$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07bbdcc6-3088-4488-9174-6e4b19fef87e.roa File: 07bbdcc6-3088-4488-9174-6e4b19fef87e.roa (raw, json) Hash identifier: np/XLtzUBCSHj0vIuHm+bCGMr4Ur4CRQ8mEAEnl2otw= Subject key identifier: 69:30:95:E5:1F:60:DA:BF:C4:1C:36:FF:B1:02:99:5E:1B:8D:FA:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 370D469FB3B0F2C7DE475F6AB4728D48F35250DA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07bbdcc6-3088-4488-9174-6e4b19fef87e.roa Signing time: Thu 13 Nov 2025 00:00:43 +0000 ROA not before: Thu 13 Nov 2025 00:00:43 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0d:46:9f:b3:b0:f2:c7:de:47:5f:6a:b4:72:8d:48:f3:52:50:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 13 00:00:43 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=c0c4a8f28de8e950e77cc7b8f6a8bba68fd6e90de3dcbc4c7b7268d7b78cb833, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:a9:32:e5:88:f3:c0:26:cc:a3:31:ad:e5: 75:be:df:39:06:ef:38:d1:48:74:30:39:b5:f4:ee: 45:3e:63:cc:e9:7a:5b:03:db:8e:dc:63:86:17:1f: 0c:cd:7e:3a:27:3f:a7:23:7e:e4:d2:10:b0:a5:54: 0a:a2:0c:57:67:96:d2:92:5c:95:6c:d9:26:19:e7: 31:de:7b:6c:4e:e2:63:13:50:35:a4:96:1a:42:30: 3f:7a:55:c0:9f:93:b2:00:5d:05:55:68:62:44:2d: ee:57:b8:6e:dc:7c:b0:12:19:7c:d0:b7:75:5b:06: fc:44:55:a2:2c:5b:9d:ff:a4:9d:4e:1b:57:b2:d4: 76:7c:ba:7c:c5:d6:53:e7:a9:4a:a6:75:60:da:f8: 02:76:22:1e:16:ae:46:76:22:ac:b6:9d:59:a8:46: 64:51:a2:c8:49:5f:5a:59:4a:7e:85:5e:13:ed:22: 2e:a7:6f:55:d2:0b:a1:1a:57:98:62:e1:72:88:3f: 8d:6d:00:bd:ef:1d:e9:e9:f2:8c:69:6c:bb:a4:bd: 1a:8b:42:73:39:2a:b7:5e:d3:2f:82:fc:11:d9:44: 80:1c:0e:b5:dd:9e:3f:ef:08:d5:97:3a:95:55:f4: 21:91:60:48:0d:6d:5f:6f:06:83:2e:57:19:2f:34: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:30:95:E5:1F:60:DA:BF:C4:1C:36:FF:B1:02:99:5E:1B:8D:FA:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07bbdcc6-3088-4488-9174-6e4b19fef87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:2000::/40 Signature Algorithm: sha256WithRSAEncryption cb:92:e4:76:97:c8:06:41:25:d4:38:f2:f0:c2:d0:61:f5:d6: 5e:7f:1c:ec:c8:2d:07:8b:54:19:a9:b8:37:20:46:ef:e5:9d: e8:60:4b:90:35:8c:83:8c:40:31:c8:26:31:91:30:a1:a4:f1: 4d:5c:e4:a5:80:b5:f8:a3:0b:8c:94:8d:2b:d9:39:a6:78:30: 8b:46:80:fd:e6:77:fb:55:1d:7e:b7:61:af:df:f3:e4:aa:aa: da:64:5f:ce:8b:98:81:7d:78:e2:69:79:34:c7:0d:34:fe:7e: 16:a7:8a:5c:83:a4:46:d0:1d:ad:a8:7d:e3:54:a9:89:9a:82: ed:d4:02:01:77:0e:0d:fc:2f:32:72:2e:a6:79:18:a1:2c:1e: 62:33:e7:35:0d:c7:7d:2b:0b:40:ec:98:bc:bb:32:84:b8:b4: 04:80:d0:1d:9d:c8:90:78:9d:00:4d:5a:f3:07:8e:a4:88:05: 96:72:54:df:ed:93:5d:3b:d2:4c:3f:41:84:ba:b7:d7:ea:9e: 72:ef:3b:3d:95:12:96:bc:79:09:c0:b5:d6:72:dc:86:37:22: 73:ef:62:c2:14:f8:d1:30:c8:ca:b7:c1:86:cd:2f:86:16:91: b3:79:b4:16:70:64:98:35:0d:91:71:1b:5a:88:cc:2d:3a:95: 9b:44:1d:26 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNw1Gn7Ow8sfeR19qtHKNSPNSUNowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTExMzAwMDA0M1oX DTI1MTIxODIzNTk1OVowejFJMEcGA1UEBRNAYzBjNGE4ZjI4ZGU4ZTk1MGU3N2Nj N2I4ZjZhOGJiYTY4ZmQ2ZTkwZGUzZGNiYzRjN2I3MjY4ZDdiNzhjYjgzMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLapMuWI88AmzKMxreV1vt85Bu84 0Uh0MDm19O5FPmPM6XpbA9uO3GOGFx8MzX46Jz+nI37k0hCwpVQKogxXZ5bSklyV bNkmGecx3ntsTuJjE1A1pJYaQjA/elXAn5OyAF0FVWhiRC3uV7hu3HywEhl80Ld1 Wwb8RFWiLFud/6SdThtXstR2fLp8xdZT56lKpnVg2vgCdiIeFq5GdiKstp1ZqEZk UaLISV9aWUp+hV4T7SIup29V0guhGleYYuFyiD+NbQC97x3p6fKMaWy7pL0ai0Jz OSq3XtMvgvwR2USAHA613Z4/7wjVlzqVVfQhkWBIDW1fbwaDLlcZLzSkhwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGkwleUfYNq/xBw2/7ECmV4bjfpYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3YmJkY2M2LTMwODgtNDQ4OC05MTc0LTZlNGIxOWZlZjg3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7SAwDQYJKoZIhvcNAQELBQADggEBAMuS5HaXyAZBJdQ48vDC 0GH11l5/HOzILQeLVBmpuDcgRu/lnehgS5A1jIOMQDHIJjGRMKGk8U1c5KWAtfij C4yUjSvZOaZ4MItGgP3md/tVHX63Ya/f8+SqqtpkX86LmIF9eOJpeTTHDTT+fhan ilyDpEbQHa2ofeNUqYmagu3UAgF3Dg38LzJyLqZ5GKEsHmIz5zUNx30rC0DsmLy7 MoS4tASA0B2dyJB4nQBNWvMHjqSIBZZyVN/tk1070kw/QYS6t9fqnnLvOz2VEpa8 eQnAtdZy3IY3InPvYsIU+NEwyMq3wYbNL4YWkbN5tBZwZJg1DZFxG1qIzC06lZtE HSY= -----END CERTIFICATE-----Generated at Tue Nov 18 05:48:00 2025 by rpki-client