$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1633925d-77e5-4142-aee7-593dea039740.roa File: 1633925d-77e5-4142-aee7-593dea039740.roa (raw, json) Hash identifier: /uTd+DN5IWsdApGOFasMRWmFcMb5F090WSAG9UVemoY= Subject key identifier: 0F:89:EC:81:FE:34:1A:73:15:0A:CD:77:53:55:AF:EA:50:15:F6:40 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4196B9208ED0CAF71229CCFC5A14FADAEE5673CA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1633925d-77e5-4142-aee7-593dea039740.roa Signing time: Thu 15 Oct 2026 00:07:42 +0000 ROA not before: Thu 15 Oct 2026 00:07:42 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:96:b9:20:8e:d0:ca:f7:12:29:cc:fc:5a:14:fa:da:ee:56:73:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:07:42 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=8136c8e77db213006704274bb7d41dacae6a5910e881b46c03917a55ed9beafd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:48:10:7a:ca:26:62:86:e2:ea:4b:95:23:77: 17:57:86:f8:0d:fa:b8:c0:8d:c6:a7:48:e0:9c:13: af:9f:5b:ee:72:3e:54:64:ab:ce:f4:77:8b:f5:cd: f1:a4:1d:b1:05:df:55:f5:6f:74:ca:80:4d:56:53: f0:63:bb:1d:5e:82:ee:bf:87:c9:46:61:e2:ae:a1: 4f:15:43:51:1f:b5:8a:d0:02:6f:4b:66:b9:46:44: 85:81:ab:e4:e6:eb:eb:24:09:af:3e:fd:51:5a:7a: 08:f0:8b:55:2b:5d:db:ca:ee:5c:b8:a2:74:86:cc: ef:fa:14:d1:55:e4:89:66:9b:9f:dc:f6:33:65:e5: a5:c1:ee:d8:0f:96:af:c6:22:44:a1:50:14:ba:2e: 45:a6:27:c9:96:03:e0:19:8b:9d:86:32:ef:62:47: 3c:76:6f:32:fb:4f:c0:cb:47:8f:3f:1e:79:b3:73: 1c:a5:17:32:fc:ae:7b:d0:cd:fc:3d:a5:ef:64:f5: 3b:37:13:47:6f:8b:f8:1a:31:6d:5f:07:af:76:2c: 6e:0c:66:3d:49:cf:c5:a2:ba:ee:9d:8e:13:f6:40: 9b:d6:d0:bf:b6:55:f4:fa:31:3d:67:95:41:6a:1c: 36:7c:ac:b3:11:c3:90:72:68:71:49:5b:70:43:2a: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:89:EC:81:FE:34:1A:73:15:0A:CD:77:53:55:AF:EA:50:15:F6:40 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1633925d-77e5-4142-aee7-593dea039740.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:f000::/40 Signature Algorithm: sha256WithRSAEncryption 1d:cf:e3:3b:d3:2a:87:46:bc:99:e4:ca:aa:6d:01:e9:70:c4: 53:f1:f4:76:ff:e3:be:6f:bc:fc:73:22:f3:51:bb:be:53:7f: cc:b5:e0:40:23:db:6d:21:ef:d8:32:d7:2c:ad:ba:5e:a7:f7: be:cc:16:55:96:ef:99:bd:5d:73:be:2c:db:6e:34:b0:99:79: 17:ba:19:3d:ed:9d:7b:e9:f4:27:d0:38:ca:c3:b6:37:d6:f4: 78:75:78:ec:b4:c4:d9:f8:a8:4a:08:06:a3:4a:86:16:de:95: a7:c5:0e:15:45:4c:5e:80:dd:3e:92:c0:2a:b6:50:b0:b1:e2: 1d:59:5a:94:3c:33:ca:c5:9a:7d:0b:1b:eb:46:d5:06:ec:5f: 39:e4:d8:b4:a0:24:1a:c8:27:11:c7:6b:7c:2b:23:86:ee:bf: e7:0a:96:83:07:84:88:52:fc:eb:79:77:a6:8f:7f:05:b3:2a: 5d:eb:44:b6:e7:7f:29:6e:6d:b8:f1:52:11:e4:2c:2e:6d:00: fc:6b:37:1f:5f:b5:86:91:fd:f5:ea:41:a8:1b:da:be:01:07: 6f:76:f1:7a:fe:40:7c:8f:ad:b2:f1:e2:cd:65:72:5b:07:da: aa:4a:09:9d:4f:9b:0b:2f:4a:7f:0f:38:81:83:48:0c:0d:a9: c3:89:55:78 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQZa5II7QyvcSKcz8WhT62u5Wc8owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxNTAwMDc0MloX DTI3MDExMzIzNTk1OVowejFJMEcGA1UEBRNAODEzNmM4ZTc3ZGIyMTMwMDY3MDQy NzRiYjdkNDFkYWNhZTZhNTkxMGU4ODFiNDZjMDM5MTdhNTVlZDliZWFmZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/EgQesomYobi6kuVI3cXV4b4Dfq4 wI3Gp0jgnBOvn1vucj5UZKvO9HeL9c3xpB2xBd9V9W90yoBNVlPwY7sdXoLuv4fJ RmHirqFPFUNRH7WK0AJvS2a5RkSFgavk5uvrJAmvPv1RWnoI8ItVK13byu5cuKJ0 hszv+hTRVeSJZpuf3PYzZeWlwe7YD5avxiJEoVAUui5FpifJlgPgGYudhjLvYkc8 dm8y+0/Ay0ePPx55s3McpRcy/K570M38PaXvZPU7NxNHb4v4GjFtXwevdixuDGY9 Sc/ForrunY4T9kCb1tC/tlX0+jE9Z5VBahw2fKyzEcOQcmhxSVtwQyr09wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFA+J7IH+NBpzFQrNd1NVr+pQFfZAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE2MzM5MjVkLTc3ZTUtNDE0Mi1hZWU3LTU5M2RlYTAzOTc0MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9vAwDQYJKoZIhvcNAQELBQADggEBAB3P4zvTKodGvJnkyqpt AelwxFPx9Hb/475vvPxzIvNRu75Tf8y14EAj220h79gy1yytul6n977MFlWW75m9 XXO+LNtuNLCZeRe6GT3tnXvp9CfQOMrDtjfW9Hh1eOy0xNn4qEoIBqNKhhbelafF DhVFTF6A3T6SwCq2ULCx4h1ZWpQ8M8rFmn0LG+tG1QbsXznk2LSgJBrIJxHHa3wr I4buv+cKloMHhIhS/Ot5d6aPfwWzKl3rRLbnfylubbjxUhHkLC5tAPxrNx9ftYaR /fXqQagb2r4BB2928Xr+QHyPrbLx4s1lclsH2qpKCZ1PmwsvSn8POIGDSAwNqcOJ VXg= -----END CERTIFICATE-----Generated at Thu Nov 5 11:24:35 2026 by rpki-client