$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b679b3-4697-405a-940d-1245ad38a867.roa File: 43b679b3-4697-405a-940d-1245ad38a867.roa (raw, json) Hash identifier: WP0EcPokRv2FoIRoNP0WujE0WONTJB+gwllzD1D+esM= Subject key identifier: 9C:C8:04:AD:4C:F7:94:F3:C2:AB:C0:4B:FA:9F:5C:15:65:B3:99:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 67C3C0D58DB60D95B1CEEC309F0830252B10DF6A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b679b3-4697-405a-940d-1245ad38a867.roa Signing time: Mon 13 Oct 2025 15:38:14 +0000 ROA not before: Mon 13 Oct 2025 15:38:14 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c3:c0:d5:8d:b6:0d:95:b1:ce:ec:30:9f:08:30:25:2b:10:df:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 15:38:14 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=29a1bb3cfc125004c25474a9bb8d70e2a6b10c2368cd881f17132ee13f508a39, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a0:64:5e:3a:8c:1c:d5:cf:41:96:d8:5a:f7: 15:0e:48:06:39:b2:96:f5:9f:f6:9d:86:b9:fe:10: 54:26:40:db:a5:31:ac:2b:f2:f5:22:81:52:5d:24: f6:19:67:80:73:a3:b5:e9:f4:82:3f:79:dc:32:e3: fe:9d:aa:a0:e7:f8:64:10:f2:2c:14:2a:f8:4a:ca: 0d:05:d8:47:eb:99:d1:37:69:10:db:c3:8f:5a:43: 72:49:58:0f:f8:d6:d7:f1:60:8b:4d:75:ea:f2:d8: 05:a0:a5:f8:4e:37:2d:de:ea:a4:d1:4d:21:56:4c: 8b:61:ce:d1:41:1d:7b:a1:1a:82:88:39:7d:91:4b: ab:bc:59:8a:82:3c:0d:36:a9:85:c4:8c:c1:9b:02: 46:c7:53:d1:85:db:c5:d3:af:67:d8:64:b3:d2:e0: 8d:4a:7d:23:c1:31:3a:3b:74:4a:aa:38:19:4a:be: 01:93:a7:99:c7:b4:90:2c:56:a4:8c:39:ed:b3:38: e2:0e:0d:27:38:d0:27:d6:d9:33:cb:22:3b:30:18: 29:3c:53:12:a6:40:09:1b:44:51:cb:8b:0a:83:22: af:cf:21:d8:4c:9e:a8:23:3c:d4:80:e7:72:4b:5b: 4b:f0:18:18:3a:1d:40:7d:5b:fb:36:6d:be:30:1d: 25:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C8:04:AD:4C:F7:94:F3:C2:AB:C0:4B:FA:9F:5C:15:65:B3:99:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b679b3-4697-405a-940d-1245ad38a867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:f000::/40 Signature Algorithm: sha256WithRSAEncryption c1:c9:11:18:ee:8f:83:c7:69:50:51:47:f3:21:5e:eb:aa:c3: ce:92:4e:8d:72:f2:19:76:48:29:7d:bf:e2:06:c4:50:df:fa: 93:2e:da:48:77:07:cb:3d:5f:60:da:da:b6:1c:95:ca:6a:48: dc:8d:f6:d3:09:66:39:be:1c:e9:68:83:a4:30:1a:d1:30:98: 8f:c2:8a:83:21:4b:b5:c3:dc:b8:71:04:1a:07:89:6b:35:74: f4:b6:ce:78:3e:7d:7d:07:f7:cf:5b:9c:be:54:d8:7b:ac:ef: 8b:2f:c7:3f:96:70:ed:5d:ab:2d:f4:e1:56:28:82:7a:3a:da: 2f:66:0b:20:e7:85:89:9d:5a:a1:f1:c9:56:70:4f:d3:8b:05: 1c:72:08:e2:47:1e:93:51:82:ac:27:2d:6e:7a:89:49:be:89: 9f:19:f9:99:13:14:89:e6:db:8d:ff:7a:97:73:62:92:bf:1b: 1b:9b:9f:38:9b:77:27:70:09:16:f4:5d:cc:33:6d:6a:09:a2: ee:10:2d:ba:2d:d8:a9:e0:b2:2b:ee:c8:da:44:6b:51:bf:0b: 9e:73:9f:f6:02:21:63:80:af:0a:2e:4a:52:af:bc:54:a6:bc: be:da:c4:31:a8:55:98:18:0e:c7:6f:3c:2b:2f:4e:50:d7:70: d1:88:fb:af -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZ8PA1Y22DZWxzuwwnwgwJSsQ32owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMzE1MzgxNFoX DTI1MTExNzIzNTk1OVowejFJMEcGA1UEBRNAMjlhMWJiM2NmYzEyNTAwNGMyNTQ3 NGE5YmI4ZDcwZTJhNmIxMGMyMzY4Y2Q4ODFmMTcxMzJlZTEzZjUwOGEzOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqBkXjqMHNXPQZbYWvcVDkgGObKW 9Z/2nYa5/hBUJkDbpTGsK/L1IoFSXST2GWeAc6O16fSCP3ncMuP+naqg5/hkEPIs FCr4SsoNBdhH65nRN2kQ28OPWkNySVgP+NbX8WCLTXXq8tgFoKX4Tjct3uqk0U0h VkyLYc7RQR17oRqCiDl9kUurvFmKgjwNNqmFxIzBmwJGx1PRhdvF069n2GSz0uCN Sn0jwTE6O3RKqjgZSr4Bk6eZx7SQLFakjDntszjiDg0nONAn1tkzyyI7MBgpPFMS pkAJG0RRy4sKgyKvzyHYTJ6oIzzUgOdyS1tL8BgYOh1AfVv7Nm2+MB0lowIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJzIBK1M95TzwqvAS/qfXBVls5nrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzYjY3OWIzLTQ2OTctNDA1YS05NDBkLTEyNDVhZDM4YTg2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAPAwDQYJKoZIhvcNAQELBQADggEBAMHJERjuj4PHaVBRR/Mh Xuuqw86STo1y8hl2SCl9v+IGxFDf+pMu2kh3B8s9X2Da2rYclcpqSNyN9tMJZjm+ HOlog6QwGtEwmI/CioMhS7XD3LhxBBoHiWs1dPS2zng+fX0H989bnL5U2Hus74sv xz+WcO1dqy304VYogno62i9mCyDnhYmdWqHxyVZwT9OLBRxyCOJHHpNRgqwnLW56 iUm+iZ8Z+ZkTFInm243/epdzYpK/GxubnzibdydwCRb0XcwzbWoJou4QLbot2Kng sivuyNpEa1G/C55zn/YCIWOArwouSlKvvFSmvL7axDGoVZgYDsdvPCsvTlDXcNGI +68= -----END CERTIFICATE-----Generated at Wed Nov 5 14:55:38 2025 by rpki-client