$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21f525e8-dbad-41ae-a8f0-380e644cd76d.roa File: 21f525e8-dbad-41ae-a8f0-380e644cd76d.roa (raw, json) Hash identifier: LBsxZohZ5CwVQ1Fm6rjWFnWZzVz8ivwQPfRvUE+Kv5Q= Subject key identifier: 90:59:3D:B8:D5:16:14:C5:E0:E9:F3:3B:3A:10:D6:4B:96:DB:0A:3F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0E604EE96781E23DD066EC225097CE96CBAF83D2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21f525e8-dbad-41ae-a8f0-380e644cd76d.roa Signing time: Wed 29 Oct 2025 00:10:05 +0000 ROA not before: Wed 29 Oct 2025 00:10:05 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:4020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:60:4e:e9:67:81:e2:3d:d0:66:ec:22:50:97:ce:96:cb:af:83:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:10:05 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=b7304806ba7852a94f5b533b094daeba385373063064cc93bec824d257b5d1fd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:16:e2:31:5b:00:c6:44:96:0d:1a:bd:7c:44: 5e:ef:92:d8:9c:60:22:08:7c:8b:af:5d:75:0f:c5: 7d:0a:6c:c7:fe:c8:05:8d:ad:1f:e9:66:58:c9:cb: 48:c0:f6:e1:d9:f8:60:7d:3f:db:64:d3:5e:fe:d6: 7c:51:b0:b8:c6:53:57:40:45:44:12:bf:c2:5f:d2: 2a:b3:35:15:ee:3d:69:1e:a9:db:ae:67:b6:e2:85: 13:93:34:16:55:2f:f0:b3:ec:06:cc:d7:67:fd:ed: c1:36:90:7b:32:09:ef:04:23:55:79:e2:26:51:a7: 21:8a:c8:0a:16:21:62:d1:4b:6a:02:9b:40:a3:7a: da:67:b5:c9:bc:da:4a:f1:b8:78:6d:52:f9:f9:2b: fd:fe:52:7c:4c:b3:0c:81:fa:14:7e:26:15:a2:0e: 02:12:d2:57:db:7e:30:0c:29:28:47:9f:f2:f1:c6: ee:00:c1:0a:7d:34:31:aa:84:a0:c1:d6:bd:52:84: 4d:e1:75:f2:79:ac:10:86:13:4e:98:5c:e1:65:56: 83:93:30:fd:8e:9e:45:88:62:ed:a3:d0:9a:1a:bf: 10:b6:2d:b8:cd:4f:e4:12:a1:cd:25:fc:e2:9b:9a: 85:19:3c:43:b3:ed:b6:80:b3:f9:27:5c:99:ef:31: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:59:3D:B8:D5:16:14:C5:E0:E9:F3:3B:3A:10:D6:4B:96:DB:0A:3F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21f525e8-dbad-41ae-a8f0-380e644cd76d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:4020::/46 Signature Algorithm: sha256WithRSAEncryption 7b:c8:b9:67:c2:32:c0:a1:73:20:93:ca:cb:40:5b:53:0a:0c: f1:76:ca:8f:6e:c4:f6:f5:ab:3c:c4:88:17:42:9f:1d:e8:bb: 38:11:b0:0c:5c:74:90:dc:c5:5e:78:2e:c9:c0:34:82:d0:f7: e7:48:70:71:5c:1a:fa:b7:5b:3e:9f:d2:6b:23:0a:cf:3a:ed: 30:86:26:37:98:01:b4:65:8a:82:e7:62:34:70:50:83:cd:79: 9c:4e:57:95:ea:d5:3f:51:7d:29:0a:ea:59:34:14:f6:9f:a8: 6e:d7:7a:c1:6c:88:51:34:5b:a7:25:6d:4a:33:ff:ec:15:38: 8d:5d:3e:36:80:35:f3:3f:5e:62:06:b6:51:a9:48:04:6d:f1: a8:c7:5e:2b:39:25:61:67:ab:47:0b:50:71:33:42:b6:57:db: 79:59:f0:a3:4d:90:e8:3a:9c:d4:2a:ee:4c:3b:98:d0:89:b3: 56:87:16:86:cd:3e:80:7c:18:7b:68:b2:fd:81:3f:dd:33:c1: b8:b1:c4:77:b1:f7:ff:d3:92:ed:c1:5a:8f:57:99:33:e2:96: 55:d4:2b:f0:11:9a:d0:fb:9f:99:b8:aa:c5:69:e3:79:be:94: 0f:70:10:e1:cd:78:b5:af:49:cc:d5:d8:a9:bd:33:b3:3c:cd: 0b:5c:68:88 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDmBO6WeB4j3QZuwiUJfOlsuvg9IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTAwMTAwNVoX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAYjczMDQ4MDZiYTc4NTJhOTRmNWI1 MzNiMDk0ZGFlYmEzODUzNzMwNjMwNjRjYzkzYmVjODI0ZDI1N2I1ZDFmZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hbiMVsAxkSWDRq9fERe75LYnGAi CHyLr111D8V9CmzH/sgFja0f6WZYyctIwPbh2fhgfT/bZNNe/tZ8UbC4xlNXQEVE Er/CX9IqszUV7j1pHqnbrme24oUTkzQWVS/ws+wGzNdn/e3BNpB7MgnvBCNVeeIm UachisgKFiFi0UtqAptAo3raZ7XJvNpK8bh4bVL5+Sv9/lJ8TLMMgfoUfiYVog4C EtJX234wDCkoR5/y8cbuAMEKfTQxqoSgwda9UoRN4XXyeawQhhNOmFzhZVaDkzD9 jp5FiGLto9CaGr8Qti24zU/kEqHNJfzim5qFGTxDs+22gLP5J1yZ7zHbwQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJBZPbjVFhTF4OnzOzoQ1kuW2wo/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIxZjUyNWU4LWRiYWQtNDFhZS1hOGYwLTM4MGU2NDRjZDc2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba80AgMA0GCSqGSIb3DQEBCwUAA4IBAQB7yLlnwjLAoXMgk8rL QFtTCgzxdsqPbsT29as8xIgXQp8d6Ls4EbAMXHSQ3MVeeC7JwDSC0PfnSHBxXBr6 t1s+n9JrIwrPOu0whiY3mAG0ZYqC52I0cFCDzXmcTleV6tU/UX0pCupZNBT2n6hu 13rBbIhRNFunJW1KM//sFTiNXT42gDXzP15iBrZRqUgEbfGox14rOSVhZ6tHC1Bx M0K2V9t5WfCjTZDoOpzUKu5MO5jQibNWhxaGzT6AfBh7aLL9gT/dM8G4scR3sff/ 05LtwVqPV5kz4pZV1CvwEZrQ+5+ZuKrFaeN5vpQPcBDhzXi1r0nM1dipvTOzPM0L XGiI -----END CERTIFICATE-----Generated at Wed Nov 5 12:55:11 2025 by rpki-client