$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1071032-5bb5-48fb-ad34-13668ce372b7.roa File: d1071032-5bb5-48fb-ad34-13668ce372b7.roa (raw, json) Hash identifier: YEbqAOnWIFsNt73RzPGUQ7Ao2KqjJ0T5APuwv/vAqho= Subject key identifier: D9:37:99:CF:E7:0C:8A:97:64:FA:52:91:8B:33:8A:E1:12:99:FD:89 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 57166B9984D0783B074AE8BB12C9541DD5BAD9BC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1071032-5bb5-48fb-ad34-13668ce372b7.roa Signing time: Sat 01 Nov 2025 00:00:58 +0000 ROA not before: Sat 01 Nov 2025 00:00:58 +0000 ROA not after: Sat 06 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2d::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:16:6b:99:84:d0:78:3b:07:4a:e8:bb:12:c9:54:1d:d5:ba:d9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 1 00:00:58 2025 GMT Not After : Dec 6 23:59:59 2025 GMT Subject: serialNumber=0ec9167df177062c38e31ee4d3ed7be014004e056cc142ef6918882417f01f45, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:dc:7b:1b:88:f8:49:52:ca:35:1a:b4:26:6c: 5a:3f:ce:de:ff:4c:6d:5b:27:14:22:be:2b:6d:ec: d2:1b:f4:01:bd:0d:1e:20:18:82:b7:45:5f:5b:88: fe:9e:23:c1:e3:24:fa:29:d8:c6:2c:ef:c8:33:3c: e1:ac:8f:e5:9d:67:ac:5a:f7:da:fa:d0:0f:11:95: 93:d3:ad:4c:f0:cb:99:4b:2d:1c:95:0b:43:f3:d7: 4d:75:4b:59:7e:a4:d8:dc:62:bd:b7:7f:d8:f3:4c: c7:71:d7:2d:3f:17:82:b8:23:af:7e:cc:ef:75:80: 77:06:f5:cb:46:31:43:7e:38:90:b0:2c:74:04:91: cc:19:7e:65:6a:79:b4:bd:f2:ee:09:7d:0b:f5:bb: 05:6b:cd:f5:ac:00:f1:a3:7e:a5:1f:9d:99:7a:50: 0e:ec:ec:5b:37:2d:9f:c1:0e:08:96:02:27:74:59: 00:61:23:81:a1:a7:09:7a:44:38:76:8a:22:a2:34: cc:65:04:d2:c4:a9:0c:e3:97:f8:8f:92:af:a8:64: ef:64:3b:6f:09:fa:1d:f2:41:4b:4f:bb:af:43:39: 6d:02:95:9a:12:54:04:52:be:66:8c:58:c5:93:e9: de:54:63:ac:3a:30:5f:dc:77:e5:5f:cf:90:a4:11: ef:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:37:99:CF:E7:0C:8A:97:64:FA:52:91:8B:33:8A:E1:12:99:FD:89 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1071032-5bb5-48fb-ad34-13668ce372b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2d::/36 Signature Algorithm: sha256WithRSAEncryption 0c:9d:67:8a:7f:c3:ab:44:97:95:3c:fa:69:04:7f:bb:af:e0: ad:6b:86:e9:7c:d5:1f:38:cd:41:f4:8e:b3:7b:9b:7b:4b:f2: 08:b4:b9:7f:80:19:c5:d0:c9:7c:02:db:ba:f6:60:e2:96:74: ed:60:ed:ec:19:0d:df:c9:75:a8:d5:55:6f:2e:42:2f:17:44: c5:82:03:10:7b:3f:15:e8:f1:3f:60:4a:18:04:39:44:1b:32: 3f:85:9e:3a:8e:58:cf:8d:1b:74:e7:9e:ea:b2:54:54:da:76: 5d:cd:3c:89:45:91:5d:7f:fa:47:99:5d:a6:76:26:3c:a7:6a: 4d:24:50:97:2f:b4:c9:c1:60:0f:60:02:b4:91:72:88:3b:3c: c7:02:dd:e1:27:fe:a9:52:da:92:8a:e7:de:4e:7c:a3:eb:df: e3:ac:f3:c0:3c:33:83:c8:b0:94:cb:90:1b:46:33:ff:3b:42: 4d:79:9d:96:ef:7c:94:55:ea:b6:24:60:58:f7:05:57:d4:3c: b6:c2:e6:9a:15:2f:78:f0:d3:c0:d6:fc:db:94:d7:2f:7a:d4: a9:5d:a6:ee:78:4f:36:ea:8c:0e:51:13:3a:2a:63:54:b2:7b: 94:f4:b3:05:ee:34:29:df:c4:94:43:01:0e:63:e2:cc:c4:ea: 90:6a:eb:e6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVxZrmYTQeDsHSui7EslUHdW62bwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwMTAwMDA1OFoX DTI1MTIwNjIzNTk1OVowejFJMEcGA1UEBRNAMGVjOTE2N2RmMTc3MDYyYzM4ZTMx ZWU0ZDNlZDdiZTAxNDAwNGUwNTZjYzE0MmVmNjkxODg4MjQxN2YwMWY0NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69x7G4j4SVLKNRq0JmxaP87e/0xt WycUIr4rbezSG/QBvQ0eIBiCt0VfW4j+niPB4yT6KdjGLO/IMzzhrI/lnWesWvfa +tAPEZWT061M8MuZSy0clQtD89dNdUtZfqTY3GK9t3/Y80zHcdctPxeCuCOvfszv dYB3BvXLRjFDfjiQsCx0BJHMGX5lanm0vfLuCX0L9bsFa831rADxo36lH52ZelAO 7OxbNy2fwQ4IlgIndFkAYSOBoacJekQ4dooiojTMZQTSxKkM45f4j5KvqGTvZDtv Cfod8kFLT7uvQzltApWaElQEUr5mjFjFk+neVGOsOjBf3HflX8+QpBHvWQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNk3mc/nDIqXZPpSkYsziuESmf2JMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QxMDcxMDMyLTViYjUtNDhmYi1hZDM0LTEzNjY4Y2UzNzJiNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaLQAwDQYJKoZIhvcNAQELBQADggEBAAydZ4p/w6tEl5U8+mkE f7uv4K1rhul81R84zUH0jrN7m3tL8gi0uX+AGcXQyXwC27r2YOKWdO1g7ewZDd/J dajVVW8uQi8XRMWCAxB7PxXo8T9gShgEOUQbMj+FnjqOWM+NG3TnnuqyVFTadl3N PIlFkV1/+keZXaZ2Jjynak0kUJcvtMnBYA9gArSRcog7PMcC3eEn/qlS2pKK595O fKPr3+Os88A8M4PIsJTLkBtGM/87Qk15nZbvfJRV6rYkYFj3BVfUPLbC5poVL3jw 08DW/NuU1y961Kldpu54TzbqjA5REzoqY1Sye5T0swXuNCnfxJRDAQ5j4szE6pBq 6+Y= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:27 2025 by rpki-client