$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/05f722d1-1b22-44e3-a4a2-3835d7447d1c.roa File: 05f722d1-1b22-44e3-a4a2-3835d7447d1c.roa (raw, json) Hash identifier: G8FZGf1S1YjezJbBampfOlBnj+IOSO4BvKJbKpLCpXc= Subject key identifier: B1:F1:0F:91:00:67:D3:60:1C:02:8F:72:04:98:C4:AF:91:37:80:27 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6DB49F1D2FB20AADB134E9D11A6D2F0D86286B04 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/05f722d1-1b22-44e3-a4a2-3835d7447d1c.roa Signing time: Tue 20 Oct 2026 00:10:33 +0000 ROA not before: Tue 20 Oct 2026 00:10:33 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b4:9f:1d:2f:b2:0a:ad:b1:34:e9:d1:1a:6d:2f:0d:86:28:6b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:10:33 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=ac9f0ea708c442f2f20f144bd35dbe2e2ccb635e394cc83e2973e4ab2ada8a63, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a2:a4:ba:98:a3:38:2d:74:2f:45:b7:75:e2: f3:34:07:be:0a:27:e2:60:05:ec:a9:e7:60:19:42: 35:ec:b2:96:f9:e3:45:19:71:7e:4c:4a:b3:f8:22: 3c:e2:45:3a:ca:13:33:52:e7:e6:50:9e:b8:0b:0f: 68:1e:ab:a5:ca:6e:c7:9b:60:8d:cc:e7:5b:85:50: 50:c7:3b:5d:8b:4b:60:8b:75:e5:fa:7c:67:3a:e8: 21:c0:d3:02:e7:53:eb:42:4b:1c:0d:b4:f8:09:5f: 7d:8c:e0:9b:10:07:30:51:18:22:2b:86:1c:c6:a9: 9f:99:01:3f:69:d1:95:4c:dc:2b:b7:04:0a:49:e6: 79:1d:97:4c:ec:be:d5:aa:41:97:40:a6:f3:c0:c1: 4b:6c:af:cc:8e:0f:87:1d:0e:60:bc:3d:41:15:c5: 2c:4b:ce:8f:c9:db:38:f0:96:10:15:73:3e:62:b3: 32:13:df:39:7c:fb:fa:e5:9c:7c:d6:01:ca:35:ac: 91:2f:60:3b:4c:f6:df:84:40:29:3c:7c:d5:05:6f: 7e:44:44:32:83:44:59:03:6d:e0:05:4d:c7:fc:80: 7e:18:3a:20:74:4d:e8:3f:d2:1e:bb:01:33:b5:b4: 91:2a:aa:bc:ef:d7:6a:9d:8a:28:03:df:5d:b3:cf: a1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F1:0F:91:00:67:D3:60:1C:02:8F:72:04:98:C4:AF:91:37:80:27 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/05f722d1-1b22-44e3-a4a2-3835d7447d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:c800::/40 Signature Algorithm: sha256WithRSAEncryption c2:9f:69:ba:be:40:a2:0d:ee:7b:17:4d:1f:20:4b:3c:ad:fb: 25:8d:89:bd:1f:6d:b4:e3:a7:ea:24:57:48:06:eb:74:94:42: 11:51:10:ce:cb:9c:ab:90:52:7f:3d:7b:e8:21:91:74:38:c2: db:55:d3:01:3a:f6:f4:16:6d:be:2b:87:53:ac:cd:c6:c0:de: 43:57:5a:0b:6a:16:f4:9c:cc:ad:b8:c0:61:8b:7b:9c:1d:5d: 98:d2:e4:78:dd:25:ce:3a:28:04:4a:4c:86:57:90:eb:75:a9: 2e:6a:3e:a1:d6:ce:39:63:6d:23:0b:62:1b:ec:26:7b:9c:e0: e1:a3:6d:eb:e1:44:98:15:ed:20:44:3e:74:1e:c0:14:dd:25: 40:3a:66:27:98:2c:fe:9b:dc:06:9b:32:a9:b1:44:d3:9c:2d: f5:f9:22:d6:96:2a:98:c6:b2:1c:f0:c2:fb:69:8f:ad:04:b0: a4:db:75:c1:e5:82:0f:30:4d:f8:a1:b4:2b:30:f5:bd:0e:ff: 26:5b:16:96:31:40:f9:67:44:d1:79:60:df:2e:c7:58:a8:c8: d0:72:c2:d0:d9:ab:23:4f:a7:99:05:33:68:78:d3:cc:fa:69: f8:25:61:07:6e:40:65:9b:b2:16:b1:99:cb:6b:81:c0:4e:a0: e8:bd:8c:85 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbbSfHS+yCq2xNOnRGm0vDYYoawQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMTAzM1oX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAYWM5ZjBlYTcwOGM0NDJmMmYyMGYx NDRiZDM1ZGJlMmUyY2NiNjM1ZTM5NGNjODNlMjk3M2U0YWIyYWRhOGE2MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKKkupijOC10L0W3deLzNAe+Cifi YAXsqedgGUI17LKW+eNFGXF+TEqz+CI84kU6yhMzUufmUJ64Cw9oHqulym7Hm2CN zOdbhVBQxztdi0tgi3Xl+nxnOughwNMC51PrQkscDbT4CV99jOCbEAcwURgiK4Yc xqmfmQE/adGVTNwrtwQKSeZ5HZdM7L7VqkGXQKbzwMFLbK/Mjg+HHQ5gvD1BFcUs S86Pyds48JYQFXM+YrMyE985fPv65Zx81gHKNayRL2A7TPbfhEApPHzVBW9+REQy g0RZA23gBU3H/IB+GDogdE3oP9IeuwEztbSRKqq879dqnYooA99ds8+hMQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLHxD5EAZ9NgHAKPcgSYxK+RN4AnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA1ZjcyMmQxLTFiMjItNDRlMy1hNGEyLTM4MzVkNzQ0N2QxYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacMgwDQYJKoZIhvcNAQELBQADggEBAMKfabq+QKIN7nsXTR8g Szyt+yWNib0fbbTjp+okV0gG63SUQhFREM7LnKuQUn89e+ghkXQ4wttV0wE69vQW bb4rh1OszcbA3kNXWgtqFvSczK24wGGLe5wdXZjS5HjdJc46KARKTIZXkOt1qS5q PqHWzjljbSMLYhvsJnuc4OGjbevhRJgV7SBEPnQewBTdJUA6ZieYLP6b3AabMqmx RNOcLfX5ItaWKpjGshzwwvtpj60EsKTbdcHlgg8wTfihtCsw9b0O/yZbFpYxQPln RNF5YN8ux1ioyNBywtDZqyNPp5kFM2h408z6afglYQduQGWbshaxmctrgcBOoOi9 jIU= -----END CERTIFICATE-----Generated at Thu Nov 5 16:29:09 2026 by rpki-client