$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa File: c2c34d45-d139-4122-8407-d2263ceee098.roa (raw, json) Hash identifier: 8RjJvGgoe0/0YSwvT2sh9J1XlaBht7Q2Evc1lGmb7Mg= Subject key identifier: 70:7D:A7:4E:65:08:15:DC:BB:00:06:B2:8B:27:51:A9:96:8F:77:E5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 629E21D99A36A619D8B6AFFDED55003D5F1B9116 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa Signing time: Sun 09 Nov 2025 00:50:03 +0000 ROA not before: Sun 09 Nov 2025 00:50:03 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:9e:21:d9:9a:36:a6:19:d8:b6:af:fd:ed:55:00:3d:5f:1b:91:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:50:03 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=04a1be7ba0eef159ba96cd4d303041ee969c84a5ed8af059b9dd2b64489b3daf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d0:be:5f:ba:b3:e6:09:d5:97:b3:3a:59:1c: 55:b5:5c:d4:39:93:41:02:3a:af:3e:a3:a6:1c:c2: 62:a5:0b:9c:9e:9b:3a:08:3f:69:0a:64:15:26:8c: 2f:d2:91:c2:3c:96:6c:e5:bb:8d:11:db:e4:f6:a6: 8c:27:6a:da:58:91:d4:f2:bb:aa:ae:d9:b4:d5:f9: cd:17:ab:b8:82:38:f0:cc:a3:ad:7d:b1:22:ff:6c: 5e:2d:9f:15:97:59:79:f7:27:13:b4:70:24:5e:b1: e2:96:87:e9:60:0c:3c:ed:ad:26:73:9b:65:fe:d3: fa:4a:ba:f6:d8:14:41:88:17:aa:db:2c:b1:0b:c9: 45:b6:71:8f:af:5b:72:3c:47:6b:b6:85:ef:b5:0d: 9e:c4:24:09:a4:ad:48:c5:85:98:84:c9:1f:5d:2a: ba:da:b5:37:78:87:2a:b4:3e:5f:8c:b7:43:f7:e5: ee:82:3b:82:ad:71:bb:3e:16:1f:ea:4a:b1:7a:7f: 87:92:21:be:23:51:a6:82:d1:f5:1f:f7:2b:bb:ae: 06:86:5c:f8:b1:57:b2:d3:fc:f2:35:98:cd:a8:79: d6:fb:82:93:0f:b8:cb:f1:73:99:61:ae:74:67:87: df:b8:cd:6d:d3:ef:b4:50:59:7b:a3:28:4a:8c:0d: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7D:A7:4E:65:08:15:DC:BB:00:06:B2:8B:27:51:A9:96:8F:77:E5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:e000::/40 Signature Algorithm: sha256WithRSAEncryption 0f:a5:db:9d:6d:37:20:83:df:2e:b7:d8:a1:4e:13:d4:01:aa: 5a:b7:c9:43:73:e4:5f:d8:c5:b5:01:ef:d0:c0:d9:0b:b7:90: 8d:eb:fc:78:c7:29:24:ac:e6:e4:ca:07:d9:74:52:cc:ef:8c: 92:17:76:77:36:69:4b:83:68:11:cc:70:fa:f7:d3:dd:2e:60: 90:bf:52:9e:79:4d:b7:e4:cf:7b:cf:93:66:eb:b8:9c:3d:c6: d0:bd:9b:17:ca:f2:34:55:70:f9:ff:ef:33:21:88:a6:5e:51: 89:91:83:b8:75:d5:d1:6a:c7:a8:d4:79:76:81:8a:26:b6:28: 5e:66:cd:de:30:dd:cc:6f:44:fb:e1:79:19:19:10:49:fb:37: 90:45:1b:ea:99:41:6c:5b:f7:72:9a:d3:c9:2f:17:84:d6:2d: 93:3b:80:ca:ef:e8:53:a0:bb:6a:f3:82:10:f4:14:db:6b:e7: 96:9d:ed:34:37:cf:3e:4a:01:58:60:0c:5f:b3:31:47:fd:3d: 53:28:f4:f4:dd:04:42:34:27:37:6d:7c:30:07:3e:cd:47:46: 83:26:67:aa:e9:41:2f:77:9d:2a:2f:5f:c8:57:29:1f:2a:b7: 8a:65:97:f6:e8:56:87:97:f6:ac:70:d1:15:e5:ea:d9:4b:a7: 2c:39:75:ef -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYp4h2Zo2phnYtq/97VUAPV8bkRYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwNTAwM1oX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAMDRhMWJlN2JhMGVlZjE1OWJhOTZj ZDRkMzAzMDQxZWU5NjljODRhNWVkOGFmMDU5YjlkZDJiNjQ0ODliM2RhZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09C+X7qz5gnVl7M6WRxVtVzUOZNB AjqvPqOmHMJipQucnps6CD9pCmQVJowv0pHCPJZs5buNEdvk9qaMJ2raWJHU8ruq rtm01fnNF6u4gjjwzKOtfbEi/2xeLZ8Vl1l59ycTtHAkXrHilofpYAw87a0mc5tl /tP6Srr22BRBiBeq2yyxC8lFtnGPr1tyPEdrtoXvtQ2exCQJpK1IxYWYhMkfXSq6 2rU3eIcqtD5fjLdD9+XugjuCrXG7PhYf6kqxen+HkiG+I1GmgtH1H/cru64Ghlz4 sVey0/zyNZjNqHnW+4KTD7jL8XOZYa50Z4ffuM1t0++0UFl7oyhKjA2MBQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHB9p05lCBXcuwAGsosnUamWj3flMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MyYzM0ZDQ1LWQxMzktNDEyMi04NDA3LWQyMjYzY2VlZTA5OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMuAwDQYJKoZIhvcNAQELBQADggEBAA+l251tNyCD3y632KFO E9QBqlq3yUNz5F/YxbUB79DA2Qu3kI3r/HjHKSSs5uTKB9l0UszvjJIXdnc2aUuD aBHMcPr3090uYJC/Up55Tbfkz3vPk2bruJw9xtC9mxfK8jRVcPn/7zMhiKZeUYmR g7h11dFqx6jUeXaBiia2KF5mzd4w3cxvRPvheRkZEEn7N5BFG+qZQWxb93Ka08kv F4TWLZM7gMrv6FOgu2rzghD0FNtr55ad7TQ3zz5KAVhgDF+zMUf9PVMo9PTdBEI0 JzdtfDAHPs1HRoMmZ6rpQS93nSovX8hXKR8qt4pll/boVoeX9qxw0RXl6tlLpyw5 de8= -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:57 2025 by rpki-client