$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a47e051c-2b16-4d02-b1e0-ac267a378e13.roa File: a47e051c-2b16-4d02-b1e0-ac267a378e13.roa (raw, json) Hash identifier: e//1VftkrSCeZzkjbJid7m+MieJkAY+susx/QYRaZ9k= Subject key identifier: 32:AC:49:92:4D:64:C9:04:41:C0:E3:4E:67:B6:1E:87:89:EF:42:17 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 30A4706ED1D9DA5339FF4E6CFFD58C28506A4DF8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a47e051c-2b16-4d02-b1e0-ac267a378e13.roa Signing time: Wed 05 Nov 2025 00:10:06 +0000 ROA not before: Wed 05 Nov 2025 00:10:06 +0000 ROA not after: Wed 10 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:b000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a4:70:6e:d1:d9:da:53:39:ff:4e:6c:ff:d5:8c:28:50:6a:4d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 5 00:10:06 2025 GMT Not After : Dec 10 23:59:59 2025 GMT Subject: serialNumber=9de3143802b2aa9bb111d2fd4b3d5190356afb501596fbd12e1dc45b0b2fc32a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d2:ba:a5:22:5d:f5:1a:88:b2:3d:bc:06:78: e8:f0:94:9d:c6:91:f2:16:b6:2b:cf:88:03:de:72: 34:aa:53:82:44:33:ae:eb:7e:01:3e:58:f6:4c:6f: 28:1e:a9:8e:91:09:7e:40:86:f5:88:c3:f5:a9:10: b6:f6:59:6f:74:24:44:3c:dd:aa:52:01:19:80:86: a1:ca:fe:4e:89:62:08:15:78:ad:90:8c:e9:2c:0b: 8c:bc:2a:0f:6b:b7:42:db:f6:9a:f6:97:31:7c:ba: d7:96:ef:14:26:e7:02:0a:5c:1b:78:3d:81:5c:a7: ac:db:99:fa:bb:1b:a9:40:92:84:dc:12:e4:75:5b: ed:1d:cf:b1:63:cc:10:77:b6:2c:0e:75:4a:93:fe: f0:29:44:f9:8f:f6:4f:ed:32:5f:62:67:f3:5e:aa: 15:bf:b5:d6:dc:11:cd:8b:4e:13:fe:f0:0f:19:5a: 6b:98:50:12:8a:ed:fd:98:06:0a:1f:71:a4:f4:1d: cc:4c:c1:a0:b7:7d:dc:1e:51:3e:9c:d5:81:a0:8e: 66:65:be:09:bb:61:98:37:9d:f9:54:80:d9:2d:2d: ea:05:fc:3b:e2:43:15:e8:fe:e9:6b:b3:a2:13:16: a5:69:b6:72:e4:4a:e1:d1:a8:04:59:3b:08:02:2a: 33:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AC:49:92:4D:64:C9:04:41:C0:E3:4E:67:B6:1E:87:89:EF:42:17 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a47e051c-2b16-4d02-b1e0-ac267a378e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:b000::/48 Signature Algorithm: sha256WithRSAEncryption 6d:f0:8b:d2:a8:82:62:86:a0:40:d9:8c:16:94:08:5a:19:8c: 86:a1:b8:6b:a8:9c:b3:1f:d4:46:e7:b3:55:d6:15:43:87:e7: 8f:85:4b:c8:73:b5:cd:45:38:45:30:a0:0b:b7:6b:b5:40:5c: 7d:68:f7:b7:42:1d:3e:34:7f:b1:58:47:e5:49:5e:46:44:bb: c8:e4:00:b1:b0:a6:3e:cb:c6:db:55:4b:70:bc:68:90:6a:89: d1:27:ff:0a:73:48:4e:ce:bd:13:6e:51:86:0a:50:fe:eb:60: 48:87:3d:a4:3c:af:e6:94:56:98:6b:5f:ef:b1:ca:cc:e1:bb: 3e:27:96:e9:96:38:c2:63:31:8a:0d:c9:30:4f:7d:1e:9d:0b: 11:10:62:63:b5:bd:2b:c5:fd:fe:bb:32:18:84:90:3f:d6:44: 38:b2:ea:a9:03:f5:38:7b:50:10:25:bd:4a:a5:a1:9d:67:f9: 86:01:97:47:bd:69:e7:f2:c4:45:3f:1b:4b:4e:f5:de:a7:b1: e1:d7:26:82:00:40:47:ad:09:d6:20:d0:c7:3f:c4:45:23:08: 1d:12:8e:de:73:ed:51:ea:da:0a:01:1c:ff:f0:54:8e:b9:89: 13:9b:bf:fd:d9:27:28:1e:71:e5:15:0e:c4:a6:78:e1:59:fc: ea:5d:e2:1e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMKRwbtHZ2lM5/05s/9WMKFBqTfgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNTAwMTAwNloX DTI1MTIxMDIzNTk1OVowejFJMEcGA1UEBRNAOWRlMzE0MzgwMmIyYWE5YmIxMTFk MmZkNGIzZDUxOTAzNTZhZmI1MDE1OTZmYmQxMmUxZGM0NWIwYjJmYzMyYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodK6pSJd9RqIsj28Bnjo8JSdxpHy FrYrz4gD3nI0qlOCRDOu634BPlj2TG8oHqmOkQl+QIb1iMP1qRC29llvdCREPN2q UgEZgIahyv5OiWIIFXitkIzpLAuMvCoPa7dC2/aa9pcxfLrXlu8UJucCClwbeD2B XKes25n6uxupQJKE3BLkdVvtHc+xY8wQd7YsDnVKk/7wKUT5j/ZP7TJfYmfzXqoV v7XW3BHNi04T/vAPGVprmFASiu39mAYKH3Gk9B3MTMGgt33cHlE+nNWBoI5mZb4J u2GYN535VIDZLS3qBfw74kMV6P7pa7OiExalabZy5Erh0agEWTsIAiozbwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDKsSZJNZMkEQcDjTme2HoeJ70IXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E0N2UwNTFjLTJiMTYtNGQwMi1iMWUwLWFjMjY3YTM3OGUxMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9rAAMA0GCSqGSIb3DQEBCwUAA4IBAQBt8IvSqIJihqBA2YwW lAhaGYyGobhrqJyzH9RG57NV1hVDh+ePhUvIc7XNRThFMKALt2u1QFx9aPe3Qh0+ NH+xWEflSV5GRLvI5ACxsKY+y8bbVUtwvGiQaonRJ/8Kc0hOzr0TblGGClD+62BI hz2kPK/mlFaYa1/vscrM4bs+J5bpljjCYzGKDckwT30enQsREGJjtb0rxf3+uzIY hJA/1kQ4suqpA/U4e1AQJb1KpaGdZ/mGAZdHvWnn8sRFPxtLTvXep7Hh1yaCAEBH rQnWINDHP8RFIwgdEo7ec+1R6toKARz/8FSOuYkTm7/92ScoHnHlFQ7EpnjhWfzq XeIe -----END CERTIFICATE-----Generated at Wed Nov 5 11:32:00 2025 by rpki-client