$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/97330d15-5f25-48f4-ae5d-b99db6527f53.roa File: 97330d15-5f25-48f4-ae5d-b99db6527f53.roa (raw, json) Hash identifier: lGg70CGgHV7I3fF68S8i6MVyyzVtkWIPb3SOXX5K1VU= Subject key identifier: E2:32:B7:2F:73:1D:3B:06:9B:74:10:54:D4:F6:B2:F4:06:54:EE:0C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: A85BB3BC1F32A762B540D854006E0ED1A13253 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/97330d15-5f25-48f4-ae5d-b99db6527f53.roa Signing time: Wed 29 Oct 2025 07:39:06 +0000 ROA not before: Wed 29 Oct 2025 07:39:06 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a8:5b:b3:bc:1f:32:a7:62:b5:40:d8:54:00:6e:0e:d1:a1:32:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 07:39:06 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=7c1779bfe2d0f7d7251f97aaab8c7f5a3905ec8a4dd46a9b3ff6751cc2c0f59b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d1:8a:7e:82:9c:75:48:0d:b5:a2:2c:e2:38: be:d0:30:6d:02:25:fd:96:7d:50:af:79:83:a7:2b: 29:7d:ce:d9:af:1f:5f:59:0b:46:35:79:b7:fa:b6: b8:5b:f6:b6:3a:08:cb:d9:57:f9:82:e6:92:6e:2b: ed:b3:3c:0a:e3:62:01:cf:1d:bd:28:00:5f:e3:18: fe:09:25:43:6e:92:5e:33:6c:29:de:6d:95:e2:84: 04:37:82:13:be:64:1c:94:bb:cf:db:1e:fc:02:f3: 71:cb:12:90:1b:a4:27:46:83:29:ac:e9:70:f3:b1: 50:8e:2e:2b:28:db:a1:0f:74:1d:d4:d6:49:1e:d9: de:6a:08:1d:bc:cc:51:de:b3:5a:dc:e5:9e:68:9b: 32:1b:43:d1:89:69:6c:f6:b8:95:f6:d1:99:0b:e9: 39:4d:c4:1c:ff:d3:6e:9b:c3:dd:8a:b9:34:88:87: 66:d0:48:9a:54:f4:75:63:fe:4d:e9:ba:f9:5f:02: 60:50:8d:85:e5:61:6e:5c:41:3e:35:31:8b:e9:01: fb:0f:9e:20:7b:2f:0f:c9:f1:4c:bd:75:ba:87:00: 49:18:e8:65:a2:e7:19:b2:52:a4:91:5f:ff:28:85: 2d:7e:af:69:66:71:1d:a4:26:38:eb:42:b2:df:88: 51:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:32:B7:2F:73:1D:3B:06:9B:74:10:54:D4:F6:B2:F4:06:54:EE:0C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/97330d15-5f25-48f4-ae5d-b99db6527f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:b080::/48 Signature Algorithm: sha256WithRSAEncryption b5:e1:91:5e:3f:15:89:bd:da:32:93:2e:a6:4a:85:5f:df:23: bb:51:e0:f0:fa:8e:2c:89:06:38:94:72:83:f6:29:f0:30:69: 63:58:4a:6c:7e:6c:1a:7b:6f:f4:78:16:46:65:96:a9:d7:fb: 59:b1:6d:86:05:9c:d8:7e:25:e5:d6:f4:d0:78:ee:51:63:51: b2:de:3d:a7:11:8d:aa:ca:c3:e7:34:a3:c5:0c:5b:f9:86:7a: bf:a7:52:b7:65:f3:2b:42:f9:b5:09:57:a5:55:cc:a6:3f:6e: 86:3b:d4:72:c6:5a:03:fb:af:2f:fd:fc:ee:b5:fe:4f:7c:5a: 9f:cb:5e:68:d0:d8:50:ef:0c:7d:21:aa:f0:9e:c9:b3:4c:cd: 11:03:4a:ac:58:fd:10:fd:7a:e8:c5:e7:01:5e:2b:04:bb:47: 45:83:7a:f4:5a:44:5b:f7:28:52:cc:8f:5a:c6:02:f3:9b:dd: f6:6e:68:57:6b:de:0d:d4:59:6e:a7:63:70:c4:9d:0c:17:92: 6a:b6:1e:08:76:88:56:72:62:b4:5c:ef:76:76:29:18:e7:74: 5a:d4:60:26:1d:9a:1b:af:7f:8d:9d:da:8d:bb:a5:c8:4c:64: 5c:7b:50:6f:53:3d:bc:d3:e2:28:5a:79:2d:e7:cd:46:8b:e9: 97:48:5d:54 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAKhbs7wfMqditUDYVABuDtGhMlMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTA3MzkwNloX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAN2MxNzc5YmZlMmQwZjdkNzI1MWY5 N2FhYWI4YzdmNWEzOTA1ZWM4YTRkZDQ2YTliM2ZmNjc1MWNjMmMwZjU5YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldGKfoKcdUgNtaIs4ji+0DBtAiX9 ln1Qr3mDpyspfc7Zrx9fWQtGNXm3+ra4W/a2OgjL2Vf5guaSbivtszwK42IBzx29 KABf4xj+CSVDbpJeM2wp3m2V4oQEN4ITvmQclLvP2x78AvNxyxKQG6QnRoMprOlw 87FQji4rKNuhD3Qd1NZJHtneaggdvMxR3rNa3OWeaJsyG0PRiWls9riV9tGZC+k5 TcQc/9Num8Pdirk0iIdm0EiaVPR1Y/5N6br5XwJgUI2F5WFuXEE+NTGL6QH7D54g ey8PyfFMvXW6hwBJGOhloucZslKkkV//KIUtfq9pZnEdpCY460Ky34hRRwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOIyty9zHTsGm3QQVNT2svQGVO4MMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk3MzMwZDE1LTVmMjUtNDhmNC1hZTVkLWI5OWRiNjUyN2Y1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6rCAMA0GCSqGSIb3DQEBCwUAA4IBAQC14ZFePxWJvdoyky6m SoVf3yO7UeDw+o4siQY4lHKD9inwMGljWEpsfmwae2/0eBZGZZap1/tZsW2GBZzY fiXl1vTQeO5RY1Gy3j2nEY2qysPnNKPFDFv5hnq/p1K3ZfMrQvm1CVelVcymP26G O9RyxloD+68v/fzutf5PfFqfy15o0NhQ7wx9IarwnsmzTM0RA0qsWP0Q/XroxecB XisEu0dFg3r0WkRb9yhSzI9axgLzm932bmhXa94N1Flup2NwxJ0MF5Jqth4IdohW cmK0XO92dikY53Ra1GAmHZobr3+NndqNu6XITGRce1BvUz280+IoWnkt581Gi+mX SF1U -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:14 2025 by rpki-client