$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d7c305d-06f0-41db-a157-3260a182f100.roa File: 4d7c305d-06f0-41db-a157-3260a182f100.roa (raw, json) Hash identifier: BjZrD1H6XmyFWNnFVop8MI/tDSiOrMcA4RgnziRVfW0= Subject key identifier: CD:AC:69:7C:BC:28:85:5A:1B:F7:0B:15:18:BE:53:2B:16:C0:7F:AC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5ADD5C4C10052B33D8C3C4D61009B7B18DC5BA4A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d7c305d-06f0-41db-a157-3260a182f100.roa Signing time: Sun 09 Nov 2025 00:10:09 +0000 ROA not before: Sun 09 Nov 2025 00:10:09 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:dd:5c:4c:10:05:2b:33:d8:c3:c4:d6:10:09:b7:b1:8d:c5:ba:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:10:09 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=917f730ecf7533fedd7d3e6a54bfe003e468e3177fdfdd0d734a812d1724dfa9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:62:33:53:b7:08:3d:77:ca:3d:d5:68:60:dd: 79:14:4b:a2:7d:f4:5f:1b:70:a0:bd:e8:4a:85:61: 05:d8:c7:33:6b:a7:00:ed:80:99:03:77:65:b3:1e: c5:19:b8:26:84:81:8b:97:88:6c:e9:a3:36:78:7b: 25:12:ba:d4:4b:31:bb:c1:dd:77:29:90:4c:94:ba: 4a:b6:b6:c2:c9:5a:db:6d:08:70:49:c5:58:f3:b6: f3:fb:f0:92:1b:0d:b2:0a:75:3c:17:0d:a2:a7:6b: 28:41:03:30:55:1a:01:86:f3:0c:a8:fb:07:a0:9d: c4:f4:7e:9d:40:8f:3e:d8:26:2b:fb:e1:57:25:bf: d1:10:8f:cb:31:63:60:b1:a3:e1:b5:c6:90:cb:dd: 36:69:72:dd:f5:4a:94:31:b5:5e:e3:f9:0d:44:3d: 87:50:9d:e0:26:6c:70:55:e1:a3:9d:ce:f2:16:3d: ca:32:86:56:26:c7:9a:be:a2:3a:e9:fa:c8:29:58: 3c:b8:41:c4:6a:ee:6d:a1:22:f7:dc:4f:86:8d:ed: 24:93:28:d1:39:3f:df:e4:36:bd:e5:8b:70:5c:c5: 45:03:7f:24:ed:fa:20:ef:54:08:1b:31:b8:b6:43: 7a:c7:b5:cb:c1:f2:ea:73:bd:4d:60:65:97:ec:2a: 7f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AC:69:7C:BC:28:85:5A:1B:F7:0B:15:18:BE:53:2B:16:C0:7F:AC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d7c305d-06f0-41db-a157-3260a182f100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:4800::/40 Signature Algorithm: sha256WithRSAEncryption 79:6e:fd:d4:66:ba:a1:55:6c:5c:87:f2:27:99:03:df:d9:44: de:13:9a:f4:8f:b6:91:cd:75:a1:09:a5:29:b1:e1:74:dc:9a: 29:d4:f4:70:30:6d:4c:d2:3e:a6:28:b2:d9:1b:5c:a4:45:46: 16:df:18:33:73:33:f4:ff:e2:83:60:01:84:1b:b6:39:ed:f9: b8:3b:7c:fb:d3:e1:0f:5b:aa:08:bb:d3:97:b3:21:eb:4d:c0: 5b:12:bf:6d:b5:97:3c:40:df:09:e8:db:76:77:2a:30:d5:46: 73:63:73:10:e2:ab:03:16:96:63:58:20:07:0e:0f:e3:89:39: 08:06:14:bc:12:06:d3:df:78:72:5a:9c:aa:5c:8a:2b:de:77: 84:58:fa:a9:34:1a:c1:ca:75:6b:36:94:c7:08:eb:33:37:31: f6:f3:31:3f:de:a4:bf:2a:31:45:83:b5:52:0d:75:0a:7b:85: 1d:4b:0c:2e:ab:74:8c:74:6a:54:12:67:ee:9f:cc:6f:06:79: 9d:e8:82:ab:53:e3:5a:dd:5d:be:9e:67:b3:62:4b:87:64:e4: c2:dd:4d:72:58:4a:24:32:dc:12:9e:40:bb:61:5d:ef:dc:18: c0:55:13:a0:97:72:44:6d:69:74:86:84:d3:b3:56:e5:2a:bf: 7d:27:90:3d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWt1cTBAFKzPYw8TWEAm3sY3FukowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwMTAwOVoX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAOTE3ZjczMGVjZjc1MzNmZWRkN2Qz ZTZhNTRiZmUwMDNlNDY4ZTMxNzdmZGZkZDBkNzM0YTgxMmQxNzI0ZGZhOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2IzU7cIPXfKPdVoYN15FEuiffRf G3CgvehKhWEF2Mcza6cA7YCZA3dlsx7FGbgmhIGLl4hs6aM2eHslErrUSzG7wd13 KZBMlLpKtrbCyVrbbQhwScVY87bz+/CSGw2yCnU8Fw2ip2soQQMwVRoBhvMMqPsH oJ3E9H6dQI8+2CYr++FXJb/REI/LMWNgsaPhtcaQy902aXLd9UqUMbVe4/kNRD2H UJ3gJmxwVeGjnc7yFj3KMoZWJseavqI66frIKVg8uEHEau5toSL33E+Gje0kkyjR OT/f5Da95YtwXMVFA38k7fog71QIGzG4tkN6x7XLwfLqc71NYGWX7Cp/8QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFM2saXy8KIVaG/cLFRi+UysWwH+sMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRkN2MzMDVkLTA2ZjAtNDFkYi1hMTU3LTMyNjBhMTgyZjEwMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNkgwDQYJKoZIhvcNAQELBQADggEBAHlu/dRmuqFVbFyH8ieZ A9/ZRN4TmvSPtpHNdaEJpSmx4XTcminU9HAwbUzSPqYostkbXKRFRhbfGDNzM/T/ 4oNgAYQbtjnt+bg7fPvT4Q9bqgi705ezIetNwFsSv221lzxA3wno23Z3KjDVRnNj cxDiqwMWlmNYIAcOD+OJOQgGFLwSBtPfeHJanKpciived4RY+qk0GsHKdWs2lMcI 6zM3MfbzMT/epL8qMUWDtVINdQp7hR1LDC6rdIx0alQSZ+6fzG8GeZ3ogqtT41rd Xb6eZ7NiS4dk5MLdTXJYSiQy3BKeQLthXe/cGMBVE6CXckRtaXSGhNOzVuUqv30n kD0= -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:16 2025 by rpki-client