$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa File: 7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa (raw, json) Hash identifier: 2jyityud68FuWfIOWmFXGP0RneEU9qZLSmhlp8XWsr0= Subject key identifier: 7C:A3:44:19:6F:31:3A:EC:2A:E0:B2:EE:31:84:72:A3:F8:0E:12:E5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 24E27B1D93F8805FDCFD4BA44E5291E1FBB938D7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa Signing time: Sat 08 Nov 2025 00:20:08 +0000 ROA not before: Sat 08 Nov 2025 00:20:08 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e2:7b:1d:93:f8:80:5f:dc:fd:4b:a4:4e:52:91:e1:fb:b9:38:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:20:08 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=138f1e9c9fd7b273de50838af40dceef63b89a6a49f76d291dd2c76b8022eb42, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:87:35:7a:a6:e6:cc:2a:17:7f:41:53:57: a3:8c:89:c1:e0:ff:ff:81:b5:22:c2:cd:c2:f5:d1: 6a:3c:2c:79:3b:c4:24:c1:36:79:ff:23:d6:61:d8: 9d:19:09:6b:0d:d9:19:95:21:8d:3c:84:bb:74:51: 1c:51:52:4a:dd:61:50:ab:52:9b:61:7a:40:5a:77: 23:95:18:34:ea:11:92:38:49:b5:09:3d:51:a7:34: 4b:a0:f5:5b:7c:89:35:b9:c7:c7:74:a4:56:dd:a7: df:09:a8:8a:24:f0:0a:48:a7:27:ba:9d:9a:ba:f1: 95:31:0a:70:03:7f:a6:7c:0a:ee:ea:b6:01:8c:e2: 21:de:1b:f0:a6:d7:6f:59:54:d4:83:54:9d:ad:e6: e6:c8:37:86:d8:49:25:01:e3:3e:98:c7:20:4e:74: 3a:bd:42:91:1e:ad:55:f4:c0:d2:1e:13:11:59:5a: 78:2f:2b:66:70:06:9e:6a:4b:37:d3:92:05:c1:a7: a2:7d:a2:62:39:39:68:02:f9:6d:73:87:a1:d9:50: 3d:2b:c0:c8:77:9b:70:b7:6a:5f:42:ba:25:d4:76: c4:b1:81:82:d4:42:43:22:c3:61:98:cc:6a:4d:3c: f9:5d:fb:96:2f:2d:91:4a:50:94:e3:2a:2c:2f:af: 53:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A3:44:19:6F:31:3A:EC:2A:E0:B2:EE:31:84:72:A3:F8:0E:12:E5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:1080::/48 Signature Algorithm: sha256WithRSAEncryption 97:46:39:49:2f:fb:81:25:5c:97:29:36:44:69:cb:30:25:e6: 39:9e:a7:eb:cd:ad:d6:56:44:62:75:72:62:92:ff:aa:3f:48: 0e:6d:b3:b2:31:13:f2:b4:8b:0e:e4:93:71:9c:9e:2d:29:35: 3d:67:9b:fe:f1:15:8f:f6:f6:8a:2f:85:d8:a3:ee:aa:74:d9: 1b:2d:d7:71:c7:14:4c:3e:b6:f6:80:2d:56:30:d1:40:08:bc: da:86:4b:08:9c:1d:d6:52:a8:3c:68:bc:d0:ae:df:a3:8f:e7: 70:7b:81:ed:8c:fa:a5:85:c2:a6:93:6e:fb:f6:e0:4f:90:a0: cd:64:c6:2d:48:d6:4b:fc:03:0d:66:9d:3b:10:81:75:93:e5: ec:41:59:4f:a4:89:c7:c4:51:9f:21:f4:23:48:e0:c5:34:ef: 14:e4:85:fc:d7:ba:cf:fc:8d:4b:cb:f1:3a:33:c6:ba:d4:c8: d4:ca:7e:89:7e:a5:23:a8:d4:82:68:4f:05:2c:ac:c4:90:cf: ff:4f:ed:d0:d9:62:71:69:97:32:5e:29:58:6b:22:ed:c1:7e: 40:b7:26:35:fc:2b:b1:1f:b5:61:47:c8:6e:04:33:26:f4:22: 7c:54:31:7d:a0:bf:bd:95:6a:0a:46:0f:8b:b1:b7:08:92:6a: 85:d2:0b:16 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJOJ7HZP4gF/c/UukTlKR4fu5ONcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMjAwOFoX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAMTM4ZjFlOWM5ZmQ3YjI3M2RlNTA4 MzhhZjQwZGNlZWY2M2I4OWE2YTQ5Zjc2ZDI5MWRkMmM3NmI4MDIyZWI0MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSyHNXqm5swqF39BU1ejjInB4P// gbUiws3C9dFqPCx5O8QkwTZ5/yPWYdidGQlrDdkZlSGNPIS7dFEcUVJK3WFQq1Kb YXpAWncjlRg06hGSOEm1CT1RpzRLoPVbfIk1ucfHdKRW3affCaiKJPAKSKcnup2a uvGVMQpwA3+mfAru6rYBjOIh3hvwptdvWVTUg1SdrebmyDeG2EklAeM+mMcgTnQ6 vUKRHq1V9MDSHhMRWVp4LytmcAaeaks305IFwaeifaJiOTloAvltc4eh2VA9K8DI d5twt2pfQrol1HbEsYGC1EJDIsNhmMxqTTz5XfuWLy2RSlCU4yosL69TfQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHyjRBlvMTrsKuCy7jGEcqP4DhLlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdhYzUwOGI4LTMzYzMtNDdkNC1hYzhhLTFjMjVmMzdkYjNjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/xCAMA0GCSqGSIb3DQEBCwUAA4IBAQCXRjlJL/uBJVyXKTZE acswJeY5nqfrza3WVkRidXJikv+qP0gObbOyMRPytIsO5JNxnJ4tKTU9Z5v+8RWP 9vaKL4XYo+6qdNkbLddxxxRMPrb2gC1WMNFACLzahksInB3WUqg8aLzQrt+jj+dw e4HtjPqlhcKmk2779uBPkKDNZMYtSNZL/AMNZp07EIF1k+XsQVlPpInHxFGfIfQj SODFNO8U5IX817rP/I1Ly/E6M8a61MjUyn6JfqUjqNSCaE8FLKzEkM//T+3Q2WJx aZcyXilYayLtwX5AtyY1/CuxH7VhR8huBDMm9CJ8VDF9oL+9lWoKRg+LsbcIkmqF 0gsW -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:19 2025 by rpki-client