$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa File: b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa (raw, json) Hash identifier: RizFenkT7Rzjh6gmAqrzfG/CVjMYIBIV3DhqKwdge0s= Subject key identifier: 8F:58:AC:AF:22:8C:DD:45:D3:1A:71:5A:5C:9E:8D:7E:50:CE:FA:3E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3B95B295E4485249DBE85DBEE78A4FFCDE6D84CE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa Signing time: Wed 05 Nov 2025 00:01:07 +0000 ROA not before: Wed 05 Nov 2025 00:01:07 +0000 ROA not after: Wed 10 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:95:b2:95:e4:48:52:49:db:e8:5d:be:e7:8a:4f:fc:de:6d:84:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 5 00:01:07 2025 GMT Not After : Dec 10 23:59:59 2025 GMT Subject: serialNumber=1425a9038c3c49e029793f9cbebc9888a31cd5567ca005cc8cd85a0223a5189c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:b6:58:81:2e:99:c7:b9:d2:b8:86:4e:b7: ea:c6:ba:79:0d:c7:44:cf:6f:ab:0d:45:9f:38:79: 20:14:f0:65:26:6e:cf:df:28:c0:aa:ee:89:85:7e: 09:39:ad:98:a5:10:a8:fa:d4:70:51:9e:7a:e9:72: f0:2e:92:14:c6:4c:fc:46:38:df:2b:35:57:79:f8: 0b:8e:6d:e6:f1:5a:78:6e:37:49:51:71:da:61:56: b2:d6:f0:70:51:22:09:3a:f4:c6:e7:b9:8f:30:79: 93:b8:3b:95:23:df:cf:cb:94:d2:86:31:40:fb:d4: 3d:99:ac:43:2c:b0:37:79:d4:e3:5a:df:0b:6d:36: a9:21:89:c8:e0:8a:7b:78:97:e5:a7:a6:d0:5e:76: 83:bc:f2:db:c1:ae:10:6d:a4:09:4e:94:a0:1e:8e: eb:d3:05:f3:65:5f:a2:8e:83:21:c9:6c:25:c6:bf: c7:8e:8d:b8:0d:dc:0d:5b:4e:52:df:31:48:74:42: 8e:0a:2f:1f:57:88:35:36:ea:1c:51:a5:5a:5f:67: 33:ed:99:84:bd:fa:98:c9:fb:99:fa:d4:7c:f0:83: d7:a1:42:f5:02:db:14:bd:6a:6a:90:c4:b7:65:ae: 55:fd:89:4b:ff:89:5d:92:bf:6e:fc:8c:1b:c2:61: 86:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:58:AC:AF:22:8C:DD:45:D3:1A:71:5A:5C:9E:8D:7E:50:CE:FA:3E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4840::/48 Signature Algorithm: sha256WithRSAEncryption 8f:d7:77:2a:e9:3c:af:26:d7:d0:b0:f4:5e:07:fb:fe:d6:03: ac:cd:eb:ba:b3:0d:7a:1e:b2:2a:44:1c:5a:0d:97:a4:bc:ca: d7:38:c3:a9:84:6e:03:5f:6d:6e:e5:dc:f6:7b:88:b2:1c:e7: 7b:da:01:8b:76:a8:f0:a6:7a:81:a9:e9:fa:9b:65:92:54:45: 57:53:fc:72:25:46:3a:fa:a6:39:1d:6b:99:24:0c:33:70:89: 55:5f:9b:18:ac:02:f1:17:ed:c0:54:05:37:1c:22:52:11:6b: a5:3e:57:30:5d:a6:9e:cd:24:0d:df:11:8e:6f:34:b2:a7:df: 6b:77:1d:68:c7:d4:8a:02:5b:41:b0:96:ca:aa:e4:45:b4:6b: 59:b4:13:9f:03:30:26:05:90:95:1e:96:25:a1:d8:40:74:4f: fd:68:6e:f6:3b:c2:d0:4f:68:74:31:57:65:43:83:d3:1b:bf: 10:f0:d5:22:56:03:49:e5:72:aa:d1:f0:fc:aa:10:40:39:bd: a4:74:d9:b8:b3:0b:7d:99:37:39:f2:6f:69:84:4a:fb:96:71: 5c:60:0e:4d:b5:b3:a4:0f:36:60:da:1a:75:32:ba:fa:0c:01: 36:22:ff:f8:ba:92:10:90:4a:75:5c:8f:14:f3:98:de:2a:7d: 3c:2a:c4:64 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUO5WyleRIUknb6F2+54pP/N5thM4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNTAwMDEwN1oX DTI1MTIxMDIzNTk1OVowejFJMEcGA1UEBRNAMTQyNWE5MDM4YzNjNDllMDI5Nzkz ZjljYmViYzk4ODhhMzFjZDU1NjdjYTAwNWNjOGNkODVhMDIyM2E1MTg5YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysO2WIEumce50riGTrfqxrp5DcdE z2+rDUWfOHkgFPBlJm7P3yjAqu6JhX4JOa2YpRCo+tRwUZ566XLwLpIUxkz8Rjjf KzVXefgLjm3m8Vp4bjdJUXHaYVay1vBwUSIJOvTG57mPMHmTuDuVI9/Py5TShjFA +9Q9maxDLLA3edTjWt8LbTapIYnI4Ip7eJflp6bQXnaDvPLbwa4QbaQJTpSgHo7r 0wXzZV+ijoMhyWwlxr/Hjo24DdwNW05S3zFIdEKOCi8fV4g1NuocUaVaX2cz7ZmE vfqYyfuZ+tR88IPXoUL1AtsUvWpqkMS3Za5V/YlL/4ldkr9u/IwbwmGGTQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFI9YrK8ijN1F0xpxWlyejX5Qzvo+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IzMzRmY2EyLWIyYmMtNGRiNS05NTZjLWUzZmY4ZDk3NWI1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8khAMA0GCSqGSIb3DQEBCwUAA4IBAQCP13cq6TyvJtfQsPRe B/v+1gOszeu6sw16HrIqRBxaDZekvMrXOMOphG4DX21u5dz2e4iyHOd72gGLdqjw pnqBqen6m2WSVEVXU/xyJUY6+qY5HWuZJAwzcIlVX5sYrALxF+3AVAU3HCJSEWul PlcwXaaezSQN3xGObzSyp99rdx1ox9SKAltBsJbKquRFtGtZtBOfAzAmBZCVHpYl odhAdE/9aG72O8LQT2h0MVdlQ4PTG78Q8NUiVgNJ5XKq0fD8qhBAOb2kdNm4swt9 mTc58m9phEr7lnFcYA5NtbOkDzZg2hp1Mrr6DAE2Iv/4upIQkEp1XI8U85jeKn08 KsRk -----END CERTIFICATE-----Generated at Wed Nov 5 12:56:57 2025 by rpki-client