$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8de41395-91b5-4f4c-8d06-884bef8997ec.roa File: 8de41395-91b5-4f4c-8d06-884bef8997ec.roa (raw, json) Hash identifier: G/atgs7JDScxuQgi0fv8QKrhsII9DY/9G3RRQ0OOCYs= Subject key identifier: B4:1E:54:1E:2D:FB:46:E8:56:6F:D5:04:69:F5:78:2A:84:1E:5D:87 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5459B559A1CA664700DAE227087B72F13D1E9442 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8de41395-91b5-4f4c-8d06-884bef8997ec.roa Signing time: Sat 15 Nov 2025 00:00:56 +0000 ROA not before: Sat 15 Nov 2025 00:00:56 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:59:b5:59:a1:ca:66:47:00:da:e2:27:08:7b:72:f1:3d:1e:94:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 15 00:00:56 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=c42c3efa8d53f315655ce825b18d0ca3b8872d50bca285f91cb5190c3a143be9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4f:46:3c:3e:95:b4:7c:b2:64:a7:15:2a:0d: 5c:49:51:4c:4a:83:3a:bf:dd:7b:7b:83:2e:41:ef: 35:29:20:7a:20:43:0d:6b:f9:cd:56:db:5e:29:64: c3:02:3c:d5:77:79:97:41:56:ec:83:01:58:01:44: a3:5f:74:64:34:98:c8:88:9a:0a:41:2e:94:40:84: 33:8c:9c:76:27:f0:56:25:23:4f:16:52:e0:2d:a2: 23:a8:b6:46:41:7c:f0:84:ae:19:21:db:2e:8f:30: e2:b8:00:a6:fa:c4:fc:92:3b:ed:a5:e9:50:72:25: dd:4b:d6:f9:01:36:23:19:b6:93:94:6b:57:5c:81: e5:90:6e:89:61:a5:21:ff:97:0e:ff:c5:0d:51:f9: c0:18:5e:4e:b3:37:e7:a4:bd:30:3d:12:bb:82:31: 6b:d8:82:90:91:b1:87:70:de:79:e5:87:ee:b8:6e: 2d:b2:c5:05:a5:2a:54:c9:4f:3e:2a:13:7e:94:a5: f6:01:a1:17:d8:f5:76:97:e0:6e:8c:5a:58:5d:db: 07:91:6b:81:d0:48:1f:83:77:dd:13:7d:c2:7f:0d: bb:4f:99:6c:fc:d9:d6:33:3b:ba:d4:e5:f6:e3:3d: 62:34:c6:40:e3:41:74:5d:a7:64:a3:49:fa:d5:71: 19:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1E:54:1E:2D:FB:46:E8:56:6F:D5:04:69:F5:78:2A:84:1E:5D:87 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8de41395-91b5-4f4c-8d06-884bef8997ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:6000::/40 Signature Algorithm: sha256WithRSAEncryption 5b:66:e5:36:3f:a0:38:25:05:1b:0c:db:77:44:d7:40:8a:b5: ed:df:c6:62:f1:e6:0b:b0:3f:4c:1f:dd:11:48:60:9c:04:dd: bc:86:fe:db:2a:b6:5a:8f:5f:4f:7a:40:72:fc:ed:c8:b8:5c: e8:7c:9e:e6:89:4a:e6:57:ae:ca:c4:75:67:74:be:9b:b3:e9: df:3b:86:ff:7f:bc:98:e0:b0:5f:f5:de:ac:05:36:f1:c4:71: c6:fa:7b:b1:f0:b5:b5:3d:0f:d7:16:50:cd:0b:ba:59:12:4b: 81:cf:ff:8b:c1:43:69:41:2c:89:9b:67:3e:41:8b:05:42:61: 99:05:c6:02:12:b3:29:f2:ff:07:7d:a6:b6:dd:65:7f:dc:2b: 86:4f:c5:7d:2c:77:f8:bb:65:b0:89:94:05:3c:3b:33:28:23: 35:3e:c7:fa:7b:b0:d0:d7:a0:e9:3d:98:65:6e:af:d2:b7:62: 12:58:1e:76:b1:24:50:85:d3:b2:58:82:6a:c1:83:5a:9c:3f: 95:bc:81:30:0a:dd:ca:1f:f8:c3:2c:30:97:ad:65:12:12:90: ab:0d:78:1b:00:04:b3:19:2f:41:6b:35:c1:b5:43:83:05:4c: e6:67:b1:17:40:04:7e:45:40:67:51:11:c3:53:30:65:d4:9b: 80:53:66:94 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVFm1WaHKZkcA2uInCHty8T0elEIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTExNTAwMDA1NloX DTI1MTIyMDIzNTk1OVowejFJMEcGA1UEBRNAYzQyYzNlZmE4ZDUzZjMxNTY1NWNl ODI1YjE4ZDBjYTNiODg3MmQ1MGJjYTI4NWY5MWNiNTE5MGMzYTE0M2JlOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU9GPD6VtHyyZKcVKg1cSVFMSoM6 v917e4MuQe81KSB6IEMNa/nNVtteKWTDAjzVd3mXQVbsgwFYAUSjX3RkNJjIiJoK QS6UQIQzjJx2J/BWJSNPFlLgLaIjqLZGQXzwhK4ZIdsujzDiuACm+sT8kjvtpelQ ciXdS9b5ATYjGbaTlGtXXIHlkG6JYaUh/5cO/8UNUfnAGF5OszfnpL0wPRK7gjFr 2IKQkbGHcN555YfuuG4tssUFpSpUyU8+KhN+lKX2AaEX2PV2l+BujFpYXdsHkWuB 0Egfg3fdE33Cfw27T5ls/NnWMzu61OX24z1iNMZA40F0Xadko0n61XEZFwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLQeVB4t+0boVm/VBGn1eCqEHl2HMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhkZTQxMzk1LTkxYjUtNGY0Yy04ZDA2LTg4NGJlZjg5OTdlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba72AwDQYJKoZIhvcNAQELBQADggEBAFtm5TY/oDglBRsM23dE 10CKte3fxmLx5guwP0wf3RFIYJwE3byG/tsqtlqPX096QHL87ci4XOh8nuaJSuZX rsrEdWd0vpuz6d87hv9/vJjgsF/13qwFNvHEccb6e7HwtbU9D9cWUM0LulkSS4HP /4vBQ2lBLImbZz5BiwVCYZkFxgISsyny/wd9prbdZX/cK4ZPxX0sd/i7ZbCJlAU8 OzMoIzU+x/p7sNDXoOk9mGVur9K3YhJYHnaxJFCF07JYgmrBg1qcP5W8gTAK3cof +MMsMJetZRISkKsNeBsABLMZL0FrNcG1Q4MFTOZnsRdABH5FQGdREcNTMGXUm4BT ZpQ= -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:01 2025 by rpki-client