$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23781dbd-24b4-4813-8de5-02c4d3e40236.roa File: 23781dbd-24b4-4813-8de5-02c4d3e40236.roa (raw, json) Hash identifier: 1O7hoUap4ZC6oqtTQvwvbppgkumGqjRMKufMG+ZVjHY= Subject key identifier: B1:7F:5C:D5:23:A2:1F:97:8E:8A:12:7C:6F:CB:68:56:6A:1F:91:6F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C3964E7005DECC90901BFD74D11E9A57F8BA37D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23781dbd-24b4-4813-8de5-02c4d3e40236.roa Signing time: Sat 15 Nov 2025 00:00:38 +0000 ROA not before: Sat 15 Nov 2025 00:00:38 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:39:64:e7:00:5d:ec:c9:09:01:bf:d7:4d:11:e9:a5:7f:8b:a3:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 15 00:00:38 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=f0eaa99aed9df7f292f59b7025164d70d9eee68afe539417cf7a9c59f157de39, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:e8:26:b8:1d:17:b1:78:cc:fb:d9:3f:7f: 73:77:fe:11:f7:af:ce:0b:99:81:11:2c:9e:a1:fa: 58:cc:59:2d:57:2d:90:b2:17:86:91:e5:b0:dc:de: 32:21:97:0a:25:9b:f6:33:9d:9f:6e:eb:da:91:c0: 99:ee:30:b8:fd:8c:d7:68:a1:19:eb:a8:ce:1d:e2: 16:4b:ad:3d:e8:7b:f9:1a:b8:ed:6b:84:bc:30:c2: 59:24:c8:87:97:ed:f8:2a:00:96:90:84:87:fa:ed: 91:7a:a3:ab:cd:8e:2a:31:22:fa:92:c3:e3:86:bb: d7:38:2a:da:99:b5:31:8a:83:05:f7:c8:08:52:96: 80:cb:21:a6:c6:d7:22:6b:5c:4e:5d:b8:a3:80:b3: eb:df:23:1b:f5:87:a6:a0:65:0a:49:15:d4:56:90: b4:e3:18:23:f4:a3:be:65:ad:85:ae:dd:0e:4b:c5: cf:ff:ca:0d:f2:fe:bf:64:8a:bd:e6:87:5a:69:0c: 9d:36:5b:a2:bc:c3:f5:d1:23:88:e8:5f:5c:8a:4b: d6:ea:6c:72:ea:51:c4:2d:13:c6:04:81:60:fe:dc: ae:b0:38:82:92:6c:50:e3:cb:ad:a7:83:84:9c:04: 62:87:17:ef:66:42:fb:3d:ac:9b:4f:58:94:e0:71: b3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7F:5C:D5:23:A2:1F:97:8E:8A:12:7C:6F:CB:68:56:6A:1F:91:6F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23781dbd-24b4-4813-8de5-02c4d3e40236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:a000::/40 Signature Algorithm: sha256WithRSAEncryption 12:fd:78:97:e9:72:34:6b:4b:4f:19:d7:50:86:be:a2:33:01: bf:58:43:73:45:2c:e4:24:95:6d:52:c0:76:c2:27:39:d1:d2: 5a:7b:9a:f7:a1:fd:27:78:0e:68:6b:79:07:8e:49:62:a0:5f: b0:0b:40:71:b1:c3:85:11:2c:00:09:aa:5c:20:23:eb:ec:d3: 26:d4:64:18:e7:ea:8e:ca:9d:da:99:da:7e:34:da:5e:d4:41: b1:d7:7e:de:af:23:8b:95:fc:c0:75:79:e3:e8:2c:9b:ff:04: b7:53:32:da:73:da:2e:54:c1:33:19:54:47:e9:d9:ee:10:85: 14:b4:53:9e:bc:4d:c0:bb:13:6b:2f:08:4b:b2:c5:01:72:c4: a4:3a:f0:d8:1d:70:a5:98:4f:3a:77:b6:48:3d:69:1e:ce:1c: d0:05:14:d4:5b:96:27:e5:ac:74:cc:d5:23:cd:59:fc:e5:34: 49:29:fb:86:fc:75:2d:a2:8c:80:4a:a9:52:cb:77:69:4b:f5: 02:48:af:d6:4f:d0:a1:8b:54:0f:19:68:26:6c:a0:ce:ba:89: 50:75:15:f0:bb:2a:8c:bf:cb:6b:cb:21:e1:51:fc:07:58:8f: 02:c7:2e:bc:31:22:68:ac:59:04:22:ed:52:d0:f8:1f:8a:21: 8f:d0:27:8e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXDlk5wBd7MkJAb/XTRHppX+Lo30wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTExNTAwMDAzOFoX DTI1MTIyMDIzNTk1OVowejFJMEcGA1UEBRNAZjBlYWE5OWFlZDlkZjdmMjkyZjU5 YjcwMjUxNjRkNzBkOWVlZTY4YWZlNTM5NDE3Y2Y3YTljNTlmMTU3ZGUzOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC3oJrgdF7F4zPvZP39zd/4R96/O C5mBESyeofpYzFktVy2QsheGkeWw3N4yIZcKJZv2M52fbuvakcCZ7jC4/YzXaKEZ 66jOHeIWS6096Hv5Grjta4S8MMJZJMiHl+34KgCWkISH+u2ReqOrzY4qMSL6ksPj hrvXOCrambUxioMF98gIUpaAyyGmxtcia1xOXbijgLPr3yMb9YemoGUKSRXUVpC0 4xgj9KO+Za2Frt0OS8XP/8oN8v6/ZIq95odaaQydNluivMP10SOI6F9cikvW6mxy 6lHELRPGBIFg/tyusDiCkmxQ48utp4OEnARihxfvZkL7PaybT1iU4HGznwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLF/XNUjoh+XjooSfG/LaFZqH5FvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzNzgxZGJkLTI0YjQtNDgxMy04ZGU1LTAyYzRkM2U0MDIzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba76AwDQYJKoZIhvcNAQELBQADggEBABL9eJfpcjRrS08Z11CG vqIzAb9YQ3NFLOQklW1SwHbCJznR0lp7mveh/Sd4DmhreQeOSWKgX7ALQHGxw4UR LAAJqlwgI+vs0ybUZBjn6o7KndqZ2n402l7UQbHXft6vI4uV/MB1eePoLJv/BLdT Mtpz2i5UwTMZVEfp2e4QhRS0U568TcC7E2svCEuyxQFyxKQ68NgdcKWYTzp3tkg9 aR7OHNAFFNRbliflrHTM1SPNWfzlNEkp+4b8dS2ijIBKqVLLd2lL9QJIr9ZP0KGL VA8ZaCZsoM66iVB1FfC7Koy/y2vLIeFR/AdYjwLHLrwxImisWQQi7VLQ+B+KIY/Q J44= -----END CERTIFICATE-----Generated at Tue Nov 18 09:37:18 2025 by rpki-client