$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1582ee0d-11ea-4495-97e5-0ed825ba8ee2.roa File: 1582ee0d-11ea-4495-97e5-0ed825ba8ee2.roa (raw, json) Hash identifier: h5ew7bBk7X7DzCU4G7H6NS7Zk1hqpUK7vRjsxi6kS28= Subject key identifier: 3C:30:6F:0E:B4:40:77:AA:C9:B5:67:BC:9D:30:CD:EC:E2:2E:43:3D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2F7AE2B35F52E4B75CF3E94838D2927CF9772484 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1582ee0d-11ea-4495-97e5-0ed825ba8ee2.roa Signing time: Sun 18 Oct 2026 00:10:06 +0000 ROA not before: Sun 18 Oct 2026 00:10:06 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:7a:e2:b3:5f:52:e4:b7:5c:f3:e9:48:38:d2:92:7c:f9:77:24:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:10:06 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=e8ae39ce7fbc5cbcd43d476d0637467aa6b3411b86e9f35fc49cf64602c2baa6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:84:29:c0:52:a2:3e:22:af:6d:2e:da:63: 6c:ad:a4:dd:a9:90:97:15:2c:cf:d7:d3:0b:e5:fe: 55:af:36:07:7a:25:cd:94:ef:97:62:d1:f7:da:d4: ed:ca:b4:e3:74:94:03:76:37:79:6e:39:73:29:7f: 3f:10:ce:8d:8f:ca:b6:72:1d:37:88:53:55:d3:78: a4:dc:e6:a9:d3:cb:80:96:3d:c4:db:40:b0:55:97: 80:4c:1f:8f:21:8c:a4:79:c7:69:5b:19:34:6c:55: 55:97:1b:05:76:2d:38:72:df:36:4b:20:4d:55:8a: cd:9c:e6:fd:50:d4:34:27:4b:bc:af:72:70:c8:e8: ed:25:56:dd:73:e3:f8:fd:ae:26:40:f7:45:d6:e2: c7:52:6b:4e:de:63:ef:a6:cb:0c:13:53:93:b7:11: 66:86:85:7f:4d:0e:bd:ad:fa:c3:2a:f0:12:16:fe: 71:1a:85:b9:b3:62:46:4c:cb:f3:90:2d:b2:d5:52: 85:61:6f:bc:4b:25:16:f5:8a:32:03:d7:07:4e:9c: 3b:ec:60:07:1c:25:fb:6c:1d:66:2e:c4:a4:fd:e1: cd:9d:cb:8f:1e:08:ba:16:15:07:8e:97:d2:6c:21: 4b:90:34:05:99:07:73:df:69:2f:bc:72:4b:db:db: ca:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:30:6F:0E:B4:40:77:AA:C9:B5:67:BC:9D:30:CD:EC:E2:2E:43:3D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1582ee0d-11ea-4495-97e5-0ed825ba8ee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4020::/48 Signature Algorithm: sha256WithRSAEncryption 24:c3:ce:30:c5:00:8c:04:7c:b4:0d:ec:84:61:10:26:d2:6b: a0:90:1b:2d:55:40:d8:8f:b7:1f:65:40:15:5b:ce:a6:be:16: b1:29:b7:db:b3:ef:a9:74:45:1a:62:a3:8a:c0:d9:7b:cc:16: 53:da:09:c1:47:0b:b7:94:3d:81:22:48:ac:5e:e9:15:82:87: c2:66:ed:19:4c:e5:e6:3e:49:f1:1e:4e:6c:64:0c:73:ac:dc: 7c:d4:80:95:f5:02:4a:10:c5:8f:38:11:9b:a6:af:fc:d2:26: 43:69:38:4c:ef:dc:3d:68:66:c0:9c:81:6b:6c:67:bb:5e:ac: 7b:64:65:87:2d:3b:c0:f2:69:ec:1b:84:7e:75:49:d0:13:be: bf:61:e9:a5:d0:96:57:e0:40:25:89:d2:fc:3a:73:94:8d:97: 69:0a:1f:b3:98:e8:6f:a4:d3:05:44:48:fa:19:ec:f9:4e:0f: 8a:6b:8b:0f:82:93:d6:0e:2c:34:86:ca:7d:dd:f8:30:bc:1b: 0b:42:16:f6:47:f3:34:83:e2:89:0f:76:31:1f:c3:96:d0:94: 64:8f:d1:c5:77:30:10:1e:44:53:99:1e:95:e7:fb:d3:d4:f2: a3:c5:d8:46:40:f3:26:a5:6b:cb:01:e2:48:35:f4:8c:39:5e: 0d:da:1b:d4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUL3ris19S5Ldc8+lIONKSfPl3JIQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxODAwMTAwNloX DTI3MDExNjIzNTk1OVowejFJMEcGA1UEBRNAZThhZTM5Y2U3ZmJjNWNiY2Q0M2Q0 NzZkMDYzNzQ2N2FhNmIzNDExYjg2ZTlmMzVmYzQ5Y2Y2NDYwMmMyYmFhNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhuEKcBSoj4ir20u2mNsraTdqZCX FSzP19ML5f5VrzYHeiXNlO+XYtH32tTtyrTjdJQDdjd5bjlzKX8/EM6Nj8q2ch03 iFNV03ik3Oap08uAlj3E20CwVZeATB+PIYykecdpWxk0bFVVlxsFdi04ct82SyBN VYrNnOb9UNQ0J0u8r3JwyOjtJVbdc+P4/a4mQPdF1uLHUmtO3mPvpssME1OTtxFm hoV/TQ69rfrDKvASFv5xGoW5s2JGTMvzkC2y1VKFYW+8SyUW9YoyA9cHTpw77GAH HCX7bB1mLsSk/eHNncuPHgi6FhUHjpfSbCFLkDQFmQdz32kvvHJL29vKWwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDwwbw60QHeqybVnvJ0wzeziLkM9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE1ODJlZTBkLTExZWEtNDQ5NS05N2U1LTBlZDgyNWJhOGVlMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8kAgMA0GCSqGSIb3DQEBCwUAA4IBAQAkw84wxQCMBHy0DeyE YRAm0mugkBstVUDYj7cfZUAVW86mvhaxKbfbs++pdEUaYqOKwNl7zBZT2gnBRwu3 lD2BIkisXukVgofCZu0ZTOXmPknxHk5sZAxzrNx81ICV9QJKEMWPOBGbpq/80iZD aThM79w9aGbAnIFrbGe7Xqx7ZGWHLTvA8mnsG4R+dUnQE76/Yeml0JZX4EAlidL8 OnOUjZdpCh+zmOhvpNMFREj6Gez5Tg+Ka4sPgpPWDiw0hsp93fgwvBsLQhb2R/M0 g+KJD3YxH8OW0JRkj9HFdzAQHkRTmR6V5/vT1PKjxdhGQPMmpWvLAeJINfSMOV4N 2hvU -----END CERTIFICATE-----Generated at Mon Nov 9 06:31:29 2026 by rpki-client