$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6f14065-ac41-46a1-a2e3-9b0a369a893b.roa File: f6f14065-ac41-46a1-a2e3-9b0a369a893b.roa (raw, json) Hash identifier: dWTIy0lQgfrCcwU7YQYbUrkZVoBvr8rOvtojbNWSp8g= Subject key identifier: 95:43:86:F4:A5:9B:68:62:A4:59:AA:68:14:4C:F7:82:85:FD:44:50 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 67FAB367199A3DAE53F2BBA7748D5291019C1CBF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6f14065-ac41-46a1-a2e3-9b0a369a893b.roa Signing time: Sat 01 Nov 2025 00:00:45 +0000 ROA not before: Sat 01 Nov 2025 00:00:45 +0000 ROA not after: Sat 06 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fa:b3:67:19:9a:3d:ae:53:f2:bb:a7:74:8d:52:91:01:9c:1c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 1 00:00:45 2025 GMT Not After : Dec 6 23:59:59 2025 GMT Subject: serialNumber=4ab84ff954228d8549a23760d566510849735ba0c9ede73a66525faf04faa098, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:97:32:b9:6d:99:f0:dd:ac:61:0b:de:54: a8:a5:8b:15:42:a8:af:4c:02:ab:10:6d:29:a0:b3: 24:18:9c:63:6c:d4:85:d0:e9:12:73:5e:99:b7:2d: 58:9c:dc:f5:49:67:c3:11:fd:95:b0:fe:cb:70:f7: 04:5b:43:ca:05:f2:29:01:4b:06:d5:87:fb:a5:d6: e9:af:f7:13:d2:56:fd:9d:58:0f:e4:24:2e:a0:f1: 48:7d:6c:c0:4c:5b:c8:16:7b:b1:d2:ab:e0:ed:23: 76:0c:98:cf:ed:2e:8e:ce:7b:fe:df:90:50:d9:32: b0:cb:cd:ae:f4:cf:58:dd:02:de:5d:1d:76:84:6b: 09:0d:73:2c:08:1c:3e:83:01:7b:b1:e4:ff:57:e9: d8:1f:f5:66:10:1b:f0:46:cc:dd:06:11:92:aa:46: 8a:eb:0c:a9:55:d0:6c:ff:ef:1a:28:c6:47:f4:2d: c1:ea:f7:d9:91:65:b2:51:eb:69:a4:93:0d:4a:f1: 26:d3:64:4d:97:91:6b:5e:1e:61:18:eb:04:27:ae: 82:ac:78:1b:3e:0e:ff:ea:98:25:fa:dd:98:20:5f: 53:cd:24:38:fd:cf:c7:22:2f:7b:b7:af:d0:b5:e9: b3:98:a2:90:47:c7:f6:26:66:68:bb:64:1a:e3:44: 01:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:43:86:F4:A5:9B:68:62:A4:59:AA:68:14:4C:F7:82:85:FD:44:50 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6f14065-ac41-46a1-a2e3-9b0a369a893b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:b000::/40 Signature Algorithm: sha256WithRSAEncryption a5:83:16:02:f5:62:3d:50:5a:75:fa:10:02:2c:10:53:81:24: 36:85:1f:ba:87:f3:5b:fd:4c:ba:d7:8b:e3:d7:ff:99:88:62: 45:c8:b3:d0:96:94:32:64:2b:16:9f:47:f6:2f:ef:f7:ed:50: 6f:0f:27:65:0e:25:be:68:8b:ae:31:38:55:14:a9:5f:3a:95: b1:90:db:26:32:7a:83:64:7a:d4:23:4a:67:cf:43:45:97:22: ff:9b:89:15:30:c5:b8:5a:74:47:84:eb:e9:89:21:19:94:31: a3:2e:ff:df:72:f9:1f:f7:ef:ec:a8:c0:d4:15:ea:37:2c:5a: 03:8b:1f:99:31:f2:b2:de:02:c4:45:6f:0b:b8:31:27:d0:a7: 9b:83:00:57:5f:12:ed:c4:90:f9:45:7c:9e:64:4b:45:85:6e: 39:04:95:68:13:0e:2d:c1:8d:e1:5e:d0:d7:86:8d:b3:3f:78: 89:0b:d6:9f:c2:81:06:ff:c1:f5:82:5c:3f:29:28:46:7b:aa: 62:6b:e6:7a:f0:a8:18:c4:9d:c0:79:88:91:93:2c:14:2f:c5: 4c:ca:2a:8f:8a:42:07:8e:30:40:13:79:6b:2c:bc:bb:7a:ad: 0f:fb:b4:a4:d6:a4:4f:1e:d5:54:2c:6f:d3:45:5b:06:d4:96: 8c:8b:3c:ab -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZ/qzZxmaPa5T8rundI1SkQGcHL8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwMTAwMDA0NVoX DTI1MTIwNjIzNTk1OVowejFJMEcGA1UEBRNANGFiODRmZjk1NDIyOGQ4NTQ5YTIz NzYwZDU2NjUxMDg0OTczNWJhMGM5ZWRlNzNhNjY1MjVmYWYwNGZhYTA5ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZqXMrltmfDdrGEL3lSopYsVQqiv TAKrEG0poLMkGJxjbNSF0OkSc16Zty1YnNz1SWfDEf2VsP7LcPcEW0PKBfIpAUsG 1Yf7pdbpr/cT0lb9nVgP5CQuoPFIfWzATFvIFnux0qvg7SN2DJjP7S6Oznv+35BQ 2TKwy82u9M9Y3QLeXR12hGsJDXMsCBw+gwF7seT/V+nYH/VmEBvwRszdBhGSqkaK 6wypVdBs/+8aKMZH9C3B6vfZkWWyUetppJMNSvEm02RNl5FrXh5hGOsEJ66CrHgb Pg7/6pgl+t2YIF9TzSQ4/c/HIi97t6/QtemzmKKQR8f2JmZou2Qa40QBBwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJVDhvSlm2hipFmqaBRM94KF/URQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y2ZjE0MDY1LWFjNDEtNDZhMS1hMmUzLTliMGEzNjlhODkzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9LAwDQYJKoZIhvcNAQELBQADggEBAKWDFgL1Yj1QWnX6EAIs EFOBJDaFH7qH81v9TLrXi+PX/5mIYkXIs9CWlDJkKxafR/Yv7/ftUG8PJ2UOJb5o i64xOFUUqV86lbGQ2yYyeoNketQjSmfPQ0WXIv+biRUwxbhadEeE6+mJIRmUMaMu /99y+R/37+yowNQV6jcsWgOLH5kx8rLeAsRFbwu4MSfQp5uDAFdfEu3EkPlFfJ5k S0WFbjkElWgTDi3BjeFe0NeGjbM/eIkL1p/CgQb/wfWCXD8pKEZ7qmJr5nrwqBjE ncB5iJGTLBQvxUzKKo+KQgeOMEATeWssvLt6rQ/7tKTWpE8e1VQsb9NFWwbUloyL PKs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:34 2025 by rpki-client