$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3929d5cd-33ce-4cee-9bb9-47a14b5f0637.roa File: 3929d5cd-33ce-4cee-9bb9-47a14b5f0637.roa (raw, json) Hash identifier: KNpKd3Ja4z1k0TELzTSo0Arp81MRYvmJ6Kt+3uH22WQ= Subject key identifier: 3A:D4:0D:88:CC:B7:C7:F9:74:D6:F8:86:24:79:CC:E0:5C:38:61:F4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4AB159922AFA489E8CDDCB0FAE10DCCB18F6A69C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3929d5cd-33ce-4cee-9bb9-47a14b5f0637.roa Signing time: Sat 08 Nov 2025 00:20:12 +0000 ROA not before: Sat 08 Nov 2025 00:20:12 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b1:59:92:2a:fa:48:9e:8c:dd:cb:0f:ae:10:dc:cb:18:f6:a6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:20:12 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=18aa200512d6f386f4faccfe4bce5d329072751eb436c7d6584bdc0016f2eaa3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8f:86:95:bb:07:04:fb:b5:59:5c:8c:8f:a2: 99:37:7f:ad:6f:e0:74:14:59:d6:57:4a:eb:fc:8e: 57:42:e5:df:17:03:4f:74:d8:ce:67:41:1b:90:5b: a8:93:af:5b:3c:fe:05:b3:d4:fd:29:4c:f1:d8:97: a5:77:b3:e8:7b:af:be:46:1b:5e:dc:d0:1c:85:5b: a4:a3:80:6a:a1:68:30:6c:27:39:51:1f:da:a1:77: c5:d6:15:92:e0:6b:8f:a7:99:e2:12:ce:8d:51:e3: 90:2d:0c:64:1f:d0:30:b6:66:90:d0:20:a9:f0:48: ed:5c:7e:54:0c:26:48:4b:f4:43:7b:28:3f:27:7a: 69:55:81:37:d5:20:48:b0:90:c3:b1:d6:d5:0e:ed: 8d:56:db:ac:1f:1f:cc:e5:96:38:f2:39:0f:38:a6: e5:42:08:91:8c:ed:01:70:d5:53:96:f7:ab:f4:ae: 26:cb:8f:8a:8d:f8:35:32:e2:fd:0c:e0:d7:9e:d1: 19:86:fb:8e:a8:1f:9a:2a:d5:91:23:01:d6:cd:a9: 88:a4:3c:fc:83:3c:f9:8e:06:b3:00:46:ee:08:3d: b4:92:24:08:4f:e4:3d:33:9b:2a:c8:8d:66:e2:32: ba:bc:46:8a:66:8e:43:02:d3:d8:96:36:bc:88:62: fb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D4:0D:88:CC:B7:C7:F9:74:D6:F8:86:24:79:CC:E0:5C:38:61:F4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3929d5cd-33ce-4cee-9bb9-47a14b5f0637.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:880::/48 Signature Algorithm: sha256WithRSAEncryption 62:ac:c7:e0:03:02:eb:fe:24:46:79:5f:28:a4:92:68:84:b3: 87:5c:bb:0a:74:e7:91:0d:4d:63:ff:cc:4c:3e:5f:b5:a4:72: 34:68:b3:61:80:70:11:87:63:56:e3:c6:d9:f8:bc:d2:7d:8b: c3:58:6d:51:4c:f0:ca:18:6c:be:2d:ae:2a:c9:e2:c4:47:9e: 48:6d:7d:be:2d:ca:95:8b:92:4e:c9:3a:24:1e:de:66:cf:d5: a8:36:57:8f:00:a1:3a:f1:2a:58:13:79:78:e0:ee:1c:c7:b2: a1:6f:7d:85:68:84:d8:a4:5e:61:e4:a5:b9:a5:ce:2d:aa:57: b9:32:2f:12:47:ae:91:33:f1:ca:ad:97:d8:89:67:16:72:2e: b6:ea:67:c2:ff:dd:06:da:6b:32:5c:37:d9:26:9a:f1:4c:0e: 9f:f5:70:d3:2a:d3:d9:45:6e:de:cc:2d:15:59:3b:de:17:91: 4e:24:1b:3f:bb:c8:7d:0b:33:9d:67:63:96:6a:22:67:59:a5: 65:0f:b3:90:11:22:5c:bc:19:ce:3e:26:cc:c5:c6:7e:90:30: 50:95:86:aa:1c:bd:22:51:3b:20:d9:07:d9:ba:5d:dc:f7:bd: 63:79:6f:52:47:ac:09:e9:89:a0:01:30:9b:68:71:c1:5b:db: 30:82:48:f0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSrFZkir6SJ6M3csPrhDcyxj2ppwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMjAxMloX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAMThhYTIwMDUxMmQ2ZjM4NmY0ZmFj Y2ZlNGJjZTVkMzI5MDcyNzUxZWI0MzZjN2Q2NTg0YmRjMDAxNmYyZWFhMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Y+GlbsHBPu1WVyMj6KZN3+tb+B0 FFnWV0rr/I5XQuXfFwNPdNjOZ0EbkFuok69bPP4Fs9T9KUzx2Jeld7Poe6++Rhte 3NAchVuko4BqoWgwbCc5UR/aoXfF1hWS4GuPp5niEs6NUeOQLQxkH9AwtmaQ0CCp 8EjtXH5UDCZIS/RDeyg/J3ppVYE31SBIsJDDsdbVDu2NVtusHx/M5ZY48jkPOKbl QgiRjO0BcNVTlver9K4my4+Kjfg1MuL9DODXntEZhvuOqB+aKtWRIwHWzamIpDz8 gzz5jgazAEbuCD20kiQIT+Q9M5sqyI1m4jK6vEaKZo5DAtPYlja8iGL7aQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDrUDYjMt8f5dNb4hiR5zOBcOGH0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM5MjlkNWNkLTMzY2UtNGNlZS05YmI5LTQ3YTE0YjVmMDYzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYQiAMA0GCSqGSIb3DQEBCwUAA4IBAQBirMfgAwLr/iRGeV8o pJJohLOHXLsKdOeRDU1j/8xMPl+1pHI0aLNhgHARh2NW48bZ+LzSfYvDWG1RTPDK GGy+La4qyeLER55IbX2+LcqVi5JOyTokHt5mz9WoNlePAKE68SpYE3l44O4cx7Kh b32FaITYpF5h5KW5pc4tqle5Mi8SR66RM/HKrZfYiWcWci626mfC/90G2msyXDfZ JprxTA6f9XDTKtPZRW7ezC0VWTveF5FOJBs/u8h9CzOdZ2OWaiJnWaVlD7OQESJc vBnOPibMxcZ+kDBQlYaqHL0iUTsg2QfZul3c971jeW9SR6wJ6YmgATCbaHHBW9sw gkjw -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:26 2025 by rpki-client