$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d47ce112-c2bb-4af9-8e57-271d2038e059.roa File: d47ce112-c2bb-4af9-8e57-271d2038e059.roa (raw, json) Hash identifier: ZecV1lA2cPXsp60ED/JS/en7xF9Qnk3fX/j8sWF4aXk= Subject key identifier: 11:4C:7B:4F:73:97:3A:3D:DB:A7:07:78:BE:A2:83:10:1C:34:0B:6B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 31A1206E06D978ED7325A17B922EB5F78C84EECE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d47ce112-c2bb-4af9-8e57-271d2038e059.roa Signing time: Sat 01 Nov 2025 00:00:42 +0000 ROA not before: Sat 01 Nov 2025 00:00:42 +0000 ROA not after: Sat 06 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a1:20:6e:06:d9:78:ed:73:25:a1:7b:92:2e:b5:f7:8c:84:ee:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 1 00:00:42 2025 GMT Not After : Dec 6 23:59:59 2025 GMT Subject: serialNumber=9c07ad9d37c43da560e405b34be371b84da4a0678ca60e6cefb4a26618bae4b1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:08:e1:37:ca:a7:5b:58:0d:e2:ba:e2:b6:22: 16:05:b6:54:0a:6b:5a:58:a2:78:99:17:6d:fd:3b: 01:bf:3c:9f:27:20:ae:8b:0d:46:ad:05:8d:46:9f: 6e:6f:92:26:18:d7:fc:c1:bb:28:64:ef:c7:30:8a: de:c5:18:66:8d:1b:40:a9:91:e6:f5:f6:3a:4f:96: 74:9d:7b:54:9d:dd:d2:c2:90:e0:01:63:f1:97:60: a6:3f:ed:0f:7a:e2:be:4a:00:c4:59:8a:f3:36:8f: 32:b1:78:10:fd:ff:95:08:20:fd:df:cb:e0:f0:8c: ce:e2:02:e2:da:60:5d:d5:4a:bf:ec:f6:de:f5:d6: 46:36:e8:5a:6e:a7:de:fb:01:03:6c:d0:d6:cb:29: c8:1a:41:dc:8f:c3:36:45:b6:70:09:22:68:d1:7f: 2b:41:6f:c9:04:a9:6a:4b:c6:2b:e3:47:4e:f2:c6: 27:67:54:79:53:e9:41:35:f5:3f:a4:c0:19:79:3b: a8:43:76:ff:81:6f:4f:a2:a7:77:aa:0c:9f:92:0a: 4e:d7:2c:dd:ff:85:e2:36:be:80:f9:e6:b7:14:82: 3b:db:95:38:82:c9:96:32:f0:bc:26:4e:2a:be:4e: 86:c4:5c:bc:25:9b:97:0b:f8:02:a4:39:b5:10:8d: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4C:7B:4F:73:97:3A:3D:DB:A7:07:78:BE:A2:83:10:1C:34:0B:6B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d47ce112-c2bb-4af9-8e57-271d2038e059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:2800::/40 Signature Algorithm: sha256WithRSAEncryption ae:85:42:49:a9:82:3d:29:15:5f:3e:fc:f7:cf:df:41:fb:c1: 3c:cf:98:74:2a:90:ea:6d:e1:d5:61:9a:91:99:f1:b3:87:f7: f2:28:07:aa:74:87:59:7d:2e:4c:88:d6:bc:be:e5:c7:68:62: 21:f1:a3:c9:fc:c7:bb:06:83:00:08:3d:03:ce:7f:b3:71:92: be:ce:20:44:a6:1e:9a:71:7b:04:41:3a:eb:66:79:45:17:e5: f9:27:55:b6:ad:3b:93:16:dc:eb:99:81:3b:39:a7:35:77:2a: 7a:05:40:32:d9:16:3e:c6:6a:28:f4:6d:b4:d9:0a:e2:46:89: 42:cf:cc:16:e3:c0:c7:10:08:1d:67:be:53:92:97:f3:d0:27: ac:bf:de:a2:7a:8a:8a:f2:3c:a0:b0:05:6c:88:cb:50:da:c6: 82:4c:d6:6c:c6:73:1c:4a:c7:08:4a:6a:72:e6:91:c2:85:d0: 90:af:ff:f7:23:d5:b3:e1:05:c1:d8:c3:4b:66:03:24:f2:a5: 91:c2:37:43:c8:70:cf:39:78:cd:99:b2:c1:bf:4f:40:a8:a0: 4d:21:ab:7b:37:e0:ee:99:4d:b3:86:e3:a3:ea:b4:95:86:3f: b8:20:52:e2:15:fd:0f:85:52:29:82:4d:ca:19:5f:0b:70:09: 08:5b:2c:4b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMaEgbgbZeO1zJaF7ki6194yE7s4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwMTAwMDA0MloX DTI1MTIwNjIzNTk1OVowejFJMEcGA1UEBRNAOWMwN2FkOWQzN2M0M2RhNTYwZTQw NWIzNGJlMzcxYjg0ZGE0YTA2NzhjYTYwZTZjZWZiNGEyNjYxOGJhZTRiMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgjhN8qnW1gN4rritiIWBbZUCmta WKJ4mRdt/TsBvzyfJyCuiw1GrQWNRp9ub5ImGNf8wbsoZO/HMIrexRhmjRtAqZHm 9fY6T5Z0nXtUnd3SwpDgAWPxl2CmP+0PeuK+SgDEWYrzNo8ysXgQ/f+VCCD938vg 8IzO4gLi2mBd1Uq/7Pbe9dZGNuhabqfe+wEDbNDWyynIGkHcj8M2RbZwCSJo0X8r QW/JBKlqS8Yr40dO8sYnZ1R5U+lBNfU/pMAZeTuoQ3b/gW9Poqd3qgyfkgpO1yzd /4XiNr6A+ea3FII725U4gsmWMvC8Jk4qvk6GxFy8JZuXC/gCpDm1EI2YIQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBFMe09zlzo926cHeL6igxAcNAtrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q0N2NlMTEyLWMyYmItNGFmOS04ZTU3LTI3MWQyMDM4ZTA1OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9CgwDQYJKoZIhvcNAQELBQADggEBAK6FQkmpgj0pFV8+/PfP 30H7wTzPmHQqkOpt4dVhmpGZ8bOH9/IoB6p0h1l9LkyI1ry+5cdoYiHxo8n8x7sG gwAIPQPOf7Nxkr7OIESmHppxewRBOutmeUUX5fknVbatO5MW3OuZgTs5pzV3KnoF QDLZFj7Gaij0bbTZCuJGiULPzBbjwMcQCB1nvlOSl/PQJ6y/3qJ6ioryPKCwBWyI y1DaxoJM1mzGcxxKxwhKanLmkcKF0JCv//cj1bPhBcHYw0tmAyTypZHCN0PIcM85 eM2ZssG/T0CooE0hq3s34O6ZTbOG46PqtJWGP7ggUuIV/Q+FUimCTcoZXwtwCQhb LEs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:22 2025 by rpki-client