$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f055c02-2080-48ab-ac59-2a4bcea40040.roa File: 0f055c02-2080-48ab-ac59-2a4bcea40040.roa (raw, json) Hash identifier: bCNTyvmqC52wztl9LG6UtbxRzrwXdF5AP+tsmuMdZP0= Subject key identifier: 2C:5F:BF:9C:39:2B:B0:54:FD:08:DE:22:2B:01:A0:C2:BD:58:1F:69 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6800ABDB17C9077EA3447949FFCC77466A3DDB9F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f055c02-2080-48ab-ac59-2a4bcea40040.roa Signing time: Fri 06 Nov 2026 00:02:12 +0000 ROA not before: Fri 06 Nov 2026 00:02:12 +0000 ROA not after: Thu 04 Feb 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da33:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Nov 2026 00:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:00:ab:db:17:c9:07:7e:a3:44:79:49:ff:cc:77:46:6a:3d:db:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 6 00:02:12 2026 GMT Not After : Feb 4 23:59:59 2027 GMT Subject: serialNumber=232ec98cde6eddfda190194dd614081a6bd6d796e6933177424658bb91ba6704, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ef:5a:9f:90:92:d0:ba:b5:32:ff:e8:e5:53: 8a:79:fe:26:93:28:a6:ab:fa:ed:0f:c6:e3:1c:e5: 9b:38:32:2e:b3:d3:7d:9a:9f:3e:6c:e5:65:84:cd: e0:8a:5b:69:55:33:f8:17:9e:7c:ff:93:8c:fc:04: c9:9c:84:e3:83:7f:77:4e:d2:d9:92:2c:3f:5f:95: b5:ea:00:e4:41:27:02:c7:4c:ce:37:8a:56:c4:75: 8b:df:91:55:64:dd:5c:a0:13:08:d6:bf:b7:77:a4: 64:af:9b:fa:ca:25:7e:da:29:1c:6e:8d:b3:df:e1: 8d:bc:c6:a2:df:6f:a2:ab:90:f6:b9:0f:1f:12:71: db:d3:a2:f7:9c:17:6b:f3:67:48:27:d4:91:c5:99: 50:f2:61:e4:ca:3f:14:e0:e3:1e:f4:83:f5:53:22: 2c:3d:e3:9f:26:37:18:1e:22:e0:32:18:2c:ab:c6: 07:fd:63:06:78:d0:51:1a:c9:da:2d:5f:7f:e2:fb: 76:59:74:bd:c8:89:a8:02:54:6c:d9:0a:a3:61:10: fa:74:73:57:d1:e7:0b:f4:41:65:a6:f2:87:78:97: de:f4:28:a0:c0:54:9c:0c:72:e9:a7:17:e1:1c:12: 81:ec:4a:5e:89:9e:a6:7b:92:f1:2f:f2:0b:cc:b0: fa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5F:BF:9C:39:2B:B0:54:FD:08:DE:22:2B:01:A0:C2:BD:58:1F:69 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f055c02-2080-48ab-ac59-2a4bcea40040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da33:2800::/40 Signature Algorithm: sha256WithRSAEncryption 46:fa:f6:3e:b4:c0:0d:73:94:7a:b1:9e:d4:42:0b:8b:4c:d7: f2:48:f1:83:ee:11:23:b4:f2:b5:ec:a3:39:6a:77:6d:12:c1: 28:65:f8:17:d1:fd:87:21:e0:70:89:b5:71:aa:f1:bd:ed:03: a7:38:51:0a:27:84:28:ff:8a:2e:cf:44:9e:e2:ba:af:54:b9: 73:66:6a:56:76:47:b5:66:78:56:b5:99:5d:04:73:ec:6e:57: 68:24:e5:a2:8e:84:da:d1:39:da:d9:9b:fd:23:a5:08:33:6e: 3d:82:91:14:93:c4:e8:a4:ae:24:07:ee:66:73:b8:e2:61:66: 78:3c:f3:b6:6a:6a:cb:46:85:42:e9:12:79:eb:fd:2f:d3:02: a3:93:50:d3:bd:0b:e4:49:47:ca:06:cc:2b:55:07:e7:63:8a: 3b:fd:be:b3:1d:85:98:24:98:aa:1d:e2:3d:da:9b:ef:50:f3: 20:c4:fa:98:57:d2:58:78:08:8f:70:d5:16:92:d9:bf:f8:f5: df:54:98:4b:d6:dd:c3:0b:0d:1e:6c:c7:e2:d6:59:fb:44:05: 28:26:e7:68:a8:7f:63:b4:f9:e0:d2:33:de:87:30:c8:88:56: 07:20:b4:3b:18:ef:3d:7c:5a:0d:1d:00:8b:60:f2:26:4a:87: d3:a1:bc:fe -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaACr2xfJB36jRHlJ/8x3Rmo9258wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTEwNjAwMDIxMloX DTI3MDIwNDIzNTk1OVowejFJMEcGA1UEBRNAMjMyZWM5OGNkZTZlZGRmZGExOTAx OTRkZDYxNDA4MWE2YmQ2ZDc5NmU2OTMzMTc3NDI0NjU4YmI5MWJhNjcwNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke9an5CS0Lq1Mv/o5VOKef4mkyim q/rtD8bjHOWbODIus9N9mp8+bOVlhM3giltpVTP4F558/5OM/ATJnITjg393TtLZ kiw/X5W16gDkQScCx0zON4pWxHWL35FVZN1coBMI1r+3d6Rkr5v6yiV+2ikcbo2z 3+GNvMai32+iq5D2uQ8fEnHb06L3nBdr82dIJ9SRxZlQ8mHkyj8U4OMe9IP1UyIs PeOfJjcYHiLgMhgsq8YH/WMGeNBRGsnaLV9/4vt2WXS9yImoAlRs2QqjYRD6dHNX 0ecL9EFlpvKHeJfe9CigwFScDHLppxfhHBKB7EpeiZ6me5LxL/ILzLD6MwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCxfv5w5K7BU/QjeIisBoMK9WB9pMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmMDU1YzAyLTIwODAtNDhhYi1hYzU5LTJhNGJjZWE0MDA0MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMygwDQYJKoZIhvcNAQELBQADggEBAEb69j60wA1zlHqxntRC C4tM1/JI8YPuESO08rXsozlqd20SwShl+BfR/Ych4HCJtXGq8b3tA6c4UQonhCj/ ii7PRJ7iuq9UuXNmalZ2R7VmeFa1mV0Ec+xuV2gk5aKOhNrROdrZm/0jpQgzbj2C kRSTxOikriQH7mZzuOJhZng887ZqastGhULpEnnr/S/TAqOTUNO9C+RJR8oGzCtV B+djijv9vrMdhZgkmKod4j3am+9Q8yDE+phX0lh4CI9w1RaS2b/49d9UmEvW3cML DR5sx+LWWftEBSgm52iof2O0+eDSM96HMMiIVgcgtDsY7z18Wg0dAItg8iZKh9Oh vP4= -----END CERTIFICATE-----Generated at Tue Nov 10 14:53:41 2026 by rpki-client