$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cdf78925-b4b0-4234-91cb-647243232823.roa File: cdf78925-b4b0-4234-91cb-647243232823.roa (raw, json) Hash identifier: +ywHXRHS0CPYIvhGZ0C0dphuXfLmDSOTMioCqpNGp0Q= Subject key identifier: FD:01:3F:00:9D:D8:48:59:B9:CB:F8:7F:B0:19:7E:07:04:3C:BD:9A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4F02456E1CBFE2FC8AF94FCE46561B0F3F9B9A83 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cdf78925-b4b0-4234-91cb-647243232823.roa Signing time: Fri 07 Nov 2025 00:20:11 +0000 ROA not before: Fri 07 Nov 2025 00:20:11 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:02:45:6e:1c:bf:e2:fc:8a:f9:4f:ce:46:56:1b:0f:3f:9b:9a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:20:11 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=cd91ca31e4813115021fee6291c46b12d2f2abce293fbab1939058606d46ef77, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:24:4b:e9:62:08:08:c3:af:3c:d7:19:b1:30: 65:a6:a3:49:c4:6a:01:e5:6f:42:cd:87:86:a4:14: c5:ff:cd:bf:04:8c:76:65:89:7e:a8:03:6c:53:7f: ed:37:6c:7c:20:d1:d5:65:f8:9c:d4:cc:50:e1:5b: 63:1f:c6:9d:62:93:30:50:de:bd:d5:89:c5:34:49: 04:2e:4b:21:63:09:96:a8:38:45:bf:74:f1:14:b2: f5:8f:4b:25:4e:98:ec:cc:fd:ba:26:6a:8d:30:b3: 99:60:fc:b5:b7:cd:39:c9:5a:37:65:6c:87:fc:e8: 95:40:c2:b7:47:f6:4a:ba:f5:f3:73:40:47:c2:a5: f5:0a:b3:e6:e5:05:5d:20:31:27:f7:cd:f0:c4:e8: 56:3a:51:28:ec:1d:13:79:a0:69:80:b3:13:cd:e1: 00:a6:5d:7b:c5:0e:0a:53:68:56:60:dc:6e:52:20: 53:af:f3:4e:68:98:1f:e6:79:d0:1d:9d:bc:ba:49: bb:35:37:4a:3f:c4:7b:3b:ed:b3:53:23:32:12:ec: cf:10:20:94:23:7f:82:59:6c:0b:92:73:84:10:19: b8:4d:f0:f6:7b:1d:f5:90:1c:43:45:d2:72:63:04: 0d:34:34:d2:40:ef:58:c4:7a:0c:aa:a8:2c:00:d2: 90:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:01:3F:00:9D:D8:48:59:B9:CB:F8:7F:B0:19:7E:07:04:3C:BD:9A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cdf78925-b4b0-4234-91cb-647243232823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:6000::/40 Signature Algorithm: sha256WithRSAEncryption 1c:f9:41:a1:90:a1:a5:73:cf:e6:19:a5:fe:29:97:30:75:27: 2a:f1:67:52:c6:88:20:e2:76:3f:1b:50:29:a8:59:f9:8d:a1: 53:85:5e:38:f2:24:08:d3:8c:00:b1:2b:81:75:52:70:64:78: 0a:35:7d:ba:71:cb:f3:1d:12:38:d6:5d:38:29:44:ad:a2:ac: d2:52:cc:84:47:1b:b0:a0:89:5e:20:98:47:a1:d1:03:b7:96: af:78:d7:39:4a:95:73:ec:98:6e:95:b2:24:d7:c2:4e:0d:53: c2:bb:79:73:4e:75:c6:f2:ae:ea:e3:e7:96:83:80:91:cf:4c: d8:51:44:6f:d9:03:57:b4:43:ef:86:95:f8:aa:b8:c5:83:be: 76:99:a5:fd:0a:18:30:30:cd:8d:80:b6:31:e4:f8:e8:b7:75: 37:c5:3d:fe:6c:d2:2e:70:a6:04:2f:11:18:d6:47:ff:7c:b6: e1:d1:2d:b4:eb:8a:81:a2:a4:47:7c:37:79:64:db:6c:ff:04: 74:b2:7f:ff:24:8f:08:02:89:2f:6d:9d:9b:08:f0:d0:05:1a: eb:cc:5c:6e:53:e7:9e:9e:4f:f7:03:d5:8a:2e:85:83:45:5f: 43:77:f8:fa:aa:e5:94:7a:fc:7a:4e:63:21:41:fe:dc:bd:09: 4a:ca:12:28 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTwJFbhy/4vyK+U/ORlYbDz+bmoMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMjAxMVoX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAY2Q5MWNhMzFlNDgxMzExNTAyMWZl ZTYyOTFjNDZiMTJkMmYyYWJjZTI5M2ZiYWIxOTM5MDU4NjA2ZDQ2ZWY3NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CRL6WIICMOvPNcZsTBlpqNJxGoB 5W9CzYeGpBTF/82/BIx2ZYl+qANsU3/tN2x8INHVZfic1MxQ4VtjH8adYpMwUN69 1YnFNEkELkshYwmWqDhFv3TxFLL1j0slTpjszP26JmqNMLOZYPy1t805yVo3ZWyH /OiVQMK3R/ZKuvXzc0BHwqX1CrPm5QVdIDEn983wxOhWOlEo7B0TeaBpgLMTzeEA pl17xQ4KU2hWYNxuUiBTr/NOaJgf5nnQHZ28ukm7NTdKP8R7O+2zUyMyEuzPECCU I3+CWWwLknOEEBm4TfD2ex31kBxDRdJyYwQNNDTSQO9YxHoMqqgsANKQMwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP0BPwCd2EhZucv4f7AZfgcEPL2aMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NkZjc4OTI1LWI0YjAtNDIzNC05MWNiLTY0NzI0MzIzMjgyMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYWAwDQYJKoZIhvcNAQELBQADggEBABz5QaGQoaVzz+YZpf4p lzB1JyrxZ1LGiCDidj8bUCmoWfmNoVOFXjjyJAjTjACxK4F1UnBkeAo1fbpxy/Md EjjWXTgpRK2irNJSzIRHG7CgiV4gmEeh0QO3lq941zlKlXPsmG6VsiTXwk4NU8K7 eXNOdcbyrurj55aDgJHPTNhRRG/ZA1e0Q++GlfiquMWDvnaZpf0KGDAwzY2AtjHk +Oi3dTfFPf5s0i5wpgQvERjWR/98tuHRLbTrioGipEd8N3lk22z/BHSyf/8kjwgC iS9tnZsI8NAFGuvMXG5T556eT/cD1YouhYNFX0N3+Pqq5ZR6/HpOYyFB/ty9CUrK Eig= -----END CERTIFICATE-----Generated at Tue Nov 18 05:41:11 2025 by rpki-client