$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddd84904-3c7b-443c-8bda-81864bb08de1.roa File: ddd84904-3c7b-443c-8bda-81864bb08de1.roa (raw, json) Hash identifier: g9QIhHNlfbPQzbmsubObJXsy/pljLAdZ25lM89OBotU= Subject key identifier: B8:98:B8:EC:87:35:82:BE:80:8F:17:45:D9:89:E3:86:C1:60:E5:70 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1B855FBB2E791605E9205DE18598DDF611227CD2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddd84904-3c7b-443c-8bda-81864bb08de1.roa Signing time: Sat 01 Nov 2025 00:00:37 +0000 ROA not before: Sat 01 Nov 2025 00:00:37 +0000 ROA not after: Sat 06 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:85:5f:bb:2e:79:16:05:e9:20:5d:e1:85:98:dd:f6:11:22:7c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 1 00:00:37 2025 GMT Not After : Dec 6 23:59:59 2025 GMT Subject: serialNumber=17db42be1ccee3de323f3644e774aeaba1bb81794458a3e2f30ee4fd6065535c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a8:ea:b4:ab:6e:a3:c9:a5:c8:d4:3c:43:f5: c5:2c:9a:a0:fe:b3:8e:0a:7d:b0:6e:56:08:a5:b7: 07:31:b6:a4:07:b7:f2:3b:e2:21:5d:66:d9:f6:0c: 70:cf:59:9a:fd:83:25:75:f4:c6:fe:cd:64:02:7d: dd:cb:5a:c7:52:2d:ab:7a:07:f8:3b:86:b0:66:0e: 95:b9:2f:d5:66:52:a3:38:80:b8:38:ab:b6:df:fd: a8:94:f3:c2:d6:50:aa:46:0c:4b:04:d8:c4:f0:93: 29:42:ec:36:93:a6:f4:20:14:ea:15:4b:df:9c:15: 35:c5:29:52:b6:5f:0f:b1:ea:6d:4d:90:9f:a9:a5: b7:6c:ed:f3:d6:f0:7f:77:c4:a7:4b:f2:c3:40:7e: 7a:9e:c0:69:06:87:68:5b:84:64:6f:74:de:fa:e5: 54:d7:1c:df:bf:25:e9:a8:c0:9f:10:f2:d0:fa:cf: 91:b0:88:8d:e6:bf:ce:3d:96:4b:fb:72:6f:02:40: 4f:6e:bf:b8:85:78:33:09:f7:e9:09:42:0d:26:22: 4b:bd:d4:bb:08:11:34:58:18:83:d5:46:1c:d9:fd: 65:b7:07:c2:8a:3f:28:c0:09:4a:4f:09:8f:f8:89: 1d:22:bf:0b:1d:ca:41:ea:bf:d9:d6:a5:8f:8b:15: fc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:98:B8:EC:87:35:82:BE:80:8F:17:45:D9:89:E3:86:C1:60:E5:70 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddd84904-3c7b-443c-8bda-81864bb08de1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:4800::/40 Signature Algorithm: sha256WithRSAEncryption c9:f9:77:f6:58:1e:f6:c5:dc:70:1a:a3:3c:ff:62:80:51:0d: 37:b5:99:17:b2:39:f1:cd:eb:36:c2:8f:27:30:2a:75:19:05: a8:64:03:49:31:7f:b3:b9:38:c3:95:62:f1:a7:8d:3c:fe:b1: 61:1a:85:fa:b3:9c:69:5a:40:ae:4a:ba:d0:05:9f:da:b9:fb: b4:ba:b9:a4:f4:17:77:a8:2d:bf:00:86:13:1e:96:20:71:46: f8:75:e8:71:29:fe:b6:eb:70:e7:33:eb:b1:ef:cc:49:23:2b: a3:13:b4:46:3e:dc:b5:6e:0a:41:9f:21:af:84:e6:d4:f8:56: 64:d5:88:e8:a4:82:9b:49:17:f7:a9:81:94:b2:d1:ac:0d:cc: 2e:3d:5e:7e:98:bb:02:98:39:f9:5d:82:66:13:74:63:6c:d7: 7d:8e:f1:e0:92:07:e4:d9:3d:63:45:ba:24:02:65:c3:06:b5: 4c:a9:21:57:8f:5b:86:a9:5b:1c:59:60:8d:48:a9:aa:fa:6b: 20:14:8d:22:94:f9:55:0b:e0:83:43:17:82:47:b5:0d:82:0f: 2e:ee:69:14:34:ae:61:1c:0b:92:ba:5d:9b:8e:39:61:eb:80: 13:7b:b6:bc:18:f9:49:e3:ee:d7:04:29:9f:88:86:5e:3a:d2: b5:ba:12:e9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUG4Vfuy55FgXpIF3hhZjd9hEifNIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwMTAwMDAzN1oX DTI1MTIwNjIzNTk1OVowejFJMEcGA1UEBRNAMTdkYjQyYmUxY2NlZTNkZTMyM2Yz NjQ0ZTc3NGFlYWJhMWJiODE3OTQ0NThhM2UyZjMwZWU0ZmQ2MDY1NTM1YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxajqtKtuo8mlyNQ8Q/XFLJqg/rOO Cn2wblYIpbcHMbakB7fyO+IhXWbZ9gxwz1ma/YMldfTG/s1kAn3dy1rHUi2regf4 O4awZg6VuS/VZlKjOIC4OKu23/2olPPC1lCqRgxLBNjE8JMpQuw2k6b0IBTqFUvf nBU1xSlStl8PseptTZCfqaW3bO3z1vB/d8SnS/LDQH56nsBpBodoW4Rkb3Te+uVU 1xzfvyXpqMCfEPLQ+s+RsIiN5r/OPZZL+3JvAkBPbr+4hXgzCffpCUINJiJLvdS7 CBE0WBiD1UYc2f1ltwfCij8owAlKTwmP+IkdIr8LHcpB6r/Z1qWPixX8UwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLiYuOyHNYK+gI8XRdmJ44bBYOVwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RkZDg0OTA0LTNjN2ItNDQzYy04YmRhLTgxODY0YmIwOGRlMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauUgwDQYJKoZIhvcNAQELBQADggEBAMn5d/ZYHvbF3HAaozz/ YoBRDTe1mReyOfHN6zbCjycwKnUZBahkA0kxf7O5OMOVYvGnjTz+sWEahfqznGla QK5KutAFn9q5+7S6uaT0F3eoLb8AhhMeliBxRvh16HEp/rbrcOcz67HvzEkjK6MT tEY+3LVuCkGfIa+E5tT4VmTViOikgptJF/epgZSy0awNzC49Xn6YuwKYOfldgmYT dGNs132O8eCSB+TZPWNFuiQCZcMGtUypIVePW4apWxxZYI1Iqar6ayAUjSKU+VUL 4INDF4JHtQ2CDy7uaRQ0rmEcC5K6XZuOOWHrgBN7trwY+Unj7tcEKZ+Ihl460rW6 Euk= -----END CERTIFICATE-----Generated at Wed Nov 5 11:31:48 2025 by rpki-client