$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/11e5f675-e1ee-4c13-9838-84428fcc5fd2.roa File: 11e5f675-e1ee-4c13-9838-84428fcc5fd2.roa (raw, json) Hash identifier: HZKeBmJ/VpZbw9CNZSwP443CxDHAcgPDGsiDzCCNwzE= Subject key identifier: 50:70:04:B3:32:AE:C9:F0:A4:5F:A8:27:B2:6A:F5:46:2D:F8:54:DB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2C0D94AFB7921C26D093E1604E770CA882CCBFC6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/11e5f675-e1ee-4c13-9838-84428fcc5fd2.roa Signing time: Mon 19 Oct 2026 00:10:49 +0000 ROA not before: Mon 19 Oct 2026 00:10:49 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:2800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0d:94:af:b7:92:1c:26:d0:93:e1:60:4e:77:0c:a8:82:cc:bf:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:10:49 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=fb9d44475c9e14406bebaa22309121b99dbefc1030571d76c683ccab9873a02a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9a:64:a2:23:6f:75:05:48:4f:f4:b4:c5:fb: 57:14:5b:3e:3f:44:2b:10:ee:ce:59:3f:6e:9d:eb: ad:0c:2c:dc:ef:17:95:75:fc:e0:ee:31:36:78:b5: 75:0e:26:fb:8b:c8:a8:79:f1:97:d9:8d:41:c1:14: 70:24:28:3b:1f:6e:60:b4:ce:e5:64:54:a6:3f:f1: c5:53:38:63:23:28:a0:56:52:66:79:27:34:3f:44: 1d:76:1c:0c:4e:6d:e0:e0:c5:7b:43:47:2d:d9:cf: 1b:1b:02:1e:76:2e:ca:37:2d:af:dc:ff:48:88:e9: fd:fb:55:66:3d:c1:4b:9b:09:ef:3b:6f:16:69:4b: a9:6f:fb:ff:64:3f:0a:0e:70:23:53:44:b0:5d:00: 40:7a:a8:d1:40:75:8e:4a:a9:e7:24:8b:55:61:d9: bf:02:dc:bf:8f:c8:6a:8f:2f:54:30:de:da:cd:34: 60:df:f8:8a:05:ce:ec:8b:f8:ae:46:4e:a1:ab:be: 3a:c2:6a:18:d3:47:11:0c:b3:23:48:d1:69:2a:c3: 35:8c:93:a6:c1:6e:87:0e:27:3a:45:96:0f:49:5a: bd:31:33:53:3f:56:3d:b3:1e:2b:7c:17:3a:dc:a9: ab:38:ad:6e:73:81:02:75:c8:c3:08:d3:33:70:8d: ea:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:70:04:B3:32:AE:C9:F0:A4:5F:A8:27:B2:6A:F5:46:2D:F8:54:DB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/11e5f675-e1ee-4c13-9838-84428fcc5fd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:2800::/48 Signature Algorithm: sha256WithRSAEncryption 3b:44:9e:37:3c:d5:c9:b9:48:f6:53:f5:49:a9:74:e5:26:ab: 1c:f1:99:c3:29:4e:52:62:fc:fe:44:39:58:e3:dc:dc:95:2b: f8:3e:e2:41:fc:94:4b:d4:f3:4c:f1:3e:0b:93:fe:91:c6:18: f3:93:92:a1:70:b6:f0:d6:12:d0:6d:3f:83:11:b4:5b:b7:41: e1:10:93:ba:ba:66:17:c2:4e:99:5d:20:51:32:1a:14:4e:9d: ff:31:ce:0a:46:28:cb:44:21:07:d4:b9:17:4b:12:6f:45:ee: 39:83:94:b6:d0:a4:01:ea:d8:dc:d4:af:c5:c6:45:35:17:8e: 46:ba:33:b0:90:88:71:f3:bb:29:82:a3:fb:29:28:3d:82:8c: 12:98:eb:70:03:29:b3:d2:c0:ae:be:be:fb:0e:19:bb:8b:1d: 2d:2e:2f:8c:f6:e8:4c:97:d4:3b:82:88:ef:0e:cc:c1:74:bb: c4:7d:7d:c5:68:1c:12:56:74:98:25:86:92:f5:51:8e:b1:e9: d6:37:d3:7c:47:82:8f:86:28:cd:da:9a:77:f8:b2:a1:c3:65: 42:ee:af:2c:27:75:2c:c4:2b:88:49:ed:b5:33:9e:a4:18:eb: 5b:43:e4:2d:0a:6a:f8:bc:cf:6a:8e:39:bc:ce:34:12:12:1c: 01:4d:61:bf -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULA2Ur7eSHCbQk+FgTncMqILMv8YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxOTAwMTA0OVoX DTI3MDExNzIzNTk1OVowejFJMEcGA1UEBRNAZmI5ZDQ0NDc1YzllMTQ0MDZiZWJh YTIyMzA5MTIxYjk5ZGJlZmMxMDMwNTcxZDc2YzY4M2NjYWI5ODczYTAyYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JpkoiNvdQVIT/S0xftXFFs+P0Qr EO7OWT9uneutDCzc7xeVdfzg7jE2eLV1Dib7i8ioefGX2Y1BwRRwJCg7H25gtM7l ZFSmP/HFUzhjIyigVlJmeSc0P0QddhwMTm3g4MV7Q0ct2c8bGwIedi7KNy2v3P9I iOn9+1VmPcFLmwnvO28WaUupb/v/ZD8KDnAjU0SwXQBAeqjRQHWOSqnnJItVYdm/ Aty/j8hqjy9UMN7azTRg3/iKBc7si/iuRk6hq746wmoY00cRDLMjSNFpKsM1jJOm wW6HDic6RZYPSVq9MTNTP1Y9sx4rfBc63KmrOK1uc4ECdcjDCNMzcI3qYQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFBwBLMyrsnwpF+oJ7Jq9UYt+FTbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzExZTVmNjc1LWUxZWUtNGMxMy05ODM4LTg0NDI4ZmNjNWZkMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7CgAMA0GCSqGSIb3DQEBCwUAA4IBAQA7RJ43PNXJuUj2U/VJ qXTlJqsc8ZnDKU5SYvz+RDlY49zclSv4PuJB/JRL1PNM8T4Lk/6Rxhjzk5KhcLbw 1hLQbT+DEbRbt0HhEJO6umYXwk6ZXSBRMhoUTp3/Mc4KRijLRCEH1LkXSxJvRe45 g5S20KQB6tjc1K/FxkU1F45GujOwkIhx87spgqP7KSg9gowSmOtwAymz0sCuvr77 Dhm7ix0tLi+M9uhMl9Q7gojvDszBdLvEfX3FaBwSVnSYJYaS9VGOsenWN9N8R4KP hijN2pp3+LKhw2VC7q8sJ3UsxCuISe21M56kGOtbQ+QtCmr4vM9qjjm8zjQSEhwB TWG/ -----END CERTIFICATE-----Generated at Thu Nov 5 16:25:05 2026 by rpki-client