$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/facddbc4-8a46-4e71-bf43-678021fefea0.roa File: facddbc4-8a46-4e71-bf43-678021fefea0.roa (raw, json) Hash identifier: Re3VFEwyFfiHJOXackdSyPRnb30HmoiP5ewZe5WkU8Q= Subject key identifier: 06:3C:6A:3F:45:6A:2B:61:84:8B:38:8B:DB:3D:66:36:92:E1:86:A8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4A1EA001947279A23D0C5BA8138BB05581F7ECCF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/facddbc4-8a46-4e71-bf43-678021fefea0.roa Signing time: Wed 15 Oct 2025 00:40:11 +0000 ROA not before: Wed 15 Oct 2025 00:40:11 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1c:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:1e:a0:01:94:72:79:a2:3d:0c:5b:a8:13:8b:b0:55:81:f7:ec:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:40:11 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=213d2f9b505aabae56aefd45f8ad18a22229b397feac9d6ed29b586f23fe8130, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:d7:4a:97:06:12:99:2d:2d:94:14:56:95: 68:4c:3d:dc:bc:97:92:84:3b:81:27:19:b4:0a:43: ba:85:08:2d:8f:ce:52:c7:2e:5b:2e:c8:a5:ec:9b: 19:43:de:13:30:24:69:72:c0:18:26:13:1d:8a:54: b9:d6:62:8b:7a:17:57:12:9c:52:a2:88:71:65:6f: 31:d5:7c:7b:d5:59:bc:2c:e9:3d:c4:74:ae:0f:4a: 0c:c5:ed:5e:3b:78:17:c2:71:96:d3:c1:64:d2:5d: ee:79:fe:ac:93:f3:14:0e:81:5a:80:f4:3c:b3:1d: 5b:27:7f:64:fe:59:85:df:49:01:9b:8c:25:ed:cd: e0:0a:c7:db:0e:73:99:3a:62:8f:20:9a:d7:7c:4a: a4:f3:37:52:70:1b:b1:68:83:b3:9a:27:93:c8:c0: c1:53:20:95:c8:5b:96:63:f2:ea:59:db:83:a0:57: d3:0d:92:dd:b8:f0:b2:16:08:24:8c:6f:f9:8a:50: 94:5c:af:e5:48:57:b7:25:5f:8b:bd:6b:81:c7:3c: 08:69:6a:20:f0:92:cc:ec:d7:c7:9b:99:fd:14:fe: 90:7d:2f:92:6c:06:90:fd:36:05:2a:98:ea:93:49: 01:ba:65:f9:65:ea:55:62:9e:c8:6c:01:59:11:ca: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3C:6A:3F:45:6A:2B:61:84:8B:38:8B:DB:3D:66:36:92:E1:86:A8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/facddbc4-8a46-4e71-bf43-678021fefea0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1c:800::/38 Signature Algorithm: sha256WithRSAEncryption 18:b2:6a:2b:40:46:6a:6b:d4:59:8a:a4:46:98:ea:7e:49:86: 99:74:fe:20:58:21:53:25:8b:61:75:9c:51:0c:1a:fe:df:c4: b8:a1:e5:b8:be:54:29:99:5b:e0:93:3e:25:93:17:8f:f3:a7: 4a:06:14:40:0c:32:88:4d:51:42:1f:a5:b6:ac:ad:cb:76:c8: d7:1b:b0:ec:7b:9e:f1:02:3d:4d:fe:f2:19:44:1c:12:32:f1: c9:05:50:cc:a1:03:53:33:17:f7:39:d7:f6:f7:79:07:10:6b: e5:93:f3:23:6b:58:de:48:cb:75:a4:2b:2f:bd:d3:9f:e5:9b: 13:7c:9c:11:1b:2c:1c:94:47:ee:9f:52:74:94:f5:24:e4:74: 6a:27:91:61:fa:78:e8:9a:60:21:6f:48:c4:60:ba:b7:4b:bd: 24:9e:4d:b9:3d:80:de:de:15:ae:2e:9b:33:0d:f1:54:52:f2: 41:f5:bd:12:ce:bd:87:eb:5a:e3:ea:e4:27:10:41:c2:4e:78: 9b:da:b1:89:8d:59:aa:f0:5c:25:99:17:ad:6d:da:c6:6f:bf: 01:5c:57:40:a8:dd:a1:df:15:e9:1b:54:fd:56:3d:8f:bf:d4: 33:71:23:43:f9:55:d0:18:ee:59:58:56:76:cc:f7:ef:88:c1: 40:e4:09:03 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSh6gAZRyeaI9DFuoE4uwVYH37M8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwNDAxMVoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAMjEzZDJmOWI1MDVhYWJhZTU2YWVm ZDQ1ZjhhZDE4YTIyMjI5YjM5N2ZlYWM5ZDZlZDI5YjU4NmYyM2ZlODEzMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk3XSpcGEpktLZQUVpVoTD3cvJeS hDuBJxm0CkO6hQgtj85Sxy5bLsil7JsZQ94TMCRpcsAYJhMdilS51mKLehdXEpxS oohxZW8x1Xx71Vm8LOk9xHSuD0oMxe1eO3gXwnGW08Fk0l3uef6sk/MUDoFagPQ8 sx1bJ39k/lmF30kBm4wl7c3gCsfbDnOZOmKPIJrXfEqk8zdScBuxaIOzmieTyMDB UyCVyFuWY/LqWduDoFfTDZLduPCyFggkjG/5ilCUXK/lSFe3JV+LvWuBxzwIaWog 8JLM7NfHm5n9FP6QfS+SbAaQ/TYFKpjqk0kBumX5ZepVYp7IbAFZEcogMwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAY8aj9FaithhIs4i9s9ZjaS4YaoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZhY2RkYmM0LThhNDYtNGU3MS1iZjQzLTY3ODAyMWZlZmVhMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHAgwDQYJKoZIhvcNAQELBQADggEBABiyaitARmpr1FmKpEaY 6n5Jhpl0/iBYIVMli2F1nFEMGv7fxLih5bi+VCmZW+CTPiWTF4/zp0oGFEAMMohN UUIfpbasrct2yNcbsOx7nvECPU3+8hlEHBIy8ckFUMyhA1MzF/c51/b3eQcQa+WT 8yNrWN5Iy3WkKy+905/lmxN8nBEbLByUR+6fUnSU9STkdGonkWH6eOiaYCFvSMRg urdLvSSeTbk9gN7eFa4umzMN8VRS8kH1vRLOvYfrWuPq5CcQQcJOeJvasYmNWarw XCWZF61t2sZvvwFcV0Co3aHfFekbVP1WPY+/1DNxI0P5VdAY7llYVnbM9++IwUDk CQM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:20 2025 by rpki-client