$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f79388ce-7d40-4e2d-99a2-f64918866a6d.roa File: f79388ce-7d40-4e2d-99a2-f64918866a6d.roa (raw, json) Hash identifier: uqAS+MWevvPXYFa64+7fATfbUDqmLm7PFnovllvG/9w= Subject key identifier: 27:7B:59:22:67:A9:AC:B8:E3:8B:3F:01:52:29:9D:41:9E:C7:AB:BC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6FE233D8BEA749FD97D1F2B5D66E627F1E92B0C2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f79388ce-7d40-4e2d-99a2-f64918866a6d.roa Signing time: Tue 21 Oct 2025 00:00:08 +0000 ROA not before: Tue 21 Oct 2025 00:00:08 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e2:33:d8:be:a7:49:fd:97:d1:f2:b5:d6:6e:62:7f:1e:92:b0:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 21 00:00:08 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=5e557736c9bccd829ed5f6d233d0825951279c7de702b75ef2aeb37f54792a38, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:9e:ed:ff:b9:62:81:fb:34:68:f4:5c:2d: 1a:16:10:63:23:af:8c:4f:c8:1f:c8:11:c8:a0:47: 11:e2:2e:b3:e3:97:00:bd:95:c6:b9:19:75:e4:89: 1e:f3:79:72:d2:cb:bf:3d:0a:d5:b5:7c:d9:91:3b: 7e:bb:06:8c:d1:87:3d:61:73:d5:6f:25:fd:0a:8c: 27:36:c1:3e:04:dc:e4:c8:56:9e:b7:79:21:d9:54: 2f:03:2f:17:a3:10:73:f9:e2:b9:d1:be:ee:48:45: 3c:be:ed:e9:94:27:56:f3:9b:40:ed:bb:b7:0d:47: ec:4b:1f:eb:24:6d:e2:10:f9:64:07:f2:95:ed:63: 35:b0:d5:97:8f:9a:2d:fa:11:7c:6a:29:3a:bc:90: 8a:c8:b4:81:cb:d3:e1:2d:32:5a:c8:57:b9:56:1e: 20:b5:6f:df:34:54:45:6e:7f:35:a0:03:98:66:ac: 3f:24:97:74:58:94:01:b2:5b:6a:1a:a1:3f:6a:80: 1e:ae:20:12:20:85:4d:5b:66:4c:0d:0a:eb:2d:75: bd:9d:63:92:37:c2:8d:91:41:33:89:d1:c6:96:8c: 73:a6:76:1e:cb:04:82:8e:bc:7d:33:c3:d3:07:42: d9:3f:b2:f3:d3:e6:8d:cc:e8:55:a1:7d:bc:4b:6e: d8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7B:59:22:67:A9:AC:B8:E3:8B:3F:01:52:29:9D:41:9E:C7:AB:BC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f79388ce-7d40-4e2d-99a2-f64918866a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:7000::/40 Signature Algorithm: sha256WithRSAEncryption a9:1a:26:a7:e2:60:45:38:bc:18:0f:70:9c:bb:5c:87:0a:c6: 40:28:cb:20:95:c1:25:a3:cd:03:a7:f3:06:b3:74:2e:08:d4: e4:80:99:1e:37:19:a0:e3:c5:30:17:2c:87:cd:01:44:8d:39: 91:9e:b4:01:55:46:c5:51:ff:5e:5e:1c:07:07:df:44:53:d0: 2a:c2:71:cb:2a:7a:81:43:c8:2c:d0:6b:75:0c:cd:d7:15:8b: 73:44:71:b9:34:6a:97:45:6e:c7:de:6d:9b:0d:a6:2e:3d:62: 6e:44:44:1e:9b:fd:f6:77:6b:d9:8f:81:dd:26:52:a9:0c:56: a1:e7:66:13:f5:bb:d0:46:2a:c1:1d:c9:06:05:83:a5:03:e3: 67:35:fa:ee:40:c2:05:0c:6e:d7:d5:95:fd:2c:3b:f8:7d:01: c8:69:e3:42:cc:74:d6:37:7f:97:2e:73:4c:88:98:76:52:fa: ce:15:d4:c0:4f:2c:2e:1f:be:5c:fa:7b:13:59:8d:fb:b8:96: 34:81:1f:b6:d7:1c:55:f3:29:81:58:4e:7d:21:af:12:e4:7d: e9:c4:d0:70:6e:e5:f1:30:1a:23:f6:5a:96:59:f3:95:ea:55: 77:59:63:58:da:09:3e:82:73:8e:92:f3:0e:80:5d:e3:4c:8b: 91:e4:b3:18 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUb+Iz2L6nSf2X0fK11m5ifx6SsMIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyMTAwMDAwOFoX DTI1MTEyNTIzNTk1OVowejFJMEcGA1UEBRNANWU1NTc3MzZjOWJjY2Q4MjllZDVm NmQyMzNkMDgyNTk1MTI3OWM3ZGU3MDJiNzVlZjJhZWIzN2Y1NDc5MmEzODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRee7f+5YoH7NGj0XC0aFhBjI6+M T8gfyBHIoEcR4i6z45cAvZXGuRl15Ike83ly0su/PQrVtXzZkTt+uwaM0Yc9YXPV byX9CownNsE+BNzkyFaet3kh2VQvAy8XoxBz+eK50b7uSEU8vu3plCdW85tA7bu3 DUfsSx/rJG3iEPlkB/KV7WM1sNWXj5ot+hF8aik6vJCKyLSBy9PhLTJayFe5Vh4g tW/fNFRFbn81oAOYZqw/JJd0WJQBsltqGqE/aoAeriASIIVNW2ZMDQrrLXW9nWOS N8KNkUEzidHGloxzpnYeywSCjrx9M8PTB0LZP7Lz0+aNzOhVoX28S27YlQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCd7WSJnqay444s/AVIpnUGex6u8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y3OTM4OGNlLTdkNDAtNGUyZC05OWEyLWY2NDkxODg2NmE2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba73AwDQYJKoZIhvcNAQELBQADggEBAKkaJqfiYEU4vBgPcJy7 XIcKxkAoyyCVwSWjzQOn8wazdC4I1OSAmR43GaDjxTAXLIfNAUSNOZGetAFVRsVR /15eHAcH30RT0CrCccsqeoFDyCzQa3UMzdcVi3NEcbk0apdFbsfebZsNpi49Ym5E RB6b/fZ3a9mPgd0mUqkMVqHnZhP1u9BGKsEdyQYFg6UD42c1+u5AwgUMbtfVlf0s O/h9Achp40LMdNY3f5cuc0yImHZS+s4V1MBPLC4fvlz6exNZjfu4ljSBH7bXHFXz KYFYTn0hrxLkfenE0HBu5fEwGiP2WpZZ85XqVXdZY1jaCT6Cc46S8w6AXeNMi5Hk sxg= -----END CERTIFICATE-----Generated at Wed Nov 5 12:36:38 2025 by rpki-client