$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f308a076-0e58-4b45-b7b0-474f5484be2e.roa File: f308a076-0e58-4b45-b7b0-474f5484be2e.roa (raw, json) Hash identifier: O8cpFiXxlBHHXPr1VngDzP0o08eMCK6jbKMGf0TTdVU= Subject key identifier: 0D:89:A1:AB:CB:93:49:47:4C:BA:B5:EA:D3:1B:B0:95:E4:1E:99:11 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2DA35FBC2CE9DC112E648A89BC2D2EBD2C97F102 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f308a076-0e58-4b45-b7b0-474f5484be2e.roa Signing time: Sat 08 Nov 2025 00:10:29 +0000 ROA not before: Sat 08 Nov 2025 00:10:29 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a3:5f:bc:2c:e9:dc:11:2e:64:8a:89:bc:2d:2e:bd:2c:97:f1:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:10:29 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=a6caf367448ba6cd456f3f81d0f871648bd390b26e5f8f53a8de77d3ce06ffe6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e8:57:f4:e3:29:1b:e7:b3:5e:05:d1:fa:f5: d9:a6:ee:3f:bc:18:c0:a9:92:c1:91:1a:42:32:5a: 94:81:0e:ea:82:42:4b:da:34:71:f5:f2:23:d2:6a: d0:38:02:0f:44:fe:5c:8b:95:6b:32:37:43:4b:64: be:bd:66:86:4d:f6:53:cb:e4:bf:c7:97:87:13:36: 02:dc:90:0e:8a:30:cb:96:0e:2c:00:1e:62:56:43: 96:96:b7:1b:72:d7:a6:22:2b:5d:fd:a2:c7:3d:59: d5:67:b9:ec:f3:f3:dc:bd:74:83:c5:17:d3:0f:87: 6d:82:55:e0:66:65:4b:5c:bf:22:3b:cc:9a:d7:3c: ae:5d:7e:29:d2:1c:e3:6c:ca:78:f2:aa:97:1d:a9: 42:70:81:d7:13:ed:53:50:8e:55:08:e9:54:d3:ef: 2d:37:17:f2:bc:6f:4c:71:99:30:a9:70:29:d6:89: 31:ec:66:3b:cf:e5:57:61:9b:e4:7a:fd:db:23:e5: 2a:6c:5b:51:99:a5:3d:dc:44:7a:35:de:e6:cb:f6: 83:5f:98:6b:59:41:6c:71:e9:a8:92:0b:ff:85:de: e7:51:ac:e4:e7:70:58:02:db:47:68:21:cf:0f:da: e3:91:e8:d1:c7:3c:cc:d7:d9:31:62:b8:b2:55:66: 5b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:89:A1:AB:CB:93:49:47:4C:BA:B5:EA:D3:1B:B0:95:E4:1E:99:11 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f308a076-0e58-4b45-b7b0-474f5484be2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:1000::/48 Signature Algorithm: sha256WithRSAEncryption 79:c4:02:08:84:67:99:5b:92:dd:95:f0:3a:0b:3a:3c:03:4f: 10:84:0c:74:97:bc:d0:d4:03:10:f3:32:91:fd:17:f7:42:fe: bb:f1:e6:03:d7:4a:ef:4a:45:6f:66:6c:09:dc:9b:4d:a5:68: f8:18:c8:0a:18:07:5c:4c:e4:a0:33:ca:d5:2a:c8:0a:06:e3: 06:2e:38:e2:c2:8b:01:70:22:15:37:ff:41:f0:a2:40:9d:7c: a3:b2:f0:35:62:57:bd:67:0f:15:a8:b4:3e:32:d3:0a:94:23: 24:ee:0e:ed:de:2f:2b:18:f6:d3:51:12:e1:f4:a7:96:e0:3b: 35:ab:a1:65:4d:4c:f4:db:07:58:0a:4b:91:09:e3:1d:18:fe: 85:97:1d:f8:e2:8d:ad:9a:47:23:e2:4e:fa:4d:46:9d:57:60: 85:fa:08:35:7a:43:b4:69:ec:09:c4:9c:a7:15:f0:72:3a:d0: da:7c:d1:4a:42:e0:4f:8c:39:24:d1:14:87:4a:63:3e:fe:c0: fb:c3:c9:8e:b7:96:49:ae:2e:86:22:a3:65:f7:f3:38:6b:9d: 76:1a:40:31:80:c8:90:02:d8:ae:6e:a0:b2:96:b4:8a:40:77: de:8e:3c:70:f8:93:be:d5:74:00:7a:c4:23:1b:77:95:a9:bc: 2d:6f:01:0b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULaNfvCzp3BEuZIqJvC0uvSyX8QIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMTAyOVoX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAYTZjYWYzNjc0NDhiYTZjZDQ1NmYz ZjgxZDBmODcxNjQ4YmQzOTBiMjZlNWY4ZjUzYThkZTc3ZDNjZTA2ZmZlNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiehX9OMpG+ezXgXR+vXZpu4/vBjA qZLBkRpCMlqUgQ7qgkJL2jRx9fIj0mrQOAIPRP5ci5VrMjdDS2S+vWaGTfZTy+S/ x5eHEzYC3JAOijDLlg4sAB5iVkOWlrcbctemIitd/aLHPVnVZ7ns8/PcvXSDxRfT D4dtglXgZmVLXL8iO8ya1zyuXX4p0hzjbMp48qqXHalCcIHXE+1TUI5VCOlU0+8t NxfyvG9McZkwqXAp1okx7GY7z+VXYZvkev3bI+UqbFtRmaU93ER6Nd7my/aDX5hr WUFscemokgv/hd7nUazk53BYAttHaCHPD9rjkejRxzzM19kxYriyVWZbvQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFA2JoavLk0lHTLq16tMbsJXkHpkRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YzMDhhMDc2LTBlNTgtNGI0NS1iN2IwLTQ3NGY1NDg0YmUyZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7BAAMA0GCSqGSIb3DQEBCwUAA4IBAQB5xAIIhGeZW5LdlfA6 Czo8A08QhAx0l7zQ1AMQ8zKR/Rf3Qv678eYD10rvSkVvZmwJ3JtNpWj4GMgKGAdc TOSgM8rVKsgKBuMGLjjiwosBcCIVN/9B8KJAnXyjsvA1Yle9Zw8VqLQ+MtMKlCMk 7g7t3i8rGPbTURLh9KeW4Ds1q6FlTUz02wdYCkuRCeMdGP6Flx344o2tmkcj4k76 TUadV2CF+gg1ekO0aewJxJynFfByOtDafNFKQuBPjDkk0RSHSmM+/sD7w8mOt5ZJ ri6GIqNl9/M4a512GkAxgMiQAtiubqCylrSKQHfejjxw+JO+1XQAesQjG3eVqbwt bwEL -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:25 2025 by rpki-client