$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa File: cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa (raw, json) Hash identifier: nigAke1+tjwuxeg8ULNlAsFdKW6tTyajnEvVudZeLZM= Subject key identifier: 1B:D9:DD:40:C4:80:AD:03:CC:39:47:AA:E5:B8:F3:AF:8B:12:BF:BD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C04BDFD5A94DAC8E0CA1C01E4F4C47985F467AC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa Signing time: Fri 07 Nov 2025 00:00:49 +0000 ROA not before: Fri 07 Nov 2025 00:00:49 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:04:bd:fd:5a:94:da:c8:e0:ca:1c:01:e4:f4:c4:79:85:f4:67:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:00:49 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=d621e2d9aab27aa3affa0542187fe8801e41e0d3bfbc00eebac5176f43f0dcc8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:85:e3:bb:5c:08:1d:ef:a5:d8:f9:bb:0a: 76:2f:49:f2:90:c9:ab:50:35:ca:da:e1:0a:6f:cc: f2:8c:24:b3:3e:89:bd:ab:eb:90:66:1c:0f:7a:85: be:a9:fa:30:f8:7b:35:96:10:d3:55:10:11:0e:46: 31:03:d7:70:f1:e1:ff:d3:31:ff:b1:f9:8e:66:65: fa:3b:6a:10:4d:74:67:63:46:96:2d:fe:15:de:d6: fc:00:38:58:73:a8:65:77:3a:bd:16:10:33:33:48: 7d:40:28:48:e6:9d:0b:f0:5d:41:64:01:3f:ec:7e: 5f:2c:65:77:82:88:96:6d:5e:f7:86:b9:ca:b4:7e: d5:c7:cd:f5:81:19:32:3c:db:13:3a:d4:8e:4d:67: 9d:ad:c0:f1:12:67:5e:d2:87:5b:d6:e3:d4:bc:a2: ab:2b:16:94:f1:29:92:ff:fa:78:20:da:b5:1a:40: 3f:e6:33:e3:8a:a1:2d:96:c4:69:29:e8:b0:fe:d8: a5:df:f3:28:b3:6a:db:d1:45:55:6e:c5:89:da:ba: 60:4a:f2:10:62:cb:55:70:cc:50:47:de:fb:8b:f7: c8:e9:e0:e1:26:d6:77:5f:75:59:32:05:95:6d:a6: 47:ca:51:38:c8:e0:ee:d7:5c:f5:72:e5:68:05:f0: 86:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D9:DD:40:C4:80:AD:03:CC:39:47:AA:E5:B8:F3:AF:8B:12:BF:BD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:1000::/40 Signature Algorithm: sha256WithRSAEncryption 84:eb:32:31:5a:16:2d:61:62:1f:5f:49:7f:e8:1d:34:9f:4d: f4:b5:21:27:73:2a:b6:22:3c:29:1b:06:3e:a1:60:45:ce:0b: 39:03:bc:d1:e7:69:22:7f:38:75:32:3b:2e:1f:04:d8:44:16: ed:e6:1d:20:0a:6d:b9:ba:6f:f1:af:c2:44:6e:f7:0e:95:52: 80:35:01:ea:f2:5b:30:f8:9f:31:14:4f:3f:fd:2c:9b:47:ac: b5:76:06:2c:e4:07:38:62:40:57:7f:e2:a6:8f:89:15:24:bf: 3d:8e:4c:d1:28:c0:72:c3:d7:b9:31:a0:61:b6:eb:35:7d:a1: 56:94:43:8e:99:5c:67:84:f9:bd:e0:6a:68:48:bb:85:d6:5f: 11:7a:9a:ef:c9:b5:8c:69:4f:cf:f0:9d:89:51:7e:44:f4:32: e4:c7:51:00:20:59:cb:1f:0b:9a:08:04:4c:5b:96:6f:fa:63: 64:d7:b7:fd:ea:bb:4d:d0:72:78:46:ff:32:15:fd:c3:dc:46: 77:97:e7:02:4b:2d:68:06:ab:9c:7c:6c:c6:2a:04:28:ff:cd: 72:27:a8:ae:22:ff:f7:9b:23:db:31:32:2f:5f:73:a9:80:2e: cd:fc:24:31:8d:43:11:79:f7:65:90:04:dc:ab:e9:cf:8a:65: 56:5f:59:59 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPAS9/VqU2sjgyhwB5PTEeYX0Z6wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMDA0OVoX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAZDYyMWUyZDlhYWIyN2FhM2FmZmEw NTQyMTg3ZmU4ODAxZTQxZTBkM2JmYmMwMGVlYmFjNTE3NmY0M2YwZGNjODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzWF47tcCB3vpdj5uwp2L0nykMmr UDXK2uEKb8zyjCSzPom9q+uQZhwPeoW+qfow+Hs1lhDTVRARDkYxA9dw8eH/0zH/ sfmOZmX6O2oQTXRnY0aWLf4V3tb8ADhYc6hldzq9FhAzM0h9QChI5p0L8F1BZAE/ 7H5fLGV3goiWbV73hrnKtH7Vx831gRkyPNsTOtSOTWedrcDxEmde0odb1uPUvKKr KxaU8SmS//p4INq1GkA/5jPjiqEtlsRpKeiw/til3/Mos2rb0UVVbsWJ2rpgSvIQ YstVcMxQR977i/fI6eDhJtZ3X3VZMgWVbaZHylE4yODu11z1cuVoBfCGtQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBvZ3UDEgK0DzDlHquW486+LEr+9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NhZDAyNTNjLWU4ZWEtNGE3MC1hZjk3LWVmMzdlN2I5MTVlNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYRAwDQYJKoZIhvcNAQELBQADggEBAITrMjFaFi1hYh9fSX/o HTSfTfS1ISdzKrYiPCkbBj6hYEXOCzkDvNHnaSJ/OHUyOy4fBNhEFu3mHSAKbbm6 b/GvwkRu9w6VUoA1AeryWzD4nzEUTz/9LJtHrLV2BizkBzhiQFd/4qaPiRUkvz2O TNEowHLD17kxoGG26zV9oVaUQ46ZXGeE+b3gamhIu4XWXxF6mu/JtYxpT8/wnYlR fkT0MuTHUQAgWcsfC5oIBExblm/6Y2TXt/3qu03QcnhG/zIV/cPcRneX5wJLLWgG q5x8bMYqBCj/zXInqK4i//ebI9sxMi9fc6mALs38JDGNQxF592WQBNyr6c+KZVZf WVk= -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:11 2025 by rpki-client