$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fc689091-d3fb-4957-9d14-30d4c91bcec9.roa File: fc689091-d3fb-4957-9d14-30d4c91bcec9.roa (raw, json) Hash identifier: GYrR9WWZOtq/gEMbfB/B4hkpjyK5IdXB9JOW5caH+1Y= Subject key identifier: A6:E1:F6:7F:52:03:04:79:91:2B:FF:08:AB:2C:DF:33:9F:18:68:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 25E9F418242DA015A6420B699B838806A1DF77A8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fc689091-d3fb-4957-9d14-30d4c91bcec9.roa Signing time: Sun 09 Nov 2025 01:00:53 +0000 ROA not before: Sun 09 Nov 2025 01:00:53 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1f::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e9:f4:18:24:2d:a0:15:a6:42:0b:69:9b:83:88:06:a1:df:77:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 01:00:53 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=7600e5e38cb9f71d080d186e0441ea11badef80ecd180a5b34511eb87bbd4098, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:5a:3f:31:95:e6:11:7b:3d:a5:30:f3:74: 3c:59:18:52:b4:66:30:10:46:9f:76:bd:fa:a2:26: 67:43:d0:42:da:22:28:24:19:fb:c9:a3:4b:d3:75: 6b:db:f0:25:b0:98:13:42:ac:aa:81:28:7d:a3:91: 93:f6:d0:bf:07:62:7a:a2:35:a8:a9:83:ce:b0:8a: 17:66:f9:4c:cd:b5:16:c3:65:03:b4:d1:7c:07:60: a3:76:a6:4c:44:7b:9f:5f:9e:b4:5d:6c:db:0b:3c: c2:78:1e:08:ff:22:f3:33:89:5d:be:3f:bd:10:25: ec:4e:f8:95:e7:d3:5b:65:98:fb:77:e2:62:56:57: af:3e:0f:1d:da:1c:22:a1:d7:63:d6:ad:66:cc:0b: 81:7d:87:61:1f:f2:f0:1e:d2:f8:82:66:5e:da:ae: 49:0b:bc:af:6e:e7:c0:d3:92:76:30:91:90:e1:19: e9:32:9d:ed:bb:13:91:49:6e:3f:59:0d:65:24:4d: a0:69:c7:b7:f2:2a:e4:59:a3:98:8b:9b:d3:8b:f9: 72:a7:e5:9f:63:84:2a:6a:74:8f:2f:5a:2d:f2:f4: 26:b4:b2:ef:d1:ac:5c:fd:76:75:a0:3f:fd:33:8c: 4d:e0:db:5b:89:62:bb:ff:c3:8d:e6:90:e4:db:41: c0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E1:F6:7F:52:03:04:79:91:2B:FF:08:AB:2C:DF:33:9F:18:68:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fc689091-d3fb-4957-9d14-30d4c91bcec9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1f::/36 Signature Algorithm: sha256WithRSAEncryption af:9e:dd:21:5e:f7:eb:5c:43:7f:73:63:db:a8:b3:67:a7:71: c9:f5:83:b2:de:56:66:e5:a0:1e:e6:1d:06:1a:51:9a:38:4b: 1c:8a:4a:a5:cb:75:06:2e:83:45:52:6d:cf:b0:b5:33:56:72: 94:f3:af:b4:c8:0d:32:5d:dd:a8:ff:8f:85:5d:2b:97:20:ac: d5:74:45:8a:5c:df:50:7d:78:e8:9a:02:05:78:22:ce:ef:0b: 93:04:ba:02:31:ed:8a:08:7a:e8:86:c3:90:ea:5d:03:76:78: 0d:46:71:0c:a2:0d:2c:a6:0c:d4:51:01:d9:61:51:f5:83:44: 13:dc:d1:3f:49:4f:49:28:95:d8:dd:48:79:c0:95:55:ae:94: 7b:c8:db:c9:ff:db:c7:8e:4c:9d:e2:9f:2a:23:56:53:ea:36: 79:e6:65:0a:5c:b4:bf:97:f0:5f:c8:c6:fa:45:ce:3b:14:d6: b3:f9:e3:38:42:e1:62:e0:49:c6:38:70:97:1a:49:21:27:35: 8b:80:56:3a:d1:ba:48:3b:a1:50:22:c7:60:e1:e6:c4:2b:8a: 0c:22:96:f3:1d:90:dd:70:b7:fa:db:d2:16:8b:40:92:43:0e: 09:d0:9a:fc:3e:a2:a7:7c:c4:67:db:3f:1f:25:f1:7a:53:9f: ea:2e:33:18 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJen0GCQtoBWmQgtpm4OIBqHfd6gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAxMDA1M1oX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNANzYwMGU1ZTM4Y2I5ZjcxZDA4MGQx ODZlMDQ0MWVhMTFiYWRlZjgwZWNkMTgwYTViMzQ1MTFlYjg3YmJkNDA5ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNdaPzGV5hF7PaUw83Q8WRhStGYw EEafdr36oiZnQ9BC2iIoJBn7yaNL03Vr2/AlsJgTQqyqgSh9o5GT9tC/B2J6ojWo qYPOsIoXZvlMzbUWw2UDtNF8B2CjdqZMRHufX560XWzbCzzCeB4I/yLzM4ldvj+9 ECXsTviV59NbZZj7d+JiVlevPg8d2hwioddj1q1mzAuBfYdhH/LwHtL4gmZe2q5J C7yvbufA05J2MJGQ4RnpMp3tuxORSW4/WQ1lJE2gace38irkWaOYi5vTi/lyp+Wf Y4QqanSPL1ot8vQmtLLv0axc/XZ1oD/9M4xN4NtbiWK7/8ON5pDk20HAdwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKbh9n9SAwR5kSv/CKss3zOfGGjKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZjNjg5MDkxLWQzZmItNDk1Ny05ZDE0LTMwZDRjOTFiY2VjOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaHwAwDQYJKoZIhvcNAQELBQADggEBAK+e3SFe9+tcQ39zY9uo s2enccn1g7LeVmbloB7mHQYaUZo4SxyKSqXLdQYug0VSbc+wtTNWcpTzr7TIDTJd 3aj/j4VdK5cgrNV0RYpc31B9eOiaAgV4Is7vC5MEugIx7YoIeuiGw5DqXQN2eA1G cQyiDSymDNRRAdlhUfWDRBPc0T9JT0koldjdSHnAlVWulHvI28n/28eOTJ3inyoj VlPqNnnmZQpctL+X8F/IxvpFzjsU1rP54zhC4WLgScY4cJcaSSEnNYuAVjrRukg7 oVAix2Dh5sQrigwilvMdkN1wt/rb0haLQJJDDgnQmvw+oqd8xGfbPx8l8XpTn+ou Mxg= -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:02 2025 by rpki-client