$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1aaf6328-08de-4735-8d71-2cf6b53109d4.roa File: 1aaf6328-08de-4735-8d71-2cf6b53109d4.roa (raw, json) Hash identifier: des1U33yH3iW5LsfK6BU4uq2h7/HTvbnjHEFz3WoAZc= Subject key identifier: 59:7A:D0:26:81:A3:6A:3C:62:C2:59:09:FE:08:BE:EB:30:42:F5:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 551DA8C48998A1606B0D0D81B2390358D03518DC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1aaf6328-08de-4735-8d71-2cf6b53109d4.roa Signing time: Fri 07 Nov 2025 00:40:10 +0000 ROA not before: Fri 07 Nov 2025 00:40:10 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1d:a8:c4:89:98:a1:60:6b:0d:0d:81:b2:39:03:58:d0:35:18:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:40:10 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=c2a2e190472e656903fbc3573b6228201fbdfc98e57d5b7c6556197eebcd946b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:2b:30:b9:4d:af:3a:b1:d0:e1:44:18:dd: a2:9d:b6:3a:a1:bd:91:65:7c:b9:70:df:ce:62:4a: 1f:49:d7:20:64:69:5a:b4:bd:40:b3:aa:b4:67:7b: 5d:df:ce:3a:cf:4a:c4:03:a9:32:ce:7a:8c:66:67: 81:a2:b7:f4:a3:53:1a:1a:26:e3:fd:0f:28:73:4c: a5:78:7e:fc:c1:d5:78:ab:fd:07:52:c4:1d:78:cd: 40:b9:44:cf:e1:02:bc:d7:48:5a:d5:e4:d0:4b:43: 7e:75:14:3a:ad:95:bd:e9:11:55:90:cb:a1:5b:17: 24:f6:45:d8:a6:9d:fd:c1:97:a8:81:a2:a4:c1:87: 97:ba:f1:43:5c:65:d0:2c:a2:db:f4:53:db:a5:02: 64:67:f3:79:a7:71:d7:9e:11:88:4b:38:80:0d:f0: 21:07:a8:72:69:73:65:84:96:e6:d0:af:17:ba:73: d1:d7:c5:bc:8b:be:fe:9f:0b:45:01:d9:09:11:96: 1f:c5:e0:09:99:3f:f0:36:71:62:3b:27:d1:f9:51: 1e:9a:ae:b5:ad:32:fc:19:a7:5a:07:e8:83:8f:9b: f1:f4:53:0f:74:97:3b:45:98:79:9f:89:67:64:79: 92:0a:4e:cd:f8:89:99:ba:26:c5:dc:c6:b7:2f:e7: dd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7A:D0:26:81:A3:6A:3C:62:C2:59:09:FE:08:BE:EB:30:42:F5:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1aaf6328-08de-4735-8d71-2cf6b53109d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2080::/48 Signature Algorithm: sha256WithRSAEncryption 68:a0:c2:92:6a:6b:66:41:a8:26:60:c1:c9:c0:69:06:f4:bf: 7e:7b:68:cc:29:bf:1f:96:8e:34:b3:29:4e:1b:28:b3:01:ca: 19:0e:7a:c2:2a:12:cc:a2:64:76:1d:f3:74:ce:25:a2:73:f6: e6:8a:5b:9d:f2:5e:bf:8c:24:41:6b:7c:26:74:49:ad:04:82: 42:a7:eb:d9:1c:29:a9:77:52:64:4f:4d:1c:69:c7:a3:54:dc: c2:61:1a:93:cb:3c:38:d2:62:3e:bc:2f:82:21:97:c4:ec:99: 3b:b9:d3:0f:8c:22:4a:a4:aa:a5:66:b4:df:b8:ed:5b:16:70: fe:8e:e7:64:98:7b:dc:a9:63:07:55:0e:2c:7a:76:51:1d:2b: 31:96:ba:c5:cf:e9:63:f3:aa:a9:71:38:ef:ed:d7:63:f6:05: 58:30:dc:84:dd:3c:99:05:50:7b:9b:09:8c:75:20:fe:f5:1d: ed:4f:d6:b8:c2:86:05:18:9f:fa:50:ed:e9:e7:2d:a3:ec:7d: 4b:43:41:d8:98:b0:64:f0:36:97:a7:9c:3a:5c:c3:62:3a:65: 9a:ff:38:1e:49:de:4e:57:c2:9f:4b:38:a9:27:51:bc:7f:42: 69:56:49:58:48:5c:cb:2d:c2:14:65:d0:71:1c:5d:b7:36:59: 43:60:00:bb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVR2oxImYoWBrDQ2BsjkDWNA1GNwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwNDAxMFoX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAYzJhMmUxOTA0NzJlNjU2OTAzZmJj MzU3M2I2MjI4MjAxZmJkZmM5OGU1N2Q1YjdjNjU1NjE5N2VlYmNkOTQ2YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2IrMLlNrzqx0OFEGN2inbY6ob2R ZXy5cN/OYkofSdcgZGlatL1As6q0Z3td3846z0rEA6kyznqMZmeBorf0o1MaGibj /Q8oc0yleH78wdV4q/0HUsQdeM1AuUTP4QK810ha1eTQS0N+dRQ6rZW96RFVkMuh Wxck9kXYpp39wZeogaKkwYeXuvFDXGXQLKLb9FPbpQJkZ/N5p3HXnhGISziADfAh B6hyaXNlhJbm0K8XunPR18W8i77+nwtFAdkJEZYfxeAJmT/wNnFiOyfR+VEemq61 rTL8GadaB+iDj5vx9FMPdJc7RZh5n4lnZHmSCk7N+ImZuibF3Ma3L+fdawIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFl60CaBo2o8YsJZCf4IvuswQvUUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFhYWY2MzI4LTA4ZGUtNDczNS04ZDcxLTJjZjZiNTMxMDlkNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaACCAMA0GCSqGSIb3DQEBCwUAA4IBAQBooMKSamtmQagmYMHJ wGkG9L9+e2jMKb8flo40sylOGyizAcoZDnrCKhLMomR2HfN0ziWic/bmilud8l6/ jCRBa3wmdEmtBIJCp+vZHCmpd1JkT00cacejVNzCYRqTyzw40mI+vC+CIZfE7Jk7 udMPjCJKpKqlZrTfuO1bFnD+judkmHvcqWMHVQ4senZRHSsxlrrFz+lj86qpcTjv 7ddj9gVYMNyE3TyZBVB7mwmMdSD+9R3tT9a4woYFGJ/6UO3p5y2j7H1LQ0HYmLBk 8DaXp5w6XMNiOmWa/zgeSd5OV8KfSzipJ1G8f0JpVklYSFzLLcIUZdBxHF23NllD YAC7 -----END CERTIFICATE-----Generated at Tue Nov 18 08:23:37 2025 by rpki-client