$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3132158f-89b9-4064-adce-f249f4489521.roa File: 3132158f-89b9-4064-adce-f249f4489521.roa (raw, json) Hash identifier: HMIPvOy46H7oqh3Bn0CsPRtc62Ylp0WWeb2phF8Otcc= Subject key identifier: 90:34:7B:A7:C7:7F:16:CC:15:E0:6F:2B:D6:41:1D:C7:EE:CE:99:8F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 672B1B0C349DB240C231F0952D7C56A0DB31FADE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3132158f-89b9-4064-adce-f249f4489521.roa Signing time: Sun 02 Nov 2025 00:00:32 +0000 ROA not before: Sun 02 Nov 2025 00:00:32 +0000 ROA not after: Sun 07 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2b:1b:0c:34:9d:b2:40:c2:31:f0:95:2d:7c:56:a0:db:31:fa:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 2 00:00:32 2025 GMT Not After : Dec 7 23:59:59 2025 GMT Subject: serialNumber=ea4116943838cc5882de9924006efaf4ac82aa9a32c2c7c153b55e0fb9e57301, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:44:1d:5d:c8:f7:26:d1:39:2d:17:d4:d0: a4:29:03:ba:e9:87:60:61:f0:a0:57:20:b7:ba:92: 55:ea:17:5e:41:ba:b5:62:e1:14:4c:ae:3a:56:89: c3:9f:23:22:00:83:f3:fa:cb:7a:59:75:4a:22:11: 0d:16:38:69:2c:eb:ba:68:3d:00:e6:a5:e0:44:4b: ec:2e:0d:4a:4a:5d:12:d4:25:f9:0d:2d:5b:49:6a: e7:d4:b9:96:23:9a:06:5b:43:38:16:57:48:eb:e9: de:47:02:d7:52:7e:7a:4d:d2:5c:d4:ca:11:f4:9b: cd:50:36:28:94:0a:fb:0f:8f:4d:5d:5a:a1:bf:86: 3e:f2:0f:4f:29:14:be:7f:39:ec:ea:2b:bc:27:02: 2b:80:84:ab:49:5f:95:05:df:41:86:87:8a:c9:e5: de:10:9a:60:fc:6e:7f:06:c3:94:5a:52:90:db:e4: 7b:b1:59:02:3f:d4:20:a6:44:f6:67:ae:47:fb:70: e4:d3:0e:29:7b:7c:80:c5:f9:bd:15:78:27:30:eb: c7:78:30:55:f3:dd:60:b4:0b:a8:7d:9d:14:bd:6b: c1:aa:4a:0c:32:6c:c1:2a:e8:6b:46:2b:1c:6b:1a: 0c:87:e0:90:25:9f:16:49:f2:cd:4a:74:67:d6:2c: bb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:34:7B:A7:C7:7F:16:CC:15:E0:6F:2B:D6:41:1D:C7:EE:CE:99:8F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3132158f-89b9-4064-adce-f249f4489521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:2800::/40 Signature Algorithm: sha256WithRSAEncryption 26:02:54:d7:93:79:50:7c:56:73:df:9b:fa:ef:83:cc:52:da: 19:f6:00:64:51:25:90:63:50:17:fa:4b:d4:b8:f5:d3:50:9f: 88:15:ae:e2:85:88:d8:38:82:80:2d:df:55:93:bc:a2:03:4d: c7:74:df:c8:92:80:89:97:c0:5c:b1:68:b7:fa:e3:43:36:7e: 4a:f4:af:6f:26:68:04:49:5a:79:8f:cc:5d:b2:5b:65:43:52: 0e:da:03:70:0e:00:41:99:8a:6b:a4:0d:9d:72:16:cc:f0:6d: cb:03:35:86:d3:5d:b1:3f:e3:99:20:75:d0:b9:cc:b2:24:98: 64:45:9e:4a:a6:0c:60:53:74:cc:a9:ad:c5:47:c0:77:d8:6c: 11:28:69:20:2f:4c:7e:3e:14:46:d1:ae:09:c4:d2:d4:98:84: 41:9d:43:30:21:8c:a9:22:d5:1a:5d:a4:5b:75:68:c9:2d:87: 7e:ae:4b:a2:aa:46:44:7f:60:56:1b:d8:fc:68:17:c7:b3:41: 6a:2e:b6:dc:e5:bf:5b:83:ad:23:2b:74:e0:71:1d:51:24:f7: 7a:ae:bf:47:a0:e3:39:34:d2:c8:dc:17:f9:52:dc:9c:71:cf: 44:85:10:c7:70:0f:75:d0:ce:9b:6b:0e:84:b8:80:a7:cd:b2: 48:cc:5a:69 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZysbDDSdskDCMfCVLXxWoNsx+t4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwMjAwMDAzMloX DTI1MTIwNzIzNTk1OVowejFJMEcGA1UEBRNAZWE0MTE2OTQzODM4Y2M1ODgyZGU5 OTI0MDA2ZWZhZjRhYzgyYWE5YTMyYzJjN2MxNTNiNTVlMGZiOWU1NzMwMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4JEHV3I9ybROS0X1NCkKQO66Ydg YfCgVyC3upJV6hdeQbq1YuEUTK46VonDnyMiAIPz+st6WXVKIhENFjhpLOu6aD0A 5qXgREvsLg1KSl0S1CX5DS1bSWrn1LmWI5oGW0M4FldI6+neRwLXUn56TdJc1MoR 9JvNUDYolAr7D49NXVqhv4Y+8g9PKRS+fzns6iu8JwIrgISrSV+VBd9BhoeKyeXe EJpg/G5/BsOUWlKQ2+R7sVkCP9QgpkT2Z65H+3Dk0w4pe3yAxfm9FXgnMOvHeDBV 891gtAuofZ0UvWvBqkoMMmzBKuhrRiscaxoMh+CQJZ8WSfLNSnRn1iy77QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJA0e6fHfxbMFeBvK9ZBHcfuzpmPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMxMzIxNThmLTg5YjktNDA2NC1hZGNlLWYyNDlmNDQ4OTUyMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYCgwDQYJKoZIhvcNAQELBQADggEBACYCVNeTeVB8VnPfm/rv g8xS2hn2AGRRJZBjUBf6S9S49dNQn4gVruKFiNg4goAt31WTvKIDTcd038iSgImX wFyxaLf640M2fkr0r28maARJWnmPzF2yW2VDUg7aA3AOAEGZimukDZ1yFszwbcsD NYbTXbE/45kgddC5zLIkmGRFnkqmDGBTdMyprcVHwHfYbBEoaSAvTH4+FEbRrgnE 0tSYhEGdQzAhjKki1RpdpFt1aMkth36uS6KqRkR/YFYb2PxoF8ezQWouttzlv1uD rSMrdOBxHVEk93quv0eg4zk00sjcF/lS3Jxxz0SFEMdwD3XQzptrDoS4gKfNskjM Wmk= -----END CERTIFICATE-----Generated at Wed Nov 5 14:41:33 2025 by rpki-client