$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d305eddf-3172-4e8c-905b-a0f82d07dd6c.roa File: d305eddf-3172-4e8c-905b-a0f82d07dd6c.roa (raw, json) Hash identifier: yTmdaFSme6U//Q9zmGyt7X65z98fbnaz59KhZ/g0dN0= Subject key identifier: 04:6A:59:FD:54:72:9F:0F:BF:DB:F3:22:17:C5:A5:66:9F:8A:9F:32 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 15C3F3583D56E29E099B5BA35107FBC382EFFE2C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d305eddf-3172-4e8c-905b-a0f82d07dd6c.roa Signing time: Wed 29 Oct 2025 07:38:03 +0000 ROA not before: Wed 29 Oct 2025 07:38:03 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c3:f3:58:3d:56:e2:9e:09:9b:5b:a3:51:07:fb:c3:82:ef:fe:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 07:38:03 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=41b37ca6c11ebc38c93ae739d5a303c8885ae3492e9feded1e9c2cd10e7c06af, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f0:64:43:bc:dd:78:a1:dc:8b:37:ff:a7:88: 08:90:da:eb:21:bf:d2:57:81:d9:bd:db:9e:a1:a1: 06:00:bd:4f:58:70:64:04:22:f6:6f:8d:d4:e0:42: e9:e2:24:47:9b:5b:7e:9a:2e:85:57:6d:07:df:b4: 15:7d:d3:2e:b5:06:21:6f:da:9c:b2:2b:b7:2c:8b: d4:56:85:30:d7:19:84:05:00:a4:16:f5:ce:a0:71: 54:89:2a:f7:27:3c:49:49:55:28:48:cd:2a:ac:6b: fd:51:08:a9:07:fc:f7:14:c1:89:0c:10:7f:47:60: 18:86:29:c4:7b:08:a8:20:54:51:65:5f:df:44:18: 2b:be:4d:04:f6:96:b1:46:f2:16:34:ab:9f:58:68: 84:24:ce:77:e9:b9:f0:12:20:2d:8b:db:29:58:8b: 02:b7:e9:f2:93:c6:8d:8c:19:be:10:f3:ff:94:36: d5:e5:13:22:22:25:39:89:cd:43:1e:95:f7:d5:1c: 8e:f4:02:cb:32:90:2c:d5:3c:b5:bd:9d:6b:82:81: 92:4f:d8:8d:03:25:5a:d7:e4:a4:5d:6d:88:9f:fc: 77:93:c3:86:1d:15:53:71:d3:06:d0:00:b3:d8:28: 19:e6:16:d3:b9:3a:13:a7:08:fb:c3:47:51:22:a0: a2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6A:59:FD:54:72:9F:0F:BF:DB:F3:22:17:C5:A5:66:9F:8A:9F:32 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d305eddf-3172-4e8c-905b-a0f82d07dd6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 17:85:fa:dc:94:5b:a6:8f:63:31:90:bc:86:1f:7a:48:61:82: 4d:37:47:b6:5c:26:c4:e3:bb:61:8a:f9:b6:51:4e:e3:75:61: 99:49:11:8a:c7:41:1a:15:7e:df:4a:08:b8:95:63:bf:97:47: 5d:a6:9b:64:23:ee:cf:a5:36:88:b3:ea:46:0c:22:90:b1:41: a2:1a:04:02:57:2b:ca:9f:71:18:3b:b3:6d:70:20:4a:15:f9: 02:bc:07:66:0d:74:46:f5:9c:e9:6a:be:47:15:bc:f5:bc:f9: 4f:a2:bd:9d:ac:48:27:b9:c6:ad:e1:f0:06:03:6b:b9:d3:6d: 06:7c:0f:33:b6:cd:75:b9:e2:50:3f:69:57:40:2a:2e:61:68: 0e:89:de:2f:dd:ac:95:6a:b3:87:ae:f0:13:2e:85:bc:41:0f: c9:7a:cc:bb:aa:2d:97:27:88:7a:71:43:cf:a5:cf:ac:20:1a: 9a:cd:86:e0:de:04:97:c8:a2:76:c2:89:d8:3d:d8:30:c2:91: f4:0a:4b:2c:20:e3:eb:9e:cc:30:0f:3d:37:a8:35:f8:7b:56: a6:98:9a:32:24:e1:e3:c4:b9:75:26:49:42:84:8e:0c:0e:07: 78:c7:69:c6:be:ee:e1:3f:7b:95:82:79:23:28:87:be:17:46: 1d:ce:a2:8e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFcPzWD1W4p4Jm1ujUQf7w4Lv/iwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTA3MzgwM1oX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNANDFiMzdjYTZjMTFlYmMzOGM5M2Fl NzM5ZDVhMzAzYzg4ODVhZTM0OTJlOWZlZGVkMWU5YzJjZDEwZTdjMDZhZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vBkQ7zdeKHcizf/p4gIkNrrIb/S V4HZvdueoaEGAL1PWHBkBCL2b43U4ELp4iRHm1t+mi6FV20H37QVfdMutQYhb9qc siu3LIvUVoUw1xmEBQCkFvXOoHFUiSr3JzxJSVUoSM0qrGv9UQipB/z3FMGJDBB/ R2AYhinEewioIFRRZV/fRBgrvk0E9paxRvIWNKufWGiEJM536bnwEiAti9spWIsC t+nyk8aNjBm+EPP/lDbV5RMiIiU5ic1DHpX31RyO9ALLMpAs1Ty1vZ1rgoGST9iN AyVa1+SkXW2In/x3k8OGHRVTcdMG0ACz2CgZ5hbTuToTpwj7w0dRIqCiGQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFARqWf1Ucp8Pv9vzIhfFpWafip8yMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QzMDVlZGRmLTMxNzItNGU4Yy05MDViLWEwZjgyZDA3ZGQ2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6oDAMA0GCSqGSIb3DQEBCwUAA4IBAQAXhfrclFumj2MxkLyG H3pIYYJNN0e2XCbE47thivm2UU7jdWGZSRGKx0EaFX7fSgi4lWO/l0ddpptkI+7P pTaIs+pGDCKQsUGiGgQCVyvKn3EYO7NtcCBKFfkCvAdmDXRG9Zzpar5HFbz1vPlP or2drEgnucat4fAGA2u5020GfA8zts11ueJQP2lXQCouYWgOid4v3ayVarOHrvAT LoW8QQ/Jesy7qi2XJ4h6cUPPpc+sIBqazYbg3gSXyKJ2wonYPdgwwpH0CkssIOPr nswwDz03qDX4e1ammJoyJOHjxLl1JklChI4MDgd4x2nGvu7hP3uVgnkjKIe+F0Yd zqKO -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:19 2025 by rpki-client