$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa File: d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa (raw, json) Hash identifier: nExIu3zYQ4yxL076InM4uWhNaAJo2Cumcwa9FnT8ZoI= Subject key identifier: A0:F0:AF:DF:42:54:21:A2:DA:29:BE:4C:68:47:26:44:84:41:08:1B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 652E59BDF66D98418D2319F5D2C2742CFBC8CB69 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa Signing time: Fri 07 Nov 2025 00:00:16 +0000 ROA not before: Fri 07 Nov 2025 00:00:16 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c0a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2e:59:bd:f6:6d:98:41:8d:23:19:f5:d2:c2:74:2c:fb:c8:cb:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:00:16 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=4e48b7c2ff64ccf1f413db0a986fd5a5b1b44d7ca6dfeba1c8a1d66650d9f711, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:15:c5:12:50:86:42:20:93:f5:14:79:49:8c: b7:31:a3:61:9a:cc:90:28:5d:84:0b:00:19:c7:23: 86:9b:35:ec:1e:e8:b0:df:9b:f4:70:2a:04:7a:36: fa:66:04:09:08:a3:b5:25:78:39:e6:0f:10:16:da: b1:5f:94:7d:e3:a4:54:98:2b:5d:4b:81:e1:c4:7c: d0:7c:7c:a2:35:69:d6:e3:26:11:9b:38:08:01:fb: ce:b1:0e:9f:31:47:36:c1:16:cc:82:11:5c:0d:26: 70:fe:4b:2d:36:05:5b:c1:66:64:81:f2:9e:0c:d3: ea:6a:71:0c:df:1f:a9:5b:ed:0e:c0:0c:40:59:26: 7e:ee:17:ad:59:37:d4:8e:df:97:bc:de:bc:e4:19: a5:b3:5e:12:ff:91:38:fb:c7:2b:6a:44:4a:37:a0: 1f:f6:a0:13:5c:4f:62:84:af:d6:24:27:fa:2a:6a: 0c:c1:f0:bb:de:31:aa:75:79:7a:5d:9b:c7:b3:f4: 2c:f8:47:9d:40:ca:ce:a1:c7:63:2f:c0:e4:b3:f7: fc:d6:22:45:d8:99:4b:60:f7:b3:5b:0b:e9:3a:eb: b9:3e:40:cd:86:f6:bc:c1:75:a1:55:03:7f:69:b5: f9:31:77:6a:ca:c3:c1:b5:e9:b5:7e:c3:19:65:b4: 1d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F0:AF:DF:42:54:21:A2:DA:29:BE:4C:68:47:26:44:84:41:08:1B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c0a0::/48 Signature Algorithm: sha256WithRSAEncryption 25:d6:f2:d4:23:1c:68:f1:35:1a:cd:1b:19:5b:5b:0e:bc:92: ce:81:ae:44:4d:fb:11:06:fd:3e:67:54:10:bd:eb:c4:3e:33: c2:86:5a:27:45:be:a8:7d:86:b7:db:c5:46:f7:c3:64:2b:6d: 74:bc:2f:ff:5f:a7:80:59:f0:36:28:b9:37:ea:7d:48:ef:8a: 36:61:6e:34:38:39:33:5f:2d:ec:c7:69:87:84:82:5f:8d:7e: 2c:9b:37:38:7e:50:ae:39:b8:b4:c1:9c:73:c4:14:34:e7:5a: ef:eb:e7:dd:ef:f0:5c:d4:42:cb:57:32:a7:43:97:5c:48:a8: d0:de:85:8e:e6:4e:2f:57:75:a5:5b:b2:c9:96:69:ac:f2:56: 5e:b6:12:3f:69:38:d7:1e:0c:62:b9:ad:36:a7:b2:04:9e:05: 66:ab:57:bd:08:c8:f4:6f:93:44:03:0b:b1:de:f3:a1:f1:41: c5:4f:67:fd:fd:3a:36:5a:f8:3c:e6:92:fe:ae:79:f3:e6:69: d7:21:9d:71:ef:55:95:1d:87:a3:76:5b:54:30:48:b4:2d:1f: 2a:8f:5d:78:e7:6c:15:8a:01:5d:d4:8f:e6:8f:f2:9c:1c:8c: 3f:0e:1e:18:e6:4e:bf:8f:f8:5a:69:aa:d0:ac:42:6b:93:bd: 7c:12:41:1e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZS5ZvfZtmEGNIxn10sJ0LPvIy2kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMDAxNloX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNANGU0OGI3YzJmZjY0Y2NmMWY0MTNk YjBhOTg2ZmQ1YTViMWI0NGQ3Y2E2ZGZlYmExYzhhMWQ2NjY1MGQ5ZjcxMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxXFElCGQiCT9RR5SYy3MaNhmsyQ KF2ECwAZxyOGmzXsHuiw35v0cCoEejb6ZgQJCKO1JXg55g8QFtqxX5R946RUmCtd S4HhxHzQfHyiNWnW4yYRmzgIAfvOsQ6fMUc2wRbMghFcDSZw/kstNgVbwWZkgfKe DNPqanEM3x+pW+0OwAxAWSZ+7hetWTfUjt+XvN685Bmls14S/5E4+8crakRKN6Af 9qATXE9ihK/WJCf6KmoMwfC73jGqdXl6XZvHs/Qs+EedQMrOocdjL8Dks/f81iJF 2JlLYPezWwvpOuu5PkDNhva8wXWhVQN/abX5MXdqysPBtem1fsMZZbQdqQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKDwr99CVCGi2im+TGhHJkSEQQgbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QzNDM1ZGJiLTVkMWUtNDk0OC04MDI3LWU2NDMzZjcyYmZjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8CgMA0GCSqGSIb3DQEBCwUAA4IBAQAl1vLUIxxo8TUazRsZ W1sOvJLOga5ETfsRBv0+Z1QQvevEPjPChlonRb6ofYa328VG98NkK210vC//X6eA WfA2KLk36n1I74o2YW40ODkzXy3sx2mHhIJfjX4smzc4flCuObi0wZxzxBQ051rv 6+fd7/Bc1ELLVzKnQ5dcSKjQ3oWO5k4vV3WlW7LJlmms8lZethI/aTjXHgxiua02 p7IEngVmq1e9CMj0b5NEAwux3vOh8UHFT2f9/To2Wvg85pL+rnnz5mnXIZ1x71WV HYejdltUMEi0LR8qj11452wVigFd1I/mj/KcHIw/Dh4Y5k6/j/haaarQrEJrk718 EkEe -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:03 2025 by rpki-client