$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/84292d65-2b01-4a5c-9515-02cb05bc483c.roa File: 84292d65-2b01-4a5c-9515-02cb05bc483c.roa (raw, json) Hash identifier: 04mYvR9nRYeBCin6Ng4KmkU8NF96lpvD4dxBw0ZU2rU= Subject key identifier: 62:21:C2:97:2C:4C:08:D7:A2:44:C8:F7:D1:7C:68:2D:CC:B3:D9:FB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63BD1C16AEB654572DC3326DC6DB44361D97441B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/84292d65-2b01-4a5c-9515-02cb05bc483c.roa Signing time: Sun 09 Nov 2025 00:41:20 +0000 ROA not before: Sun 09 Nov 2025 00:41:20 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Nov 2025 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:bd:1c:16:ae:b6:54:57:2d:c3:32:6d:c6:db:44:36:1d:97:44:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:41:20 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=db2c77d5d86844c662e8360aac2a5fb448a1b88c0060cfcc093231d7fc12bcf6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fa:db:4e:23:f4:48:96:04:86:eb:94:6d:b4: 70:03:c6:fe:d5:7c:16:c6:1c:94:ab:5d:b2:df:8b: 91:8b:f3:51:e1:c5:7c:b7:ef:71:da:8c:06:5f:d6: 52:57:d2:00:3e:69:dc:f7:75:cb:53:96:36:a7:c6: ea:d7:fd:4f:ad:5f:9a:77:f1:28:9c:98:97:26:5e: 18:b5:6c:6e:4c:04:a0:b0:cb:95:e6:13:96:69:51: 24:39:94:b1:70:b4:7d:24:59:7e:89:78:ad:1f:fd: 33:4e:df:32:31:d4:c8:1e:93:51:62:d7:4c:41:d8: ec:50:55:a3:7f:ac:ac:88:5d:6d:79:71:eb:8e:f9: 16:13:e4:c6:f9:21:82:41:b3:bf:2b:93:60:9d:c0: 9b:d2:c8:f2:ab:c0:a2:ee:04:81:71:f9:c8:5b:e6: 53:96:3b:47:79:28:48:4a:f8:a1:fb:4f:4c:77:5a: 99:3f:ed:83:1f:41:92:5f:ae:eb:c1:f2:d9:9b:2b: c8:ce:6a:3d:6b:5b:a1:0c:17:27:0d:eb:6c:ed:46: 2a:5c:c1:71:8c:9f:40:eb:0c:c8:96:63:80:80:16: 08:e9:a1:8d:0b:ba:6d:7b:89:f3:af:4c:45:1c:40: d4:5f:ec:d3:52:99:8c:87:c5:27:31:c2:9f:d8:71: 64:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:21:C2:97:2C:4C:08:D7:A2:44:C8:F7:D1:7C:68:2D:CC:B3:D9:FB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/84292d65-2b01-4a5c-9515-02cb05bc483c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:8000::/40 Signature Algorithm: sha256WithRSAEncryption 44:ed:f7:67:85:51:2d:4d:6c:ce:74:da:39:d8:1b:82:c7:77: 02:a5:bf:80:ae:03:59:24:f4:ee:f7:6a:1a:e6:6f:f3:4e:a4: 20:08:68:ae:95:6d:ad:a9:0d:8e:d7:f4:94:d0:af:01:39:d8: 57:e1:76:b6:b7:3c:d6:11:cb:cd:4f:dd:92:49:ba:c1:d0:dd: 89:0b:4c:1e:11:1b:6d:92:5c:f9:f8:34:9a:f9:3d:c5:32:2e: 88:a4:d0:5f:c5:68:4c:76:69:c5:52:78:97:17:9a:a5:5f:6c: 53:86:3f:41:dc:68:b1:0b:00:e3:56:a0:11:1d:c8:d6:ef:ce: 36:3e:be:17:d8:48:49:ea:42:00:a0:6f:34:ed:92:f7:0a:ee: 7f:95:f9:8b:fb:d9:cf:0e:77:5e:80:bd:53:64:46:eb:fe:f0: e9:0a:2d:4d:8e:b0:a3:d2:73:57:c7:25:be:c0:14:f6:83:e6: 13:f8:1a:43:86:ef:c7:09:90:bf:e6:97:ed:37:f1:6b:59:f1: 1c:0c:d4:83:16:af:9e:d3:f5:b4:48:25:86:30:63:98:42:4e: cb:b9:a9:0f:5d:ca:e4:20:f2:62:d8:51:52:72:f3:fa:d8:42: 1b:24:52:d2:4d:73:10:24:b2:d4:ee:0f:ed:77:5e:fe:81:17: 85:cd:bc:ad -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUY70cFq62VFctwzJtxttENh2XRBswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwNDEyMFoX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAZGIyYzc3ZDVkODY4NDRjNjYyZTgz NjBhYWMyYTVmYjQ0OGExYjg4YzAwNjBjZmNjMDkzMjMxZDdmYzEyYmNmNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfrbTiP0SJYEhuuUbbRwA8b+1XwW xhyUq12y34uRi/NR4cV8t+9x2owGX9ZSV9IAPmnc93XLU5Y2p8bq1/1PrV+ad/Eo nJiXJl4YtWxuTASgsMuV5hOWaVEkOZSxcLR9JFl+iXitH/0zTt8yMdTIHpNRYtdM QdjsUFWjf6ysiF1teXHrjvkWE+TG+SGCQbO/K5NgncCb0sjyq8Ci7gSBcfnIW+ZT ljtHeShISvih+09Md1qZP+2DH0GSX67rwfLZmyvIzmo9a1uhDBcnDets7UYqXMFx jJ9A6wzIlmOAgBYI6aGNC7pte4nzr0xFHEDUX+zTUpmMh8UnMcKf2HFkRQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGIhwpcsTAjXokTI99F8aC3Ms9n7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg0MjkyZDY1LTJiMDEtNGE1Yy05NTE1LTAyY2IwNWJjNDgzYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8YAwDQYJKoZIhvcNAQELBQADggEBAETt92eFUS1NbM502jnY G4LHdwKlv4CuA1kk9O73ahrmb/NOpCAIaK6Vba2pDY7X9JTQrwE52Ffhdra3PNYR y81P3ZJJusHQ3YkLTB4RG22SXPn4NJr5PcUyLoik0F/FaEx2acVSeJcXmqVfbFOG P0HcaLELAONWoBEdyNbvzjY+vhfYSEnqQgCgbzTtkvcK7n+V+Yv72c8Od16AvVNk Ruv+8OkKLU2OsKPSc1fHJb7AFPaD5hP4GkOG78cJkL/ml+038WtZ8RwM1IMWr57T 9bRIJYYwY5hCTsu5qQ9dyuQg8mLYUVJy8/rYQhskUtJNcxAkstTuD+13Xv6BF4XN vK0= -----END CERTIFICATE-----Generated at Fri Nov 14 09:56:48 2025 by rpki-client