$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa File: 0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa (raw, json) Hash identifier: QxoFqnqxCG0Wg5tY21qfFunDgBLB12aXvnlFQqfYzjo= Subject key identifier: 04:D8:AA:84:1D:86:8C:FC:EF:32:7F:D2:81:E9:A1:DC:04:60:D0:64 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 376A3AF79BA9AB71742F7C738B4167927D9A2896 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa Signing time: Sun 18 Oct 2026 00:11:00 +0000 ROA not before: Sun 18 Oct 2026 00:11:00 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6a:3a:f7:9b:a9:ab:71:74:2f:7c:73:8b:41:67:92:7d:9a:28:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:11:00 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=36f17f1df7acb51d3b501d5d9f060e49353bd7ce19ba4105059728306c6da379, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:5f:79:98:2c:6d:70:98:e0:7e:ea:28:4e: 61:7c:52:b3:b6:2b:08:7c:fb:b1:26:50:3e:a1:0f: 55:ec:e6:a9:b3:be:6c:77:b9:50:ce:03:12:6c:74: 2e:10:0f:bc:37:11:4a:9f:c6:e3:9b:f9:92:12:4c: 91:87:2f:97:d0:cb:bb:17:2e:b5:34:4d:0c:bf:a0: c3:aa:e4:04:ad:67:23:f1:51:d2:8e:e7:2a:ab:1f: f8:6e:1c:33:96:d6:95:25:d5:1c:90:f4:b9:c7:22: 74:46:33:88:ec:d7:ee:06:b8:cc:21:ef:de:32:e6: 91:8e:35:d0:d4:e0:be:69:c7:68:04:41:ff:74:6b: 11:f6:48:2a:de:73:e0:5e:04:07:e7:a3:1b:c0:87: 42:a1:fe:e1:47:60:db:ac:68:63:07:8c:88:36:75: f1:b4:7b:df:12:a9:f2:93:b4:67:82:47:b5:79:83: e1:97:1d:34:8c:0b:ac:59:40:be:ec:fe:70:be:55: 9c:23:18:e6:12:2f:ae:27:9f:13:9b:77:3e:e6:23: c6:20:7c:41:fe:a6:37:f3:88:6c:73:51:fb:10:13: bd:37:a4:de:24:a6:b9:61:d3:ae:71:89:2c:c7:20: fb:50:2b:f7:a8:46:5a:95:14:9b:f9:be:7a:8e:90: 89:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D8:AA:84:1D:86:8C:FC:EF:32:7F:D2:81:E9:A1:DC:04:60:D0:64 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:1080::/48 Signature Algorithm: sha256WithRSAEncryption 1a:4b:ab:6b:6e:06:43:4c:0f:58:ab:5a:3b:ab:28:97:fa:8e: 05:7a:bb:b4:3e:58:31:cd:0b:c9:a0:ef:34:67:2d:a1:8d:d1: 90:76:1b:22:a7:ee:cd:69:fa:03:a8:e7:87:29:9e:f4:1c:74: 96:47:fe:06:57:7a:1e:44:83:a8:40:5c:00:10:f2:67:3e:f6: 69:d6:4c:2f:8e:05:2a:ec:2d:f6:c6:98:50:75:26:d2:37:22: 0c:45:d2:3e:d8:06:7c:15:44:88:2c:a7:70:7c:99:d1:af:ed: b2:da:90:6b:90:c9:f8:ca:97:d8:b4:39:88:eb:13:0f:35:f7: 8b:79:d7:7a:d0:e4:1c:9b:5e:54:aa:5f:53:4f:f0:7f:ec:e6: 51:17:df:1e:03:45:16:f1:43:60:5b:2c:df:c6:b6:55:23:09: 73:84:39:01:49:c7:41:8e:e5:a0:a3:df:a7:6a:7c:55:41:65: 70:9c:63:b4:55:c7:32:9f:21:20:3e:3a:ec:a3:ae:e8:7b:9f: 85:39:ee:37:f3:94:6e:51:e0:18:18:19:3a:1a:1a:71:42:c1: 00:34:e3:f2:94:b3:cd:ca:79:6f:a6:74:a4:5e:ae:d4:65:e7: 56:1b:77:16:6b:aa:01:bd:e3:1f:9a:04:b5:14:15:cc:a6:c5: cf:53:6a:86 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUN2o695upq3F0L3xzi0Fnkn2aKJYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxODAwMTEwMFoX DTI3MDExNjIzNTk1OVowejFJMEcGA1UEBRNAMzZmMTdmMWRmN2FjYjUxZDNiNTAx ZDVkOWYwNjBlNDkzNTNiZDdjZTE5YmE0MTA1MDU5NzI4MzA2YzZkYTM3OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb9feZgsbXCY4H7qKE5hfFKztisI fPuxJlA+oQ9V7Oaps75sd7lQzgMSbHQuEA+8NxFKn8bjm/mSEkyRhy+X0Mu7Fy61 NE0Mv6DDquQErWcj8VHSjucqqx/4bhwzltaVJdUckPS5xyJ0RjOI7NfuBrjMIe/e MuaRjjXQ1OC+acdoBEH/dGsR9kgq3nPgXgQH56MbwIdCof7hR2DbrGhjB4yINnXx tHvfEqnyk7Rngke1eYPhlx00jAusWUC+7P5wvlWcIxjmEi+uJ58Tm3c+5iPGIHxB /qY384hsc1H7EBO9N6TeJKa5YdOucYksxyD7UCv3qEZalRSb+b56jpCJ+wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFATYqoQdhoz87zJ/0oHpodwEYNBkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBlNzRkNGZhLTI3NjgtNGFhMi1hZDVlLWU2MmVkMmI1MDg1OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8hCAMA0GCSqGSIb3DQEBCwUAA4IBAQAaS6trbgZDTA9Yq1o7 qyiX+o4Feru0PlgxzQvJoO80Zy2hjdGQdhsip+7NafoDqOeHKZ70HHSWR/4GV3oe RIOoQFwAEPJnPvZp1kwvjgUq7C32xphQdSbSNyIMRdI+2AZ8FUSILKdwfJnRr+2y 2pBrkMn4ypfYtDmI6xMPNfeLedd60OQcm15Uql9TT/B/7OZRF98eA0UW8UNgWyzf xrZVIwlzhDkBScdBjuWgo9+nanxVQWVwnGO0VccynyEgPjrso67oe5+FOe4385Ru UeAYGBk6GhpxQsEANOPylLPNynlvpnSkXq7UZedWG3cWa6oBveMfmgS1FBXMpsXP U2qG -----END CERTIFICATE-----Generated at Thu Nov 5 15:18:28 2026 by rpki-client