$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8b68ae6b-07d9-4faf-96d3-0ed316306385.roa File: 8b68ae6b-07d9-4faf-96d3-0ed316306385.roa (raw, json) Hash identifier: r681KaDu0m/QipWMHxEPo1IBjSGx5O6d3p9/Sy4zMUc= Subject key identifier: 20:35:A2:5B:7B:51:43:F5:EB:62:31:06:B3:6D:91:B9:73:3A:42:5C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2C3D29E13AAD59C63ED673F55766E9FF31001C44 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8b68ae6b-07d9-4faf-96d3-0ed316306385.roa Signing time: Fri 07 Nov 2025 00:00:12 +0000 ROA not before: Fri 07 Nov 2025 00:00:12 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3d:29:e1:3a:ad:59:c6:3e:d6:73:f5:57:66:e9:ff:31:00:1c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:00:12 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=ec971a2c1b8c50a4839a268f06bced2d167338b07bd30014bc800cc36bdb55a5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c1:a7:37:a5:c5:d6:53:5b:13:2b:0b:31:b2: fa:47:77:36:ca:d7:8b:c1:59:22:fc:5b:22:dc:ef: 5b:1a:1b:51:ed:67:d7:4b:74:05:96:1d:7b:22:d5: d7:8b:68:e3:a9:f0:1f:76:80:b9:87:0b:a2:6d:f1: 2d:82:5c:da:fb:e1:73:8b:3f:b7:37:a6:04:6c:8c: db:76:27:57:6d:e6:9a:0c:d5:06:25:05:11:07:2d: 32:07:44:ef:1a:ff:79:2e:af:9a:e5:34:88:11:7a: 8a:d5:03:3b:93:af:9a:f1:43:44:cb:a5:2b:bf:58: 33:3c:39:ae:82:f1:83:df:14:a0:db:45:cd:e8:d8: 1e:08:4b:dd:7e:f8:48:a5:90:09:96:11:11:a5:cf: 9f:ee:51:19:89:f4:e2:66:69:b7:9a:f8:5c:f8:60: 75:90:df:95:4d:be:c4:ee:81:09:eb:3e:ab:a4:36: 71:6e:9d:62:d8:e8:b9:d2:57:c4:8e:1a:a0:c2:17: 18:10:e2:23:f1:1c:96:b4:34:81:9f:75:f0:a7:b3: 81:ac:7b:74:c8:72:33:86:b8:49:f9:eb:81:0c:c2: 63:0e:76:0d:cb:54:bd:83:be:d6:d7:f6:65:60:e0: d6:4f:f2:69:90:3e:00:84:55:0d:2f:14:59:57:42: 99:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:35:A2:5B:7B:51:43:F5:EB:62:31:06:B3:6D:91:B9:73:3A:42:5C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8b68ae6b-07d9-4faf-96d3-0ed316306385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:70c0::/48 Signature Algorithm: sha256WithRSAEncryption 15:34:f1:02:32:ff:d2:b8:e5:be:49:5f:0e:e2:46:70:98:85: e3:bf:38:38:84:37:d3:4c:4a:0a:19:ba:26:98:c4:e0:31:d9: a5:84:76:6e:9d:18:b8:49:e5:f6:aa:eb:c5:8f:7f:44:2d:a8: b8:04:2d:73:32:b9:f9:9d:18:1e:86:a0:c0:4f:63:cc:39:38: f3:ad:01:81:c9:43:9b:f5:60:22:9a:f2:6c:72:f8:f0:cd:61: 14:7a:72:22:8f:aa:bf:a5:56:0b:af:9a:78:6d:bc:1e:cf:50: 94:84:e3:83:07:83:db:6b:ae:b8:b6:5a:c0:01:a4:79:bd:a3: b0:a2:39:29:b9:79:c8:92:05:40:d3:4b:1d:58:46:4b:2b:90: af:1a:13:a0:0d:b8:f7:7c:80:18:2c:e5:e1:c2:78:d2:ed:54: 4e:98:de:72:e3:30:bc:f2:38:65:96:cc:e1:b6:27:c7:c1:96: df:77:d8:ed:8c:17:86:3f:d1:f8:49:bf:84:2e:4f:c3:48:bc: 4a:15:74:6e:02:3c:48:2e:14:e0:31:cd:ba:30:f0:95:ee:07: 9e:52:e7:7d:56:d2:fa:e4:28:2f:92:a8:3f:92:f1:d7:96:b3: 40:2f:86:32:0e:ea:de:e8:eb:03:2e:34:16:c6:27:d0:6a:a4: 28:81:89:24 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULD0p4TqtWcY+1nP1V2bp/zEAHEQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMDAxMloX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAZWM5NzFhMmMxYjhjNTBhNDgzOWEy NjhmMDZiY2VkMmQxNjczMzhiMDdiZDMwMDE0YmM4MDBjYzM2YmRiNTVhNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8GnN6XF1lNbEysLMbL6R3c2yteL wVki/Fsi3O9bGhtR7WfXS3QFlh17ItXXi2jjqfAfdoC5hwuibfEtglza++Fziz+3 N6YEbIzbdidXbeaaDNUGJQURBy0yB0TvGv95Lq+a5TSIEXqK1QM7k6+a8UNEy6Ur v1gzPDmugvGD3xSg20XN6NgeCEvdfvhIpZAJlhERpc+f7lEZifTiZmm3mvhc+GB1 kN+VTb7E7oEJ6z6rpDZxbp1i2Oi50lfEjhqgwhcYEOIj8RyWtDSBn3Xwp7OBrHt0 yHIzhrhJ+euBDMJjDnYNy1S9g77W1/ZlYODWT/JpkD4AhFUNLxRZV0KZiwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCA1olt7UUP162IxBrNtkblzOkJcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiNjhhZTZiLTA3ZDktNGZhZi05NmQzLTBlZDMxNjMwNjM4NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYXDAMA0GCSqGSIb3DQEBCwUAA4IBAQAVNPECMv/SuOW+SV8O 4kZwmIXjvzg4hDfTTEoKGbommMTgMdmlhHZunRi4SeX2quvFj39ELai4BC1zMrn5 nRgehqDAT2PMOTjzrQGByUOb9WAimvJscvjwzWEUenIij6q/pVYLr5p4bbwez1CU hOODB4Pba664tlrAAaR5vaOwojkpuXnIkgVA00sdWEZLK5CvGhOgDbj3fIAYLOXh wnjS7VROmN5y4zC88jhllszhtifHwZbfd9jtjBeGP9H4Sb+ELk/DSLxKFXRuAjxI LhTgMc26MPCV7geeUud9VtL65Cgvkqg/kvHXlrNAL4YyDure6OsDLjQWxifQaqQo gYkk -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:00 2025 by rpki-client