$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0c7485a-6d94-4adf-ad68-d031efad9d50.roa File: b0c7485a-6d94-4adf-ad68-d031efad9d50.roa (raw, json) Hash identifier: GL8iNBUj14NFRju3kj1T7FBaQoaIxr73C728kgJoGc8= Subject key identifier: 17:1A:8D:FF:68:41:06:4B:32:67:FD:AC:4F:6D:EF:23:64:97:58:0A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0354F669AE7757B3BAD11B2B6B11C922DBC78BDF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0c7485a-6d94-4adf-ad68-d031efad9d50.roa Signing time: Fri 07 Nov 2025 00:41:05 +0000 ROA not before: Fri 07 Nov 2025 00:41:05 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:54:f6:69:ae:77:57:b3:ba:d1:1b:2b:6b:11:c9:22:db:c7:8b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:41:05 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=acb2fd3c9c53ea17f46dd4704245eae969df01e2c44bdd4738e7816e47273067, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f2:17:6e:2f:eb:f4:6c:49:0d:41:0a:d1:a5: 04:ca:75:54:dc:a1:c8:02:59:a6:36:5b:1c:3e:9e: 4d:c6:a0:c5:14:c3:f8:86:e0:08:8a:2c:0b:9e:a9: 9f:2f:c5:0e:a2:19:f8:75:cb:c9:39:6b:2f:01:25: 63:94:ed:e2:5a:03:99:02:df:b4:b5:90:80:8f:9b: cb:6b:7e:cf:f6:14:6b:0e:0b:27:0d:c9:62:e1:7c: da:4d:9b:67:43:01:9b:8a:e4:b0:04:d6:43:bd:89: e1:ba:6a:f1:62:9f:8b:d6:06:03:2d:ad:57:9a:c4: ef:d1:9f:df:c3:d1:07:4e:f9:e1:11:41:f4:75:46: b0:6a:0b:4e:53:6c:2d:1b:2b:8c:20:9b:f6:61:5a: 9e:b9:64:0a:2d:09:f4:8c:b5:d1:1a:02:1d:49:0b: b0:94:6c:e8:77:42:fe:0e:9b:a8:aa:c5:1f:4b:64: 89:7c:9b:07:f7:76:27:ef:24:05:bd:cd:40:3c:f0: 5a:3a:c0:e2:1a:8d:8e:7e:18:fe:90:21:ab:54:de: 6a:e8:ec:10:d1:d0:92:27:a3:77:d7:93:38:dd:fb: bf:f0:5c:82:03:ea:4b:11:3c:a3:37:dd:cd:f4:aa: b2:23:ad:67:12:bc:cb:35:cc:6d:af:cf:61:8e:10: 36:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1A:8D:FF:68:41:06:4B:32:67:FD:AC:4F:6D:EF:23:64:97:58:0A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0c7485a-6d94-4adf-ad68-d031efad9d50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:9080::/48 Signature Algorithm: sha256WithRSAEncryption b9:6d:0a:09:c6:b2:1a:9f:d6:f0:10:ac:2b:c0:a0:93:66:a1: fc:48:7a:7a:d7:d9:b3:c6:e8:77:72:d4:16:10:36:dd:c2:0a: 00:c4:db:9f:55:f1:75:71:50:97:65:db:5c:af:30:76:5e:f7: 02:f3:58:02:27:ee:ec:12:fc:1f:1d:ae:cd:8b:d0:6d:d7:5b: e7:1b:c4:86:9c:0e:be:52:6e:22:c2:39:41:48:a9:3e:3b:33: 32:3d:39:57:87:49:c4:eb:ca:e0:4b:3c:34:32:0d:27:a7:67: 41:6e:66:ad:84:10:0f:85:c4:ce:8a:9e:4f:63:2a:e0:f3:15: 1a:eb:a0:09:0d:8b:7f:59:cb:cd:b0:25:09:53:a0:51:70:ff: f1:01:37:ac:a4:f9:10:58:aa:56:96:5f:f2:a7:59:ec:76:90: 4c:62:4c:04:fc:4d:a3:d2:fa:67:c4:7b:18:6c:5b:ad:67:cb: e5:07:64:29:10:39:88:4f:76:ab:44:3e:83:a3:bc:04:12:eb: fc:ad:4a:ef:ee:6c:13:78:3a:f4:c6:76:2f:48:bf:f1:53:21: e9:63:0e:cd:a6:bf:51:cd:48:fd:7c:94:dc:5a:80:97:48:3c: 2a:5d:4b:41:b1:2c:50:59:50:2b:cf:f6:47:8e:4e:be:6e:8d: dd:3b:06:ce -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUA1T2aa53V7O60RsraxHJItvHi98wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwNDEwNVoX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAYWNiMmZkM2M5YzUzZWExN2Y0NmRk NDcwNDI0NWVhZTk2OWRmMDFlMmM0NGJkZDQ3MzhlNzgxNmU0NzI3MzA2NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/IXbi/r9GxJDUEK0aUEynVU3KHI AlmmNlscPp5NxqDFFMP4huAIiiwLnqmfL8UOohn4dcvJOWsvASVjlO3iWgOZAt+0 tZCAj5vLa37P9hRrDgsnDcli4XzaTZtnQwGbiuSwBNZDvYnhumrxYp+L1gYDLa1X msTv0Z/fw9EHTvnhEUH0dUawagtOU2wtGyuMIJv2YVqeuWQKLQn0jLXRGgIdSQuw lGzod0L+DpuoqsUfS2SJfJsH93Yn7yQFvc1APPBaOsDiGo2Ofhj+kCGrVN5q6OwQ 0dCSJ6N315M43fu/8FyCA+pLETyjN93N9KqyI61nErzLNcxtr89hjhA2BwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBcajf9oQQZLMmf9rE9t7yNkl1gKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IwYzc0ODVhLTZkOTQtNGFkZi1hZDY4LWQwMzFlZmFkOWQ1MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAJCAMA0GCSqGSIb3DQEBCwUAA4IBAQC5bQoJxrIan9bwEKwr wKCTZqH8SHp619mzxuh3ctQWEDbdwgoAxNufVfF1cVCXZdtcrzB2XvcC81gCJ+7s EvwfHa7Ni9Bt11vnG8SGnA6+Um4iwjlBSKk+OzMyPTlXh0nE68rgSzw0Mg0np2dB bmathBAPhcTOip5PYyrg8xUa66AJDYt/WcvNsCUJU6BRcP/xATespPkQWKpWll/y p1nsdpBMYkwE/E2j0vpnxHsYbFutZ8vlB2QpEDmIT3arRD6Do7wEEuv8rUrv7mwT eDr0xnYvSL/xUyHpYw7Npr9RzUj9fJTcWoCXSDwqXUtBsSxQWVArz/ZHjk6+bo3d OwbO -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:53 2025 by rpki-client