0MDI2NTQ1 YTJkNjNiN2E1MjRlOWQ1OTU0ZjNkZDg1NThhY2FhNDc4OGEwNGJmNDllNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqUx/9nC9crIjB8EPSQZLrzBWKNH jT3NSJFp7pcIJVLIN69dF1/+2KeykljdpmX+iwdKg41sspe+tRioMXJfLd0ZVna6 HCknfWtymWU+i9e0VEz81i5xZYLc5snfArszAZ3krWGbmlPd/vAGuXyXvq6rHRXC ZACXkWeoA1EyPFfBZOeAfzxm9apRnVCkIjNFBW/dBxQUpY0qC+xpUfg+pLvM+PPw qTW4tS555VlXgZrk6PeKIANNm1nygA7jdXvKhslJYluMmORM80fGDU8ma8SZLr7Z A9wRZs9u/BGwanzC4QpTwCe4qEZFC3nJu6LUjUhotig6LL+C59pQpHaozQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIlh9et75U1DY9G1DhSgYS5tZMLgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY5YTNhMTVlLTIxN2ItNDdkYy1hYWZiLThlOWRkZTI5MTcwZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9YAwDQYJKoZIhvcNAQELBQADggEBAC8aAuEGiSNUXcw1Y4xP PFYOL7XYwrkPnZ/5sUdWXwALkFzhrOe3gK5GqfBEuDGGaaU3gbjWArnHwg9FOGMZ 4gGh/EGQ8mHdr+bx7giRpeTgdy6aq6QYnIWpDj7WZtHLSnJRvhwxD32cVUPVCTQs /K8G0X+zFHdsSqs6Vy3d5TetMEUauYHmMTXYnmDzQACOVznNMBBdQ6rNEnUUzUCg yhKUpSn6E6K2RVUmX/OBS6kZ/WCsq4JbxZ9qXcgdueEiWf8+LVgyWgUZrRZJXXS0 C4Kd1NZnaqOVdCp9Yk/8PVdJoYrIOw1snw16OcuvTdSg/QvlQJ9u56Vire/3K3RT vmQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:31:42 2025 by rpki-client