$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd3d6020-be78-46ca-9b8a-63fdbfc9da9b.roa File: dd3d6020-be78-46ca-9b8a-63fdbfc9da9b.roa (raw, json) Hash identifier: 79bPp+TZre5JF+2XGpLJwSQSK4yi41tiVwz0zgLZoDY= Subject key identifier: 7B:3C:04:FD:F6:A6:EB:A3:F9:BC:FC:B0:ED:86:B6:11:6C:E8:44:D1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 384C3615EE99D705B02FD679C4FE9E0F800F3183 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd3d6020-be78-46ca-9b8a-63fdbfc9da9b.roa Signing time: Wed 29 Oct 2025 00:00:11 +0000 ROA not before: Wed 29 Oct 2025 00:00:11 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:4c:36:15:ee:99:d7:05:b0:2f:d6:79:c4:fe:9e:0f:80:0f:31:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:00:11 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=febb5e7315c8bc8c8faed0d5be49e776a8120f0bb2bb6f6b8c59fa7f1c46b587, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6e:04:8f:5d:e3:93:3b:48:23:a2:67:54:55: 3f:d6:3b:e9:78:af:f0:1a:8f:83:99:64:f7:5b:ab: 45:3d:48:60:fd:a9:e0:27:87:86:8b:1f:b8:25:89: c9:bd:8e:5f:92:e8:f6:4c:bd:4a:29:9c:e9:90:0c: c5:78:65:00:7b:e1:0d:e1:fc:92:07:18:f8:51:21: 20:36:2f:a7:55:0d:a2:df:3c:62:61:07:74:b1:1d: 09:90:10:25:91:2a:99:52:b3:0f:70:54:55:03:cb: c4:42:ef:97:a7:5d:ec:3b:37:81:cd:b2:e3:8b:d8: c0:78:45:05:ad:c8:20:6d:73:05:10:c6:6f:b1:56: 97:69:61:97:6f:90:ff:3b:0f:d4:99:0c:c3:a6:a3: 41:ce:99:f5:da:4a:42:d9:d3:d3:f1:85:4c:39:b9: ce:7f:a3:8e:a0:37:5c:70:c3:5e:f4:a4:43:62:d1: dc:07:9c:23:46:62:f2:41:aa:e7:84:5c:cb:ba:e8: ba:f4:b8:e9:ed:81:e8:93:db:42:3c:a7:5c:22:f1: 4f:67:5b:e7:60:e3:9c:f5:d8:42:d2:a3:e8:d6:46: fa:76:7e:cd:03:9e:a9:45:42:ec:ab:55:61:57:43: bd:0a:0d:49:52:16:0f:7a:5f:a4:fb:cd:72:c2:5c: 29:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3C:04:FD:F6:A6:EB:A3:F9:BC:FC:B0:ED:86:B6:11:6C:E8:44:D1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd3d6020-be78-46ca-9b8a-63fdbfc9da9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:2000::/40 Signature Algorithm: sha256WithRSAEncryption 24:3c:4b:ad:69:95:81:5f:a6:29:6d:2b:49:fb:a7:b4:c2:56: 72:99:7a:5d:e5:40:cc:67:29:46:ad:85:39:6b:c8:4c:5b:91: d9:5e:dd:01:7b:5c:ca:e5:dd:1a:b8:67:a6:95:ac:76:a6:22: e9:b9:b1:40:24:69:6d:7d:af:d5:45:c7:77:6c:a4:d1:9b:33: 0f:d1:42:c9:2f:81:ea:e8:57:fa:42:9b:7d:ea:4b:da:ab:a2: dd:4d:f5:83:ee:32:a0:5b:60:7a:3a:8e:cd:8f:54:e4:9b:39: af:e3:99:93:8c:5a:c4:52:b1:32:7b:e4:7a:58:b6:3f:6c:5a: ab:2f:34:4d:6c:19:0e:ba:90:55:d1:d9:2e:de:f4:82:90:66: 6e:0b:ff:43:cb:99:14:a1:c7:15:41:17:b3:33:1e:39:6d:1b: 46:33:2f:4e:62:69:a4:f7:85:87:90:3d:f1:c7:03:54:27:54: 60:10:b1:54:ea:dd:14:a5:77:63:bf:12:e1:23:49:9f:0b:df: da:ea:88:b3:6f:f2:a5:e3:d1:3c:d8:e7:ed:1b:86:34:41:ed: 6f:82:f3:3d:4a:03:df:48:1a:40:fc:b0:82:95:f1:b9:14:64: 68:ba:83:ac:34:77:c5:cf:31:9c:c3:88:14:f0:ef:ec:18:ef: c6:da:6a:c9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOEw2Fe6Z1wWwL9Z5xP6eD4APMYMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTAwMDAxMVoX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAZmViYjVlNzMxNWM4YmM4YzhmYWVk MGQ1YmU0OWU3NzZhODEyMGYwYmIyYmI2ZjZiOGM1OWZhN2YxYzQ2YjU4NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm4Ej13jkztII6JnVFU/1jvpeK/w Go+DmWT3W6tFPUhg/angJ4eGix+4JYnJvY5fkuj2TL1KKZzpkAzFeGUAe+EN4fyS Bxj4USEgNi+nVQ2i3zxiYQd0sR0JkBAlkSqZUrMPcFRVA8vEQu+Xp13sOzeBzbLj i9jAeEUFrcggbXMFEMZvsVaXaWGXb5D/Ow/UmQzDpqNBzpn12kpC2dPT8YVMObnO f6OOoDdccMNe9KRDYtHcB5wjRmLyQarnhFzLuui69Ljp7YHok9tCPKdcIvFPZ1vn YOOc9dhC0qPo1kb6dn7NA56pRULsq1VhV0O9Cg1JUhYPel+k+81ywlwpcwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHs8BP32puuj+bz8sO2GthFs6ETRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RkM2Q2MDIwLWJlNzgtNDZjYS05YjhhLTYzZmRiZmM5ZGE5Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9SAwDQYJKoZIhvcNAQELBQADggEBACQ8S61plYFfpiltK0n7 p7TCVnKZel3lQMxnKUathTlryExbkdle3QF7XMrl3Rq4Z6aVrHamIum5sUAkaW19 r9VFx3dspNGbMw/RQskvgeroV/pCm33qS9qrot1N9YPuMqBbYHo6js2PVOSbOa/j mZOMWsRSsTJ75HpYtj9sWqsvNE1sGQ66kFXR2S7e9IKQZm4L/0PLmRShxxVBF7Mz HjltG0YzL05iaaT3hYeQPfHHA1QnVGAQsVTq3RSld2O/EuEjSZ8L39rqiLNv8qXj 0TzY5+0bhjRB7W+C8z1KA99IGkD8sIKV8bkUZGi6g6w0d8XPMZzDiBTw7+wY78ba ask= -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:26 2025 by rpki-client