$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa File: 77745ad7-44b5-44a8-9e13-4096720b7c90.roa (raw, json) Hash identifier: GQTVahzbP+7tq2ELxuuO1ZRGpbHacKOOj6MHy+MoIMM= Subject key identifier: 8D:78:70:17:8E:72:EE:C1:D2:4A:25:DA:2E:D2:23:F7:50:EE:4A:26 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2B4120FA8BF714C4CB3B243420E91A69DD1A3ECC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa Signing time: Fri 07 Nov 2025 00:30:46 +0000 ROA not before: Fri 07 Nov 2025 00:30:46 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:41:20:fa:8b:f7:14:c4:cb:3b:24:34:20:e9:1a:69:dd:1a:3e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:30:46 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=5a46f2b354e997dea86fd3b6127e5af12abe153a90b1b2af25edee9f8a5f15fa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:22:1d:3f:19:0b:a4:06:29:90:1e:cf:74:5d: 98:57:36:ab:ba:14:61:6d:fc:9c:22:22:e1:28:86: d0:cd:8e:5e:71:64:08:29:e8:2b:ce:dd:5d:c8:50: 6c:33:6d:9b:76:6b:f4:ec:3a:01:94:a8:80:a7:15: ab:02:f7:01:aa:7f:de:cd:10:e0:76:be:33:15:3a: e3:bc:97:a4:6d:1e:cc:fb:28:28:d8:44:79:9f:50: 3c:12:af:f0:7e:f1:e5:9f:14:e0:62:30:ad:eb:c7: 5a:30:76:94:8b:0b:f0:73:01:84:40:9d:5a:ac:77: 9a:4b:36:7f:63:9c:01:b4:e5:93:fc:aa:8a:d2:3f: 90:a5:e8:49:65:60:08:cb:79:bb:12:52:65:ac:80: 81:82:21:a7:5c:c4:37:79:0a:ef:ba:c2:c6:fd:4b: 86:6e:53:7b:ff:0e:fb:54:a7:72:76:ad:3c:26:13: 67:32:3d:2f:f4:21:f3:af:0a:15:86:67:56:0a:b3: 97:f1:26:c3:21:d4:24:34:51:69:54:64:bf:fb:89: 7c:fa:56:9c:2e:77:fb:e8:f1:2b:20:5c:a1:6a:bd: e4:0d:43:de:54:96:8e:a4:a8:41:de:4d:49:d4:f2: eb:d9:d3:8f:f2:ec:51:e3:bc:3c:67:7c:10:a3:b0: e9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:78:70:17:8E:72:EE:C1:D2:4A:25:DA:2E:D2:23:F7:50:EE:4A:26 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:9080::/48 Signature Algorithm: sha256WithRSAEncryption 99:2e:5f:78:5d:45:16:d6:6c:f5:9f:1d:64:3b:97:09:60:88: da:4e:0c:b0:9d:1b:b5:bf:81:ba:5e:81:37:b9:59:41:4c:3d: b4:30:d6:c7:6d:21:b7:e9:88:78:3d:fe:c0:de:cc:ff:aa:6a: 58:3f:57:9b:26:b3:aa:88:d4:da:05:ed:dc:9d:03:9e:54:01: 83:79:06:0b:18:c6:60:d0:25:d8:11:ed:0e:08:1c:24:8c:27: 3c:6a:e4:ad:6f:e6:ea:7a:35:9b:56:e7:2a:5a:7e:f8:76:b6: c9:71:4a:a4:c7:69:f8:22:7b:be:95:0b:58:af:5f:2b:77:3a: ba:7a:c1:31:c5:07:18:bc:96:fd:6e:6f:23:cb:0c:c2:a3:16: 69:58:97:59:88:51:27:bb:16:0e:d0:15:cc:27:7c:bf:3f:b7: ee:af:2b:80:2e:e2:ec:0e:1c:f0:b1:c8:88:71:3f:f6:c6:63: de:7f:3a:50:94:85:8a:39:e5:4d:05:87:52:5e:1c:c9:00:fe: ae:a5:7a:60:5a:e6:d2:45:89:54:7e:96:3b:5e:4c:43:38:3b: e9:87:4b:d6:2c:8e:dc:dd:58:5b:a2:78:c8:c8:50:99:01:de: bc:ff:1a:1f:0f:05:67:f5:d8:53:94:1f:84:c3:19:ce:1e:bb: 15:0c:53:17 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUK0Eg+ov3FMTLOyQ0IOkaad0aPswwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMzA0NloX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNANWE0NmYyYjM1NGU5OTdkZWE4NmZk M2I2MTI3ZTVhZjEyYWJlMTUzYTkwYjFiMmFmMjVlZGVlOWY4YTVmMTVmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCIdPxkLpAYpkB7PdF2YVzaruhRh bfycIiLhKIbQzY5ecWQIKegrzt1dyFBsM22bdmv07DoBlKiApxWrAvcBqn/ezRDg dr4zFTrjvJekbR7M+ygo2ER5n1A8Eq/wfvHlnxTgYjCt68daMHaUiwvwcwGEQJ1a rHeaSzZ/Y5wBtOWT/KqK0j+QpehJZWAIy3m7ElJlrICBgiGnXMQ3eQrvusLG/UuG blN7/w77VKdydq08JhNnMj0v9CHzrwoVhmdWCrOX8SbDIdQkNFFpVGS/+4l8+lac Lnf76PErIFyhar3kDUPeVJaOpKhB3k1J1PLr2dOP8uxR47w8Z3wQo7DpQwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFI14cBeOcu7B0kol2i7SI/dQ7komMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3NzQ1YWQ3LTQ0YjUtNDRhOC05ZTEzLTQwOTY3MjBiN2M5MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/5CAMA0GCSqGSIb3DQEBCwUAA4IBAQCZLl94XUUW1mz1nx1k O5cJYIjaTgywnRu1v4G6XoE3uVlBTD20MNbHbSG36Yh4Pf7A3sz/qmpYP1ebJrOq iNTaBe3cnQOeVAGDeQYLGMZg0CXYEe0OCBwkjCc8auStb+bqejWbVucqWn74drbJ cUqkx2n4Inu+lQtYr18rdzq6esExxQcYvJb9bm8jywzCoxZpWJdZiFEnuxYO0BXM J3y/P7furyuALuLsDhzwsciIcT/2xmPefzpQlIWKOeVNBYdSXhzJAP6upXpgWubS RYlUfpY7XkxDODvph0vWLI7c3VhbonjIyFCZAd68/xofDwVn9dhTlB+EwxnOHrsV DFMX -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:11 2025 by rpki-client