$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0ae0175-f350-4493-ae35-4deb479e034e.roa File: e0ae0175-f350-4493-ae35-4deb479e034e.roa (raw, json) Hash identifier: X75JZ5ALUldtjeAebN2FYwIA45vQ/Dl8mdPca+BL2aw= Subject key identifier: 6B:19:7B:D7:27:E8:B8:94:42:34:0C:7C:3D:84:FD:CF:AC:31:C0:B2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7D19577E753F1CB0119D74D5F2687CCC7FBE6CD3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0ae0175-f350-4493-ae35-4deb479e034e.roa Signing time: Sat 25 Oct 2025 00:00:01 +0000 ROA not before: Sat 25 Oct 2025 00:00:01 +0000 ROA not after: Sat 29 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da24:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:19:57:7e:75:3f:1c:b0:11:9d:74:d5:f2:68:7c:cc:7f:be:6c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 25 00:00:01 2025 GMT Not After : Nov 29 23:59:59 2025 GMT Subject: serialNumber=978cd1b7716cb2b105e293074c1fe721d0623e1695bc6c940e7ed53930d47afe, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:ef:a9:30:4a:90:4b:65:00:23:67:47:e5: 53:6d:d3:44:11:b2:c3:c8:ec:4e:4c:04:64:c2:f9: df:8c:87:35:d3:68:fc:38:b0:1b:08:af:77:28:e3: 40:ea:a7:5a:24:32:94:05:5b:49:28:5c:3f:54:1c: 13:bb:6e:ce:a0:28:62:03:3d:72:37:c8:90:6d:15: c4:3d:0e:1e:07:6e:91:cf:53:7e:d8:e4:7a:bc:95: fc:81:e3:2a:81:d0:ae:2d:51:4a:1d:22:c7:35:d8: 19:1d:f9:13:01:61:f3:79:08:f2:61:bc:84:11:a2: 61:ac:f4:c5:7b:e7:73:af:46:27:c9:e4:17:6a:60: f5:a9:5b:69:f4:2d:fe:82:f7:8b:36:c7:c4:55:52: e8:16:41:e0:1e:8b:39:76:5e:d2:6b:92:ab:b3:ef: c5:56:18:80:09:41:c5:82:c8:04:a0:56:21:58:68: cc:43:77:e1:f9:bc:d9:8d:88:8f:84:1a:44:a5:87: 1d:90:59:cb:42:2c:93:f4:51:1e:45:02:05:f9:b5: cc:49:e0:0c:88:03:eb:fa:b0:b4:90:a1:75:65:37: ff:cd:f8:0e:d3:13:82:31:61:23:67:fc:14:ff:02: d3:40:dc:33:fb:d0:34:c2:0d:63:e2:4a:c8:4f:fd: fb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:19:7B:D7:27:E8:B8:94:42:34:0C:7C:3D:84:FD:CF:AC:31:C0:B2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0ae0175-f350-4493-ae35-4deb479e034e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da24:8000::/36 Signature Algorithm: sha256WithRSAEncryption b0:ad:4b:36:7d:06:9b:c5:f2:4f:54:df:20:f3:9e:4a:11:89: 5a:c9:91:2f:ce:47:71:67:74:72:89:9d:af:0e:d4:2a:af:26: 17:8a:5f:4b:5e:6e:49:05:a0:55:30:6b:71:5b:01:e4:df:f3: 25:01:34:3c:27:64:79:04:1d:65:14:57:ad:1b:13:05:ca:59: 3a:98:73:b7:e4:57:21:46:8f:5d:6e:02:65:b1:de:92:98:df: 89:75:a3:15:6e:f7:4b:64:a6:b1:b9:cd:a4:1a:19:e9:22:c7: f1:8f:d9:3e:0e:f2:e2:51:2f:55:e1:3e:7b:42:5c:35:35:64: 5e:7b:a3:66:16:71:bf:cc:90:f2:fc:7f:9f:f0:4a:c1:de:4c: ff:d7:cb:f5:d4:cf:42:94:d1:01:c7:68:c5:3e:7b:41:8f:40: ec:cd:24:21:0e:10:74:8f:2b:ce:e5:8d:cc:92:53:8a:9d:1a: 84:db:5a:90:75:de:96:90:80:e5:10:88:5b:52:f0:3f:25:0b: bb:17:83:8b:63:f0:8d:e8:bf:3d:df:e5:34:32:dd:33:94:23: 01:d7:f3:87:38:bc:f4:56:55:4b:41:67:5a:e5:56:25:c7:9e: 1b:1b:71:ee:22:4b:42:e5:ed:b2:57:dc:66:6b:45:00:0e:5b: 51:ae:ff:5a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfRlXfnU/HLARnXTV8mh8zH++bNMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyNTAwMDAwMVoX DTI1MTEyOTIzNTk1OVowejFJMEcGA1UEBRNAOTc4Y2QxYjc3MTZjYjJiMTA1ZTI5 MzA3NGMxZmU3MjFkMDYyM2UxNjk1YmM2Yzk0MGU3ZWQ1MzkzMGQ0N2FmZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5HvqTBKkEtlACNnR+VTbdNEEbLD yOxOTARkwvnfjIc102j8OLAbCK93KONA6qdaJDKUBVtJKFw/VBwTu27OoChiAz1y N8iQbRXEPQ4eB26Rz1N+2OR6vJX8geMqgdCuLVFKHSLHNdgZHfkTAWHzeQjyYbyE EaJhrPTFe+dzr0YnyeQXamD1qVtp9C3+gveLNsfEVVLoFkHgHos5dl7Sa5Krs+/F VhiACUHFgsgEoFYhWGjMQ3fh+bzZjYiPhBpEpYcdkFnLQiyT9FEeRQIF+bXMSeAM iAPr+rC0kKF1ZTf/zfgO0xOCMWEjZ/wU/wLTQNwz+9A0wg1j4krIT/37MwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGsZe9cn6LiUQjQMfD2E/c+sMcCyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwYWUwMTc1LWYzNTAtNDQ5My1hZTM1LTRkZWI0NzllMDM0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaJIAwDQYJKoZIhvcNAQELBQADggEBALCtSzZ9BpvF8k9U3yDz nkoRiVrJkS/OR3FndHKJna8O1CqvJheKX0tebkkFoFUwa3FbAeTf8yUBNDwnZHkE HWUUV60bEwXKWTqYc7fkVyFGj11uAmWx3pKY34l1oxVu90tkprG5zaQaGekix/GP 2T4O8uJRL1XhPntCXDU1ZF57o2YWcb/MkPL8f5/wSsHeTP/Xy/XUz0KU0QHHaMU+ e0GPQOzNJCEOEHSPK87ljcySU4qdGoTbWpB13paQgOUQiFtS8D8lC7sXg4tj8I3o vz3f5TQy3TOUIwHX84c4vPRWVUtBZ1rlViXHnhsbce4iS0Ll7bJX3GZrRQAOW1Gu /1o= -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:20 2025 by rpki-client