$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a9d41bd-0bed-4bc0-8365-34453f074020.roa File: 9a9d41bd-0bed-4bc0-8365-34453f074020.roa (raw, json) Hash identifier: GQ6NhBwXjfUrhXOQSnNkFxHB7iUU3ghxLuuARa7GsaQ= Subject key identifier: 51:4A:65:6D:CF:64:C7:E7:C9:FE:70:C9:0E:67:39:33:E4:1A:ED:16 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 31AAEEED958B29116C4E49E2EFD4C2BAED52E51F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a9d41bd-0bed-4bc0-8365-34453f074020.roa Signing time: Wed 15 Oct 2025 00:20:50 +0000 ROA not before: Wed 15 Oct 2025 00:20:50 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:aa:ee:ed:95:8b:29:11:6c:4e:49:e2:ef:d4:c2:ba:ed:52:e5:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:20:50 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=baf6986190a993595efd7c26f56ed06b3be067e33dd8d276a375f7e650eaec49, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cc:9e:18:ff:8c:b7:30:cb:55:86:1a:0f:fa: b7:53:08:2e:40:94:10:0b:04:df:b1:77:07:8a:44: a8:f6:4e:45:2a:0b:66:62:4b:34:5f:b6:79:20:03: 98:91:c6:cd:6d:fd:64:0c:78:55:4d:5a:af:f8:d2: 40:69:9a:9d:fa:b3:67:f2:d1:d9:6a:3f:96:ea:51: 6f:b4:97:e1:d4:d3:2e:65:8d:16:b8:ea:98:e9:5a: 85:15:ab:94:32:33:3b:d5:4d:13:09:bb:3d:e5:d3: d1:ae:e9:b8:a1:dd:15:68:ed:3d:b6:b9:33:e6:88: 6c:80:48:d8:10:e1:f6:f9:7b:20:10:29:49:5f:a8: 39:38:79:56:59:2c:aa:d9:86:66:c1:66:89:62:79: 24:73:ca:03:7b:70:d5:09:a7:87:2d:a6:3c:a2:16: a0:2b:bf:fa:35:dd:43:70:65:6e:b0:93:d5:c2:e3: f4:d7:23:15:b9:25:1c:9b:dc:cc:f6:ef:b1:68:4e: 6c:53:4a:80:9e:a8:cb:c4:8d:bf:cd:cb:3a:c7:e2: 83:9f:b3:a6:e7:f6:48:28:75:2e:fd:c3:29:ca:74: 02:86:bf:90:6a:04:11:5e:d8:e7:92:d8:ac:28:b8: a1:b1:cf:4a:7c:44:a7:64:f0:8d:e9:0a:b0:d9:14: 22:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4A:65:6D:CF:64:C7:E7:C9:FE:70:C9:0E:67:39:33:E4:1A:ED:16 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a9d41bd-0bed-4bc0-8365-34453f074020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:e000::/40 Signature Algorithm: sha256WithRSAEncryption cb:e3:5a:be:88:a4:c3:2f:67:bc:09:c4:d3:e6:74:95:0d:71: 30:c5:4d:86:e1:b5:c9:34:69:9a:79:c2:1d:c0:6c:2c:7e:35: 0a:1c:d7:bd:bb:26:76:2b:f5:ba:06:65:f5:55:c5:fd:2b:0e: d4:70:53:3a:97:3a:7f:60:a0:b1:2a:15:78:8a:4c:e2:9a:0f: 32:41:dc:ed:c6:09:36:dc:fc:32:99:96:d3:04:60:1f:5e:59: 19:2f:63:9e:23:74:b6:3f:eb:88:f0:29:a4:16:da:0f:d6:72: c7:30:50:27:31:04:dd:e7:7e:4a:e3:25:5c:6c:b2:e6:e9:a0: 88:dd:cd:0f:2d:a3:83:60:e7:29:b4:23:2c:22:8c:a8:81:b5: 97:8d:29:05:20:1d:7c:63:d3:40:0f:93:db:50:dd:f7:c4:5a: ce:11:5e:bc:4b:d9:6e:95:56:b6:6e:35:a0:03:2f:d4:6c:80: a6:dc:8e:3c:d5:37:6e:26:fc:75:bf:86:f2:db:44:30:06:89: 8b:18:e9:01:1f:63:cd:b0:99:6b:c0:bb:23:f8:46:06:7f:d3: 28:bb:58:39:0d:95:66:6e:32:33:6b:a7:0c:26:b7:96:68:0e: bf:81:ec:18:e5:56:68:51:c9:ba:a9:f9:a9:7f:55:01:0e:18: 2d:4b:d4:3f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMaru7ZWLKRFsTkni79TCuu1S5R8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwMjA1MFoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAYmFmNjk4NjE5MGE5OTM1OTVlZmQ3 YzI2ZjU2ZWQwNmIzYmUwNjdlMzNkZDhkMjc2YTM3NWY3ZTY1MGVhZWM0OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8yeGP+MtzDLVYYaD/q3UwguQJQQ CwTfsXcHikSo9k5FKgtmYks0X7Z5IAOYkcbNbf1kDHhVTVqv+NJAaZqd+rNn8tHZ aj+W6lFvtJfh1NMuZY0WuOqY6VqFFauUMjM71U0TCbs95dPRrum4od0VaO09trkz 5ohsgEjYEOH2+XsgEClJX6g5OHlWWSyq2YZmwWaJYnkkc8oDe3DVCaeHLaY8ohag K7/6Nd1DcGVusJPVwuP01yMVuSUcm9zM9u+xaE5sU0qAnqjLxI2/zcs6x+KDn7Om 5/ZIKHUu/cMpynQChr+QagQRXtjnktisKLihsc9KfESnZPCN6Qqw2RQitQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFFKZW3PZMfnyf5wyQ5nOTPkGu0WMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlhOWQ0MWJkLTBiZWQtNGJjMC04MzY1LTM0NDUzZjA3NDAyMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/uAwDQYJKoZIhvcNAQELBQADggEBAMvjWr6IpMMvZ7wJxNPm dJUNcTDFTYbhtck0aZp5wh3AbCx+NQoc1727JnYr9boGZfVVxf0rDtRwUzqXOn9g oLEqFXiKTOKaDzJB3O3GCTbc/DKZltMEYB9eWRkvY54jdLY/64jwKaQW2g/Wcscw UCcxBN3nfkrjJVxssubpoIjdzQ8to4Ng5ym0IywijKiBtZeNKQUgHXxj00APk9tQ 3ffEWs4RXrxL2W6VVrZuNaADL9RsgKbcjjzVN24m/HW/hvLbRDAGiYsY6QEfY82w mWvAuyP4RgZ/0yi7WDkNlWZuMjNrpwwmt5ZoDr+B7BjlVmhRybqp+al/VQEOGC1L 1D8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:33 2025 by rpki-client