$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa File: bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa (raw, json) Hash identifier: 8dKhpE6a8vbhDxSBwiFd3WaRT2wsHm3lBl4L8rtOu9g= Subject key identifier: ED:74:97:FD:43:1E:41:13:8D:06:B0:62:6E:25:FC:9A:05:37:1D:91 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7D85A3C5FB6BD683415AD9A5CA725603D6F5AB44 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa Signing time: Wed 29 Oct 2025 00:01:05 +0000 ROA not before: Wed 29 Oct 2025 00:01:05 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:85:a3:c5:fb:6b:d6:83:41:5a:d9:a5:ca:72:56:03:d6:f5:ab:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:01:05 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=16324e3a512240939ec720f2583b5685386a5923f9ed9beb494dfb4262a36886, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ca:20:d5:26:f2:aa:ec:3c:e0:ea:78:8d:21: 8a:04:5c:aa:eb:db:e6:a1:77:d9:6b:bf:98:82:eb: a8:ee:79:bc:3e:80:3e:ff:c3:5b:c5:04:a6:df:87: b2:dd:85:a1:57:28:d5:00:64:42:e9:1b:85:97:98: 30:f0:40:b0:4d:67:8b:07:0e:c4:7d:ec:05:5c:c8: 6d:1b:6b:51:6c:d5:0f:98:5c:1e:cc:72:5a:f9:46: b7:88:0f:e8:1c:51:a6:64:67:45:37:2a:f3:0a:18: 02:1c:4e:c1:64:57:0b:ba:19:37:fb:b0:47:b5:21: 9f:c9:ba:3e:07:30:30:89:53:c7:c4:8b:ce:94:b5: a2:2f:7f:83:67:0a:b1:81:21:51:8f:fe:22:de:7b: db:d5:67:34:7d:5b:94:2a:49:7f:f5:73:6f:3b:07: f7:a3:64:0d:a6:94:80:67:89:7e:0c:9f:cb:ae:5e: 82:f1:fb:db:0e:44:d3:0a:94:70:0e:98:0c:b3:5d: 81:40:94:71:0b:e8:9d:ca:83:11:d4:7a:f0:9b:68: dd:97:c7:2b:a5:be:d2:93:00:80:19:79:7f:e0:89: 08:ee:34:c0:5c:94:ac:1d:e7:08:71:26:9e:27:cd: 95:9b:1e:97:45:00:79:76:98:a4:a1:f0:59:fe:9f: 17:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:74:97:FD:43:1E:41:13:8D:06:B0:62:6E:25:FC:9A:05:37:1D:91 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:c800::/40 Signature Algorithm: sha256WithRSAEncryption 6c:50:07:5e:51:5a:93:05:30:07:a2:f5:51:21:fe:70:0c:7a: 63:40:ca:e5:94:eb:78:6f:c8:e9:31:05:e1:c5:63:f5:bf:77: 8c:1b:99:90:b9:a6:e5:26:3b:a0:42:a2:c6:57:ae:6d:5b:56: d2:fc:15:b5:ee:55:3b:73:52:21:b1:6e:3e:08:89:fb:92:46: bb:55:14:76:43:cd:fe:df:04:99:23:20:71:a0:15:fa:52:34: ab:52:fc:c1:f4:d9:d1:cb:cf:dd:44:c6:b0:90:d0:6f:47:99: 91:c5:ac:bc:66:59:9d:d6:81:aa:7a:1c:ab:c6:5a:24:3c:55: 39:69:cc:4a:ad:33:9d:a1:33:0f:42:65:9d:06:a5:d7:92:e0: d6:10:fd:9b:20:76:b6:25:89:72:12:ac:d2:3a:6f:0c:bb:27: db:26:56:1a:0e:cf:cd:bc:74:f9:32:44:dd:32:6c:87:0a:fd: 73:49:91:14:9a:e2:af:98:64:4d:13:bc:59:1d:72:8f:48:b3: 2f:de:00:d6:75:52:89:11:51:d1:80:bc:13:83:3d:16:3e:5d: a3:04:8a:f7:86:f4:68:9e:73:cb:70:6f:db:07:b1:00:53:12: 86:b4:c9:79:4a:17:a6:55:fb:21:ea:57:60:f3:2c:cd:9a:46: f6:dc:d9:cd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfYWjxftr1oNBWtmlynJWA9b1q0QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTAwMDEwNVoX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAMTYzMjRlM2E1MTIyNDA5MzllYzcy MGYyNTgzYjU2ODUzODZhNTkyM2Y5ZWQ5YmViNDk0ZGZiNDI2MmEzNjg4NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncog1Sbyquw84Op4jSGKBFyq69vm oXfZa7+Yguuo7nm8PoA+/8NbxQSm34ey3YWhVyjVAGRC6RuFl5gw8ECwTWeLBw7E fewFXMhtG2tRbNUPmFwezHJa+Ua3iA/oHFGmZGdFNyrzChgCHE7BZFcLuhk3+7BH tSGfybo+BzAwiVPHxIvOlLWiL3+DZwqxgSFRj/4i3nvb1Wc0fVuUKkl/9XNvOwf3 o2QNppSAZ4l+DJ/Lrl6C8fvbDkTTCpRwDpgMs12BQJRxC+idyoMR1Hrwm2jdl8cr pb7SkwCAGXl/4IkI7jTAXJSsHecIcSaeJ82Vmx6XRQB5dpikofBZ/p8XtQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFO10l/1DHkETjQawYm4l/JoFNx2RMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmN2RmY2Y4LWJhMGMtNDdlOS04ZGRiLTZhNmQ4ZWM3MDQxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoMgwDQYJKoZIhvcNAQELBQADggEBAGxQB15RWpMFMAei9VEh /nAMemNAyuWU63hvyOkxBeHFY/W/d4wbmZC5puUmO6BCosZXrm1bVtL8FbXuVTtz UiGxbj4IifuSRrtVFHZDzf7fBJkjIHGgFfpSNKtS/MH02dHLz91ExrCQ0G9HmZHF rLxmWZ3Wgap6HKvGWiQ8VTlpzEqtM52hMw9CZZ0GpdeS4NYQ/ZsgdrYliXISrNI6 bwy7J9smVhoOz828dPkyRN0ybIcK/XNJkRSa4q+YZE0TvFkdco9Isy/eANZ1UokR UdGAvBODPRY+XaMEiveG9Giec8twb9sHsQBTEoa0yXlKF6ZV+yHqV2DzLM2aRvbc 2c0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:23 2025 by rpki-client