$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8b7cd613-3f52-4755-9c7b-f7e5f07b4ff6.roa File: 8b7cd613-3f52-4755-9c7b-f7e5f07b4ff6.roa (raw, json) Hash identifier: RObW8wejqLFifJAro5MBjWkqlX6BTYliOWS5FVky9QE= Subject key identifier: 87:DC:A6:0D:1D:AA:A9:B3:58:2F:FC:D3:45:B3:5A:62:6A:47:5D:31 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 51697827BD3F8807C9E351B046755810425BF8EE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8b7cd613-3f52-4755-9c7b-f7e5f07b4ff6.roa Signing time: Wed 29 Oct 2025 07:37:58 +0000 ROA not before: Wed 29 Oct 2025 07:37:58 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:4840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:69:78:27:bd:3f:88:07:c9:e3:51:b0:46:75:58:10:42:5b:f8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 07:37:58 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=48096a00b84df41c53eb0b8de4a5dec5628dcc1292609b648274b10b6658e134, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:99:cb:2b:9c:96:01:42:e7:5c:ea:d0:37: de:4c:f4:4c:a3:8d:03:4b:af:98:39:bd:44:2f:73: b9:a8:74:e7:49:d4:1f:d4:91:e7:ec:28:97:fa:c4: 7d:2c:50:56:28:da:8e:97:22:9b:cd:68:e3:1e:7e: 28:e3:86:61:a4:51:1b:71:70:28:47:5f:e8:e1:ae: 55:fc:5e:b6:8b:b3:82:38:77:56:00:f8:03:ad:51: f6:9a:55:02:53:ac:31:63:08:d6:6f:46:ab:3b:c1: 60:c9:1a:df:b4:77:87:4e:71:4f:88:b2:bf:85:93: f1:e2:f5:c0:25:0a:c4:7d:3c:a0:0c:d7:00:2a:c2: a1:f0:f0:5b:c0:9f:12:27:b1:58:e5:b1:a9:39:cd: 1e:96:ee:b5:56:4a:5d:97:1b:99:2f:b7:e5:ec:e9: 62:e8:76:7c:62:c1:ee:83:c4:72:1d:65:c2:fd:34: 03:27:42:e8:b4:3a:0a:36:32:20:0a:69:65:53:f2: 07:97:c1:37:bc:35:a9:1a:26:46:03:47:2f:44:7f: 16:bf:60:4c:73:1a:47:7b:6f:40:b0:ad:bf:0a:b4: 0e:12:6f:64:0f:29:31:cf:be:88:90:b5:1e:47:33: 02:2f:09:f1:1d:31:4e:51:d3:5c:59:70:ef:50:92: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DC:A6:0D:1D:AA:A9:B3:58:2F:FC:D3:45:B3:5A:62:6A:47:5D:31 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8b7cd613-3f52-4755-9c7b-f7e5f07b4ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:4840::/48 Signature Algorithm: sha256WithRSAEncryption 03:60:72:67:14:6a:5c:c0:b1:3e:3d:d4:95:28:a8:83:a1:7e: 5e:95:20:cc:0e:6c:cc:ce:0d:70:7d:0f:96:ad:9d:dc:1b:38: c3:7c:d4:7f:d1:8b:f8:57:7d:2b:ca:5c:6b:9d:ac:60:ec:a4: 03:39:38:2d:df:cf:89:82:6f:a4:82:11:48:aa:8b:fa:c7:14: 7a:17:df:d2:92:b3:37:22:a8:05:95:06:d5:cf:b6:56:41:43: ba:66:5d:87:3e:39:a7:53:54:8e:3f:1b:9e:58:2e:f3:4b:73: 21:70:59:1f:0e:52:18:5a:2e:ca:04:55:11:85:e9:8c:ce:c4: 1d:d3:51:0f:fa:32:1f:90:18:12:00:f5:76:c0:2b:3a:84:d3: 2d:5d:66:ad:15:a9:4e:ee:63:b4:b3:4e:49:8a:d4:08:a7:05: d2:4e:82:bb:38:8a:a9:8a:01:91:68:26:20:21:ba:b0:c2:ba: 41:b7:2c:ae:82:ff:05:a4:e6:21:d7:55:5d:37:89:f9:c8:ac: eb:4c:c6:8f:c4:1f:97:14:12:f4:08:7e:e4:80:04:75:b0:f5: 89:79:a9:c2:93:38:1b:0f:1a:6f:27:e1:b4:a7:6d:88:d8:f7: 56:0e:a6:6f:50:f5:71:32:f7:e0:8f:e2:87:93:2d:c2:a0:4f: a3:ff:ab:7b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUWl4J70/iAfJ41GwRnVYEEJb+O4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTA3Mzc1OFoX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNANDgwOTZhMDBiODRkZjQxYzUzZWIw YjhkZTRhNWRlYzU2MjhkY2MxMjkyNjA5YjY0ODI3NGIxMGI2NjU4ZTEzNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosaZyyuclgFC51zq0DfeTPRMo40D S6+YOb1EL3O5qHTnSdQf1JHn7CiX+sR9LFBWKNqOlyKbzWjjHn4o44ZhpFEbcXAo R1/o4a5V/F62i7OCOHdWAPgDrVH2mlUCU6wxYwjWb0arO8FgyRrftHeHTnFPiLK/ hZPx4vXAJQrEfTygDNcAKsKh8PBbwJ8SJ7FY5bGpOc0elu61VkpdlxuZL7fl7Oli 6HZ8YsHug8RyHWXC/TQDJ0LotDoKNjIgCmllU/IHl8E3vDWpGiZGA0cvRH8Wv2BM cxpHe29AsK2/CrQOEm9kDykxz76IkLUeRzMCLwnxHTFOUdNcWXDvUJIZ7QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIfcpg0dqqmzWC/800WzWmJqR10xMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiN2NkNjEzLTNmNTItNDc1NS05YzdiLWY3ZTVmMDdiNGZmNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6khAMA0GCSqGSIb3DQEBCwUAA4IBAQADYHJnFGpcwLE+PdSV KKiDoX5elSDMDmzMzg1wfQ+WrZ3cGzjDfNR/0Yv4V30rylxrnaxg7KQDOTgt38+J gm+kghFIqov6xxR6F9/SkrM3IqgFlQbVz7ZWQUO6Zl2HPjmnU1SOPxueWC7zS3Mh cFkfDlIYWi7KBFURhemMzsQd01EP+jIfkBgSAPV2wCs6hNMtXWatFalO7mO0s05J itQIpwXSToK7OIqpigGRaCYgIbqwwrpBtyyugv8FpOYh11VdN4n5yKzrTMaPxB+X FBL0CH7kgAR1sPWJeanCkzgbDxpvJ+G0p22I2PdWDqZvUPVxMvfgj+KHky3CoE+j /6t7 -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:48 2025 by rpki-client