$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa File: 5a0d1930-a322-4bbd-8eef-91ba17b37082.roa (raw, json) Hash identifier: GDCxOf8QaMmZS03Th+YAzWNsNog+Dw3ifHBGd9cilwQ= Subject key identifier: 70:8B:97:DD:CD:DC:3D:2B:9D:DB:C2:08:98:91:F5:EF:38:5C:5E:AF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 19B8A4116B1DE84601B7226DFBF2DA73A12D2CA8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa Signing time: Fri 07 Nov 2025 00:30:31 +0000 ROA not before: Fri 07 Nov 2025 00:30:31 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b8:a4:11:6b:1d:e8:46:01:b7:22:6d:fb:f2:da:73:a1:2d:2c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:30:31 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=c686b01ececf7fdb169f6ee1475a00c5df11eefc3388678c4143f4673fcace87, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f3:89:47:8b:81:32:98:56:65:02:5f:bc:2e: cb:35:02:79:3a:02:df:f2:c5:55:c3:0c:6a:34:3e: 13:2f:52:83:0c:1e:aa:3c:47:c3:9f:fa:42:e8:6b: 00:4f:f9:7d:b4:91:90:02:73:bb:ba:60:a1:23:d1: b2:f8:50:e4:92:c8:ed:c3:20:54:bb:e3:10:73:1b: e7:43:6f:05:5d:a8:fe:b1:8d:c8:8a:a4:83:1d:90: ba:57:80:13:d9:53:38:50:88:3a:25:2d:54:d6:09: c0:ad:9b:67:5d:70:17:87:94:6f:30:16:23:f1:4b: af:91:61:85:5f:c2:ab:e5:49:b2:e4:2f:b1:54:57: fa:01:34:2d:47:c0:7c:bb:f8:10:85:df:83:b2:18: 88:57:16:0a:9e:37:9f:94:b1:20:07:04:e3:cb:1e: 82:2e:58:14:c7:0c:1c:7a:dc:51:ea:0d:1e:37:59: a0:c7:d2:97:a7:3a:84:27:5e:82:5f:da:4f:13:c9: 97:0d:b3:c8:35:5d:3a:1f:72:81:96:09:87:c7:40: 7d:cb:8f:60:b1:fb:60:00:97:0f:cc:2f:81:f8:e4: 18:c2:b7:0d:14:0e:71:88:e4:ee:f3:98:ed:7e:90: 1f:8b:d1:a3:d9:81:86:38:59:18:30:c5:3b:dc:eb: 0c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8B:97:DD:CD:DC:3D:2B:9D:DB:C2:08:98:91:F5:EF:38:5C:5E:AF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption 32:08:77:2e:75:9f:16:e4:14:0d:8f:9c:13:81:02:18:f9:ac: 21:30:cf:81:b3:9e:7a:0a:22:4b:84:c4:42:51:8e:2f:98:af: 54:96:55:70:57:53:3f:79:00:5c:a0:03:3d:4b:cc:90:51:2b: 58:01:55:92:45:b5:aa:71:5b:d4:ac:03:d2:1d:c3:8e:aa:18: 1f:d6:33:d9:12:43:ba:b3:0d:9b:99:15:ae:13:32:f4:cb:98: 19:6d:f7:02:f4:25:aa:33:9e:28:e9:7c:b0:4e:b3:d6:1c:35: 96:97:2e:2c:33:66:76:08:0a:c6:be:20:ed:f5:a7:38:14:4f: ee:b2:e5:7c:ca:37:d0:74:88:59:0b:c8:4a:ae:a5:4e:e5:ce: 31:53:d7:36:7a:ae:39:06:9d:1f:11:8a:20:a1:52:ac:26:ad: fb:8c:0f:35:94:e0:dc:39:5e:93:f4:96:bf:27:44:00:bc:9f: f3:c9:4a:cc:3e:b7:91:d6:75:52:5e:57:d7:54:eb:1f:69:80: 1c:44:bf:d1:fd:bd:a0:75:de:fa:1d:02:bc:c5:10:81:fb:80: df:03:5b:d9:33:18:71:c0:66:1a:fa:81:16:54:f5:e2:30:f2: b4:7e:54:e0:e7:ef:a0:b3:0b:ab:2b:6d:49:19:7d:d2:85:59: 9c:d9:35:f5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGbikEWsd6EYBtyJt+/Lac6EtLKgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMzAzMVoX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAYzY4NmIwMWVjZWNmN2ZkYjE2OWY2 ZWUxNDc1YTAwYzVkZjExZWVmYzMzODg2NzhjNDE0M2Y0NjczZmNhY2U4NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/OJR4uBMphWZQJfvC7LNQJ5OgLf 8sVVwwxqND4TL1KDDB6qPEfDn/pC6GsAT/l9tJGQAnO7umChI9Gy+FDkksjtwyBU u+MQcxvnQ28FXaj+sY3IiqSDHZC6V4AT2VM4UIg6JS1U1gnArZtnXXAXh5RvMBYj 8UuvkWGFX8Kr5Umy5C+xVFf6ATQtR8B8u/gQhd+DshiIVxYKnjeflLEgBwTjyx6C LlgUxwwcetxR6g0eN1mgx9KXpzqEJ16CX9pPE8mXDbPINV06H3KBlgmHx0B9y49g sftgAJcPzC+B+OQYwrcNFA5xiOTu85jtfpAfi9Gj2YGGOFkYMMU73OsMjQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHCLl93N3D0rndvCCJiR9e84XF6vMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVhMGQxOTMwLWEzMjItNGJiZC04ZWVmLTkxYmExN2IzNzA4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYeDAMA0GCSqGSIb3DQEBCwUAA4IBAQAyCHcudZ8W5BQNj5wT gQIY+awhMM+Bs556CiJLhMRCUY4vmK9UllVwV1M/eQBcoAM9S8yQUStYAVWSRbWq cVvUrAPSHcOOqhgf1jPZEkO6sw2bmRWuEzL0y5gZbfcC9CWqM54o6XywTrPWHDWW ly4sM2Z2CArGviDt9ac4FE/usuV8yjfQdIhZC8hKrqVO5c4xU9c2eq45Bp0fEYog oVKsJq37jA81lODcOV6T9Ja/J0QAvJ/zyUrMPreR1nVSXlfXVOsfaYAcRL/R/b2g dd76HQK8xRCB+4DfA1vZMxhxwGYa+oEWVPXiMPK0flTg5++gswurK21JGX3ShVmc 2TX1 -----END CERTIFICATE-----Generated at Tue Nov 18 09:37:34 2025 by rpki-client