$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff6d0825-64c9-42eb-979c-d2252693e691.roa File: ff6d0825-64c9-42eb-979c-d2252693e691.roa (raw, json) Hash identifier: +s6X6YY7YeQC8ZSS6z4KYoFzl2JP4pzANctJ3saTqOA= Subject key identifier: 95:F5:AE:F6:09:02:E0:93:6E:6E:03:BF:C4:EC:03:77:69:D8:F8:2C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 537D1ED72F945D429927B0C3B99DFB5BFB1797F5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff6d0825-64c9-42eb-979c-d2252693e691.roa Signing time: Sat 08 Nov 2025 00:20:55 +0000 ROA not before: Sat 08 Nov 2025 00:20:55 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:7d:1e:d7:2f:94:5d:42:99:27:b0:c3:b9:9d:fb:5b:fb:17:97:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:20:55 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=b25db9bbcc69d7e71f89a6862bc30ff45aa02fab3f94739ca239b6ff776cca80, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b1:22:c4:9d:e9:97:17:bf:e1:99:13:cd:5b: 34:ed:94:81:98:dd:00:bf:4e:0d:b0:9c:f3:76:e7: 0e:7f:1c:50:03:54:ba:bd:c1:f9:45:d9:ba:64:bc: c7:bf:a7:80:60:02:02:23:a6:c3:32:3c:68:0e:41: ec:ac:a0:b8:80:85:11:60:bb:bc:02:99:5c:a5:9b: 84:af:98:1e:a3:5e:e5:93:ed:71:32:3e:24:e3:af: ac:ff:99:ed:c9:06:e7:4f:1e:9b:9b:8e:92:20:91: 32:ab:5d:60:3c:14:22:1a:09:48:57:f9:48:1a:85: b4:95:f9:d8:f4:b3:1b:ad:bf:1e:4d:41:81:5b:93: 5b:2e:d4:8a:2a:90:62:26:35:f8:db:bb:54:72:c5: 9a:95:f5:ee:cd:41:1b:1f:cf:32:4f:e8:3d:09:41: 66:c3:bd:54:f8:67:ea:f6:bc:7e:f7:49:da:4d:1c: b1:2d:ad:25:ba:a4:16:26:62:40:fd:6d:68:97:f9: 08:a9:b1:cc:53:b4:54:9c:e5:43:48:1b:b1:cc:90: 28:62:a9:66:9a:5d:c0:c3:ac:65:40:b9:a3:08:f0: be:e6:7e:b6:91:73:48:96:a6:bd:51:f3:6d:d8:5a: 21:42:2b:23:71:7b:71:1e:46:6e:06:fc:88:d6:b2: 18:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F5:AE:F6:09:02:E0:93:6E:6E:03:BF:C4:EC:03:77:69:D8:F8:2C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff6d0825-64c9-42eb-979c-d2252693e691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4010::/48 Signature Algorithm: sha256WithRSAEncryption 89:4b:42:ee:90:c6:25:2d:42:82:5a:d2:01:3e:80:e9:3f:6d: e2:82:7e:63:47:fb:75:e5:95:23:63:f6:69:6c:fc:ae:a3:7b: e1:43:7f:9e:09:ea:dc:53:b9:7a:59:2e:24:03:dc:35:92:17: ce:80:b9:84:fd:1a:0f:0a:5d:fd:92:04:e7:87:e4:cf:85:3a: cd:2b:4a:41:03:1e:8e:10:71:98:e4:62:d2:f1:cd:67:a9:e8: 90:15:93:19:db:3d:81:4f:61:e4:ee:e8:09:2d:7e:39:77:64: 11:2e:59:2d:87:f9:08:6d:b2:6a:ff:6d:6d:2a:cb:d3:7a:78: 7e:67:47:04:df:d5:65:cf:fb:7d:43:f0:16:7c:94:28:60:1d: fc:d4:5e:41:f5:76:59:f6:18:13:e6:a5:f1:88:ef:23:61:4e: 85:0d:55:29:43:e1:b8:d7:0e:48:14:e2:73:6d:62:60:7c:39: 1c:24:ad:b4:62:07:3e:9b:7e:b9:5d:0f:e8:c6:18:3c:0a:8b: ed:04:63:01:f2:9c:9a:7e:ca:85:48:15:28:81:ad:c0:47:a7: 31:47:0c:1f:33:76:44:6b:03:95:dd:c1:85:53:33:da:e2:3a: 0f:07:8b:a3:02:ac:71:b1:31:b1:7b:a4:4c:0e:e9:2f:d6:78: 09:e8:e0:9f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUU30e1y+UXUKZJ7DDuZ37W/sXl/UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMjA1NVoX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAYjI1ZGI5YmJjYzY5ZDdlNzFmODlh Njg2MmJjMzBmZjQ1YWEwMmZhYjNmOTQ3MzljYTIzOWI2ZmY3NzZjY2E4MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7EixJ3plxe/4ZkTzVs07ZSBmN0A v04NsJzzducOfxxQA1S6vcH5Rdm6ZLzHv6eAYAICI6bDMjxoDkHsrKC4gIURYLu8 AplcpZuEr5geo17lk+1xMj4k46+s/5ntyQbnTx6bm46SIJEyq11gPBQiGglIV/lI GoW0lfnY9LMbrb8eTUGBW5NbLtSKKpBiJjX427tUcsWalfXuzUEbH88yT+g9CUFm w71U+Gfq9rx+90naTRyxLa0luqQWJmJA/W1ol/kIqbHMU7RUnOVDSBuxzJAoYqlm ml3Aw6xlQLmjCPC+5n62kXNIlqa9UfNt2FohQisjcXtxHkZuBvyI1rIYWQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJX1rvYJAuCTbm4Dv8TsA3dp2PgsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZmNmQwODI1LTY0YzktNDJlYi05NzljLWQyMjUyNjkzZTY5MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0AQMA0GCSqGSIb3DQEBCwUAA4IBAQCJS0LukMYlLUKCWtIB PoDpP23ign5jR/t15ZUjY/ZpbPyuo3vhQ3+eCercU7l6WS4kA9w1khfOgLmE/RoP Cl39kgTnh+TPhTrNK0pBAx6OEHGY5GLS8c1nqeiQFZMZ2z2BT2Hk7ugJLX45d2QR Llkth/kIbbJq/21tKsvTenh+Z0cE39Vlz/t9Q/AWfJQoYB381F5B9XZZ9hgT5qXx iO8jYU6FDVUpQ+G41w5IFOJzbWJgfDkcJK20Ygc+m365XQ/oxhg8CovtBGMB8pya fsqFSBUoga3AR6cxRwwfM3ZEawOV3cGFUzPa4joPB4ujAqxxsTGxe6RMDukv1ngJ 6OCf -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:04 2025 by rpki-client