$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8e53c2d6-e164-4b99-9534-54abd9032e7f.roa File: 8e53c2d6-e164-4b99-9534-54abd9032e7f.roa (raw, json) Hash identifier: AUj/y46Ua4Xogs4S+iPW4r4h9A/Yv5gAgSdTZQZUwF0= Subject key identifier: 4D:D5:6A:47:E8:6C:6D:FA:E5:DC:75:DA:89:B7:AE:F3:72:B4:03:55 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 04A1B00A3F167C4175FF622D0C775EB2A5757160 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8e53c2d6-e164-4b99-9534-54abd9032e7f.roa Signing time: Tue 14 Oct 2025 00:20:10 +0000 ROA not before: Tue 14 Oct 2025 00:20:10 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a1:b0:0a:3f:16:7c:41:75:ff:62:2d:0c:77:5e:b2:a5:75:71:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 14 00:20:10 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=411180dae04d99f254bf0426dcbfa72cf6072a8566421821515b105bbed7f782, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:d7:78:dc:64:07:d2:e4:e2:f7:51:0b:c6: 08:86:ef:cf:3d:a4:7f:03:21:7c:50:ee:3b:48:a4: 53:79:20:fa:f1:8f:6c:21:ff:e1:77:3c:0c:24:82: 5e:66:ff:f4:d8:d7:0c:2b:82:cb:c3:df:04:5b:3e: e2:26:79:4c:a9:d3:47:1f:91:c6:cd:aa:12:69:a4: f7:57:df:d8:b1:c4:e6:e6:66:d0:d1:36:18:61:66: 20:3d:e9:b2:22:05:c4:cc:04:49:e2:f1:ac:f4:ea: 88:7c:51:e7:72:e4:db:ad:7a:38:3b:c6:2f:31:77: eb:bd:db:d3:b2:59:2a:13:f9:46:6b:77:59:f1:76: da:54:d4:b2:d3:55:61:6f:df:64:c0:93:0d:d5:14: ab:58:d1:25:b4:d6:a1:50:0e:8b:fa:42:8d:26:17: 0f:74:8f:d8:fa:a2:41:73:d8:20:97:59:9d:ae:de: d8:6a:7b:a4:43:59:5e:cb:cb:42:61:1f:dc:f5:db: 1a:16:ca:aa:4e:06:83:b4:56:d8:f6:1a:83:9f:5e: 5b:3d:09:99:4c:3a:91:ec:7a:94:b9:63:fa:f6:da: b8:18:e6:20:ce:63:28:86:c5:7b:7d:54:23:61:17: af:55:f9:c0:3b:e7:a5:33:cb:de:63:84:64:b6:8e: 35:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D5:6A:47:E8:6C:6D:FA:E5:DC:75:DA:89:B7:AE:F3:72:B4:03:55 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8e53c2d6-e164-4b99-9534-54abd9032e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:8800::/40 Signature Algorithm: sha256WithRSAEncryption 39:1c:e2:e4:13:c3:8a:a5:7f:f8:a6:0f:63:c5:30:e3:d4:aa: 82:23:00:e4:af:e2:c8:c6:25:fa:5b:6d:78:1e:14:93:fe:82: dd:ac:1e:cd:5b:fd:50:f0:7e:d8:bb:3c:ae:9b:41:43:94:df: 15:9c:32:0d:2b:15:aa:74:7b:20:cd:fa:03:ce:26:8c:34:19: 29:42:8d:29:70:ff:d2:29:38:ad:7e:73:df:c5:7f:0d:68:34: 8c:26:fa:9e:a5:f0:21:9a:57:23:8f:50:c5:5d:c7:8b:f5:13: 38:4d:f9:63:86:49:c6:44:0f:53:4e:ea:85:48:23:24:74:d5: fe:e3:71:2f:bd:aa:ad:13:b5:4f:9b:32:5f:c7:ef:1f:a5:28: b2:10:81:37:41:dd:ad:14:86:14:af:f1:0d:58:b6:b6:32:7f: 13:cc:e5:6c:e7:19:09:c7:40:73:50:85:39:44:8e:48:94:67: ec:07:af:83:dd:f5:9e:63:e1:c4:5a:53:15:60:35:77:db:30: af:98:69:98:f6:36:07:24:bf:ef:e4:7e:f0:e4:7e:7d:04:44: 58:3b:3a:ba:65:d8:37:0d:01:a9:89:f2:7b:32:e5:ac:3a:a1: 61:cc:99:e0:20:83:cd:c6:b4:b0:5c:98:22:42:09:1d:73:ac: 42:7e:fc:93 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBKGwCj8WfEF1/2ItDHdesqV1cWAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNDAwMjAxMFoX DTI1MTExODIzNTk1OVowejFJMEcGA1UEBRNANDExMTgwZGFlMDRkOTlmMjU0YmYw NDI2ZGNiZmE3MmNmNjA3MmE4NTY2NDIxODIxNTE1YjEwNWJiZWQ3Zjc4MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN7XeNxkB9Lk4vdRC8YIhu/PPaR/ AyF8UO47SKRTeSD68Y9sIf/hdzwMJIJeZv/02NcMK4LLw98EWz7iJnlMqdNHH5HG zaoSaaT3V9/YscTm5mbQ0TYYYWYgPemyIgXEzARJ4vGs9OqIfFHncuTbrXo4O8Yv MXfrvdvTslkqE/lGa3dZ8XbaVNSy01Vhb99kwJMN1RSrWNEltNahUA6L+kKNJhcP dI/Y+qJBc9ggl1mdrt7YanukQ1ley8tCYR/c9dsaFsqqTgaDtFbY9hqDn15bPQmZ TDqR7HqUuWP69tq4GOYgzmMohsV7fVQjYRevVfnAO+elM8veY4Rkto41vwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE3VakfobG365dx12om3rvNytANVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhlNTNjMmQ2LWUxNjQtNGI5OS05NTM0LTU0YWJkOTAzMmU3Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaYgwDQYJKoZIhvcNAQELBQADggEBADkc4uQTw4qlf/imD2PF MOPUqoIjAOSv4sjGJfpbbXgeFJP+gt2sHs1b/VDwfti7PK6bQUOU3xWcMg0rFap0 eyDN+gPOJow0GSlCjSlw/9IpOK1+c9/Ffw1oNIwm+p6l8CGaVyOPUMVdx4v1EzhN +WOGScZED1NO6oVIIyR01f7jcS+9qq0TtU+bMl/H7x+lKLIQgTdB3a0UhhSv8Q1Y trYyfxPM5WznGQnHQHNQhTlEjkiUZ+wHr4Pd9Z5j4cRaUxVgNXfbMK+YaZj2Ngck v+/kfvDkfn0ERFg7Orpl2DcNAamJ8nsy5aw6oWHMmeAgg83GtLBcmCJCCR1zrEJ+ /JM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:36 2025 by rpki-client