$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9189bfbf-3763-4a1c-b4d7-fb9e56961927.roa File: 9189bfbf-3763-4a1c-b4d7-fb9e56961927.roa (raw, json) Hash identifier: ZCaNuwyZDzFXZdZRegVq9FbQZ2ucLp4vTOQckz1smXQ= Subject key identifier: 61:17:C1:7B:AD:34:BE:59:36:F8:11:B2:B2:9A:A5:3A:D1:29:82:65 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 22DA750486C6A009000B8F15C7397DCB876A30F0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9189bfbf-3763-4a1c-b4d7-fb9e56961927.roa Signing time: Wed 15 Oct 2025 00:20:56 +0000 ROA not before: Wed 15 Oct 2025 00:20:56 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:da:75:04:86:c6:a0:09:00:0b:8f:15:c7:39:7d:cb:87:6a:30:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:20:56 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=5ae58565c9d83e46609763f5f7961cc84c601d5db96fc70ddcd85e395e2d41c7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d7:49:04:a6:66:c7:69:6a:88:15:a7:1a:21: af:ca:fc:3e:47:3b:52:60:47:f5:f8:28:b1:d9:cc: 1b:7a:b6:2e:f1:f2:1f:61:c6:2f:81:d8:22:8c:1c: 44:a5:c3:a4:0c:25:ad:22:38:d8:5e:33:57:86:0a: 0d:fb:66:24:ef:4b:9c:b1:3f:97:4a:81:ca:c3:0f: a8:5b:4c:c3:68:02:55:3b:36:20:73:9e:fd:de:87: 47:d8:dc:d3:cb:5b:ce:c8:27:45:ad:a0:06:94:5b: 06:1f:b8:df:f4:ca:09:db:60:75:ec:ab:34:b3:85: 80:4d:2e:69:49:6e:82:fe:55:e8:1c:d5:0f:36:16: 57:ac:05:20:3b:a5:5e:30:fc:28:fb:3e:a6:23:26: a4:c2:e6:c1:3d:4b:7f:77:4d:90:b3:2f:0b:4d:1b: 0a:28:f1:5b:d8:48:12:32:7a:e5:53:14:68:61:e6: a2:5d:93:1d:3b:aa:44:e9:55:c4:66:32:87:45:00: 9f:cf:f1:c9:07:c3:74:12:91:7c:12:4e:71:01:05: ef:b9:67:27:fa:88:47:83:c1:11:fb:b5:d5:8d:40: ef:6e:56:ad:b5:7d:99:39:74:09:e7:85:ff:f7:79: 1c:da:16:ba:4f:aa:87:24:1b:a2:57:a4:f0:99:c3: 43:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:17:C1:7B:AD:34:BE:59:36:F8:11:B2:B2:9A:A5:3A:D1:29:82:65 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9189bfbf-3763-4a1c-b4d7-fb9e56961927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:7000::/40 Signature Algorithm: sha256WithRSAEncryption 4d:dd:6f:8a:a3:23:52:64:69:1f:10:48:a5:f2:16:e2:34:37: 77:17:fa:82:51:f2:07:79:85:e7:10:7d:c4:d3:02:3a:4c:a3: 23:2c:a4:92:d8:07:df:f8:14:c4:78:68:cc:1e:54:7d:5d:26: 60:b0:13:c4:77:93:5c:68:10:7e:f3:ff:f7:79:b2:1d:d7:e1: e3:3d:df:46:3c:2f:35:ea:ea:98:c7:4e:66:ac:46:7c:5e:f0: 4d:b8:52:5e:b3:f6:5a:08:32:6e:39:27:69:52:05:5e:ce:ec: 4d:03:fa:10:db:3f:23:b6:5f:83:6c:cf:c5:22:28:b9:66:8f: 02:31:87:56:5d:6c:73:29:50:5e:7b:25:b9:47:7f:56:9b:65: 36:45:e6:d7:9e:75:82:7c:01:30:90:a0:42:4b:e3:6b:ff:31: 51:67:4c:4e:49:85:28:dc:1a:f4:d9:5e:38:ef:43:34:1e:79: 96:78:39:7b:e1:ad:e4:12:c8:9b:06:75:83:8a:90:84:e8:03: 03:5d:e7:30:9b:ea:c9:88:bf:7b:77:80:a7:3f:bf:9d:a9:fb: 5f:12:b3:06:d9:ae:65:ea:34:2a:94:d8:85:74:94:9b:67:81: 90:79:0b:99:e8:1d:4e:f6:aa:04:d3:a5:4a:4c:9c:2d:0a:17: 01:1c:76:f4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUItp1BIbGoAkAC48Vxzl9y4dqMPAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMjA1NloX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNANWFlNTg1NjVjOWQ4M2U0NjYwOTc2 M2Y1Zjc5NjFjYzg0YzYwMWQ1ZGI5NmZjNzBkZGNkODVlMzk1ZTJkNDFjNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArddJBKZmx2lqiBWnGiGvyvw+RztS YEf1+Cix2cwberYu8fIfYcYvgdgijBxEpcOkDCWtIjjYXjNXhgoN+2Yk70ucsT+X SoHKww+oW0zDaAJVOzYgc5793odH2NzTy1vOyCdFraAGlFsGH7jf9MoJ22B17Ks0 s4WATS5pSW6C/lXoHNUPNhZXrAUgO6VeMPwo+z6mIyakwubBPUt/d02Qsy8LTRsK KPFb2EgSMnrlUxRoYeaiXZMdO6pE6VXEZjKHRQCfz/HJB8N0EpF8Ek5xAQXvuWcn +ohHg8ER+7XVjUDvblattX2ZOXQJ54X/93kc2ha6T6qHJBuiV6TwmcNDSwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGEXwXutNL5ZNvgRsrKapTrRKYJlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkxODliZmJmLTM3NjMtNGExYy1iNGQ3LWZiOWU1Njk2MTkyNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMnAwDQYJKoZIhvcNAQELBQADggEBAE3db4qjI1JkaR8QSKXy FuI0N3cX+oJR8gd5hecQfcTTAjpMoyMspJLYB9/4FMR4aMweVH1dJmCwE8R3k1xo EH7z//d5sh3X4eM930Y8LzXq6pjHTmasRnxe8E24Ul6z9loIMm45J2lSBV7O7E0D +hDbPyO2X4Nsz8UiKLlmjwIxh1ZdbHMpUF57JblHf1abZTZF5teedYJ8ATCQoEJL 42v/MVFnTE5JhSjcGvTZXjjvQzQeeZZ4OXvhreQSyJsGdYOKkIToAwNd5zCb6smI v3t3gKc/v52p+18SswbZrmXqNCqU2IV0lJtngZB5C5noHU72qgTTpUpMnC0KFwEc dvQ= -----END CERTIFICATE-----Generated at Wed Nov 5 22:14:00 2025 by rpki-client