$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60175779-f687-40f1-850d-8023c32ba394.roa File: 60175779-f687-40f1-850d-8023c32ba394.roa (raw, json) Hash identifier: /fg0XWp8fHr6QnDV5J5e8LCQwJyr4VvvM83KW0N9Rj4= Subject key identifier: 5E:34:54:7D:53:C3:F8:56:77:2D:59:CC:0A:21:97:9D:0C:2E:DC:5A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6995FC5C4A59F7C7520F244887B4D0E013D7E512 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60175779-f687-40f1-850d-8023c32ba394.roa Signing time: Sat 08 Nov 2025 00:01:06 +0000 ROA not before: Sat 08 Nov 2025 00:01:06 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:95:fc:5c:4a:59:f7:c7:52:0f:24:48:87:b4:d0:e0:13:d7:e5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:01:06 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=2ccc074dcb566533994a41e16b25426c12e372080e66b40562b0f80696a5384a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:24:3a:0f:df:39:14:81:5f:60:f9:59:92: 72:00:c2:f3:30:27:3e:d6:10:5c:21:1d:57:5a:62: 39:c8:32:9a:d5:a7:b6:d2:c6:39:bf:ea:c4:bd:a0: d5:bc:54:da:21:5a:88:ef:99:c0:96:2d:78:be:2f: e4:1f:c7:3a:3a:3d:89:85:10:a0:34:f3:0d:a6:9a: 7d:2d:2f:15:88:cd:44:e0:f9:14:56:28:55:9c:ab: 31:ea:5e:16:95:10:b8:7a:0f:64:1d:9a:6a:2a:93: 6c:78:65:12:bd:5e:cf:ff:ca:02:60:94:2a:b5:3c: e0:6d:a7:17:df:a4:e8:d2:65:9b:11:eb:31:41:29: ef:c6:8b:ca:36:14:2e:ba:aa:4b:e0:1a:31:5d:23: 16:ae:06:ad:90:d1:bb:ab:2d:ff:d8:6f:68:51:2d: 9b:f8:4a:89:a0:bd:ba:b9:39:4f:23:2d:2b:02:5b: 32:74:1f:3c:a9:0f:e9:02:c4:a2:c5:9d:13:79:39: ec:95:e6:22:7a:c6:93:a1:10:8a:d4:ff:a8:0b:35: 59:e8:83:c0:77:66:c1:38:26:ef:8a:05:fd:d1:c0: ca:66:32:96:d5:2c:87:03:17:b0:ca:3a:3a:35:9e: 67:10:1f:32:39:2f:2f:f2:cc:23:e6:d8:83:d1:d1: 00:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:34:54:7D:53:C3:F8:56:77:2D:59:CC:0A:21:97:9D:0C:2E:DC:5A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60175779-f687-40f1-850d-8023c32ba394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:a000::/48 Signature Algorithm: sha256WithRSAEncryption 5e:9f:2a:bb:99:a2:3f:c4:84:40:b9:96:ef:59:14:6d:e0:47: e3:21:51:f8:71:b0:43:fc:e0:3f:e0:55:51:ba:bc:2c:22:8f: 3f:32:fc:6f:0e:8d:cd:cd:95:e2:71:6e:f9:16:ae:75:60:f2: 19:47:e4:09:18:b1:4d:5f:f6:23:06:9b:44:3a:c8:74:e7:ae: 58:5e:4b:37:e0:4e:4c:f3:a8:8c:62:45:9c:c4:c4:c6:09:ba: 10:e4:c9:09:43:fd:54:96:af:8a:fb:7d:9b:03:d8:93:1a:bb: f3:18:24:d5:8c:c8:04:0e:f9:5a:67:bf:b0:2f:fb:5c:92:c0: d1:1b:9a:09:69:fe:40:63:39:e0:df:f8:c4:80:a6:94:6f:13: ee:84:b1:c2:c8:b0:3c:e2:f2:d9:4e:7f:47:9d:d8:68:96:b8: 60:6e:a9:ac:e8:4b:68:83:5b:ef:c0:41:1d:8d:c7:5c:84:c8: a9:c5:95:fc:d1:86:83:e5:8f:61:13:73:f7:d3:a1:51:50:ac: 83:ac:4c:ed:6a:56:57:ab:6d:51:82:c8:11:84:90:f1:85:f5: b2:a7:ca:3f:99:dc:a3:a6:77:bd:f8:6f:9d:e8:b4:0d:a6:40: de:db:c1:00:28:06:a9:ff:d5:d9:bf:6e:a3:e5:18:17:13:d8: 38:c4:5c:df -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaZX8XEpZ98dSDyRIh7TQ4BPX5RIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMDEwNloX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAMmNjYzA3NGRjYjU2NjUzMzk5NGE0 MWUxNmIyNTQyNmMxMmUzNzIwODBlNjZiNDA1NjJiMGY4MDY5NmE1Mzg0YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgUkOg/fORSBX2D5WZJyAMLzMCc+ 1hBcIR1XWmI5yDKa1ae20sY5v+rEvaDVvFTaIVqI75nAli14vi/kH8c6Oj2JhRCg NPMNppp9LS8ViM1E4PkUVihVnKsx6l4WlRC4eg9kHZpqKpNseGUSvV7P/8oCYJQq tTzgbacX36To0mWbEesxQSnvxovKNhQuuqpL4BoxXSMWrgatkNG7qy3/2G9oUS2b +EqJoL26uTlPIy0rAlsydB88qQ/pAsSixZ0TeTnsleYiesaToRCK1P+oCzVZ6IPA d2bBOCbvigX90cDKZjKW1SyHAxewyjo6NZ5nEB8yOS8v8swj5tiD0dEAcQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFF40VH1Tw/hWdy1ZzAohl50MLtxaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYwMTc1Nzc5LWY2ODctNDBmMS04NTBkLTgwMjNjMzJiYTM5NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7KAAMA0GCSqGSIb3DQEBCwUAA4IBAQBenyq7maI/xIRAuZbv WRRt4EfjIVH4cbBD/OA/4FVRurwsIo8/MvxvDo3NzZXicW75Fq51YPIZR+QJGLFN X/YjBptEOsh0565YXks34E5M86iMYkWcxMTGCboQ5MkJQ/1Ulq+K+32bA9iTGrvz GCTVjMgEDvlaZ7+wL/tcksDRG5oJaf5AYzng3/jEgKaUbxPuhLHCyLA84vLZTn9H ndholrhgbqms6Etog1vvwEEdjcdchMipxZX80YaD5Y9hE3P306FRUKyDrEztalZX q21RgsgRhJDxhfWyp8o/mdyjpne9+G+d6LQNpkDe28EAKAap/9XZv26j5RgXE9g4 xFzf -----END CERTIFICATE-----Generated at Tue Nov 18 05:47:58 2025 by rpki-client