$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a4b406c-5546-415b-a581-7d4fac440f72.roa File: 2a4b406c-5546-415b-a581-7d4fac440f72.roa (raw, json) Hash identifier: truh2FdVzyryNyjAxjgQzA/j+TEfgtbZ2sB7mL98UG4= Subject key identifier: 63:41:DB:7E:62:B3:E9:89:8D:3B:79:46:DB:A8:E6:01:8D:74:B5:22 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1C68FC3A36C2E7C3F11CBE3E23418AD242317AB7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a4b406c-5546-415b-a581-7d4fac440f72.roa Signing time: Fri 07 Nov 2025 00:20:07 +0000 ROA not before: Fri 07 Nov 2025 00:20:07 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:68:fc:3a:36:c2:e7:c3:f1:1c:be:3e:23:41:8a:d2:42:31:7a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:20:07 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=8070a617b216674367064dc46751734492968401b76c651ed2e0521250685380, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:e4:69:fa:a8:49:d0:de:d8:27:f5:fb:8d: d4:bf:8e:82:61:a7:6b:6d:a9:6b:d3:31:ab:1f:23: d4:7b:80:31:09:10:83:b2:90:9f:01:f7:57:f2:c5: b3:7c:74:e5:d1:55:0f:d9:a7:0f:30:65:25:f3:1d: 26:52:49:aa:e1:80:10:61:96:de:f8:5b:ba:f7:79: ac:18:39:9d:3b:9c:2e:99:41:02:a2:28:c9:72:b9: c9:14:b5:d9:be:5a:38:a7:ff:67:e9:3c:96:e9:e5: 5c:b4:6f:13:6f:2e:ee:6e:a1:15:77:0c:47:ad:be: 3b:17:71:45:8c:cc:3a:7b:2b:31:9c:e3:84:e0:5d: dd:f9:d1:e7:e9:47:ed:f5:80:63:47:58:0c:8b:89: 61:75:aa:08:44:48:ab:34:ce:f6:58:aa:fa:77:7b: 54:c6:c7:12:f4:23:e3:9a:8c:33:c9:f2:cb:9d:c7: f0:cd:e6:e6:f3:30:94:70:30:99:37:ed:ad:39:36: c7:ad:02:13:89:74:9d:3d:ad:09:0a:6b:51:d5:a2: d0:f6:97:c6:ff:cc:13:3c:81:f8:80:33:fe:2b:11: d9:d9:54:3f:72:bb:dd:15:80:e7:ac:79:54:78:80: 64:ee:a4:19:2f:6f:62:0f:24:1e:f2:35:19:94:a7: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:41:DB:7E:62:B3:E9:89:8D:3B:79:46:DB:A8:E6:01:8D:74:B5:22 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a4b406c-5546-415b-a581-7d4fac440f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:b080::/48 Signature Algorithm: sha256WithRSAEncryption 76:30:d9:51:89:62:26:06:5f:ea:10:c9:36:6e:3a:a6:98:c9: 85:57:a1:18:d0:42:b2:ce:0a:05:49:05:56:fe:b3:74:2a:56: 87:ba:3e:94:a1:51:77:14:20:71:ec:1c:01:08:ca:ff:61:8b: 01:4e:a4:33:fe:84:d4:6e:c4:0e:06:5d:6b:b6:cf:f2:e9:11: 76:f8:e4:b4:91:05:47:62:37:40:e6:7f:e9:3b:25:30:c9:a3: 91:67:c9:66:0e:cf:8e:f4:45:98:33:e3:cb:25:dd:19:63:29: df:41:72:b8:1e:e1:31:a8:d5:54:b1:da:21:ba:e0:d2:b9:b0: da:91:cf:c6:5e:c4:b8:73:9e:98:3b:d0:42:36:25:b2:77:b3: 61:2b:8c:a3:e0:46:a6:42:2c:14:28:dc:46:4d:24:a2:1b:b8: 6a:6e:e2:9e:d4:c4:0c:3b:c2:55:1b:98:3b:4d:9c:a9:73:49: 70:7f:f6:5b:db:3f:00:fe:35:77:a0:a7:4e:7f:4d:40:18:88: 55:98:27:9f:5f:14:e4:14:85:c0:97:69:22:e9:8b:94:d4:e4: 1d:a4:02:fa:ef:42:0c:d3:72:24:12:b8:55:f8:94:7b:00:b4: 0c:be:be:23:2a:ea:d3:09:59:6b:8d:4b:ee:4a:29:5f:0e:2f: b0:c3:fd:7f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHGj8OjbC58PxHL4+I0GK0kIxercwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMjAwN1oX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAODA3MGE2MTdiMjE2Njc0MzY3MDY0 ZGM0Njc1MTczNDQ5Mjk2ODQwMWI3NmM2NTFlZDJlMDUyMTI1MDY4NTM4MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwzkafqoSdDe2Cf1+43Uv46CYadr balr0zGrHyPUe4AxCRCDspCfAfdX8sWzfHTl0VUP2acPMGUl8x0mUkmq4YAQYZbe +Fu693msGDmdO5wumUECoijJcrnJFLXZvlo4p/9n6TyW6eVctG8Tby7ubqEVdwxH rb47F3FFjMw6eysxnOOE4F3d+dHn6Uft9YBjR1gMi4lhdaoIREirNM72WKr6d3tU xscS9CPjmowzyfLLncfwzebm8zCUcDCZN+2tOTbHrQITiXSdPa0JCmtR1aLQ9pfG /8wTPIH4gDP+KxHZ2VQ/crvdFYDnrHlUeIBk7qQZL29iDyQe8jUZlKfouwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGNB235is+mJjTt5Rtuo5gGNdLUiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJhNGI0MDZjLTU1NDYtNDE1Yi1hNTgxLTdkNGZhYzQ0MGY3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/7CAMA0GCSqGSIb3DQEBCwUAA4IBAQB2MNlRiWImBl/qEMk2 bjqmmMmFV6EY0EKyzgoFSQVW/rN0KlaHuj6UoVF3FCBx7BwBCMr/YYsBTqQz/oTU bsQOBl1rts/y6RF2+OS0kQVHYjdA5n/pOyUwyaORZ8lmDs+O9EWYM+PLJd0ZYynf QXK4HuExqNVUsdohuuDSubDakc/GXsS4c56YO9BCNiWyd7NhK4yj4EamQiwUKNxG TSSiG7hqbuKe1MQMO8JVG5g7TZypc0lwf/Zb2z8A/jV3oKdOf01AGIhVmCefXxTk FIXAl2ki6YuU1OQdpAL670IM03IkErhV+JR7ALQMvr4jKurTCVlrjUvuSilfDi+w w/1/ -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:23 2025 by rpki-client