$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03914477-1e2b-4101-9d0a-c8a99b73b05e.roa File: 03914477-1e2b-4101-9d0a-c8a99b73b05e.roa (raw, json) Hash identifier: PxdK3Cco/z5qHaOsybeFhGUFENVx2mM+O5hCDGQV7rs= Subject key identifier: F6:3B:37:3E:D6:74:5D:1F:3F:77:2E:4D:65:06:8B:38:86:D3:DB:0D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2EEB5F8671FDDA8A598B77FC194FEC0CB4342BBB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03914477-1e2b-4101-9d0a-c8a99b73b05e.roa Signing time: Fri 24 Oct 2025 00:00:28 +0000 ROA not before: Fri 24 Oct 2025 00:00:28 +0000 ROA not after: Fri 28 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daed:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:eb:5f:86:71:fd:da:8a:59:8b:77:fc:19:4f:ec:0c:b4:34:2b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 24 00:00:28 2025 GMT Not After : Nov 28 23:59:59 2025 GMT Subject: serialNumber=70d8c336fc0c8f60a8a790841e2f11e36bfabc651e06347126aca0bd4d33e4ea, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:54:a5:3d:cf:75:21:fe:20:64:dd:b2:b3:77: cf:3e:52:14:f0:41:2c:ac:eb:ed:23:70:c6:30:f9: 51:02:21:ea:5b:51:d2:f7:7b:c5:a0:e4:6e:fe:5b: 6f:40:10:e5:0b:04:ad:5a:19:71:5d:31:4c:e8:24: 1e:da:c4:96:a3:02:ca:01:44:f6:46:f6:b7:39:da: a9:1e:29:44:3f:1e:83:fe:a1:c4:22:7d:1e:19:b3: 85:89:f0:be:fd:84:39:aa:66:5a:59:2e:33:d5:fc: 0c:e9:36:46:5f:cf:f4:da:ac:00:4f:fe:d4:ee:3d: db:0a:4a:d1:23:83:8d:1d:d9:36:57:c1:91:e1:bd: 4b:8f:39:a5:88:27:f9:29:72:2e:86:69:f5:02:96: 88:8f:1b:c3:be:ab:cf:bc:20:8f:93:f8:0b:72:b9: b7:ed:36:d6:9e:28:66:bc:50:2b:01:78:9c:82:02: 4d:fc:d4:6e:e0:d4:04:27:28:21:3e:e3:8b:06:40: 3a:84:3f:03:f1:dd:36:97:e2:32:34:c6:ae:94:92: f3:ff:f2:a0:08:2b:60:05:11:60:46:96:7f:39:60: dc:f5:05:ff:48:17:35:ae:98:40:c5:0f:0f:77:42: c1:f3:53:b7:1f:a7:e3:53:ef:16:a4:0b:b5:e8:09: ec:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3B:37:3E:D6:74:5D:1F:3F:77:2E:4D:65:06:8B:38:86:D3:DB:0D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03914477-1e2b-4101-9d0a-c8a99b73b05e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 2a:55:45:56:37:f3:91:2b:47:1f:e0:3e:27:d1:94:54:60:ac: 2d:3f:01:51:25:18:34:5a:46:af:ed:41:75:65:00:77:03:cd: 79:bf:90:85:93:61:e5:5b:7b:eb:6c:0f:53:a7:eb:55:ea:98: ad:0f:40:2a:81:2c:80:e3:3b:48:a2:f0:32:90:88:e9:02:66: 3f:6d:56:24:6c:be:98:d2:72:be:23:4e:ed:02:cc:89:bf:2e: fa:08:ca:8d:65:48:84:26:ef:b6:52:5e:0e:df:ec:f4:82:cc: 4f:e5:a1:21:5d:f7:e4:6d:7e:5d:ad:7b:c4:76:36:90:d4:c4: 58:17:28:ad:2b:6c:20:14:9c:9d:67:5b:00:7a:5e:57:78:44: 0c:d3:ff:e3:55:ee:15:18:92:e2:f9:da:7b:83:2a:d3:d1:89: 2e:3a:a2:f2:8c:69:5d:0d:d0:24:5d:f6:ac:6d:30:78:4b:9a: c4:0b:56:07:da:0e:91:ee:3b:48:96:60:e5:5a:b8:0b:c5:1f: 87:66:30:c0:48:cf:d4:e2:31:a2:2f:3b:44:27:69:52:0b:a2: 0d:68:5c:08:35:8f:06:19:bd:a7:75:9f:a4:25:36:55:b0:ea: 76:51:97:ea:15:8e:ea:b4:09:e5:26:ad:ea:46:75:41:53:33: df:a3:bb:dd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULutfhnH92opZi3f8GU/sDLQ0K7swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyNDAwMDAyOFoX DTI1MTEyODIzNTk1OVowejFJMEcGA1UEBRNANzBkOGMzMzZmYzBjOGY2MGE4YTc5 MDg0MWUyZjExZTM2YmZhYmM2NTFlMDYzNDcxMjZhY2EwYmQ0ZDMzZTRlYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41SlPc91If4gZN2ys3fPPlIU8EEs rOvtI3DGMPlRAiHqW1HS93vFoORu/ltvQBDlCwStWhlxXTFM6CQe2sSWowLKAUT2 Rva3OdqpHilEPx6D/qHEIn0eGbOFifC+/YQ5qmZaWS4z1fwM6TZGX8/02qwAT/7U 7j3bCkrRI4ONHdk2V8GR4b1LjzmliCf5KXIuhmn1ApaIjxvDvqvPvCCPk/gLcrm3 7TbWnihmvFArAXicggJN/NRu4NQEJyghPuOLBkA6hD8D8d02l+IyNMaulJLz//Kg CCtgBRFgRpZ/OWDc9QX/SBc1rphAxQ8Pd0LB81O3H6fjU+8WpAu16AnsbQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPY7Nz7WdF0fP3cuTWUGiziG09sNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzOTE0NDc3LTFlMmItNDEwMS05ZDBhLWM4YTk5YjczYjA1ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7UDAMA0GCSqGSIb3DQEBCwUAA4IBAQAqVUVWN/ORK0cf4D4n 0ZRUYKwtPwFRJRg0Wkav7UF1ZQB3A815v5CFk2HlW3vrbA9Tp+tV6pitD0AqgSyA 4ztIovAykIjpAmY/bVYkbL6Y0nK+I07tAsyJvy76CMqNZUiEJu+2Ul4O3+z0gsxP 5aEhXffkbX5drXvEdjaQ1MRYFyitK2wgFJydZ1sAel5XeEQM0//jVe4VGJLi+dp7 gyrT0YkuOqLyjGldDdAkXfasbTB4S5rEC1YH2g6R7jtIlmDlWrgLxR+HZjDASM/U 4jGiLztEJ2lSC6INaFwINY8GGb2ndZ+kJTZVsOp2UZfqFY7qtAnlJq3qRnVBUzPf o7vd -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:43 2025 by rpki-client