$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa File: 652666fe-aad6-4cd8-8e35-91322c742337.roa (raw, json) Hash identifier: oHeqXCtBInjE19aWufPSlotF8zOYm84iWoIG8nH2PrQ= Subject key identifier: 53:D7:8F:A6:26:0E:39:AC:8C:BA:B3:4B:C6:C9:92:A6:DF:2A:BA:23 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 212F27708C17B9B9D6FBCC8B4DD6E0C079496E33 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa Signing time: Fri 07 Nov 2025 00:00:42 +0000 ROA not before: Fri 07 Nov 2025 00:00:42 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:2f:27:70:8c:17:b9:b9:d6:fb:cc:8b:4d:d6:e0:c0:79:49:6e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:00:42 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=98925e72e31aefe932272ffe7106f1a52758beeec58ca672444957602b701389, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3b:ba:a7:ba:30:aa:9f:ea:9f:fa:0c:71:c5: 87:42:54:d8:6d:03:f9:38:17:c5:ba:7c:37:2e:e0: 10:e2:8e:c9:77:15:98:b1:22:de:6b:ca:a5:c5:0b: a5:d9:67:8d:55:18:24:13:22:a3:71:b4:31:d1:f0: e8:61:60:d9:32:a0:ba:3a:dc:3f:01:56:59:e9:5f: 8e:a2:07:6a:08:5a:2b:46:67:de:c8:3b:fd:4b:b1: 99:a4:67:0c:21:45:66:74:c2:45:3a:33:c9:14:99: 60:f9:e1:8d:e1:d6:68:44:8e:cc:51:97:cf:21:a3: f8:5f:77:16:b5:ef:d2:be:c7:a8:a5:e6:ce:2a:9b: 8d:a4:11:11:44:94:6e:6a:48:53:83:5e:e5:e2:a0: 53:5e:91:3a:0d:19:b6:20:17:87:b8:e8:72:74:bb: 2a:73:f8:f5:80:15:cf:5f:c6:ea:40:0f:ab:ad:9e: 60:25:87:ae:99:3b:1e:c2:ae:ca:d9:96:53:c2:0e: 56:ee:77:cd:47:da:ab:74:ed:8a:08:ed:30:cb:f0: 1c:0d:da:70:fa:5b:d3:33:aa:15:7f:e1:71:ed:91: 4a:46:82:3f:94:fc:13:19:27:95:a0:88:35:c2:4d: b5:6f:ab:f8:a5:28:bf:75:fb:9e:a1:3e:bc:8e:8f: c6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D7:8F:A6:26:0E:39:AC:8C:BA:B3:4B:C6:C9:92:A6:DF:2A:BA:23 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:9000::/40 Signature Algorithm: sha256WithRSAEncryption 44:c3:6e:a8:7a:cb:96:99:f5:f3:11:4a:53:9b:a9:87:f6:0c: aa:28:eb:4a:f6:42:f3:4a:82:0e:51:ef:31:64:78:82:2b:91: ee:24:8e:fb:c0:3b:db:41:5a:6a:26:4e:8e:83:81:3a:51:48: 31:22:03:ae:00:e5:27:2d:27:f7:d7:8e:3e:bb:1c:ab:49:64: 09:d0:27:52:d8:20:29:92:50:03:30:99:49:3d:41:51:14:b2: 53:12:70:07:d3:31:91:64:10:ff:4b:10:19:20:3e:3e:ce:27: 92:1d:fb:bb:4d:36:b4:79:24:dd:a5:0f:f9:dd:f9:1e:3c:bc: 1d:7a:02:17:76:1a:0e:33:13:cd:71:35:4a:df:f1:23:64:b5: b7:02:9a:e3:31:94:f5:dd:cb:b0:18:ec:ec:75:d6:e8:ed:28: 0c:e8:b1:e5:c7:91:3c:97:71:cc:7e:ec:34:33:50:3d:d0:cb: b3:f6:dd:bd:17:e0:b1:13:35:66:cd:ec:31:75:1f:d6:11:94: d8:0f:29:01:26:c1:e5:d4:d1:91:08:c3:b0:4f:37:d7:fb:9e: 92:d9:51:37:17:f6:77:65:cb:23:14:4e:01:a0:87:ff:00:01: 9c:4e:a5:b5:33:0a:67:70:47:1f:04:9f:ce:b2:a4:9b:d6:17: cb:63:77:13 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIS8ncIwXubnW+8yLTdbgwHlJbjMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMDA0MloX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAOTg5MjVlNzJlMzFhZWZlOTMyMjcy ZmZlNzEwNmYxYTUyNzU4YmVlZWM1OGNhNjcyNDQ0OTU3NjAyYjcwMTM4OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ju6p7owqp/qn/oMccWHQlTYbQP5 OBfFunw3LuAQ4o7JdxWYsSLea8qlxQul2WeNVRgkEyKjcbQx0fDoYWDZMqC6Otw/ AVZZ6V+OogdqCForRmfeyDv9S7GZpGcMIUVmdMJFOjPJFJlg+eGN4dZoRI7MUZfP IaP4X3cWte/SvseopebOKpuNpBERRJRuakhTg17l4qBTXpE6DRm2IBeHuOhydLsq c/j1gBXPX8bqQA+rrZ5gJYeumTsewq7K2ZZTwg5W7nfNR9qrdO2KCO0wy/AcDdpw +lvTM6oVf+Fx7ZFKRoI/lPwTGSeVoIg1wk21b6v4pSi/dfueoT68jo/GBQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFPXj6YmDjmsjLqzS8bJkqbfKrojMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY1MjY2NmZlLWFhZDYtNGNkOC04ZTM1LTkxMzIyYzc0MjMzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/5AwDQYJKoZIhvcNAQELBQADggEBAETDbqh6y5aZ9fMRSlOb qYf2DKoo60r2QvNKgg5R7zFkeIIrke4kjvvAO9tBWmomTo6DgTpRSDEiA64A5Sct J/fXjj67HKtJZAnQJ1LYICmSUAMwmUk9QVEUslMScAfTMZFkEP9LEBkgPj7OJ5Id +7tNNrR5JN2lD/nd+R48vB16Ahd2Gg4zE81xNUrf8SNktbcCmuMxlPXdy7AY7Ox1 1ujtKAzoseXHkTyXccx+7DQzUD3Qy7P23b0X4LETNWbN7DF1H9YRlNgPKQEmweXU 0ZEIw7BPN9f7npLZUTcX9ndlyyMUTgGgh/8AAZxOpbUzCmdwRx8En86ypJvWF8tj dxM= -----END CERTIFICATE-----Generated at Tue Nov 18 09:37:20 2025 by rpki-client