$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07764e8-f635-4cf8-8330-8cffc6056fd8.roa File: e07764e8-f635-4cf8-8330-8cffc6056fd8.roa (raw, json) Hash identifier: q+ODQystZxSzhfN6Ds0Qhv0uSsy9E7quwn+9yNdTubQ= Subject key identifier: 3B:28:7C:30:46:3C:64:D8:60:B4:17:14:DD:AA:F1:38:67:2C:2F:F8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3394D75D069017F2CEC5B80AB57DD6921CA7645C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07764e8-f635-4cf8-8330-8cffc6056fd8.roa Signing time: Sun 09 Nov 2025 00:50:54 +0000 ROA not before: Sun 09 Nov 2025 00:50:54 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:94:d7:5d:06:90:17:f2:ce:c5:b8:0a:b5:7d:d6:92:1c:a7:64:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:50:54 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=1aeaf0d8ec0b6fe8c0bd4be9f7f60c55861f227be53100912e9878477fa6d824, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:46:61:a9:ce:69:19:96:68:86:d9:53:7a:e5: e2:0d:bb:94:83:35:28:91:52:49:10:23:d1:b7:b1: c5:99:1c:0e:c6:30:31:8d:be:9c:c6:ea:bb:b3:dd: 2a:78:62:23:68:6b:6d:3c:67:48:f1:ef:25:bf:4e: 2e:92:84:5b:fd:24:35:3d:8c:c9:11:f7:ab:78:86: 14:65:5b:33:cb:af:7a:45:7d:f6:98:83:e6:f9:29: 20:86:c4:71:03:d6:85:e4:df:a0:54:f2:45:e5:e7: a5:44:6f:89:f3:f6:2d:fc:3a:23:31:e2:49:49:04: a6:4f:61:92:10:93:14:ac:15:eb:98:76:f5:04:56: 17:91:e3:28:24:19:1f:e8:4e:3a:ae:77:89:8f:a8: c9:21:e5:3f:fb:e3:d2:bf:6a:19:7b:34:91:28:18: 9f:14:a0:be:a2:8c:76:23:ee:e8:5b:bb:5b:76:eb: 53:6b:75:c3:7c:e8:f6:43:92:7c:69:b7:75:00:51: d7:d0:12:25:95:07:ce:39:4d:33:88:db:9b:52:75: d1:76:28:f9:70:b5:da:de:f4:43:22:04:9e:b6:f8: de:4b:76:96:86:84:83:80:cc:4c:69:8b:ac:52:3a: 71:cf:23:31:6b:82:9b:0d:48:42:c5:1b:a5:31:e7: e1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:28:7C:30:46:3C:64:D8:60:B4:17:14:DD:AA:F1:38:67:2C:2F:F8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07764e8-f635-4cf8-8330-8cffc6056fd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14::/35 Signature Algorithm: sha256WithRSAEncryption c9:a9:4f:54:b5:11:9d:57:b1:89:3d:ad:9b:84:f3:1e:c1:1a: f4:e6:c9:c7:b9:ff:44:ea:3a:79:50:2e:20:40:b6:5d:29:4e: 35:8c:1a:c9:d9:10:bb:b0:82:f6:47:23:21:4b:ea:6d:47:cd: 51:a5:8f:4f:27:66:a8:ba:dd:4c:ed:d0:b8:a6:a7:a7:3f:34: e5:1f:ce:ff:54:53:1e:95:e6:3e:0b:0e:96:22:69:77:d0:3a: f9:73:de:09:2b:e4:d5:f2:60:3d:dc:df:31:c5:b1:97:1e:70: fb:d0:20:86:a0:60:e0:e0:95:42:59:6d:59:cc:51:6a:79:99: 9c:44:59:51:4f:28:f7:64:ac:e9:c4:d2:28:6a:17:b3:5c:38: 89:3d:fe:64:c1:e5:ff:b9:41:78:08:4b:52:43:f4:d6:f3:95: b9:fe:b1:38:5a:a7:20:1a:76:c4:ba:37:d7:95:50:79:05:20: 20:15:35:19:7a:df:d7:01:d6:2f:50:b5:95:83:99:97:14:c2: a7:f3:0c:64:84:83:72:77:4e:a0:b4:d7:f4:bd:e3:ac:84:c9: 8e:a0:3c:26:e8:37:2a:3b:3d:d1:47:3b:12:e2:b3:fe:dc:72: 25:0e:6c:03:a5:8f:dd:ac:04:17:71:0e:a3:03:54:64:7c:a1: 25:a8:57:fc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUM5TXXQaQF/LOxbgKtX3WkhynZFwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwNTA1NFoX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAMWFlYWYwZDhlYzBiNmZlOGMwYmQ0 YmU5ZjdmNjBjNTU4NjFmMjI3YmU1MzEwMDkxMmU5ODc4NDc3ZmE2ZDgyNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EZhqc5pGZZohtlTeuXiDbuUgzUo kVJJECPRt7HFmRwOxjAxjb6cxuq7s90qeGIjaGttPGdI8e8lv04ukoRb/SQ1PYzJ EfereIYUZVszy696RX32mIPm+SkghsRxA9aF5N+gVPJF5eelRG+J8/Yt/DojMeJJ SQSmT2GSEJMUrBXrmHb1BFYXkeMoJBkf6E46rneJj6jJIeU/++PSv2oZezSRKBif FKC+oox2I+7oW7tbdutTa3XDfOj2Q5J8abd1AFHX0BIllQfOOU0ziNubUnXRdij5 cLXa3vRDIgSetvjeS3aWhoSDgMxMaYusUjpxzyMxa4KbDUhCxRulMefhUQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDsofDBGPGTYYLQXFN2q8ThnLC/4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwNzc2NGU4LWY2MzUtNGNmOC04MzMwLThjZmZjNjA1NmZkOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYFJAbaFAAwDQYJKoZIhvcNAQELBQADggEBAMmpT1S1EZ1XsYk9rZuE 8x7BGvTmyce5/0TqOnlQLiBAtl0pTjWMGsnZELuwgvZHIyFL6m1HzVGlj08nZqi6 3Uzt0Limp6c/NOUfzv9UUx6V5j4LDpYiaXfQOvlz3gkr5NXyYD3c3zHFsZcecPvQ IIagYODglUJZbVnMUWp5mZxEWVFPKPdkrOnE0ihqF7NcOIk9/mTB5f+5QXgIS1JD 9Nbzlbn+sThapyAadsS6N9eVUHkFICAVNRl639cB1i9QtZWDmZcUwqfzDGSEg3J3 TqC01/S946yEyY6gPCboNyo7PdFHOxLis/7cciUObAOlj92sBBdxDqMDVGR8oSWo V/w= -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:44 2025 by rpki-client