$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7318f07c-8b30-4d74-8191-cb89a3eae284.roa File: 7318f07c-8b30-4d74-8191-cb89a3eae284.roa (raw, json) Hash identifier: ZGk6CPWNDM6UdYAXBStUNFs3aGV9gCsmEW2L7TTjxWY= Subject key identifier: 73:F5:52:8A:EE:BE:D1:B7:37:8B:24:A0:27:49:13:D1:A3:DC:65:2E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E7AC6610C84943BCF7C06F09A06561EF5D49D36 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7318f07c-8b30-4d74-8191-cb89a3eae284.roa Signing time: Thu 13 Nov 2025 00:00:06 +0000 ROA not before: Thu 13 Nov 2025 00:00:06 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:7a:c6:61:0c:84:94:3b:cf:7c:06:f0:9a:06:56:1e:f5:d4:9d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 13 00:00:06 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=702d760843059abf7055bfc3e8a2bb63ad19154c66ba7b9b69fb56cedf8d613e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:19:a3:e9:30:ed:ec:9d:dd:9b:80:95:16: ad:c4:30:23:f2:5f:9d:a0:32:8d:58:ec:02:fc:43: 62:bc:89:f9:a9:81:84:a6:4c:8a:ce:46:50:e7:8a: 79:86:f8:c4:2f:4e:f6:61:4e:59:d0:5a:12:c8:9b: b0:8a:e0:8d:bb:ae:f6:5e:dc:3a:35:19:a2:c7:93: 82:ce:e4:a8:bd:1a:af:61:3c:08:c8:49:cc:bc:90: 23:59:76:d9:5d:b6:fa:c4:f7:c7:00:17:bf:d8:f3: 69:e4:65:81:b2:b4:9f:f3:21:30:97:46:43:06:80: e9:1b:5f:fd:bf:dc:39:d3:80:0c:51:1b:31:52:25: 44:28:61:f7:c2:18:b9:14:e2:46:35:df:39:f4:90: 10:59:e6:01:40:d1:0c:01:b1:a2:fb:75:d0:93:6e: 16:0b:11:f7:eb:c7:2d:39:3a:2c:82:53:b4:ef:63: bd:af:e9:81:b8:d9:b0:14:2c:7b:8a:60:82:3d:62: 38:12:3d:9e:16:ec:15:9e:68:de:ff:53:4a:1e:6b: 79:21:78:17:0f:1d:31:84:c0:ae:e3:25:45:8d:7d: 05:7d:83:fa:ed:2b:a4:26:08:f2:22:0d:bb:bb:c3: 92:65:b8:be:bf:4f:d0:64:d0:77:04:a5:16:6d:60: df:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F5:52:8A:EE:BE:D1:B7:37:8B:24:A0:27:49:13:D1:A3:DC:65:2E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7318f07c-8b30-4d74-8191-cb89a3eae284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:6000::/40 Signature Algorithm: sha256WithRSAEncryption 99:6a:13:a0:a5:a4:7c:13:c0:c9:63:fb:59:f7:a2:db:ad:8d: 57:ba:68:bc:1a:56:aa:b1:8e:ea:d3:62:7a:81:bd:d4:ca:7b: 52:15:70:fb:4a:1f:7d:46:8e:25:12:f8:14:e6:55:ec:87:48: cc:61:9b:60:a3:75:ce:4b:93:42:55:41:76:8c:c3:25:70:af: e5:60:f4:c5:93:c0:78:ea:a0:a0:17:14:55:08:ed:29:19:bc: 01:39:05:94:e2:ab:50:bb:fd:ad:e9:ff:dc:09:ff:6b:2c:b1: b0:1e:dc:8c:2a:cc:82:f6:18:46:56:bc:32:99:cb:3d:3a:04: 35:d0:6f:46:01:89:25:4a:70:f3:9a:75:9d:3d:c8:5b:9d:43: 8a:a8:50:b7:48:22:42:1a:6d:ab:4c:e4:44:0c:a5:44:7b:71: c8:d1:35:03:dd:06:4e:69:4c:fd:33:7f:f6:90:b1:de:97:83: d7:4b:a7:e8:42:46:f0:c0:62:aa:78:c5:c2:3d:e6:94:96:ac: e5:4a:0d:ed:dc:49:1c:88:32:a2:bb:93:23:50:03:a4:38:fa: ad:a3:a3:87:65:f1:95:6a:26:cd:ae:28:af:03:36:94:62:39: 6b:9d:e1:fb:27:da:9d:85:cf:f6:9e:ff:a8:25:9e:fe:10:71: 8a:5c:48:7c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULnrGYQyElDvPfAbwmgZWHvXUnTYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTExMzAwMDAwNloX DTI1MTIxODIzNTk1OVowejFJMEcGA1UEBRNANzAyZDc2MDg0MzA1OWFiZjcwNTVi ZmMzZThhMmJiNjNhZDE5MTU0YzY2YmE3YjliNjlmYjU2Y2VkZjhkNjEzZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4oZo+kw7eyd3ZuAlRatxDAj8l+d oDKNWOwC/ENivIn5qYGEpkyKzkZQ54p5hvjEL072YU5Z0FoSyJuwiuCNu672Xtw6 NRmix5OCzuSovRqvYTwIyEnMvJAjWXbZXbb6xPfHABe/2PNp5GWBsrSf8yEwl0ZD BoDpG1/9v9w504AMURsxUiVEKGH3whi5FOJGNd859JAQWeYBQNEMAbGi+3XQk24W CxH368ctOTosglO072O9r+mBuNmwFCx7imCCPWI4Ej2eFuwVnmje/1NKHmt5IXgX Dx0xhMCu4yVFjX0FfYP67SukJgjyIg27u8OSZbi+v0/QZNB3BKUWbWDfjwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHP1UoruvtG3N4skoCdJE9Gj3GUuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzczMThmMDdjLThiMzAtNGQ3NC04MTkxLWNiODlhM2VhZTI4NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7WAwDQYJKoZIhvcNAQELBQADggEBAJlqE6ClpHwTwMlj+1n3 otutjVe6aLwaVqqxjurTYnqBvdTKe1IVcPtKH31GjiUS+BTmVeyHSMxhm2Cjdc5L k0JVQXaMwyVwr+Vg9MWTwHjqoKAXFFUI7SkZvAE5BZTiq1C7/a3p/9wJ/2sssbAe 3IwqzIL2GEZWvDKZyz06BDXQb0YBiSVKcPOadZ09yFudQ4qoULdIIkIabatM5EQM pUR7ccjRNQPdBk5pTP0zf/aQsd6Xg9dLp+hCRvDAYqp4xcI95pSWrOVKDe3cSRyI MqK7kyNQA6Q4+q2jo4dl8ZVqJs2uKK8DNpRiOWud4fsn2p2Fz/ae/6glnv4QcYpc SHw= -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:15 2025 by rpki-client