$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/90eb1966-b2bb-44b8-8ab4-47d1f936fc79.roa File: 90eb1966-b2bb-44b8-8ab4-47d1f936fc79.roa (raw, json) Hash identifier: VV1qpuqh35pLdhaKuIqewD2X0aByk8k/C7Q83jdswZc= Subject key identifier: F3:F2:62:20:ED:88:DA:55:0C:83:F1:F5:41:86:0F:50:A1:EB:1D:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 70619E562F205A4A94F65F7FCE1D8EAE0CCF330C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/90eb1966-b2bb-44b8-8ab4-47d1f936fc79.roa Signing time: Wed 29 Oct 2025 07:38:00 +0000 ROA not before: Wed 29 Oct 2025 07:38:00 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:61:9e:56:2f:20:5a:4a:94:f6:5f:7f:ce:1d:8e:ae:0c:cf:33:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 07:38:00 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=a62e082ca03c4d65c7f7b16028d0fe6df2a518a19e4dbe0885171b7f0f49ad0e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:25:d5:c8:e1:b5:0b:79:b3:43:49:b8:8e:d4: 5b:46:b1:f6:cb:23:6b:9e:65:52:11:09:dc:50:37: 7b:55:1d:e1:11:36:28:a7:9c:a8:85:db:63:98:e4: 04:cc:c5:6c:84:e2:b3:10:a8:60:4c:32:35:c9:c9: 4f:74:0c:1a:48:dc:6f:0f:ac:00:ae:eb:c7:bf:6c: 98:1b:1a:20:34:4d:67:0d:e8:4e:4e:2b:6b:14:f0: fb:44:5d:21:ab:f2:2c:3e:ce:a8:80:d3:a2:b5:01: ff:d8:44:c3:3d:a9:3a:05:0a:c8:e0:8d:f4:d3:ff: 33:b7:a5:54:3b:b0:f4:53:5e:98:66:ec:9a:09:99: a4:e4:3a:f0:a3:59:49:12:7b:d5:18:e4:f4:7b:c3: 46:f7:35:d7:a0:5a:fa:65:d0:00:0f:e7:1a:00:9c: b3:2b:b1:55:4e:2e:91:de:17:09:ff:1e:26:1a:c2: 08:dd:fa:b2:70:29:9a:b0:b5:a7:3a:b3:fa:89:11: 5f:85:c4:31:38:f0:84:0f:b7:44:4f:e4:3a:3e:75: c3:a0:07:ad:9c:cc:67:3e:7c:70:38:3e:56:53:af: 48:64:10:27:65:1b:28:b9:c4:d5:a3:93:9d:7e:eb: 0b:51:56:fa:b3:a8:87:76:48:3e:cb:87:1a:f4:9c: a8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F2:62:20:ED:88:DA:55:0C:83:F1:F5:41:86:0F:50:A1:EB:1D:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/90eb1966-b2bb-44b8-8ab4-47d1f936fc79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:60c0::/48 Signature Algorithm: sha256WithRSAEncryption a6:b0:a7:5f:ba:c6:2d:a2:3c:0b:95:4e:20:95:1b:bf:c3:42: 41:8f:6d:a8:47:f6:74:c3:30:f7:46:fb:fd:68:89:26:3e:02: 81:73:f9:5a:b6:3b:0a:ae:01:b1:82:6f:af:a8:23:c2:8e:cb: c6:84:c6:6b:d2:cd:87:42:9b:e9:36:65:09:b2:4c:6d:d3:12: 7d:7f:be:7e:a3:e8:a5:9e:71:1c:3e:67:29:f0:43:24:37:7f: 42:79:28:9d:94:b0:46:ce:dc:39:30:7d:70:fa:b5:46:3f:ad: b5:8f:74:07:1a:1e:73:f1:a8:98:f9:72:00:97:1c:8d:c0:0a: 88:8f:b3:5b:0f:bb:22:69:77:49:90:07:d0:01:f4:b5:47:40: 8e:b3:27:2f:5f:7b:eb:26:e4:cb:77:a8:92:61:89:fc:75:a7: fa:e7:24:ad:f8:c8:bb:98:4e:f5:96:63:87:7e:bd:10:26:44: 64:f2:1c:37:6b:d2:de:da:5b:63:3c:6f:f6:71:fd:99:cf:42: 30:a1:1f:87:2d:25:c6:92:63:6b:45:f8:1c:c0:4f:e3:a3:16: 7d:8a:76:39:e3:2e:b2:b6:a4:f7:de:34:6f:6e:4f:37:1b:ea: 65:50:fd:8b:36:6e:c2:f6:b5:6e:13:5a:40:14:c7:9f:35:3d: c2:2b:b5:37 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcGGeVi8gWkqU9l9/zh2OrgzPMwwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTA3MzgwMFoX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAYTYyZTA4MmNhMDNjNGQ2NWM3Zjdi MTYwMjhkMGZlNmRmMmE1MThhMTllNGRiZTA4ODUxNzFiN2YwZjQ5YWQwZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CXVyOG1C3mzQ0m4jtRbRrH2yyNr nmVSEQncUDd7VR3hETYop5yohdtjmOQEzMVshOKzEKhgTDI1yclPdAwaSNxvD6wA ruvHv2yYGxogNE1nDehOTitrFPD7RF0hq/IsPs6ogNOitQH/2ETDPak6BQrI4I30 0/8zt6VUO7D0U16YZuyaCZmk5Drwo1lJEnvVGOT0e8NG9zXXoFr6ZdAAD+caAJyz K7FVTi6R3hcJ/x4mGsII3fqycCmasLWnOrP6iRFfhcQxOPCED7dET+Q6PnXDoAet nMxnPnxwOD5WU69IZBAnZRsoucTVo5OdfusLUVb6s6iHdkg+y4ca9JyoWQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPPyYiDtiNpVDIPx9UGGD1Ch6x2rMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkwZWIxOTY2LWIyYmItNDRiOC04YWI0LTQ3ZDFmOTM2ZmM3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6mDAMA0GCSqGSIb3DQEBCwUAA4IBAQCmsKdfusYtojwLlU4g lRu/w0JBj22oR/Z0wzD3Rvv9aIkmPgKBc/latjsKrgGxgm+vqCPCjsvGhMZr0s2H QpvpNmUJskxt0xJ9f75+o+ilnnEcPmcp8EMkN39CeSidlLBGztw5MH1w+rVGP621 j3QHGh5z8aiY+XIAlxyNwAqIj7NbD7siaXdJkAfQAfS1R0COsycvX3vrJuTLd6iS YYn8daf65ySt+Mi7mE71lmOHfr0QJkRk8hw3a9Le2ltjPG/2cf2Zz0IwoR+HLSXG kmNrRfgcwE/joxZ9inY54y6ytqT33jRvbk83G+plUP2LNm7C9rVuE1pAFMefNT3C K7U3 -----END CERTIFICATE-----Generated at Wed Nov 5 11:07:39 2025 by rpki-client