$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae9201a3-94d9-460b-bd4d-478ba8ba682b.roa File: ae9201a3-94d9-460b-bd4d-478ba8ba682b.roa (raw, json) Hash identifier: uG7MYvyZOu6hIfTDZBhPtr2Z85IoZD8Xho4MYPjuJkw= Subject key identifier: 80:6D:51:81:06:CD:DD:5E:8B:C5:29:DE:48:2D:FE:1D:6C:06:62:8E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 14C5F3342C2C26205DDB8C21A09FFEB5303E1D76 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae9201a3-94d9-460b-bd4d-478ba8ba682b.roa Signing time: Sun 09 Nov 2025 00:40:08 +0000 ROA not before: Sun 09 Nov 2025 00:40:08 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da16::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:c5:f3:34:2c:2c:26:20:5d:db:8c:21:a0:9f:fe:b5:30:3e:1d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:40:08 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=b31ba84806a73ec494f1eea768388119cc4999738ac1e73918042bbab8be0ad8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:93:2c:4a:2d:18:5e:40:c7:2d:f9:63:23:aa: 89:41:b4:ae:17:f3:45:33:13:6f:22:14:80:84:7e: c6:b2:34:93:3c:39:02:59:4d:ed:a5:4c:5b:c8:59: 59:14:51:47:a6:8c:f1:ea:df:c9:93:85:24:c6:70: 20:69:fd:c9:14:1f:d8:ec:a4:30:4e:64:9f:ab:a7: 38:4c:40:79:d6:3f:bc:34:62:fb:f5:bf:2f:9a:3f: 5d:7f:7c:a3:c4:fd:47:c7:b3:f4:ff:57:0c:77:98: f5:47:b1:fe:af:77:ae:80:68:e7:ba:bf:3d:22:0d: ea:43:84:14:16:99:bf:fd:05:b5:c9:b5:3a:97:91: df:41:2e:83:61:17:90:21:d9:14:e3:77:2a:af:2d: 71:00:ec:c6:f7:59:00:71:34:e3:a1:fd:a8:cf:f3: f3:72:5c:fa:80:bf:c7:cd:86:6b:ae:32:82:06:1e: b7:0b:43:21:81:39:4a:2c:56:ef:f1:83:ae:48:4e: bc:1e:02:24:03:fe:43:85:6c:d2:3f:c2:71:e8:81: 80:b1:f5:27:f9:5e:a0:c8:09:02:33:14:ba:d8:3b: 66:56:60:0c:67:80:2f:7c:e6:16:f7:f9:4a:6e:d5: 7d:22:b0:7e:e7:5f:d4:cb:fe:7d:88:6a:7f:96:6d: 25:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6D:51:81:06:CD:DD:5E:8B:C5:29:DE:48:2D:FE:1D:6C:06:62:8E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae9201a3-94d9-460b-bd4d-478ba8ba682b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da16::/38 Signature Algorithm: sha256WithRSAEncryption b1:e6:64:9e:dc:c9:4e:44:22:ed:cf:53:c4:c9:50:79:25:bb: 6b:94:a8:cd:58:3e:b4:81:a9:f6:b3:be:f0:76:9a:be:8e:52: 0c:30:91:4d:86:dc:15:2d:7b:6a:2a:65:e1:00:b8:61:55:3a: 4d:d6:fc:1c:10:1e:88:2e:cc:5d:bc:be:27:d8:c4:1c:f1:1f: 53:40:35:88:35:29:30:fd:cf:cb:25:ef:94:3b:e1:d7:9b:69: 61:ab:b4:d6:d1:59:fc:85:ad:f3:b3:dd:ac:3f:6c:bb:f0:f1: 4f:f0:9c:9d:71:11:44:35:ed:4d:64:bd:4d:db:36:18:99:40: a6:7f:4f:c5:45:81:f1:ff:60:9a:1b:8f:48:fe:1b:16:b8:d6: 3b:b1:42:29:45:d0:d9:fd:f5:f3:d6:13:1d:c6:76:ab:cb:02: 67:5e:ba:06:fe:4f:25:33:e8:91:e5:86:7d:59:96:96:a4:52: f4:f6:bc:e5:0f:a4:d2:f8:94:b4:e3:eb:83:87:c0:95:8b:7f: 78:03:7e:f8:c0:07:89:ca:3e:b5:27:62:4d:4d:25:89:5c:39: ae:46:19:c4:c1:0d:26:29:83:c9:78:0a:4b:69:62:a3:8d:e2: af:81:95:c4:45:b9:1e:2e:88:46:a7:2a:2f:e9:be:ad:12:ce: 5d:84:7a:c9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFMXzNCwsJiBd24whoJ/+tTA+HXYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwNDAwOFoX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAYjMxYmE4NDgwNmE3M2VjNDk0ZjFl ZWE3NjgzODgxMTljYzQ5OTk3MzhhYzFlNzM5MTgwNDJiYmFiOGJlMGFkODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppMsSi0YXkDHLfljI6qJQbSuF/NF MxNvIhSAhH7GsjSTPDkCWU3tpUxbyFlZFFFHpozx6t/Jk4UkxnAgaf3JFB/Y7KQw TmSfq6c4TEB51j+8NGL79b8vmj9df3yjxP1Hx7P0/1cMd5j1R7H+r3eugGjnur89 Ig3qQ4QUFpm//QW1ybU6l5HfQS6DYReQIdkU43cqry1xAOzG91kAcTTjof2oz/Pz clz6gL/HzYZrrjKCBh63C0MhgTlKLFbv8YOuSE68HgIkA/5DhWzSP8Jx6IGAsfUn +V6gyAkCMxS62DtmVmAMZ4AvfOYW9/lKbtV9IrB+51/Uy/59iGp/lm0lfwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIBtUYEGzd1ei8Up3kgt/h1sBmKOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FlOTIwMWEzLTk0ZDktNDYwYi1iZDRkLTQ3OGJhOGJhNjgyYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFgAwDQYJKoZIhvcNAQELBQADggEBALHmZJ7cyU5EIu3PU8TJ UHklu2uUqM1YPrSBqfazvvB2mr6OUgwwkU2G3BUte2oqZeEAuGFVOk3W/BwQHogu zF28vifYxBzxH1NANYg1KTD9z8sl75Q74debaWGrtNbRWfyFrfOz3aw/bLvw8U/w nJ1xEUQ17U1kvU3bNhiZQKZ/T8VFgfH/YJobj0j+Gxa41juxQilF0Nn99fPWEx3G dqvLAmdeugb+TyUz6JHlhn1ZlpakUvT2vOUPpNL4lLTj64OHwJWLf3gDfvjAB4nK PrUnYk1NJYlcOa5GGcTBDSYpg8l4CktpYqON4q+BlcRFuR4uiEanKi/pvq0Szl2E esk= -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:04 2025 by rpki-client