$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8240f40e-4c9d-4e9c-85a8-efba70430867.roa File: 8240f40e-4c9d-4e9c-85a8-efba70430867.roa (raw, json) Hash identifier: nVOCZSc7h8tptStNyQHB3iGqa4uQ/1rRSzj9X+ZbQ+E= Subject key identifier: 19:13:6A:30:60:DB:D2:A2:19:14:CC:4B:2C:06:EF:9F:82:19:7E:BE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 374BBD1888DC98B62B3685A37D37CCF2256C5761 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8240f40e-4c9d-4e9c-85a8-efba70430867.roa Signing time: Wed 29 Oct 2025 07:37:57 +0000 ROA not before: Wed 29 Oct 2025 07:37:57 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4b:bd:18:88:dc:98:b6:2b:36:85:a3:7d:37:cc:f2:25:6c:57:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 07:37:57 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=6b80e88c9af8077106d96a7dd416aa40aa3108c034ecfac1a6ec822e9ef7ce0a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:49:98:50:21:35:83:23:13:5f:63:90:8a: 71:6b:6e:9e:1c:da:30:87:d4:d3:c0:a9:c7:3b:73: c6:e1:cb:6e:a3:49:f2:88:cb:4b:5f:09:b7:7d:af: 8f:53:3d:58:9e:15:10:bb:17:61:b0:ab:2e:09:0a: 1f:e0:94:a4:b6:7c:ce:17:af:2a:d9:c2:bb:15:54: ae:bd:a0:f4:80:52:41:8e:d7:b2:54:c9:bc:f8:c9: 2a:fe:08:d6:78:6d:d0:34:83:b9:92:75:cf:34:45: c7:bc:7d:bc:f9:70:cc:dd:f0:42:cf:ae:cf:23:e1: f1:3a:70:ec:ba:b0:60:7d:f8:f5:7c:86:bb:a9:5e: f8:ee:55:1f:0e:da:2b:f7:ee:40:10:f6:c7:3f:01: e6:31:5c:6a:a1:32:64:6a:89:0a:fe:ca:a6:f8:c4: 4f:38:5c:95:4e:53:4c:ab:98:e9:e5:93:28:e4:ef: f2:9e:90:44:96:4d:0a:d8:c6:de:0e:0e:4a:a5:d9: cd:87:d8:d5:a2:06:97:fb:a6:77:54:d5:13:dd:37: e6:d6:06:b6:a0:94:6d:cd:a7:ab:f9:47:4b:eb:d1: 4e:d6:e6:1d:e7:21:ab:69:72:04:5c:4f:11:a6:98: ca:09:2b:15:68:fe:d4:88:ea:5a:c3:7d:e0:c6:c4: c6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:13:6A:30:60:DB:D2:A2:19:14:CC:4B:2C:06:EF:9F:82:19:7E:BE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8240f40e-4c9d-4e9c-85a8-efba70430867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:4040::/48 Signature Algorithm: sha256WithRSAEncryption c3:d1:17:db:da:7e:e5:84:2f:2d:19:67:d0:80:01:1f:1f:64: 31:74:59:fb:c7:ee:cc:12:f4:fc:4f:56:c5:ce:43:29:13:e3: d9:16:0e:2c:8f:59:c6:17:99:e9:46:72:32:14:7b:64:76:32: c0:1f:2c:b6:1a:58:6f:43:5b:a7:94:63:8c:1a:c6:ab:5c:d8: a6:35:25:3d:30:4c:ec:a5:24:81:4b:3f:26:5c:a1:0c:cc:31: a9:2a:bd:73:4f:15:b8:f0:0a:02:a9:28:fa:4e:7e:5d:0e:27: 82:98:e2:46:93:13:24:3c:cf:0f:ba:fb:ad:b8:49:a6:14:54: c3:66:3f:6f:d9:67:45:4a:0b:bb:ce:7c:33:1e:a1:31:4f:c8: 36:d5:5f:9b:73:cd:95:53:f3:a3:3e:39:71:28:ec:d0:57:e8: 21:c5:e1:fc:aa:ad:7f:c6:44:c6:fa:0a:e7:4d:4b:4e:16:ed: b5:e9:71:1f:aa:eb:71:af:c7:1c:e9:c3:18:56:70:1c:5a:d0: b7:a7:1a:13:37:5a:25:08:6c:ff:e2:f7:a4:d0:66:d6:4e:f6: cc:7c:e6:bc:1a:f8:aa:c2:4b:9e:85:93:79:b9:52:ed:6d:0d: e0:79:c2:0f:0f:2b:92:9d:36:b7:9a:0f:6b:83:bf:2b:3b:59: 53:89:bf:ef -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUN0u9GIjcmLYrNoWjfTfM8iVsV2EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTA3Mzc1N1oX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNANmI4MGU4OGM5YWY4MDc3MTA2ZDk2 YTdkZDQxNmFhNDBhYTMxMDhjMDM0ZWNmYWMxYTZlYzgyMmU5ZWY3Y2UwYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFJJmFAhNYMjE19jkIpxa26eHNow h9TTwKnHO3PG4ctuo0nyiMtLXwm3fa+PUz1YnhUQuxdhsKsuCQof4JSktnzOF68q 2cK7FVSuvaD0gFJBjteyVMm8+Mkq/gjWeG3QNIO5knXPNEXHvH28+XDM3fBCz67P I+HxOnDsurBgffj1fIa7qV747lUfDtor9+5AEPbHPwHmMVxqoTJkaokK/sqm+MRP OFyVTlNMq5jp5ZMo5O/ynpBElk0K2MbeDg5KpdnNh9jVogaX+6Z3VNUT3Tfm1ga2 oJRtzaer+UdL69FO1uYd5yGraXIEXE8RppjKCSsVaP7UiOpaw33gxsTGEwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBkTajBg29KiGRTMSywG75+CGX6+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgyNDBmNDBlLTRjOWQtNGU5Yy04NWE4LWVmYmE3MDQzMDg2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6kBAMA0GCSqGSIb3DQEBCwUAA4IBAQDD0Rfb2n7lhC8tGWfQ gAEfH2QxdFn7x+7MEvT8T1bFzkMpE+PZFg4sj1nGF5npRnIyFHtkdjLAHyy2Glhv Q1unlGOMGsarXNimNSU9MEzspSSBSz8mXKEMzDGpKr1zTxW48AoCqSj6Tn5dDieC mOJGkxMkPM8PuvutuEmmFFTDZj9v2WdFSgu7znwzHqExT8g21V+bc82VU/OjPjlx KOzQV+ghxeH8qq1/xkTG+grnTUtOFu216XEfqutxr8cc6cMYVnAcWtC3pxoTN1ol CGz/4vek0GbWTvbMfOa8GviqwkuehZN5uVLtbQ3gecIPDyuSnTa3mg9rg78rO1lT ib/v -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:37 2025 by rpki-client