$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92a734ef-a252-48bc-a799-25426b153989.roa File: 92a734ef-a252-48bc-a799-25426b153989.roa (raw, json) Hash identifier: 4c5cMWjp9ZRy9/0IaP1wSwDUfG58G+InNKEP4GW7TKc= Subject key identifier: 71:73:8C:B4:3B:62:1E:D7:FC:B4:31:B6:13:09:89:CF:F1:95:6B:65 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 59FC7E42ED7E91C07C023AF63ACFBC879C7D7D16 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92a734ef-a252-48bc-a799-25426b153989.roa Signing time: Fri 07 Nov 2025 00:00:45 +0000 ROA not before: Fri 07 Nov 2025 00:00:45 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:fc:7e:42:ed:7e:91:c0:7c:02:3a:f6:3a:cf:bc:87:9c:7d:7d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:00:45 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=73e4789886ef93c029c84c1f784e0aa179daf4a1b11036500d238fd3ef67586c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f1:4f:87:fb:30:b8:18:40:62:f6:37:58:8e: 01:ba:42:d3:5d:32:1b:88:65:b4:7a:3f:b6:fe:98: 65:2c:b7:18:da:2d:23:b5:89:56:f0:cc:f7:00:67: c2:07:b9:ec:df:a4:7b:b6:10:9c:7a:4d:64:5f:71: 57:5a:c6:2a:d9:28:07:96:39:02:ec:04:0d:b3:ef: 1d:01:70:a7:13:58:89:88:e2:73:8c:2e:33:d2:4c: 8b:bc:bd:7c:d0:ec:c3:80:74:87:bb:b9:78:3c:a6: 80:3f:37:53:b5:a0:ed:97:b0:e2:1c:f0:6d:a3:9b: 68:fb:0c:70:7d:b5:3a:17:e1:e6:b5:8d:cd:1e:e0: ba:95:99:02:da:c7:28:ee:c6:1c:11:84:3f:a9:aa: 06:67:09:63:82:e5:8b:c9:64:4c:9b:7a:13:ff:c9: 53:74:ba:43:3b:57:5c:be:3f:50:c7:97:95:f9:24: 6f:54:61:4c:95:26:14:3a:1e:e5:cf:20:4a:1c:d8: 68:87:2e:82:0f:6a:57:65:e5:f2:db:b4:f6:23:d0: f0:78:0f:bd:f0:0e:19:8c:4f:ee:55:48:05:72:43: 17:b2:8a:84:e0:9f:a8:4a:d5:0a:98:00:1e:8c:dc: a2:da:45:36:51:77:97:13:54:d0:e0:9a:e0:99:4c: 5a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:73:8C:B4:3B:62:1E:D7:FC:B4:31:B6:13:09:89:CF:F1:95:6B:65 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92a734ef-a252-48bc-a799-25426b153989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:f000::/40 Signature Algorithm: sha256WithRSAEncryption 9e:66:b8:51:de:bc:c2:cc:d7:70:df:38:0a:af:a8:5f:10:65: b6:b8:f5:bc:29:e9:17:73:85:4c:a5:23:10:84:7d:a8:68:90: 31:d0:c9:1c:4d:90:81:cf:93:a7:c8:a4:d4:9e:ac:f9:b7:91: 86:b5:8c:65:d7:eb:fb:dc:f0:52:ae:85:12:eb:b8:22:af:d7: ef:79:38:35:b8:8b:31:44:b5:82:f5:cc:a3:30:e9:6b:e0:1f: aa:3b:dd:82:84:51:9e:50:2e:4a:2b:08:d6:01:f7:f4:9f:2e: 9c:0b:7f:71:2b:53:f8:0b:e6:03:90:b3:95:ad:ce:48:50:ad: 84:f7:19:9c:67:da:08:0e:cf:41:a7:ae:a9:4f:ad:60:f9:95: e9:c8:2d:43:b8:33:b7:6c:58:bd:19:c3:44:10:8a:74:29:ef: 94:52:ee:35:9a:82:6a:6e:35:4c:2f:b1:a8:a4:01:16:51:39: b0:57:02:be:94:d9:54:66:ab:cd:47:40:ee:64:17:79:49:79: bf:24:59:23:0e:fe:d5:6b:f4:2d:42:bb:83:44:f3:55:2e:a8: 40:1e:a2:69:7a:e7:47:29:f9:62:38:e2:05:e7:8b:81:50:b3: c6:18:34:14:78:f3:1b:14:08:22:dd:1a:00:79:f3:1f:1c:98: e2:09:6b:3b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWfx+Qu1+kcB8Ajr2Os+8h5x9fRYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMDA0NVoX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNANzNlNDc4OTg4NmVmOTNjMDI5Yzg0 YzFmNzg0ZTBhYTE3OWRhZjRhMWIxMTAzNjUwMGQyMzhmZDNlZjY3NTg2YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvFPh/swuBhAYvY3WI4BukLTXTIb iGW0ej+2/phlLLcY2i0jtYlW8Mz3AGfCB7ns36R7thCcek1kX3FXWsYq2SgHljkC 7AQNs+8dAXCnE1iJiOJzjC4z0kyLvL180OzDgHSHu7l4PKaAPzdTtaDtl7DiHPBt o5to+wxwfbU6F+HmtY3NHuC6lZkC2sco7sYcEYQ/qaoGZwljguWLyWRMm3oT/8lT dLpDO1dcvj9Qx5eV+SRvVGFMlSYUOh7lzyBKHNhohy6CD2pXZeXy27T2I9DweA+9 8A4ZjE/uVUgFckMXsoqE4J+oStUKmAAejNyi2kU2UXeXE1TQ4JrgmUxalQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHFzjLQ7Yh7X/LQxthMJic/xlWtlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkyYTczNGVmLWEyNTItNDhiYy1hNzk5LTI1NDI2YjE1Mzk4OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYfAwDQYJKoZIhvcNAQELBQADggEBAJ5muFHevMLM13DfOAqv qF8QZba49bwp6RdzhUylIxCEfahokDHQyRxNkIHPk6fIpNSerPm3kYa1jGXX6/vc 8FKuhRLruCKv1+95ODW4izFEtYL1zKMw6WvgH6o73YKEUZ5QLkorCNYB9/SfLpwL f3ErU/gL5gOQs5WtzkhQrYT3GZxn2ggOz0GnrqlPrWD5lenILUO4M7dsWL0Zw0QQ inQp75RS7jWagmpuNUwvsaikARZRObBXAr6U2VRmq81HQO5kF3lJeb8kWSMO/tVr 9C1Cu4NE81UuqEAeoml650cp+WI44gXni4FQs8YYNBR48xsUCCLdGgB58x8cmOIJ azs= -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:17 2025 by rpki-client