$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f308446-71c0-4da7-9488-837b94b0ca9c.roa File: 0f308446-71c0-4da7-9488-837b94b0ca9c.roa (raw, json) Hash identifier: vBMlg7e1ORLT4TXmmxWOUzqOk+U9+HrZ4eQU5Y9SHZI= Subject key identifier: D4:92:BF:C1:94:6C:FE:26:4F:73:9A:45:29:94:6D:5A:A0:1E:39:7B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1DFF2E7D34C9AC3B16AF9FA27ABDDE451D28FFC3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f308446-71c0-4da7-9488-837b94b0ca9c.roa Signing time: Fri 07 Nov 2025 00:40:42 +0000 ROA not before: Fri 07 Nov 2025 00:40:42 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ff:2e:7d:34:c9:ac:3b:16:af:9f:a2:7a:bd:de:45:1d:28:ff:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:40:42 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=c53c793ab96e71315a3be558e8734f0ccf2e04ec70973bf305502652b54c48ee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ef:1c:02:d6:54:69:78:1f:e6:d3:5f:ff:92: 4a:dc:a9:40:11:a6:97:b5:ee:2b:b7:b3:82:ed:60: 5b:f7:af:2d:a4:37:fd:85:be:06:87:55:99:99:ac: 1c:be:ec:6f:a3:5d:09:f0:60:ec:96:9d:a7:01:0e: 53:34:dc:4b:97:6d:ca:d7:48:4a:52:34:9d:71:3f: 4c:3b:64:d2:ba:6b:98:4e:73:5a:dd:e0:b7:0a:31: f3:ee:f1:af:7b:15:ac:58:ba:20:f7:1e:2d:95:12: e5:d3:f7:e6:52:7b:61:e4:de:b6:75:d3:33:12:53: 02:16:db:e8:ce:d1:5e:f7:2c:ce:2c:2b:3e:4b:06: 41:54:55:23:c4:75:78:f0:e7:21:de:5e:b1:d8:d8: a7:35:8f:0e:e8:c3:e4:81:3c:a7:f4:ed:af:c2:c8: 09:a2:f3:b5:0d:84:4c:95:bd:f5:33:16:fb:a8:76: a0:83:bb:32:42:c0:00:0f:63:33:5c:e7:ca:c0:f3: 26:6c:f1:f6:26:fa:2d:f3:9c:35:de:40:04:cf:c1: 13:82:14:d7:33:43:34:84:d1:93:33:70:da:d7:66: 2e:86:05:20:fb:53:f2:7e:8b:09:7f:8d:55:56:22: 35:f3:2f:67:2e:6e:b9:0a:7c:08:08:ca:98:cc:8e: c7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:92:BF:C1:94:6C:FE:26:4F:73:9A:45:29:94:6D:5A:A0:1E:39:7B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f308446-71c0-4da7-9488-837b94b0ca9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4080::/48 Signature Algorithm: sha256WithRSAEncryption 06:1c:64:ff:25:b5:ed:c5:b1:60:43:c8:9d:ab:50:a9:bb:83: 70:54:15:46:d3:e5:19:66:c2:ee:71:1d:9b:1f:43:35:58:95: 2c:b5:73:de:c6:c6:48:95:3c:04:9a:1b:26:1c:1e:27:da:0e: c2:50:c8:86:d0:be:6f:de:ca:2f:52:c6:ae:bf:6d:03:f0:96: 68:8b:eb:7b:69:21:7a:03:0c:e1:b5:d4:50:bd:27:cf:5b:4a: 73:43:f3:db:45:90:83:eb:4f:47:57:12:0c:28:b6:5c:9b:25: 69:20:52:45:61:15:49:3f:a5:fa:15:97:ed:4c:74:79:ce:74: c5:43:30:f2:31:f9:2d:fa:c5:57:d1:c3:14:49:61:89:53:33: 6b:2b:5d:4e:c0:a9:a8:b5:e0:3c:17:6c:c4:7c:4c:0a:53:49: ec:c1:d5:49:0e:58:8d:21:f5:64:f0:65:ef:2a:8c:8a:2a:40: 25:89:66:d0:88:d9:a0:1f:1f:6b:13:31:01:70:df:b6:65:60: 6f:5c:9d:0f:db:0b:10:ba:34:ed:db:f7:0b:c8:ca:cf:0e:dd: 98:68:2a:43:3a:16:56:04:81:9e:69:4e:3a:72:d0:26:4d:15: 92:4d:c8:d9:19:7d:14:d9:19:f8:ee:e5:c8:c1:1e:47:d8:21: 6f:4e:52:1e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHf8ufTTJrDsWr5+ier3eRR0o/8MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwNDA0MloX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAYzUzYzc5M2FiOTZlNzEzMTVhM2Jl NTU4ZTg3MzRmMGNjZjJlMDRlYzcwOTczYmYzMDU1MDI2NTJiNTRjNDhlZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu8cAtZUaXgf5tNf/5JK3KlAEaaX te4rt7OC7WBb968tpDf9hb4Gh1WZmawcvuxvo10J8GDslp2nAQ5TNNxLl23K10hK UjSdcT9MO2TSumuYTnNa3eC3CjHz7vGvexWsWLog9x4tlRLl0/fmUnth5N62ddMz ElMCFtvoztFe9yzOLCs+SwZBVFUjxHV48Och3l6x2NinNY8O6MPkgTyn9O2vwsgJ ovO1DYRMlb31Mxb7qHagg7syQsAAD2MzXOfKwPMmbPH2Jvot85w13kAEz8ETghTX M0M0hNGTM3Da12YuhgUg+1PyfosJf41VViI18y9nLm65CnwICMqYzI7HTQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNSSv8GUbP4mT3OaRSmUbVqgHjl7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmMzA4NDQ2LTcxYzAtNGRhNy05NDg4LTgzN2I5NGIwY2E5Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8kCAMA0GCSqGSIb3DQEBCwUAA4IBAQAGHGT/JbXtxbFgQ8id q1Cpu4NwVBVG0+UZZsLucR2bH0M1WJUstXPexsZIlTwEmhsmHB4n2g7CUMiG0L5v 3sovUsauv20D8JZoi+t7aSF6AwzhtdRQvSfPW0pzQ/PbRZCD609HVxIMKLZcmyVp IFJFYRVJP6X6FZftTHR5znTFQzDyMfkt+sVX0cMUSWGJUzNrK11OwKmoteA8F2zE fEwKU0nswdVJDliNIfVk8GXvKoyKKkAliWbQiNmgHx9rEzEBcN+2ZWBvXJ0P2wsQ ujTt2/cLyMrPDt2YaCpDOhZWBIGeaU46ctAmTRWSTcjZGX0U2Rn47uXIwR5H2CFv TlIe -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:51 2025 by rpki-client