$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa File: 0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa (raw, json) Hash identifier: CVywFaho0euCOnQyJw8vuhQsX6afLk/UaBAb1A8k26U= Subject key identifier: 54:14:0A:CB:65:DE:62:3D:3D:05:60:F1:76:31:50:E4:B9:D5:BF:67 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 15833E58D53C7799780F90A1F843821050AEFA1D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa Signing time: Tue 13 Oct 2026 00:09:32 +0000 ROA not before: Tue 13 Oct 2026 00:09:32 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:83:3e:58:d5:3c:77:99:78:0f:90:a1:f8:43:82:10:50:ae:fa:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 00:09:32 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=3da256388db9c9f79006b368df00fd37c3d9854e29113fb969eb1c007f98adc8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3b:56:4d:49:04:ed:81:a7:4e:ec:48:9b:c6: da:6c:1f:38:0c:36:f9:da:55:01:93:fc:23:ce:85: 6f:bd:a8:ee:cf:8e:33:4e:40:69:e5:a3:66:b7:86: e9:3a:e3:ef:3c:8e:6c:dd:07:99:df:c3:39:3d:59: bb:9c:cf:43:76:db:69:57:ed:3f:a7:f5:4f:95:99: 32:17:4a:96:f3:d5:12:34:fb:7a:79:b4:db:c1:03: 69:f4:f1:78:5e:22:e0:cb:0c:ca:d7:61:11:d6:7a: f0:72:ad:59:8e:50:5f:55:d0:c3:f6:83:1e:00:b1: 8f:23:bc:db:96:52:b3:b8:f0:29:0c:f6:71:3e:c1: ae:22:9a:d2:83:8c:81:6c:1c:da:52:6e:36:2a:b1: 8c:56:4a:3b:62:3a:71:8b:c1:06:2f:d8:16:5a:45: 2e:ee:8e:18:af:22:3e:72:16:0b:12:7c:4f:22:f5: 25:f0:3f:42:20:dc:88:5f:e3:cb:67:52:3d:b3:ce: e8:b8:76:dd:c2:a5:53:e2:1b:19:6d:e9:59:5f:a9: a8:4c:f1:7f:bc:72:59:35:55:e2:c2:c2:1e:dd:f2: 1d:75:55:93:2e:92:90:50:a9:e5:26:85:73:9a:2c: c2:37:e5:9f:db:42:84:ff:c1:d4:95:86:96:79:ff: fe:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:14:0A:CB:65:DE:62:3D:3D:05:60:F1:76:31:50:E4:B9:D5:BF:67 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:1000::/48 Signature Algorithm: sha256WithRSAEncryption 37:d0:72:6e:f1:93:d3:99:8b:ab:48:8a:17:97:32:7e:ee:f5: ac:66:dc:c6:d8:bd:9c:8f:ea:c1:dd:9a:a6:ec:05:bb:97:35: a0:ab:bb:46:b3:f3:33:39:28:24:d0:33:24:07:c3:aa:d7:9a: 44:6b:97:9f:f4:9a:38:51:c7:ae:70:e7:90:fc:0f:5a:d5:37: 17:f5:03:8d:90:de:d3:b4:8c:51:51:60:dc:62:5f:36:4d:36: a9:c1:0e:91:8d:17:dc:52:2a:90:9b:ac:e3:27:17:04:f6:44: ba:a6:30:7e:3d:86:1c:9e:c7:f0:f8:a4:67:fc:03:6d:25:a0: 2f:70:f8:a2:aa:ca:09:40:63:e0:7a:72:fe:be:38:e5:68:31: 29:5a:52:19:c8:d0:b6:76:5e:8d:5a:88:22:00:79:aa:33:fa: 6c:c2:63:9c:7f:d2:56:8f:91:4d:a8:8f:1a:c6:64:be:f2:b2: 8f:e1:09:e5:de:8e:a6:e9:8e:2b:be:5b:3d:6b:1a:9a:88:2b: de:96:85:f6:4d:af:17:77:25:64:07:3f:4e:2c:52:31:c7:9b: 4f:96:21:a7:eb:dd:cd:50:3c:1e:b3:a9:e0:d6:03:d0:35:ed: da:21:dd:0a:59:69:57:16:02:fb:1c:94:70:2c:c8:2b:ca:5c: 03:cd:cd:57 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFYM+WNU8d5l4D5Ch+EOCEFCu+h0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxMzAwMDkzMloX DTI3MDExMTIzNTk1OVowejFJMEcGA1UEBRNAM2RhMjU2Mzg4ZGI5YzlmNzkwMDZi MzY4ZGYwMGZkMzdjM2Q5ODU0ZTI5MTEzZmI5NjllYjFjMDA3Zjk4YWRjODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jtWTUkE7YGnTuxIm8babB84DDb5 2lUBk/wjzoVvvajuz44zTkBp5aNmt4bpOuPvPI5s3QeZ38M5PVm7nM9DdttpV+0/ p/VPlZkyF0qW89USNPt6ebTbwQNp9PF4XiLgywzK12ER1nrwcq1ZjlBfVdDD9oMe ALGPI7zbllKzuPApDPZxPsGuIprSg4yBbBzaUm42KrGMVko7Yjpxi8EGL9gWWkUu 7o4YryI+chYLEnxPIvUl8D9CINyIX+PLZ1I9s87ouHbdwqVT4hsZbelZX6moTPF/ vHJZNVXiwsIe3fIddVWTLpKQUKnlJoVzmizCN+Wf20KE/8HUlYaWef/+KQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFQUCstl3mI9PQVg8XYxUOS51b9nMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBhYjljZmZiLTUwZWItNDE5Ni1hNGIyLWU2M2E0ZGExNGM1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9hAAMA0GCSqGSIb3DQEBCwUAA4IBAQA30HJu8ZPTmYurSIoX lzJ+7vWsZtzG2L2cj+rB3Zqm7AW7lzWgq7tGs/MzOSgk0DMkB8Oq15pEa5ef9Jo4 UceucOeQ/A9a1TcX9QONkN7TtIxRUWDcYl82TTapwQ6RjRfcUiqQm6zjJxcE9kS6 pjB+PYYcnsfw+KRn/ANtJaAvcPiiqsoJQGPgenL+vjjlaDEpWlIZyNC2dl6NWogi AHmqM/pswmOcf9JWj5FNqI8axmS+8rKP4Qnl3o6m6Y4rvls9axqaiCveloX2Ta8X dyVkBz9OLFIxx5tPliGn693NUDwes6ng1gPQNe3aId0KWWlXFgL7HJRwLMgrylwD zc1X -----END CERTIFICATE-----Generated at Thu Nov 5 05:11:19 2026 by rpki-client