$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0da4a99b-3c57-490a-9459-d794057a96b2.roa File: 0da4a99b-3c57-490a-9459-d794057a96b2.roa (raw, json) Hash identifier: PC86BbsaurRk+TKmcmCy5HsNYEiYPbplyINHsNQYeiY= Subject key identifier: A6:0B:A9:73:C0:68:5D:B3:7C:EC:AF:56:B6:62:32:FE:7C:98:BB:C8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 125264D4ACFED2B204C0855CE0431AF2A3CB19BE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0da4a99b-3c57-490a-9459-d794057a96b2.roa Signing time: Sat 01 Nov 2025 00:00:48 +0000 ROA not before: Sat 01 Nov 2025 00:00:48 +0000 ROA not after: Sat 06 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:a020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:52:64:d4:ac:fe:d2:b2:04:c0:85:5c:e0:43:1a:f2:a3:cb:19:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 1 00:00:48 2025 GMT Not After : Dec 6 23:59:59 2025 GMT Subject: serialNumber=a7892de17994a59384e7481fb4848039762b975bd400c6bf83a594343cdf4414, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:07:a8:fa:2c:15:c8:e2:61:b2:ff:1a:af:2b: f8:f6:45:d3:7d:43:7e:44:8e:1a:74:e2:83:77:a8: e9:ea:b0:36:5a:40:e6:26:d6:a6:3f:38:62:be:fc: 33:10:a9:23:26:46:0c:aa:a2:66:5d:bd:42:65:d0: 8b:64:5b:e4:19:73:5b:ad:71:50:d3:b5:27:fe:d6: 0a:2d:b5:09:d2:40:d1:92:42:66:ea:3b:44:46:ca: 1e:16:c7:62:b7:33:c8:3f:f9:ca:3d:68:8e:9e:a1: ba:f6:48:12:16:04:9e:a1:55:50:9d:aa:e2:e3:0a: f5:ac:d4:28:a5:25:58:a4:6c:b0:b1:9f:1c:ad:90: 5b:66:02:5b:bc:12:f5:fb:50:36:f6:fe:75:51:f3: 3b:81:15:4d:0b:5d:6e:bf:1e:0b:52:ed:83:18:e7: f0:27:b1:3d:88:8a:22:f6:e2:5a:a6:30:2b:3c:cb: be:df:f0:8c:a1:b9:c5:6e:08:a5:61:14:34:43:55: ed:e6:18:c6:73:43:95:25:2e:d0:b7:0a:fa:27:1d: 1e:8a:94:8b:b7:88:94:e9:4c:53:d1:65:91:7c:8e: d8:ab:01:41:cb:4e:1e:f6:e7:6e:8e:49:78:87:bf: f8:04:ad:31:9b:30:b8:6e:ed:9a:28:7c:57:f3:d4: 1a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0B:A9:73:C0:68:5D:B3:7C:EC:AF:56:B6:62:32:FE:7C:98:BB:C8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0da4a99b-3c57-490a-9459-d794057a96b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:a020::/48 Signature Algorithm: sha256WithRSAEncryption b1:91:4a:49:85:56:a8:b3:87:a3:2a:71:23:24:a7:f1:d9:bd: f7:c3:c5:66:16:98:2d:ba:f0:7d:ad:5d:45:b0:90:fd:30:e3: ad:c3:f2:a3:51:9b:87:89:f3:fa:4c:f9:1c:c2:cd:06:a8:93: 78:a8:fd:b4:d3:81:7d:db:f9:60:0c:26:0a:ee:d9:96:d7:f3: da:45:90:2f:5e:73:c4:50:be:1f:05:8e:4f:a0:04:d8:15:60: 5e:24:96:e0:db:de:0b:13:71:f8:ca:a0:9d:dd:34:dc:ff:16: b9:71:54:7a:e4:35:24:46:f3:00:92:78:ba:25:a1:5e:e9:1c: ae:73:93:f6:bb:42:62:28:48:f9:12:7b:20:68:c4:4e:26:85: f4:e4:ad:e2:7e:82:d8:40:c5:47:92:12:95:4b:ed:c3:a2:a9: ec:d6:ef:5c:b5:d4:df:bb:af:e0:09:13:de:e3:c9:d7:8f:d5: 95:16:5d:6c:e2:c9:4f:ce:f9:ef:ab:c1:e7:20:04:6b:69:45: 68:da:3d:b9:30:7f:94:f5:a1:47:f1:f0:57:0b:25:73:5b:02: 99:ce:02:59:88:f3:21:24:b5:64:fa:b5:bd:ab:d7:75:53:71: bb:8a:54:46:82:2a:72:84:6b:a8:70:aa:91:dd:78:e6:f9:1f: a1:3f:0e:a6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUElJk1Kz+0rIEwIVc4EMa8qPLGb4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwMTAwMDA0OFoX DTI1MTIwNjIzNTk1OVowejFJMEcGA1UEBRNAYTc4OTJkZTE3OTk0YTU5Mzg0ZTc0 ODFmYjQ4NDgwMzk3NjJiOTc1YmQ0MDBjNmJmODNhNTk0MzQzY2RmNDQxNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAeo+iwVyOJhsv8aryv49kXTfUN+ RI4adOKDd6jp6rA2WkDmJtamPzhivvwzEKkjJkYMqqJmXb1CZdCLZFvkGXNbrXFQ 07Un/tYKLbUJ0kDRkkJm6jtERsoeFsditzPIP/nKPWiOnqG69kgSFgSeoVVQnari 4wr1rNQopSVYpGywsZ8crZBbZgJbvBL1+1A29v51UfM7gRVNC11uvx4LUu2DGOfw J7E9iIoi9uJapjArPMu+3/CMobnFbgilYRQ0Q1Xt5hjGc0OVJS7Qtwr6Jx0eipSL t4iU6UxT0WWRfI7YqwFBy04e9udujkl4h7/4BK0xmzC4bu2aKHxX89QadQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKYLqXPAaF2zfOyvVrZiMv58mLvIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBkYTRhOTliLTNjNTctNDkwYS05NDU5LWQ3OTQwNTdhOTZiMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/6AgMA0GCSqGSIb3DQEBCwUAA4IBAQCxkUpJhVaos4ejKnEj JKfx2b33w8VmFpgtuvB9rV1FsJD9MOOtw/KjUZuHifP6TPkcws0GqJN4qP2004F9 2/lgDCYK7tmW1/PaRZAvXnPEUL4fBY5PoATYFWBeJJbg294LE3H4yqCd3TTc/xa5 cVR65DUkRvMAkni6JaFe6Ryuc5P2u0JiKEj5EnsgaMROJoX05K3ifoLYQMVHkhKV S+3Doqns1u9ctdTfu6/gCRPe48nXj9WVFl1s4slPzvnvq8HnIARraUVo2j25MH+U 9aFH8fBXCyVzWwKZzgJZiPMhJLVk+rW9q9d1U3G7ilRGgipyhGuocKqR3Xjm+R+h Pw6m -----END CERTIFICATE-----Generated at Wed Nov 5 07:43:16 2025 by rpki-client