$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0da4a99b-3c57-490a-9459-d794057a96b2.roa File: 0da4a99b-3c57-490a-9459-d794057a96b2.roa (raw, json) Hash identifier: gces1EfOEN6T7zAPLqT0gXvB0WJ/Mngt7wJsS6328QM= Subject key identifier: 43:6B:12:60:40:01:FB:B7:88:E8:F5:B4:A1:BE:D7:1E:A6:AB:0B:51 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 66F13A6FCD11B0B1B8CB666FE8FB25B8F805EAFE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0da4a99b-3c57-490a-9459-d794057a96b2.roa Signing time: Mon 12 Oct 2026 00:08:44 +0000 ROA not before: Mon 12 Oct 2026 00:08:44 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:a020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Nov 2026 00:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f1:3a:6f:cd:11:b0:b1:b8:cb:66:6f:e8:fb:25:b8:f8:05:ea:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 12 00:08:44 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=dd3d00afca0eb4d3bc3af0197fe97d4254052bc634c4bb0e3c6670c2cdc2b591, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f4:13:37:da:93:e7:73:d7:05:fd:b1:34:c6: e2:4f:2d:8b:b4:da:4e:86:94:e7:98:93:49:2b:6d: cd:ef:b3:65:45:7d:37:1a:44:10:4e:f1:0d:18:29: a8:fe:10:00:e0:05:67:f1:fe:8f:6a:97:e7:8e:43: fd:8e:ae:02:c0:d6:42:ac:b4:6a:af:a0:71:82:45: a5:f1:ee:6f:95:78:c1:a5:f1:58:59:bb:14:9c:3d: 84:98:9b:75:2f:d0:e6:0a:cb:c9:be:39:af:75:42: dd:3c:8a:ce:37:1a:3e:02:16:7a:30:13:b6:81:7e: ea:6d:56:25:1d:c8:d0:58:f8:36:9a:87:45:df:15: fa:ed:54:ed:a3:84:e6:c1:3e:67:31:f5:09:78:c2: 0b:dc:a0:2e:7e:a7:bf:77:4d:3b:28:34:b6:68:4e: 47:56:f1:2c:d9:46:c1:2e:ec:2b:a3:36:12:55:ed: b8:c9:1e:90:73:40:fc:1a:36:fb:93:73:fa:10:96: 53:2a:6c:0a:d9:c6:8a:86:c3:9c:82:da:7d:6f:46: ff:e0:96:bb:ae:fa:b1:38:1d:ea:e2:79:77:d7:50: 5a:b4:b4:b4:ad:87:80:4e:79:1c:a3:bd:3b:15:0e: 9b:7c:fd:20:46:e6:70:ea:6a:56:ba:12:70:49:05: a8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6B:12:60:40:01:FB:B7:88:E8:F5:B4:A1:BE:D7:1E:A6:AB:0B:51 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0da4a99b-3c57-490a-9459-d794057a96b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:a020::/48 Signature Algorithm: sha256WithRSAEncryption 2e:84:53:ec:30:6d:b6:f9:62:21:5c:28:35:e0:4a:e2:bf:a9: a7:49:b3:b0:29:87:1a:3e:d8:a6:98:3b:cb:23:35:eb:7c:68: 1f:1b:2f:d1:a5:af:08:d5:06:fb:69:25:77:ca:b7:0f:95:52: 19:86:7f:54:cb:70:cc:0a:f5:95:1e:2c:5f:12:92:e0:7c:c1: ed:98:c4:54:83:8e:48:cd:53:0b:fd:fc:d7:ff:df:1e:96:2c: f4:54:11:85:72:34:5e:ca:d9:e1:79:69:40:fd:59:eb:ca:1e: 12:e4:99:d1:98:3b:af:b6:77:06:38:4a:f7:2e:78:c0:b7:94: 2b:6b:1c:f4:d5:ec:25:32:28:d9:08:cd:55:6a:7e:09:db:51: 12:1d:24:ab:33:e4:a9:0a:45:04:fd:17:5b:ed:76:77:b2:04: a4:14:54:94:ee:b3:d2:0c:ca:61:d1:63:0c:9f:b9:e2:28:3e: 09:57:73:72:80:47:5e:2f:9a:bd:c9:48:a0:37:33:9e:af:d2: 79:49:b7:22:3a:a3:69:6e:f4:8b:34:cd:f5:67:1a:44:7c:df: 59:9c:85:7f:4c:8e:d0:bb:da:89:54:ce:b0:82:d8:2f:d9:22: e7:1e:eb:a8:d3:7c:da:88:fa:6e:5a:bd:47:99:09:a0:4a:81: be:5e:ad:07 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZvE6b80RsLG4y2Zv6PsluPgF6v4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxMjAwMDg0NFoX DTI3MDExMDIzNTk1OVowejFJMEcGA1UEBRNAZGQzZDAwYWZjYTBlYjRkM2JjM2Fm MDE5N2ZlOTdkNDI1NDA1MmJjNjM0YzRiYjBlM2M2NjcwYzJjZGMyYjU5MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/QTN9qT53PXBf2xNMbiTy2LtNpO hpTnmJNJK23N77NlRX03GkQQTvENGCmo/hAA4AVn8f6PapfnjkP9jq4CwNZCrLRq r6BxgkWl8e5vlXjBpfFYWbsUnD2EmJt1L9DmCsvJvjmvdULdPIrONxo+AhZ6MBO2 gX7qbVYlHcjQWPg2modF3xX67VTto4TmwT5nMfUJeMIL3KAufqe/d007KDS2aE5H VvEs2UbBLuwrozYSVe24yR6Qc0D8Gjb7k3P6EJZTKmwK2caKhsOcgtp9b0b/4Ja7 rvqxOB3q4nl311BatLS0rYeATnkco707FQ6bfP0gRuZw6mpWuhJwSQWohQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFENrEmBAAfu3iOj1tKG+1x6mqwtRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBkYTRhOTliLTNjNTctNDkwYS05NDU5LWQ3OTQwNTdhOTZiMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/6AgMA0GCSqGSIb3DQEBCwUAA4IBAQAuhFPsMG22+WIhXCg1 4Eriv6mnSbOwKYcaPtimmDvLIzXrfGgfGy/Rpa8I1Qb7aSV3yrcPlVIZhn9Uy3DM CvWVHixfEpLgfMHtmMRUg45IzVML/fzX/98eliz0VBGFcjReytnheWlA/Vnryh4S 5JnRmDuvtncGOEr3LnjAt5Qraxz01ewlMijZCM1Van4J21ESHSSrM+SpCkUE/Rdb 7XZ3sgSkFFSU7rPSDMph0WMMn7niKD4JV3NygEdeL5q9yUigNzOer9J5SbciOqNp bvSLNM31ZxpEfN9ZnIV/TI7Qu9qJVM6wgtgv2SLnHuuo03zaiPpuWr1HmQmgSoG+ Xq0H -----END CERTIFICATE-----Generated at Mon Nov 9 23:29:47 2026 by rpki-client