$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa File: 23ecebb0-098e-41b3-815b-beadfef6484a.roa (raw, json) Hash identifier: BUlZ3ft3R0eb92B/BG8kHBHfCOMggD+zdUc/5NSICis= Subject key identifier: F2:29:36:7B:12:12:D6:F3:03:82:F5:98:57:81:BB:FE:E4:89:91:C4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4A8B1B54DE2F51A7FEFA084E35F7C82C85845B5B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa Signing time: Sun 09 Nov 2025 00:10:06 +0000 ROA not before: Sun 09 Nov 2025 00:10:06 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8b:1b:54:de:2f:51:a7:fe:fa:08:4e:35:f7:c8:2c:85:84:5b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:10:06 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=d8a84a62a2bf8e8a6e65c876d43fd49af2e221a399e30ee8b2106b29aee200e7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:89:1f:2d:0f:c6:17:ef:b0:b3:ec:9b:bb:f9: 33:62:4b:ed:6e:9a:d2:f5:c2:d0:39:ff:8d:d5:c7: 90:57:0d:d2:22:8c:fd:00:28:6d:86:80:39:e3:bc: 8b:37:de:01:4b:ea:37:7c:ff:39:84:a7:88:1e:0a: df:19:e4:ca:05:15:13:b6:8b:cb:5d:56:c3:d6:a6: 6b:4c:05:54:39:0a:83:25:4a:ee:ad:dc:2c:98:a7: c1:de:75:cf:a8:7d:09:d7:5b:ce:10:dd:63:87:87: b2:69:87:93:40:0e:86:93:28:f3:68:4d:a0:07:09: 03:19:de:30:99:4b:77:dd:13:3f:ed:87:48:70:0c: 1d:79:c6:27:cb:63:54:c9:12:71:4c:b9:64:9e:28: 1d:ea:24:0c:77:1c:30:1a:5e:1d:45:78:3d:06:8e: 44:f3:73:15:7a:af:e3:8c:9b:1b:15:d7:a0:ed:dc: 1e:5e:16:12:fa:eb:0a:8f:8d:36:2f:d7:a5:d1:6e: 8f:a0:39:3c:32:06:f2:66:b1:29:2b:87:73:4b:2a: f6:e6:19:75:b3:44:66:dc:54:a4:15:59:65:cd:db: 02:ba:d5:46:4d:81:86:f3:31:06:1b:c3:c1:44:c7: dc:c1:48:fd:0b:f3:7d:79:64:27:4d:74:88:25:f4: ed:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:29:36:7B:12:12:D6:F3:03:82:F5:98:57:81:BB:FE:E4:89:91:C4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6::/32 Signature Algorithm: sha256WithRSAEncryption a2:d7:9a:33:5b:9a:b5:8a:dd:be:b5:49:b5:d5:7f:4c:9a:a6: f9:13:f4:27:63:ee:1d:34:28:ea:7b:da:d9:1e:3b:9a:e2:38: 07:21:9f:76:39:61:79:cd:e7:d1:3e:7f:3d:c1:68:10:82:9d: 02:8c:21:72:ce:1a:7a:a9:1f:93:43:9d:f9:7f:4f:48:09:61: 6e:ab:6f:00:ec:e1:b9:b5:50:bd:fb:70:7c:c5:1d:ca:82:88: 8c:f0:2c:de:07:37:40:4b:99:be:20:d8:99:3e:bd:58:30:57: 89:3f:db:3d:45:39:87:5b:79:d1:cf:71:ef:ba:83:d8:d1:50: 20:78:cd:e4:6e:9c:08:63:b5:db:0f:e3:a6:be:71:27:8b:5b: 33:7f:df:95:2a:29:c9:4b:d2:d2:b5:96:f7:da:2e:eb:5f:ea: a4:34:62:71:d9:05:f5:97:d8:59:03:93:b5:cb:d8:76:95:40: de:98:e9:4b:64:b3:9f:af:22:4e:55:25:52:02:20:27:40:6f: e1:e9:b1:28:f9:75:09:17:79:6c:28:c3:e3:6d:b7:e9:0f:85: 08:d6:2c:1b:06:0e:08:32:75:42:59:f5:37:de:eb:cd:8b:3d: 14:98:d3:8b:1c:db:2a:f7:7d:58:02:00:db:83:97:1b:e9:15: 9b:a7:f7:4f -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUSosbVN4vUaf++ghONffILIWEW1swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwMTAwNloX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAZDhhODRhNjJhMmJmOGU4YTZlNjVj ODc2ZDQzZmQ0OWFmMmUyMjFhMzk5ZTMwZWU4YjIxMDZiMjlhZWUyMDBlNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYkfLQ/GF++ws+ybu/kzYkvtbprS 9cLQOf+N1ceQVw3SIoz9AChthoA547yLN94BS+o3fP85hKeIHgrfGeTKBRUTtovL XVbD1qZrTAVUOQqDJUrurdwsmKfB3nXPqH0J11vOEN1jh4eyaYeTQA6GkyjzaE2g BwkDGd4wmUt33RM/7YdIcAwdecYny2NUyRJxTLlknigd6iQMdxwwGl4dRXg9Bo5E 83MVeq/jjJsbFdeg7dweXhYS+usKj402L9el0W6PoDk8MgbyZrEpK4dzSyr25hl1 s0Rm3FSkFVllzdsCutVGTYGG8zEGG8PBRMfcwUj9C/N9eWQnTXSIJfTtPwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFPIpNnsSEtbzA4L1mFeBu/7kiZHEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzZWNlYmIwLTA5OGUtNDFiMy04MTViLWJlYWRmZWY2NDg0YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba9jANBgkqhkiG9w0BAQsFAAOCAQEAoteaM1uatYrdvrVJtdV/ TJqm+RP0J2PuHTQo6nva2R47muI4ByGfdjlhec3n0T5/PcFoEIKdAowhcs4aeqkf k0Od+X9PSAlhbqtvAOzhubVQvftwfMUdyoKIjPAs3gc3QEuZviDYmT69WDBXiT/b PUU5h1t50c9x77qD2NFQIHjN5G6cCGO12w/jpr5xJ4tbM3/flSopyUvS0rWW99ou 61/qpDRicdkF9ZfYWQOTtcvYdpVA3pjpS2Szn68iTlUlUgIgJ0Bv4emxKPl1CRd5 bCjD42236Q+FCNYsGwYOCDJ1Qln1N97rzYs9FJjTixzbKvd9WAIA24OXG+kVm6f3 Tw== -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:24 2025 by rpki-client