$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/124c546b-d995-4fdf-978d-19217a16b0c7.roa File: 124c546b-d995-4fdf-978d-19217a16b0c7.roa (raw, json) Hash identifier: MBdwDo6LqbJ0zDi75GaxNa99QSdMtIiDk7wHktfB0ns= Subject key identifier: 00:01:49:F7:36:19:9E:42:D8:E9:E2:BD:11:BD:D3:65:40:A6:9B:BE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 25B060A9FE8ABEFBE437456ED6E34F5B18ED1587 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/124c546b-d995-4fdf-978d-19217a16b0c7.roa Signing time: Tue 20 Oct 2026 00:10:08 +0000 ROA not before: Tue 20 Oct 2026 00:10:08 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da10:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b0:60:a9:fe:8a:be:fb:e4:37:45:6e:d6:e3:4f:5b:18:ed:15:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:10:08 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=4b8fcc2bc276d3d21d0c728710d926bf14a31085d43a9de980ac7c10ee92ae09, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:92:f4:1c:c2:77:f3:60:97:1d:a2:5b:ee:6b: 03:14:d4:91:69:29:b7:6c:c4:c8:3e:62:26:04:f5: f0:0f:9b:13:54:4d:34:1b:16:17:68:90:71:a1:ef: a5:a9:6f:2a:8b:2f:e9:40:70:dd:3c:a2:a5:3d:f8: ca:fe:19:b7:cc:e1:aa:93:00:f5:b0:2d:55:25:c0: c2:ff:99:05:22:93:22:30:c3:4d:53:fc:86:28:ff: 38:f7:72:ee:d5:1a:ba:4f:be:e1:6c:4e:a9:66:85: b1:35:0c:6b:a8:2b:4a:b1:c7:55:f0:4d:58:cd:1e: 16:a2:6c:56:8c:0a:d2:10:e8:cb:6f:fd:96:27:45: 85:54:8c:f6:45:e5:bb:b2:36:67:9e:ff:49:a3:b3: 33:2b:4d:97:06:e7:d3:ba:14:56:f7:ef:56:36:2d: 54:ac:f2:43:aa:fe:e7:88:2e:68:1c:9d:5a:eb:d8: c6:77:32:6f:ac:03:85:6c:a5:d0:62:84:e4:e1:86: 08:57:72:55:e4:a5:01:81:b7:17:ac:bf:ef:0e:74: 18:79:09:1c:86:85:99:6c:81:43:4e:df:0d:aa:81: 16:c1:2a:e9:67:ff:b6:c7:9d:b0:01:9c:be:e6:5f: b6:c8:59:de:1a:5c:f8:d1:05:7b:98:fb:e4:3c:44: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:01:49:F7:36:19:9E:42:D8:E9:E2:BD:11:BD:D3:65:40:A6:9B:BE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/124c546b-d995-4fdf-978d-19217a16b0c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da10:8000::/38 Signature Algorithm: sha256WithRSAEncryption 2a:10:d7:9e:28:aa:df:e2:4b:4b:21:a1:c5:86:e9:5e:e1:f6: 73:49:ad:41:ae:ef:20:36:6a:8a:3a:67:7f:a4:d9:da:d6:e3: 03:09:1b:5d:52:1c:09:53:63:5e:3a:60:89:46:bf:e3:7c:41: 18:84:18:d6:df:90:ef:b0:c6:d4:60:1d:00:8e:31:6e:5a:23: a9:51:db:48:80:09:76:df:fd:65:93:f1:5f:5d:57:7a:ab:61: d4:57:b2:c9:78:01:06:31:32:d9:09:c2:6b:ba:b8:98:d1:96: 4a:f2:d7:92:10:86:f7:d4:19:f2:d8:e5:fc:da:ab:ec:ad:b6: a9:29:a9:84:84:b3:69:bd:40:8e:3b:2f:af:1a:95:59:99:af: d3:4f:70:34:af:28:91:ce:e7:5e:53:1b:c1:90:f5:ec:a4:6e: 0f:54:b9:bc:a8:bd:03:86:0c:fe:31:ea:b7:75:c8:99:52:14: 15:be:7c:0a:4c:b4:3c:6b:3d:67:f4:86:48:68:30:ea:59:66: 2d:cc:3c:fa:60:e7:4b:a3:95:5c:6d:eb:a7:ec:55:9e:9a:65: 45:c8:f5:89:08:a0:27:de:c7:1e:ed:f8:44:37:cd:27:ef:68: cd:cf:01:86:37:d2:fe:f6:79:4d:b6:92:2c:f8:9e:e9:d1:6b: 1a:f0:8c:a6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJbBgqf6KvvvkN0Vu1uNPWxjtFYcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMTAwOFoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNANGI4ZmNjMmJjMjc2ZDNkMjFkMGM3 Mjg3MTBkOTI2YmYxNGEzMTA4NWQ0M2E5ZGU5ODBhYzdjMTBlZTkyYWUwOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JL0HMJ382CXHaJb7msDFNSRaSm3 bMTIPmImBPXwD5sTVE00GxYXaJBxoe+lqW8qiy/pQHDdPKKlPfjK/hm3zOGqkwD1 sC1VJcDC/5kFIpMiMMNNU/yGKP8493Lu1Rq6T77hbE6pZoWxNQxrqCtKscdV8E1Y zR4WomxWjArSEOjLb/2WJ0WFVIz2ReW7sjZnnv9Jo7MzK02XBufTuhRW9+9WNi1U rPJDqv7niC5oHJ1a69jGdzJvrAOFbKXQYoTk4YYIV3JV5KUBgbcXrL/vDnQYeQkc hoWZbIFDTt8NqoEWwSrpZ/+2x52wAZy+5l+2yFneGlz40QV7mPvkPETuIwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAABSfc2GZ5C2OnivRG902VAppu+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEyNGM1NDZiLWQ5OTUtNGZkZi05NzhkLTE5MjE3YTE2YjBjNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEIAwDQYJKoZIhvcNAQELBQADggEBACoQ154oqt/iS0shocWG 6V7h9nNJrUGu7yA2aoo6Z3+k2drW4wMJG11SHAlTY146YIlGv+N8QRiEGNbfkO+w xtRgHQCOMW5aI6lR20iACXbf/WWT8V9dV3qrYdRXssl4AQYxMtkJwmu6uJjRlkry 15IQhvfUGfLY5fzaq+yttqkpqYSEs2m9QI47L68alVmZr9NPcDSvKJHO515TG8GQ 9eykbg9UubyovQOGDP4x6rd1yJlSFBW+fApMtDxrPWf0hkhoMOpZZi3MPPpg50uj lVxt66fsVZ6aZUXI9YkIoCfexx7t+EQ3zSfvaM3PAYY30v72eU22kiz4nunRaxrw jKY= -----END CERTIFICATE-----Generated at Thu Nov 5 17:15:18 2026 by rpki-client