$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/931330f5-9897-4b1f-9582-a81df9bb0324.roa File: 931330f5-9897-4b1f-9582-a81df9bb0324.roa (raw, json) Hash identifier: sdvpO1uDfePJKgo3OjuROlfcwhJJvb7X2CinUCkQItg= Subject key identifier: 1E:EC:30:F9:85:1F:96:C5:AD:23:5A:13:A7:5A:02:18:46:AE:4E:81 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2721B068CC33C0A9A5E4054FAC8351C886BB7066 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/931330f5-9897-4b1f-9582-a81df9bb0324.roa Signing time: Sun 09 Nov 2025 00:10:39 +0000 ROA not before: Sun 09 Nov 2025 00:10:39 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:21:b0:68:cc:33:c0:a9:a5:e4:05:4f:ac:83:51:c8:86:bb:70:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:10:39 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=2b7945c0ffe2fa230764c656f555e4b15ffaf89eac4a80f2275e1caf6b14229b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cb:24:da:fe:83:41:e0:36:b5:4e:84:8d:01: be:25:47:cf:4f:f8:e4:57:0d:28:00:2f:e0:0a:6c: 62:15:b5:8b:3b:be:a3:62:9e:08:3e:b4:96:fc:5b: 7d:2b:5c:8a:e2:13:56:4e:b6:9e:70:6a:c3:e6:bc: fe:0e:de:e2:fb:ca:4b:d0:da:61:1e:39:cc:8c:1f: 58:0d:c1:db:06:ea:f8:e5:33:53:c6:89:4b:1c:2f: c9:c9:d0:4e:22:6b:ee:82:33:03:73:67:7e:23:bf: 86:19:a4:1b:1e:17:25:95:f3:dc:bd:51:7a:cd:df: d5:86:84:3f:37:62:7a:05:01:16:dc:8a:da:b3:fc: 71:7e:f0:a8:a4:52:32:4b:1f:9a:6c:da:70:8c:31: 32:7f:90:f9:27:8c:c0:0f:ba:04:8b:cd:b5:4f:3a: da:77:d0:2b:f4:3d:8f:d0:b6:28:ab:f8:a3:fb:c6: a0:09:41:c0:f2:8b:af:f5:10:a8:6d:09:ae:47:3f: cc:04:52:95:99:2d:ba:f6:2d:1e:d2:64:0f:9e:b9: 18:01:1c:a9:4d:8f:1d:bb:19:66:d1:eb:95:b1:64: a5:88:89:90:00:5b:4c:f1:1f:4e:3a:3b:bd:e0:1d: 87:e1:e1:1e:90:77:c5:aa:95:40:13:b7:8b:82:75: 13:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EC:30:F9:85:1F:96:C5:AD:23:5A:13:A7:5A:02:18:46:AE:4E:81 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/931330f5-9897-4b1f-9582-a81df9bb0324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:6000::/40 Signature Algorithm: sha256WithRSAEncryption 24:9d:89:18:4b:b0:a7:42:bb:4d:58:5f:bc:1a:37:a5:b8:4b: f6:d7:9d:15:9b:cc:79:ec:ca:db:d9:cf:84:3d:fe:25:39:28: 3d:a4:4f:b0:06:7a:0c:2a:e0:0b:fb:54:ee:5a:eb:26:22:8e: 1b:50:c3:ce:6c:e0:2b:18:71:ef:b5:80:f3:a2:ca:18:43:47: 41:e4:ab:b2:38:26:a5:e1:0a:c2:ec:97:d4:04:37:ac:25:3f: a1:4a:6b:3e:43:03:15:f6:82:69:d8:98:f6:7e:fe:8e:eb:ed: a2:f3:e3:fe:63:a9:5e:b5:7d:90:43:f6:aa:11:9c:e5:7e:23: 41:18:df:ab:60:fd:42:c7:64:78:00:c7:77:c1:4d:4f:0e:f0: d3:66:e2:e3:ec:0a:87:2b:fd:4d:fd:f9:b7:f0:b3:51:f8:d6: ee:fa:47:b3:3c:8b:49:9e:2c:d2:25:16:2a:a8:83:36:18:51: d9:56:7a:16:38:81:36:80:47:3b:2a:29:40:8e:dc:97:cc:df: 2d:4d:86:1b:12:b3:fb:28:c9:74:20:e8:f0:0a:e0:92:fe:b7: 56:9f:f6:c8:dc:f3:f6:16:b6:8b:9d:1a:c8:7e:fa:2d:54:00: 85:01:e5:94:13:cb:56:63:11:0e:7c:cc:6b:89:4b:d6:17:54: 43:d2:16:31 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJyGwaMwzwKml5AVPrINRyIa7cGYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwMTAzOVoX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAMmI3OTQ1YzBmZmUyZmEyMzA3NjRj NjU2ZjU1NWU0YjE1ZmZhZjg5ZWFjNGE4MGYyMjc1ZTFjYWY2YjE0MjI5YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMsk2v6DQeA2tU6EjQG+JUfPT/jk Vw0oAC/gCmxiFbWLO76jYp4IPrSW/Ft9K1yK4hNWTraecGrD5rz+Dt7i+8pL0Nph HjnMjB9YDcHbBur45TNTxolLHC/JydBOImvugjMDc2d+I7+GGaQbHhcllfPcvVF6 zd/VhoQ/N2J6BQEW3Iras/xxfvCopFIySx+abNpwjDEyf5D5J4zAD7oEi821Tzra d9Ar9D2P0LYoq/ij+8agCUHA8ouv9RCobQmuRz/MBFKVmS269i0e0mQPnrkYARyp TY8duxlm0euVsWSliImQAFtM8R9OOju94B2H4eEekHfFqpVAE7eLgnUTWQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB7sMPmFH5bFrSNaE6daAhhGrk6BMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkzMTMzMGY1LTk4OTctNGIxZi05NTgyLWE4MWRmOWJiMDMyNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/mAwDQYJKoZIhvcNAQELBQADggEBACSdiRhLsKdCu01YX7wa N6W4S/bXnRWbzHnsytvZz4Q9/iU5KD2kT7AGegwq4Av7VO5a6yYijhtQw85s4CsY ce+1gPOiyhhDR0Hkq7I4JqXhCsLsl9QEN6wlP6FKaz5DAxX2gmnYmPZ+/o7r7aLz 4/5jqV61fZBD9qoRnOV+I0EY36tg/ULHZHgAx3fBTU8O8NNm4uPsCocr/U39+bfw s1H41u76R7M8i0meLNIlFiqogzYYUdlWehY4gTaARzsqKUCO3JfM3y1NhhsSs/so yXQg6PAK4JL+t1af9sjc8/YWtoudGsh++i1UAIUB5ZQTy1ZjEQ58zGuJS9YXVEPS FjE= -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:18 2025 by rpki-client