$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa File: 8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa (raw, json) Hash identifier: nPAl0UW054erf/8By/HwZJVOY6pjqmif1pXekLIJ8+Q= Subject key identifier: 47:F4:B4:38:8C:73:F9:C8:9D:63:C3:D8:4F:F8:7F:C5:F4:38:E3:B8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7D12323B0202DEDEFE1E060DF3DAD9CCA23ECEDB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa Signing time: Wed 05 Nov 2025 00:10:04 +0000 ROA not before: Wed 05 Nov 2025 00:10:04 +0000 ROA not after: Wed 10 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:b0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:12:32:3b:02:02:de:de:fe:1e:06:0d:f3:da:d9:cc:a2:3e:ce:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 5 00:10:04 2025 GMT Not After : Dec 10 23:59:59 2025 GMT Subject: serialNumber=ebb6286c1ec5332ecb430701c81917ecf5ae8f3961bb99bd0c67da7b6eba0932, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:f7:6c:21:9b:53:e4:c6:c0:29:f8:0d:02: 7f:27:72:eb:9a:ec:1e:6e:2f:74:58:b2:72:b8:7c: fc:84:6b:c8:88:dd:7e:39:3c:33:f4:d7:a3:ad:9d: b1:a4:ba:75:9a:84:59:2a:fb:96:78:ed:c9:75:d8: 6c:1d:c6:ab:e4:75:31:90:2d:c2:b6:8c:61:20:58: be:50:92:5f:55:0c:5e:db:09:b7:81:27:f2:51:af: 37:f6:f0:a5:b1:42:b5:f9:72:68:77:71:97:ed:f0: da:96:1a:33:a1:08:81:62:3a:c4:72:8d:ef:97:1a: af:31:da:6d:2e:ca:86:f8:90:ec:02:a2:12:8d:b3: 53:a5:57:db:4b:83:68:fe:18:ce:02:e4:03:01:1c: 22:a2:4b:dd:e8:49:f0:dd:4d:8f:82:24:4c:45:76: cc:93:01:b4:e4:b9:8a:ce:57:f9:de:01:c8:ed:53: 88:e0:db:b9:3b:2f:d2:cd:66:4b:05:91:97:ab:b3: ff:61:e0:68:63:dd:d0:2e:6e:7a:c5:e9:18:65:b2: 7b:f0:68:60:66:4e:93:a1:2e:53:29:a9:f2:e9:fc: d3:99:b0:79:04:25:cc:a0:2a:7d:88:12:2a:a5:86: a2:cd:51:df:17:6e:67:83:2c:6c:5c:35:b0:5f:0c: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F4:B4:38:8C:73:F9:C8:9D:63:C3:D8:4F:F8:7F:C5:F4:38:E3:B8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:b0c0::/48 Signature Algorithm: sha256WithRSAEncryption 73:ec:46:92:c9:dc:2a:50:95:7b:bb:ed:9a:4f:41:ba:50:5e: 47:f7:80:12:21:f9:08:8f:42:84:bd:73:a2:31:90:f3:04:5c: ce:40:ad:cc:b8:1f:f7:ae:fe:a5:75:83:ba:a1:67:c1:19:b5: 47:90:4a:7c:8f:c7:ca:2d:a2:c6:ba:c4:e5:69:cc:e5:11:71: 96:e3:75:d6:d3:37:44:30:cf:7a:27:a6:88:b4:6b:bc:e7:8e: 7b:3c:48:fd:ef:4d:51:4f:b7:27:e5:bc:e1:cf:8f:15:9a:43: 06:8d:bf:62:3c:e3:56:a9:c6:bd:6d:f4:2d:b4:0e:6b:82:95: 2f:26:51:d0:b8:93:30:2b:75:99:03:c9:51:54:eb:dd:3a:9a: 4d:49:f2:ac:33:8f:1d:f7:ad:3d:2f:c6:ad:05:3c:05:b9:6e: f4:43:20:2b:8b:70:b2:31:21:e7:ff:ad:f0:26:ca:b0:93:37: a8:15:a6:c2:25:f3:de:73:c2:69:c6:86:98:6f:9e:75:b8:ee: e7:11:2b:5c:af:4f:11:3b:4f:98:7c:b3:63:20:0b:f3:39:fa: be:54:75:d1:81:14:33:45:51:8a:c4:d1:25:d4:c3:ba:eb:ec: 86:69:76:04:36:19:2b:99:dd:7c:ce:8c:39:01:a0:89:87:f1: dd:f6:d4:2d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfRIyOwIC3t7+HgYN89rZzKI+ztswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNTAwMTAwNFoX DTI1MTIxMDIzNTk1OVowejFJMEcGA1UEBRNAZWJiNjI4NmMxZWM1MzMyZWNiNDMw NzAxYzgxOTE3ZWNmNWFlOGYzOTYxYmI5OWJkMGM2N2RhN2I2ZWJhMDkzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwT3bCGbU+TGwCn4DQJ/J3Lrmuwe bi90WLJyuHz8hGvIiN1+OTwz9NejrZ2xpLp1moRZKvuWeO3JddhsHcar5HUxkC3C toxhIFi+UJJfVQxe2wm3gSfyUa839vClsUK1+XJod3GX7fDalhozoQiBYjrEco3v lxqvMdptLsqG+JDsAqISjbNTpVfbS4No/hjOAuQDARwiokvd6Enw3U2PgiRMRXbM kwG05LmKzlf53gHI7VOI4Nu5Oy/SzWZLBZGXq7P/YeBoY93QLm56xekYZbJ78Ghg Zk6ToS5TKany6fzTmbB5BCXMoCp9iBIqpYaizVHfF25ngyxsXDWwXwynswIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEf0tDiMc/nInWPD2E/4f8X0OOO4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiY2VjY2E0LTI2NDMtNDQwNi1iYmY0LWU1ZTlmNjM3ODZlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/7DAMA0GCSqGSIb3DQEBCwUAA4IBAQBz7EaSydwqUJV7u+2a T0G6UF5H94ASIfkIj0KEvXOiMZDzBFzOQK3MuB/3rv6ldYO6oWfBGbVHkEp8j8fK LaLGusTlaczlEXGW43XW0zdEMM96J6aItGu85457PEj9701RT7cn5bzhz48VmkMG jb9iPONWqca9bfQttA5rgpUvJlHQuJMwK3WZA8lRVOvdOppNSfKsM48d9609L8at BTwFuW70QyAri3CyMSHn/63wJsqwkzeoFabCJfPec8JpxoaYb551uO7nEStcr08R O0+YfLNjIAvzOfq+VHXRgRQzRVGKxNEl1MO66+yGaXYENhkrmd18zow5AaCJh/Hd 9tQt -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:05 2025 by rpki-client