$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/797893b8-c104-4c3c-a4c9-4fe82cad340d.roa File: 797893b8-c104-4c3c-a4c9-4fe82cad340d.roa (raw, json) Hash identifier: kMDN3Dqrf1GmtXB3Ve4EigZkX6HegziXTpkqQvO/0ps= Subject key identifier: 7D:5A:7C:67:DA:5E:AD:D7:64:FE:1E:D4:AF:5E:D4:E2:34:1C:2D:5D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 29D15A811F86766A1B8AFCFD7DBF402234556CC2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/797893b8-c104-4c3c-a4c9-4fe82cad340d.roa Signing time: Wed 05 Nov 2025 00:10:09 +0000 ROA not before: Wed 05 Nov 2025 00:10:09 +0000 ROA not after: Wed 10 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d1:5a:81:1f:86:76:6a:1b:8a:fc:fd:7d:bf:40:22:34:55:6c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 5 00:10:09 2025 GMT Not After : Dec 10 23:59:59 2025 GMT Subject: serialNumber=0453dae51baa896578ccea0c2c2d84b2641036d1149da8cb604b032153be4c0b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ca:e8:4d:65:9c:12:5c:8b:06:e3:5f:fe:c2: b5:b7:b6:ff:fe:cd:f0:d9:5c:da:a7:a0:2c:4b:ca: a0:c9:7b:12:da:c9:d0:46:b8:dc:67:63:ae:a0:1e: 3c:ca:82:36:40:b7:b9:07:f1:5d:ac:4d:0b:2c:3b: 80:e9:d7:2e:59:03:c4:78:34:84:65:23:12:18:17: c5:e5:d2:9a:77:eb:30:79:ca:36:ca:fa:c5:b6:6e: 80:0c:ad:6a:86:f8:5d:58:c4:df:d8:24:b4:f0:e8: 0b:9d:57:91:21:f4:d6:5f:dc:b0:ba:e3:6a:53:bf: bf:f1:d0:0a:ee:7b:08:7c:97:04:f7:d9:cb:b0:dc: d3:42:d9:f0:b0:4c:f0:66:86:d6:ec:bd:cf:8c:22: 51:4c:ba:b8:61:3e:be:81:81:7f:ab:bc:b0:8c:fa: 86:fc:8e:5d:5e:36:6c:da:d4:82:3a:96:86:3d:e0: d9:df:39:67:2e:d6:03:cf:89:71:df:ea:05:79:03: 1a:0a:39:2e:cb:0e:7f:3c:cd:9d:08:5b:49:39:17: 25:5c:c9:7f:9d:03:54:7e:47:cc:83:70:42:6f:2a: 70:c3:a8:b9:d4:80:a4:6f:50:58:4c:12:8c:04:37: 95:12:3e:a6:f6:1c:36:0a:f5:87:f4:e6:20:b5:ad: 93:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5A:7C:67:DA:5E:AD:D7:64:FE:1E:D4:AF:5E:D4:E2:34:1C:2D:5D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/797893b8-c104-4c3c-a4c9-4fe82cad340d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:8840::/48 Signature Algorithm: sha256WithRSAEncryption c8:e9:12:c3:22:8b:87:97:c1:8c:ef:4f:61:e5:b2:05:8f:22: 0b:e3:3a:6f:2b:a5:46:4b:dd:73:12:16:b8:a3:a5:51:41:12: ba:c3:6e:d9:aa:3c:b5:4b:9e:9b:a1:14:6c:64:f4:b5:76:d9: 85:33:8a:d6:df:d9:6e:10:9f:d3:9c:fa:4e:9e:2d:4d:98:a8: ab:0b:1f:4f:d1:8f:61:24:1a:82:f9:74:5c:6f:94:8b:2a:c9: 02:56:15:3d:66:3d:e7:7d:8b:7d:44:29:a9:d9:5d:ab:05:02: c0:99:ab:99:f7:82:d5:3a:5f:e5:8d:00:85:84:d7:74:71:ea: 9c:35:f4:05:a1:7d:f5:82:5a:3b:5c:9f:10:8c:68:49:02:e3: 6a:6e:5e:4e:f8:e9:bb:7e:a8:aa:63:4f:89:3f:29:cc:ff:cc: 72:71:f7:58:d8:ca:77:64:57:71:fb:9c:4f:7f:3c:84:a8:37: 8b:63:96:b5:f2:dc:b4:66:a4:5d:5d:82:d8:75:78:66:25:ac: 5b:ec:5f:44:b8:80:d8:35:33:dc:a6:89:f9:34:ab:c1:f0:c5: 0b:ef:ed:f3:88:99:39:37:6a:f6:57:d9:6e:93:e7:6b:13:cd: 97:6c:cf:85:c4:32:95:8b:d6:3a:72:bd:f2:99:50:57:f7:08: 5d:2e:16:e1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKdFagR+Gdmobivz9fb9AIjRVbMIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNTAwMTAwOVoX DTI1MTIxMDIzNTk1OVowejFJMEcGA1UEBRNAMDQ1M2RhZTUxYmFhODk2NTc4Y2Nl YTBjMmMyZDg0YjI2NDEwMzZkMTE0OWRhOGNiNjA0YjAzMjE1M2JlNGMwYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7croTWWcElyLBuNf/sK1t7b//s3w 2Vzap6AsS8qgyXsS2snQRrjcZ2OuoB48yoI2QLe5B/FdrE0LLDuA6dcuWQPEeDSE ZSMSGBfF5dKad+sweco2yvrFtm6ADK1qhvhdWMTf2CS08OgLnVeRIfTWX9ywuuNq U7+/8dAK7nsIfJcE99nLsNzTQtnwsEzwZobW7L3PjCJRTLq4YT6+gYF/q7ywjPqG /I5dXjZs2tSCOpaGPeDZ3zlnLtYDz4lx3+oFeQMaCjkuyw5/PM2dCFtJORclXMl/ nQNUfkfMg3BCbypww6i51ICkb1BYTBKMBDeVEj6m9hw2CvWH9OYgta2TQwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFH1afGfaXq3XZP4e1K9e1OI0HC1dMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc5Nzg5M2I4LWMxMDQtNGMzYy1hNGM5LTRmZTgyY2FkMzQwZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYYhAMA0GCSqGSIb3DQEBCwUAA4IBAQDI6RLDIouHl8GM709h 5bIFjyIL4zpvK6VGS91zEha4o6VRQRK6w27Zqjy1S56boRRsZPS1dtmFM4rW39lu EJ/TnPpOni1NmKirCx9P0Y9hJBqC+XRcb5SLKskCVhU9Zj3nfYt9RCmp2V2rBQLA mauZ94LVOl/ljQCFhNd0ceqcNfQFoX31glo7XJ8QjGhJAuNqbl5O+Om7fqiqY0+J PynM/8xycfdY2Mp3ZFdx+5xPfzyEqDeLY5a18ty0ZqRdXYLYdXhmJaxb7F9EuIDY NTPcpon5NKvB8MUL7+3ziJk5N2r2V9luk+drE82XbM+FxDKVi9Y6cr3ymVBX9whd Lhbh -----END CERTIFICATE-----Generated at Wed Nov 5 12:55:11 2025 by rpki-client