$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00788bf8-6c52-47ad-bb70-b76ea8b35987.roa File: 00788bf8-6c52-47ad-bb70-b76ea8b35987.roa (raw, json) Hash identifier: gV5e79ZEMvIMQktqr3uEhmP3KO/1zTbWbWGu6D8rjKI= Subject key identifier: 72:F0:45:2E:AC:D0:86:77:E4:ED:9A:39:78:7E:B7:F9:9B:0B:25:5D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 32EB616691CD69DBB3326C4C49AF733DA55E49C5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00788bf8-6c52-47ad-bb70-b76ea8b35987.roa Signing time: Thu 29 Oct 2026 00:03:20 +0000 ROA not before: Thu 29 Oct 2026 00:03:20 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae0:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:eb:61:66:91:cd:69:db:b3:32:6c:4c:49:af:73:3d:a5:5e:49:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:03:20 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=53f1c49b869d147fa636e0f2ad4c2c5dabc8f9ab6c9ebf3efe318a46797c4b92, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:39:93:fa:97:5b:aa:26:90:d4:a5:0d:ae:9f: 93:3c:ca:16:5a:24:27:dc:3a:a3:bd:01:22:9d:57: e4:b2:71:0b:c8:e5:54:95:00:28:e9:73:e9:b2:5f: ae:cd:9f:62:25:b3:98:9e:0c:a8:bc:1f:76:d2:46: ae:e0:5b:8f:d8:5e:39:a0:ff:45:b0:7f:be:11:ec: ff:73:a6:29:e2:78:d7:b7:42:d4:d0:fd:c2:2d:2f: 23:52:be:0d:24:86:ab:bc:d9:75:22:84:bf:6b:f6: 40:a8:6b:a6:ec:56:a0:c7:76:b5:05:19:ab:9a:f0: 71:22:66:ae:71:39:b8:7b:8f:f0:9a:b8:99:9b:aa: cd:e3:8d:b8:b7:aa:59:57:4a:14:8e:38:85:1e:d9: 8c:f5:17:0c:ae:11:1f:ef:fe:1a:cc:04:bb:97:0f: f2:0f:9e:41:49:70:ce:df:c5:9d:f0:b1:92:59:14: bb:a7:d2:8a:3a:10:7d:49:37:33:f4:d8:51:de:ad: 80:a6:72:75:89:40:58:49:0d:9b:89:90:02:0b:f8: ae:ad:f0:5a:09:9d:43:02:62:7a:b9:a5:72:4e:63: e0:9f:1f:81:14:db:39:21:da:6d:34:e7:49:f1:91: 1b:1f:89:ea:1f:e5:d5:3b:cd:b4:7c:c6:2a:8c:a8: 7e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F0:45:2E:AC:D0:86:77:E4:ED:9A:39:78:7E:B7:F9:9B:0B:25:5D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00788bf8-6c52-47ad-bb70-b76ea8b35987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae0:c000::/40 Signature Algorithm: sha256WithRSAEncryption 35:6f:2d:47:e3:5a:58:d1:55:4a:64:2e:87:af:e1:2e:20:0d: b6:59:d1:a7:08:f0:cb:eb:85:56:68:12:30:60:84:c4:5e:38: 91:3e:c6:82:0c:62:a4:a4:bf:f1:88:03:1d:73:f1:98:cd:0b: 37:fc:3f:b5:3a:eb:74:d8:77:ff:f1:c9:34:7a:9e:3b:66:24: 8c:e9:16:60:c0:29:52:80:8a:94:df:fd:a1:0f:c6:e1:11:8d: 15:42:99:a6:2e:69:a6:af:b1:3a:96:97:30:7a:48:ed:6c:66: 13:fa:c9:36:eb:2e:a9:43:7b:9c:9b:5e:b3:d0:94:fa:36:58: 6e:38:04:17:e8:b7:98:ed:02:7c:d3:99:33:a9:98:ba:20:26: a6:ca:df:58:a2:62:b8:2f:07:0f:d6:e8:45:3b:45:36:58:c9: cf:87:3a:a9:21:28:06:ff:4b:81:5c:00:d6:1b:74:f0:20:4f: f3:db:63:a0:b9:0e:50:07:06:7c:6d:6e:ac:04:ff:8f:31:14: 27:95:fe:56:a9:4b:5e:bb:d5:98:e4:79:46:f5:21:a2:85:a4: d7:e9:2f:92:d0:dc:4a:26:34:66:3c:b9:6e:47:64:e4:1e:3d: bc:a3:91:43:37:4b:bc:89:87:8e:4b:00:89:c6:ff:bd:e5:dd: ba:1d:ca:c0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMuthZpHNaduzMmxMSa9zPaVeScUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyOTAwMDMyMFoX DTI3MDEyNzIzNTk1OVowejFJMEcGA1UEBRNANTNmMWM0OWI4NjlkMTQ3ZmE2MzZl MGYyYWQ0YzJjNWRhYmM4ZjlhYjZjOWViZjNlZmUzMThhNDY3OTdjNGI5MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zmT+pdbqiaQ1KUNrp+TPMoWWiQn 3DqjvQEinVfksnELyOVUlQAo6XPpsl+uzZ9iJbOYngyovB920kau4FuP2F45oP9F sH++Eez/c6Yp4njXt0LU0P3CLS8jUr4NJIarvNl1IoS/a/ZAqGum7Fagx3a1BRmr mvBxImaucTm4e4/wmriZm6rN4424t6pZV0oUjjiFHtmM9RcMrhEf7/4azAS7lw/y D55BSXDO38Wd8LGSWRS7p9KKOhB9STcz9NhR3q2ApnJ1iUBYSQ2biZACC/iurfBa CZ1DAmJ6uaVyTmPgnx+BFNs5IdptNOdJ8ZEbH4nqH+XVO820fMYqjKh+TwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHLwRS6s0IZ35O2aOXh+t/mbCyVdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAwNzg4YmY4LTZjNTItNDdhZC1iYjcwLWI3NmVhOGIzNTk4Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4MAwDQYJKoZIhvcNAQELBQADggEBADVvLUfjWljRVUpkLoev 4S4gDbZZ0acI8MvrhVZoEjBghMReOJE+xoIMYqSkv/GIAx1z8ZjNCzf8P7U663TY d//xyTR6njtmJIzpFmDAKVKAipTf/aEPxuERjRVCmaYuaaavsTqWlzB6SO1sZhP6 yTbrLqlDe5ybXrPQlPo2WG44BBfot5jtAnzTmTOpmLogJqbK31iiYrgvBw/W6EU7 RTZYyc+HOqkhKAb/S4FcANYbdPAgT/PbY6C5DlAHBnxtbqwE/48xFCeV/lapS167 1ZjkeUb1IaKFpNfpL5LQ3EomNGY8uW5HZOQePbyjkUM3S7yJh45LAInG/73l3bod ysA= -----END CERTIFICATE-----Generated at Thu Nov 5 04:29:12 2026 by rpki-client