$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc74e646-f238-4ce9-a399-9ad2f67be94f.roa File: dc74e646-f238-4ce9-a399-9ad2f67be94f.roa (raw, json) Hash identifier: +vWqR4jnFZLEN0CnTxVu47pO6U9dTymsTitVOH1+BmM= Subject key identifier: FE:F5:D8:AE:A2:C7:60:91:85:A6:76:13:69:81:3E:C5:18:C2:F2:EF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1BA03AA73CB6AFFD1C51B7F5F2F8E7E4012F2A5D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc74e646-f238-4ce9-a399-9ad2f67be94f.roa Signing time: Sun 09 Nov 2025 00:30:38 +0000 ROA not before: Sun 09 Nov 2025 00:30:38 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a0:3a:a7:3c:b6:af:fd:1c:51:b7:f5:f2:f8:e7:e4:01:2f:2a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:30:38 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=2526ce5a0bf15b950e110bef34092455505b35a28efb6b1e845a709ef2f8be7a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cf:2b:36:ba:9b:6a:1d:ff:8e:15:de:a5:6f: 78:0b:50:ea:4f:f1:a0:73:ca:61:f6:d6:c6:14:cc: 0f:95:4b:fa:b8:1f:df:cf:03:d1:55:3c:6a:2e:62: 2a:1b:16:c8:f6:eb:a3:db:20:e5:82:b4:7e:00:1b: 33:9a:ab:d7:ea:d0:cc:34:5b:f0:a9:92:ee:29:ae: e7:2b:78:95:8e:6f:0a:17:32:c3:8e:50:43:0f:a6: b7:fb:01:09:97:3e:c4:c8:c2:34:cb:a3:e1:9c:1d: a2:95:5d:b9:67:ba:fe:86:a6:b5:a9:c0:b1:0a:9c: 96:be:6e:36:6c:1e:68:b4:55:a4:6a:d4:dc:88:7d: 61:47:4e:43:ef:07:30:0d:c8:3f:c6:5f:d8:78:70: 61:6d:e7:91:4b:bb:6a:b5:9b:03:c1:b5:2f:e2:63: 2a:9d:a3:cb:eb:b0:dd:0e:b6:bc:2a:5e:5c:95:c6: 8d:52:8b:f6:cc:ab:e9:fd:9b:25:80:41:5c:1c:c3: 0c:ae:8b:12:d0:d5:d1:2c:0f:59:d2:ba:56:fe:3c: 88:58:93:e0:db:40:75:34:66:a9:52:d9:fd:a9:39: 36:1e:07:9a:78:0e:54:82:91:41:da:01:94:8d:2f: 68:ba:03:8d:2d:69:b8:d5:59:a0:e7:c9:e8:16:61: 70:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F5:D8:AE:A2:C7:60:91:85:A6:76:13:69:81:3E:C5:18:C2:F2:EF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc74e646-f238-4ce9-a399-9ad2f67be94f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:1000::/40 Signature Algorithm: sha256WithRSAEncryption 09:00:f6:8b:ef:f8:a4:69:67:4c:ba:d0:1f:e8:32:2a:9b:54: eb:85:be:20:67:5c:ef:bd:24:d4:5a:8c:8c:9c:c5:95:fb:62: be:80:d1:37:08:53:dc:7d:7b:66:ba:e6:70:ed:81:12:af:d9: 58:60:ad:7a:63:62:10:1f:1d:30:fc:35:60:30:b8:81:53:f7: 7c:8b:26:d3:5b:47:4f:d9:e3:d7:97:df:77:e6:6c:fb:db:df: f3:f7:3e:b0:96:91:9e:e9:ab:a2:05:6e:5e:b5:e7:93:cb:97: 62:e4:93:2b:11:70:28:e2:f8:7a:c7:7b:4f:42:7d:22:57:98: 6d:de:1a:a9:25:4e:f4:3c:9a:bb:d5:01:f6:b7:c0:b6:ad:77: 86:88:3f:ce:3d:0f:de:93:88:2a:ff:e9:30:6c:87:af:14:20: 20:38:1c:84:af:bc:db:39:af:ff:70:90:df:d1:1d:f4:6a:5e: 3e:34:1e:1a:1f:5a:7f:30:f1:f0:14:84:d2:fe:60:87:0a:c5: bb:3d:65:46:91:ac:cc:dd:80:4d:b3:22:5b:c4:38:d7:f9:60: 66:50:5d:7b:67:8c:fc:53:74:a5:64:1e:49:92:d5:33:08:8c: ba:5f:6a:bf:b4:d1:96:ed:ad:af:af:c9:67:7c:d5:c5:4a:c3: 5c:0d:e3:68 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUG6A6pzy2r/0cUbf18vjn5AEvKl0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwMzAzOFoX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAMjUyNmNlNWEwYmYxNWI5NTBlMTEw YmVmMzQwOTI0NTU1MDViMzVhMjhlZmI2YjFlODQ1YTcwOWVmMmY4YmU3YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM8rNrqbah3/jhXepW94C1DqT/Gg c8ph9tbGFMwPlUv6uB/fzwPRVTxqLmIqGxbI9uuj2yDlgrR+ABszmqvX6tDMNFvw qZLuKa7nK3iVjm8KFzLDjlBDD6a3+wEJlz7EyMI0y6PhnB2ilV25Z7r+hqa1qcCx CpyWvm42bB5otFWkatTciH1hR05D7wcwDcg/xl/YeHBhbeeRS7tqtZsDwbUv4mMq naPL67DdDra8Kl5clcaNUov2zKvp/ZslgEFcHMMMrosS0NXRLA9Z0rpW/jyIWJPg 20B1NGapUtn9qTk2HgeaeA5UgpFB2gGUjS9ougONLWm41Vmg58noFmFwhQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP712K6ix2CRhaZ2E2mBPsUYwvLvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RjNzRlNjQ2LWYyMzgtNGNlOS1hMzk5LTlhZDJmNjdiZTk0Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/hAwDQYJKoZIhvcNAQELBQADggEBAAkA9ovv+KRpZ0y60B/o MiqbVOuFviBnXO+9JNRajIycxZX7Yr6A0TcIU9x9e2a65nDtgRKv2VhgrXpjYhAf HTD8NWAwuIFT93yLJtNbR0/Z49eX33fmbPvb3/P3PrCWkZ7pq6IFbl6155PLl2Lk kysRcCji+HrHe09CfSJXmG3eGqklTvQ8mrvVAfa3wLatd4aIP849D96TiCr/6TBs h68UICA4HISvvNs5r/9wkN/RHfRqXj40HhofWn8w8fAUhNL+YIcKxbs9ZUaRrMzd gE2zIlvEONf5YGZQXXtnjPxTdKVkHkmS1TMIjLpfar+00Zbtra+vyWd81cVKw1wN 42g= -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:49 2025 by rpki-client