$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95769528-fe79-42fd-bbc3-1d9507dfe45c.roa File: 95769528-fe79-42fd-bbc3-1d9507dfe45c.roa (raw, json) Hash identifier: J70SX2+OW7VJyN0FN2CNr3Eyr/wwZoGy81krc/f2O5w= Subject key identifier: C4:CF:06:47:C5:C8:78:4B:07:9E:F3:D5:FE:7A:91:51:BD:D8:3C:A4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62175D4119D20219D4178F99F2D3B052F6F88E19 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95769528-fe79-42fd-bbc3-1d9507dfe45c.roa Signing time: Sat 08 Nov 2025 00:00:49 +0000 ROA not before: Sat 08 Nov 2025 00:00:49 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:17:5d:41:19:d2:02:19:d4:17:8f:99:f2:d3:b0:52:f6:f8:8e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:00:49 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=790f46b32be28c540cdfb6150c8fe23c1da3f8a2a6f3013d9cc9a7f89e0bbbb9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:64:bb:5e:e4:5b:07:f6:57:38:ff:c3:42: a8:23:ce:b2:46:71:d0:5d:59:0a:7f:d3:dc:99:46: 11:54:b9:a0:7f:80:d3:c4:6c:87:d0:4d:22:18:43: 14:0d:39:99:93:ab:9e:b7:9c:29:0c:ab:77:a6:3d: 7a:7e:c6:e4:57:17:e5:0b:58:4e:80:a1:8d:54:e4: 12:9c:ae:4d:3d:d4:6c:73:74:cf:6c:f7:03:ca:01: b2:4b:d1:e1:07:86:09:8b:ec:28:ee:95:5a:33:73: ca:57:a5:ea:b3:67:56:9a:c8:fb:a9:24:c5:d8:73: 26:d5:9c:ce:b1:b2:e8:90:03:0c:a6:da:41:f3:87: b5:34:d1:f4:7c:ff:fd:0c:26:ad:13:b4:e6:d3:aa: 3d:a8:32:de:3a:6e:c0:5e:1e:3b:6c:9c:0f:bd:c8: 5c:0c:7b:e8:bd:8d:63:a3:38:b4:b6:84:11:45:c7: 46:d3:27:9f:63:6f:d4:a7:e6:77:39:10:00:08:1a: a1:cc:31:4a:68:57:c1:a3:cb:71:28:17:b6:06:24: 6a:37:34:bc:8f:da:22:88:01:90:cc:a1:a4:49:06: 3c:08:15:cc:fa:0e:2e:31:0f:58:46:3e:ba:db:22: 19:4e:9e:61:15:8d:63:c1:0b:2d:30:be:05:4b:87: dd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CF:06:47:C5:C8:78:4B:07:9E:F3:D5:FE:7A:91:51:BD:D8:3C:A4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95769528-fe79-42fd-bbc3-1d9507dfe45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:800::/40 Signature Algorithm: sha256WithRSAEncryption ae:62:5d:77:b4:03:90:f1:2b:cf:d1:3b:c8:24:24:1b:ea:a1: 99:f0:52:06:da:5c:b4:3a:70:4c:a9:1f:7d:c4:4e:5d:0c:6f: 94:9f:d5:89:d3:00:2b:8e:62:82:89:92:d4:93:dd:ba:fc:77: 2c:d6:87:87:37:f1:15:0e:dd:1e:ca:f9:b8:cb:19:a6:de:e0: d3:47:9c:5c:b2:1c:66:32:83:30:8d:e8:26:b2:dc:67:1b:b8: a3:dd:fb:17:be:ab:de:ee:f1:05:f4:6e:69:34:e4:a1:3d:7c: 87:e9:ef:cd:6d:5d:b4:36:cc:f9:fe:f9:72:33:60:95:9f:f4: 0c:ef:fe:ae:6d:60:59:78:c2:b4:ac:09:0e:9e:d4:a2:57:15: 36:cf:b7:7f:e9:e5:41:82:6c:c5:87:c8:2f:a7:cf:fa:f6:c6: dc:cc:c9:03:bd:ab:35:7e:d0:1b:0d:61:2d:50:f3:a1:8e:51: 06:21:f9:cd:75:85:c4:8f:3e:73:cb:16:ed:57:8b:9c:2c:d4: 4a:bc:aa:cd:54:3c:b4:cc:80:60:ef:fe:0d:85:df:71:98:f3: c7:ba:54:e1:bb:04:ab:d9:e0:e2:b8:06:ca:67:91:31:83:1a: ef:9f:04:d7:08:25:ba:eb:c8:5a:19:f0:75:d6:32:67:7c:f5: f1:94:06:de -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYhddQRnSAhnUF4+Z8tOwUvb4jhkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMDA0OVoX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNANzkwZjQ2YjMyYmUyOGM1NDBjZGZi NjE1MGM4ZmUyM2MxZGEzZjhhMmE2ZjMwMTNkOWNjOWE3Zjg5ZTBiYmJiOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXJku17kWwf2Vzj/w0KoI86yRnHQ XVkKf9PcmUYRVLmgf4DTxGyH0E0iGEMUDTmZk6uet5wpDKt3pj16fsbkVxflC1hO gKGNVOQSnK5NPdRsc3TPbPcDygGyS9HhB4YJi+wo7pVaM3PKV6Xqs2dWmsj7qSTF 2HMm1ZzOsbLokAMMptpB84e1NNH0fP/9DCatE7Tm06o9qDLeOm7AXh47bJwPvchc DHvovY1jozi0toQRRcdG0yefY2/Up+Z3ORAACBqhzDFKaFfBo8txKBe2BiRqNzS8 j9oiiAGQzKGkSQY8CBXM+g4uMQ9YRj662yIZTp5hFY1jwQstML4FS4fd/QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMTPBkfFyHhLB57z1f56kVG92DykMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk1NzY5NTI4LWZlNzktNDJmZC1iYmMzLTFkOTUwN2RmZTQ1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/wgwDQYJKoZIhvcNAQELBQADggEBAK5iXXe0A5DxK8/RO8gk JBvqoZnwUgbaXLQ6cEypH33ETl0Mb5Sf1YnTACuOYoKJktST3br8dyzWh4c38RUO 3R7K+bjLGabe4NNHnFyyHGYygzCN6Cay3GcbuKPd+xe+q97u8QX0bmk05KE9fIfp 781tXbQ2zPn++XIzYJWf9Azv/q5tYFl4wrSsCQ6e1KJXFTbPt3/p5UGCbMWHyC+n z/r2xtzMyQO9qzV+0BsNYS1Q86GOUQYh+c11hcSPPnPLFu1Xi5ws1Eq8qs1UPLTM gGDv/g2F33GY88e6VOG7BKvZ4OK4BspnkTGDGu+fBNcIJbrryFoZ8HXWMmd89fGU Bt4= -----END CERTIFICATE-----Generated at Tue Nov 18 09:37:06 2025 by rpki-client