$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa File: dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa (raw, json) Hash identifier: x5S6zyNdlz3nYzLtoiZBpu0TKEIacttzKFre6/Ml8hQ= Subject key identifier: 49:EF:B4:39:03:8F:46:AA:90:E6:FC:5B:7A:75:F1:C9:72:50:3C:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3A8E5F5B3F38A07528BE83CB5B088A1295C87717 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa Signing time: Fri 07 Nov 2025 00:41:09 +0000 ROA not before: Fri 07 Nov 2025 00:41:09 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:8e:5f:5b:3f:38:a0:75:28:be:83:cb:5b:08:8a:12:95:c8:77:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:41:09 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=d5258018cf57431f22212a6328acce70f1792923bb7dbb7c5e53bd9ceb2f6cd7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6c:49:bd:a7:90:44:7a:65:db:45:85:fc:85: e8:6a:48:89:61:f1:e3:d2:95:f0:7e:60:5b:38:73: 53:2c:cb:25:3c:3b:be:b4:09:1e:19:ba:c6:26:ad: b9:c1:ca:ea:7f:21:d8:54:7c:9b:c0:5d:34:ae:f9: 29:1c:f2:a2:13:40:c9:fa:96:68:30:f9:3a:65:1f: 4f:c2:f2:63:f4:58:74:93:ba:5e:ce:9a:e4:f3:0c: ee:7c:11:bc:40:d8:79:a7:c1:8b:a6:58:ff:aa:b0: 24:9d:4b:08:8a:ad:3a:be:cd:73:90:25:d9:df:22: 41:82:36:51:9a:00:2b:50:38:97:b6:f8:5f:10:fe: a4:ed:df:aa:88:d4:8c:31:69:49:e3:a9:7f:d9:c0: 42:99:e5:6c:c4:93:aa:4c:af:1d:06:34:5f:bd:6d: 9e:a1:7c:7b:23:67:6f:ef:a2:a0:63:a9:9a:bb:ec: af:39:7b:d3:ce:6b:df:a3:3c:42:6a:1e:05:27:be: c4:77:fa:99:a6:d5:4c:2e:4d:f9:7c:24:93:7f:ae: 68:61:0e:67:dd:ca:d6:ae:89:a7:ac:1d:94:eb:8f: be:ca:c3:04:22:07:39:54:00:aa:db:6c:ec:44:69: 07:75:55:b5:93:04:d4:8e:98:33:f8:3c:37:96:a6: 00:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EF:B4:39:03:8F:46:AA:90:E6:FC:5B:7A:75:F1:C9:72:50:3C:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 39:61:d2:c2:95:a6:57:3e:af:33:b0:45:1e:08:71:12:e9:a1: 4e:34:f3:3d:e6:b8:4d:e7:66:ae:f9:cf:a8:ed:ca:80:7b:a2: 08:e5:85:e4:b2:d2:35:ed:db:98:ec:7f:a0:ee:47:6b:af:21: 9a:5b:7c:30:f7:e3:db:c7:e5:99:56:8b:01:87:2d:d4:2f:02: 0a:76:17:78:5e:25:68:0d:a5:ae:c8:93:e2:1d:23:fc:f2:ec: 19:0c:50:23:3b:31:03:06:c0:39:07:37:ac:c4:ce:ff:e7:35: 9a:d8:bd:a1:a0:04:e0:e9:87:f1:93:28:6c:0f:59:60:5c:c2: b8:1e:ae:9b:e0:27:a0:77:bc:a3:5d:e5:9b:65:b6:e7:47:c7: 63:32:8a:c6:5c:a3:fe:e0:91:52:66:2e:8c:87:36:b4:2a:a7: 60:8d:7b:4b:8a:d0:2f:64:72:05:f7:83:de:22:f5:88:8d:34: cd:83:1d:3b:e4:14:a7:19:60:dd:68:b0:88:4c:15:e3:29:66: fa:1b:7d:6b:4d:4e:d3:55:c0:57:f8:cf:54:47:fa:ed:a4:32: 5b:a5:4b:9f:82:64:7f:c1:e7:1f:0c:63:3f:6b:d4:ac:70:8b: de:4b:c9:2b:a1:88:4b:94:b0:ab:3c:2b:9b:61:e2:2d:91:5d: 54:5e:3d:5e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOo5fWz84oHUovoPLWwiKEpXIdxcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwNDEwOVoX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAZDUyNTgwMThjZjU3NDMxZjIyMjEy YTYzMjhhY2NlNzBmMTc5MjkyM2JiN2RiYjdjNWU1M2JkOWNlYjJmNmNkNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGxJvaeQRHpl20WF/IXoakiJYfHj 0pXwfmBbOHNTLMslPDu+tAkeGbrGJq25wcrqfyHYVHybwF00rvkpHPKiE0DJ+pZo MPk6ZR9PwvJj9Fh0k7pezprk8wzufBG8QNh5p8GLplj/qrAknUsIiq06vs1zkCXZ 3yJBgjZRmgArUDiXtvhfEP6k7d+qiNSMMWlJ46l/2cBCmeVsxJOqTK8dBjRfvW2e oXx7I2dv76KgY6mau+yvOXvTzmvfozxCah4FJ77Ed/qZptVMLk35fCSTf65oYQ5n 3crWromnrB2U64++ysMEIgc5VACq22zsRGkHdVW1kwTUjpgz+Dw3lqYAMwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEnvtDkDj0aqkOb8W3p18clyUDwPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmZWIzOWFkLTI2NDQtNGYyYS1iMjNlLTE4ZjUxY2NkNDllMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYRDAMA0GCSqGSIb3DQEBCwUAA4IBAQA5YdLClaZXPq8zsEUe CHES6aFONPM95rhN52au+c+o7cqAe6II5YXkstI17duY7H+g7kdrryGaW3ww9+Pb x+WZVosBhy3ULwIKdhd4XiVoDaWuyJPiHSP88uwZDFAjOzEDBsA5BzesxM7/5zWa 2L2hoATg6YfxkyhsD1lgXMK4Hq6b4Cegd7yjXeWbZbbnR8djMorGXKP+4JFSZi6M hza0KqdgjXtLitAvZHIF94PeIvWIjTTNgx075BSnGWDdaLCITBXjKWb6G31rTU7T VcBX+M9UR/rtpDJbpUufgmR/wecfDGM/a9SscIveS8kroYhLlLCrPCubYeItkV1U Xj1e -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:09 2025 by rpki-client