$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa File: 070bdab9-7162-422b-9f8a-f8d4ae428be1.roa (raw, json) Hash identifier: Kw+h8F+X5w/T4Og5Q4fuUBCPdzjZHWnhkG4JFpwpV8s= Subject key identifier: 4A:58:1E:40:1E:3C:BB:93:20:B3:12:BC:61:D3:C2:0C:9D:A3:65:BE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42AFDA5FD7008C55F51E582255FBCC6F26C5E176 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa Signing time: Mon 26 Oct 2026 00:03:19 +0000 ROA not before: Mon 26 Oct 2026 00:03:19 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2a:8000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Nov 2026 00:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:af:da:5f:d7:00:8c:55:f5:1e:58:22:55:fb:cc:6f:26:c5:e1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 26 00:03:19 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=738fe4004161c8502672bb0f4d9e474ebf363350496d119d30068b33ecce12af, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a4:87:7b:e6:c0:e4:6c:09:cc:0c:8e:d1:39: 1a:42:24:57:8c:17:11:23:71:07:52:16:4d:11:7d: c5:af:69:fc:53:14:ea:20:71:66:9a:84:b5:de:d4: d6:09:e0:72:a0:57:82:37:6b:2c:fe:5e:a4:bb:a4: fe:57:05:fd:8c:cd:b4:0e:d8:f7:d7:81:6a:3a:7e: 71:50:42:25:7a:70:a0:54:80:61:1e:06:bd:18:1f: 6f:22:90:99:07:f6:1d:99:2f:76:f1:28:38:3e:61: ec:ed:c4:86:d2:7d:7b:aa:13:d4:80:bd:28:a1:8c: e9:91:e5:c1:12:29:aa:fd:44:5b:16:1e:8a:de:63: 91:83:9c:2a:87:2b:5c:46:6f:83:ae:e9:45:a6:40: bb:6b:b4:84:34:58:3c:b2:b1:f8:24:04:b7:99:0e: 8b:80:71:d4:d3:71:f7:39:f1:c3:e9:70:dd:5c:4b: 40:56:b4:f2:8c:ea:e2:db:e7:f0:d0:0b:f2:59:05: f4:7c:95:3b:90:e9:44:bc:20:5f:52:34:24:1a:de: 87:46:3f:3d:94:6c:92:8e:97:0f:7e:90:12:11:89: 1f:38:bc:b3:6f:da:0d:cc:4c:b9:01:f9:81:69:21: e7:06:4e:87:6a:69:bc:31:2b:db:5b:f1:b9:98:c3: e1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:58:1E:40:1E:3C:BB:93:20:B3:12:BC:61:D3:C2:0C:9D:A3:65:BE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2a:8000::/37 Signature Algorithm: sha256WithRSAEncryption 6e:44:1d:f1:56:55:a0:ac:8b:a3:24:91:2d:d2:64:11:cd:3b: 7c:8a:06:56:ba:06:7e:92:b0:cc:3c:d7:cd:bf:86:c2:95:35: 71:47:94:25:0a:b6:89:64:36:d2:30:e6:29:16:c5:f2:d4:c2: 87:8c:03:fc:dd:9d:a2:99:6b:a3:78:09:0e:33:5b:c0:95:c6: f3:6f:7c:74:b6:17:ee:e8:e1:b7:f9:70:19:8b:d7:ac:14:bb: ad:a4:08:87:c2:00:58:38:0e:58:48:c2:2a:92:bd:65:1c:d8: 86:f7:72:10:52:27:a5:4f:c5:ca:bf:ec:7e:26:63:f9:5a:bd: d6:63:e5:4a:0e:d7:10:5f:63:63:94:a3:32:b2:b0:29:78:ed: 59:14:7f:fc:b8:a9:98:0f:7f:71:0c:76:5b:7b:23:54:7d:bf: 87:04:e5:f2:5b:c9:02:cd:96:f9:f1:66:07:2e:b5:04:61:72: 7d:57:c8:34:05:b6:f4:0a:f5:38:1c:80:d4:88:3d:1b:2b:3d: 0a:26:b5:48:ae:79:02:2e:4e:df:a0:0c:e2:ee:51:47:2e:ae: e5:48:d0:ae:ca:f6:ae:87:82:e5:73:e7:78:27:9f:dd:04:e6: c4:09:15:27:4e:6f:df:34:f2:76:53:ee:b3:8a:3a:75:2f:80: 83:eb:f5:d6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQq/aX9cAjFX1HlgiVfvMbybF4XYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyNjAwMDMxOVoX DTI3MDEyNDIzNTk1OVowejFJMEcGA1UEBRNANzM4ZmU0MDA0MTYxYzg1MDI2NzJi YjBmNGQ5ZTQ3NGViZjM2MzM1MDQ5NmQxMTlkMzAwNjhiMzNlY2NlMTJhZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6SHe+bA5GwJzAyO0TkaQiRXjBcR I3EHUhZNEX3Fr2n8UxTqIHFmmoS13tTWCeByoFeCN2ss/l6ku6T+VwX9jM20Dtj3 14FqOn5xUEIlenCgVIBhHga9GB9vIpCZB/YdmS928Sg4PmHs7cSG0n17qhPUgL0o oYzpkeXBEimq/URbFh6K3mORg5wqhytcRm+DrulFpkC7a7SENFg8srH4JAS3mQ6L gHHU03H3OfHD6XDdXEtAVrTyjOri2+fw0AvyWQX0fJU7kOlEvCBfUjQkGt6HRj89 lGySjpcPfpASEYkfOLyzb9oNzEy5AfmBaSHnBk6Hamm8MSvbW/G5mMPhQQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEpYHkAePLuTILMSvGHTwgydo2W+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3MGJkYWI5LTcxNjItNDIyYi05ZjhhLWY4ZDRhZTQyOGJlMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYDJAbaKoAwDQYJKoZIhvcNAQELBQADggEBAG5EHfFWVaCsi6MkkS3S ZBHNO3yKBla6Bn6SsMw8182/hsKVNXFHlCUKtolkNtIw5ikWxfLUwoeMA/zdnaKZ a6N4CQ4zW8CVxvNvfHS2F+7o4bf5cBmL16wUu62kCIfCAFg4DlhIwiqSvWUc2Ib3 chBSJ6VPxcq/7H4mY/lavdZj5UoO1xBfY2OUozKysCl47VkUf/y4qZgPf3EMdlt7 I1R9v4cE5fJbyQLNlvnxZgcutQRhcn1XyDQFtvQK9TgcgNSIPRsrPQomtUiueQIu Tt+gDOLuUUcuruVI0K7K9q6HguVz53gnn90E5sQJFSdOb9808nZT7rOKOnUvgIPr 9dY= -----END CERTIFICATE-----Generated at Tue Nov 10 08:05:29 2026 by rpki-client