$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/14ac5884-e669-47d5-bcbf-8694e4dc20a6.roa File: 14ac5884-e669-47d5-bcbf-8694e4dc20a6.roa (raw, json) Hash identifier: HXlmHl1NuLr8fT9fStEzFBJhVaDY42J/wpb9eis9UTc= Subject key identifier: 02:6C:44:28:D6:64:A0:2B:FC:9D:19:FA:CE:70:04:E4:27:09:F9:08 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6BC9F1DC98755A2F8A593E5B305B9E6BF8F6D6ED Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/14ac5884-e669-47d5-bcbf-8694e4dc20a6.roa Signing time: Fri 07 Nov 2025 00:30:33 +0000 ROA not before: Fri 07 Nov 2025 00:30:33 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:a040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c9:f1:dc:98:75:5a:2f:8a:59:3e:5b:30:5b:9e:6b:f8:f6:d6:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:30:33 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=6ad4ca740548346d5a5a7f746a1a7f90404b27eeffb826100ab839fba7cc7ae1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:4f:e8:54:3f:ee:9c:78:f4:91:f9:0b:7e: c9:c6:52:a0:53:29:d0:17:c0:b7:3b:0e:e5:83:8d: 84:33:54:33:f4:a8:3a:e4:36:77:c7:1a:5c:04:8e: e6:70:f2:38:0a:78:01:4e:aa:b5:32:41:81:dd:7d: bf:3b:a0:05:b6:72:22:5c:51:f5:cb:d4:b6:b3:4c: ba:65:fa:2e:ab:ca:f6:c8:3c:65:58:81:b9:a5:56: c3:36:4e:94:47:e7:b4:49:88:0d:22:a6:74:e1:89: aa:39:0f:85:e4:66:28:6f:84:c6:a5:22:00:4b:89: a6:7e:4f:47:a8:93:35:81:f8:6c:42:ee:9a:87:28: 2a:22:41:31:01:7d:f2:af:28:ea:9b:06:e5:c7:97: e4:e6:cd:c6:1a:c4:1e:93:52:b4:2a:19:50:f6:dd: 3b:b6:a8:7c:58:43:4f:e5:f8:42:9a:e9:74:ea:88: ba:49:c5:74:a5:ac:f8:be:cd:61:5f:49:88:b7:0b: 34:64:69:2f:3a:95:4f:05:bb:22:98:af:b6:28:34: 3a:38:e3:73:8c:ee:63:11:5a:19:64:a1:31:3e:a7: c0:59:3c:b1:c7:5d:8c:cd:d5:43:53:db:44:4e:1c: 37:20:e4:be:78:85:e0:ab:ae:a2:c7:b8:33:a2:5f: 6d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6C:44:28:D6:64:A0:2B:FC:9D:19:FA:CE:70:04:E4:27:09:F9:08 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/14ac5884-e669-47d5-bcbf-8694e4dc20a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:a040::/48 Signature Algorithm: sha256WithRSAEncryption 1e:b1:5b:21:00:79:30:5a:aa:11:35:a4:06:27:fa:8e:e4:ff: 06:2f:de:d4:35:51:6a:db:60:b6:80:6a:3b:24:f0:f0:d7:a6: a2:cb:43:cb:fa:de:e4:21:99:ec:19:04:2e:9a:fc:fd:bc:c0: c4:c2:0c:17:98:15:3f:d9:db:1b:cb:e1:b1:ac:17:c2:15:53: 55:46:a1:42:73:d6:87:37:a5:0a:da:ed:95:4e:a6:0b:6c:20: 52:f1:b7:ad:25:5d:ff:71:93:ba:d2:8b:7d:01:6a:59:96:32: 34:6e:eb:92:eb:7a:45:05:86:a0:da:07:28:a5:05:df:ba:ff: 72:2a:fd:61:3a:c6:59:a1:64:f9:ff:59:f1:a5:41:e5:19:8e: 92:81:a7:db:61:c1:57:cb:81:cd:c1:20:b7:f0:d5:1c:61:74: 3e:be:e8:30:05:92:a5:cd:89:ac:ab:68:6d:73:cc:7c:36:88: ac:ba:25:a6:ee:b7:8e:52:88:14:bf:9b:78:ec:47:c2:92:47: 9d:a2:15:97:e1:c7:d7:c2:4b:1d:61:ac:2b:0f:78:cf:63:1b: 9e:c1:f2:9d:24:fa:c1:b9:a9:15:1c:66:21:1a:5d:e8:53:41: 00:6e:fb:34:89:3d:87:81:c0:f1:60:ab:82:8f:4b:34:9f:92: fe:c4:50:50 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUa8nx3Jh1Wi+KWT5bMFuea/j21u0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMzAzM1oX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNANmFkNGNhNzQwNTQ4MzQ2ZDVhNWE3 Zjc0NmExYTdmOTA0MDRiMjdlZWZmYjgyNjEwMGFiODM5ZmJhN2NjN2FlMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqhP6FQ/7px49JH5C37JxlKgUynQ F8C3Ow7lg42EM1Qz9Kg65DZ3xxpcBI7mcPI4CngBTqq1MkGB3X2/O6AFtnIiXFH1 y9S2s0y6Zfouq8r2yDxlWIG5pVbDNk6UR+e0SYgNIqZ04YmqOQ+F5GYob4TGpSIA S4mmfk9HqJM1gfhsQu6ahygqIkExAX3yryjqmwblx5fk5s3GGsQek1K0KhlQ9t07 tqh8WENP5fhCmul06oi6ScV0paz4vs1hX0mItws0ZGkvOpVPBbsimK+2KDQ6OONz jO5jEVoZZKExPqfAWTyxx12MzdVDU9tEThw3IOS+eIXgq66ix7gzol9tpQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAJsRCjWZKAr/J0Z+s5wBOQnCfkIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE0YWM1ODg0LWU2NjktNDdkNS1iY2JmLTg2OTRlNGRjMjBhNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYaBAMA0GCSqGSIb3DQEBCwUAA4IBAQAesVshAHkwWqoRNaQG J/qO5P8GL97UNVFq22C2gGo7JPDw16aiy0PL+t7kIZnsGQQumvz9vMDEwgwXmBU/ 2dsby+GxrBfCFVNVRqFCc9aHN6UK2u2VTqYLbCBS8betJV3/cZO60ot9AWpZljI0 buuS63pFBYag2gcopQXfuv9yKv1hOsZZoWT5/1nxpUHlGY6SgafbYcFXy4HNwSC3 8NUcYXQ+vugwBZKlzYmsq2htc8x8NoisuiWm7reOUogUv5t47EfCkkedohWX4cfX wksdYawrD3jPYxuewfKdJPrBuakVHGYhGl3oU0EAbvs0iT2HgcDxYKuCj0s0n5L+ xFBQ -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:38 2025 by rpki-client