$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1bc66f2e-41cb-465a-add7-471e408dd01e.roa File: 1bc66f2e-41cb-465a-add7-471e408dd01e.roa (raw, json) Hash identifier: ITSxcVsvWqBJl+gszzWa5gKj2CiOJyvIIGohCfUAYOw= Subject key identifier: 14:42:C8:2F:69:00:F8:44:05:B9:B9:BA:28:42:3C:02:11:84:35:6E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6F2B9AD53EA9FB49CB51F484B55BFC11919ED0E8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1bc66f2e-41cb-465a-add7-471e408dd01e.roa Signing time: Tue 20 Oct 2026 00:08:51 +0000 ROA not before: Tue 20 Oct 2026 00:08:51 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2b:9a:d5:3e:a9:fb:49:cb:51:f4:84:b5:5b:fc:11:91:9e:d0:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:08:51 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=a368b0e66ea3a253af3c26c1cd2bb164ab2340878872aafc0ae7a60257140fb6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:59:45:65:52:3e:33:af:20:81:14:40:48:c9: 50:87:8c:94:ca:e9:17:63:ed:a4:89:29:36:7f:2d: 7f:10:e1:33:7b:61:52:ab:d5:6f:95:fe:b8:f4:27: 84:e4:2b:7b:57:8e:f8:60:4c:23:ce:9c:60:8d:56: cf:fa:28:49:11:d1:ea:b3:66:d6:a1:45:8a:c1:2d: 75:f3:b2:df:21:62:db:f1:fd:2c:13:59:1f:96:e2: ac:a8:56:ed:10:b6:be:36:8b:63:d3:1d:78:32:46: b0:31:98:4b:70:9b:31:a8:78:16:c5:b2:10:ff:35: bd:97:5c:78:a3:ee:3a:5a:be:d0:06:54:b0:0d:39: c2:86:90:b6:cf:0c:c3:66:67:25:16:93:61:26:1f: ec:4a:3e:4d:d0:3e:bb:5d:18:b2:8e:18:61:17:56: e8:05:51:c5:b3:39:5d:bf:ae:d7:b7:5f:04:82:8d: 1c:45:52:e3:11:d3:33:f7:6c:eb:9d:59:a9:67:06: 4c:8a:86:fd:29:86:76:b3:a9:fc:c3:4e:8e:f6:66: 8f:25:c4:44:41:50:c8:49:4b:11:91:32:10:c1:5e: 7d:66:65:08:c0:10:2b:d8:4b:69:00:d4:d3:f7:60: b2:6b:ac:1d:3c:73:d5:90:27:f0:80:c1:f4:f1:74: 71:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:42:C8:2F:69:00:F8:44:05:B9:B9:BA:28:42:3C:02:11:84:35:6E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1bc66f2e-41cb-465a-add7-471e408dd01e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:8000::/36 Signature Algorithm: sha256WithRSAEncryption 8a:15:c3:76:83:4d:61:05:c8:48:58:ee:d7:cb:f3:67:14:54: 28:0f:9e:95:7d:df:7a:09:8e:d6:90:67:90:7f:3d:2d:c9:58: c6:70:8b:0c:f8:a6:bb:72:d9:df:84:dc:34:2d:6f:f3:9b:2f: 55:b9:f2:a5:6a:b9:cf:bc:d3:fd:a1:0d:c7:35:d0:b4:af:f1: b6:08:cc:10:e4:20:67:ff:e9:1d:e4:f2:3c:80:96:79:95:a9: 68:cf:14:61:79:2d:5a:4c:0c:fb:09:05:41:9c:92:2c:0b:e3: 23:80:cd:ec:87:d4:c6:67:2f:32:ea:6e:61:2e:23:8b:58:1a: 37:88:38:85:e9:ed:e8:de:2d:c5:40:19:1f:e7:74:3a:bb:ee: 90:db:a1:dc:8f:28:a4:0d:4c:ab:ac:df:26:b0:a0:19:ca:53: 8e:dd:23:d7:ae:0e:7c:25:73:d8:8c:1c:71:ad:35:ed:59:97: 19:96:45:d0:29:ff:17:a9:57:16:7e:be:a9:3a:2c:3c:8f:08: 6e:fd:20:c2:19:3f:93:78:9c:c3:21:5d:d2:da:be:c1:6d:8d: ec:28:e1:2e:48:64:84:6c:ac:96:4b:d6:0d:ff:61:29:40:76: e1:66:87:87:a6:98:4e:af:ee:c1:22:27:58:01:b5:fd:6f:c3: f6:59:26:f3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbyua1T6p+0nLUfSEtVv8EZGe0OgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMDg1MVoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAYTM2OGIwZTY2ZWEzYTI1M2FmM2My NmMxY2QyYmIxNjRhYjIzNDA4Nzg4NzJhYWZjMGFlN2E2MDI1NzE0MGZiNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFlFZVI+M68ggRRASMlQh4yUyukX Y+2kiSk2fy1/EOEze2FSq9Vvlf649CeE5Ct7V474YEwjzpxgjVbP+ihJEdHqs2bW oUWKwS1187LfIWLb8f0sE1kfluKsqFbtELa+Notj0x14MkawMZhLcJsxqHgWxbIQ /zW9l1x4o+46Wr7QBlSwDTnChpC2zwzDZmclFpNhJh/sSj5N0D67XRiyjhhhF1bo BVHFszldv67Xt18Ego0cRVLjEdMz92zrnVmpZwZMiob9KYZ2s6n8w06O9maPJcRE QVDISUsRkTIQwV59ZmUIwBAr2EtpANTT92Cya6wdPHPVkCfwgMH08XRxFwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBRCyC9pAPhEBbm5uihCPAIRhDVuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFiYzY2ZjJlLTQxY2ItNDY1YS1hZGQ3LTQ3MWU0MDhkZDAxZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaFIAwDQYJKoZIhvcNAQELBQADggEBAIoVw3aDTWEFyEhY7tfL 82cUVCgPnpV933oJjtaQZ5B/PS3JWMZwiwz4prty2d+E3DQtb/ObL1W58qVquc+8 0/2hDcc10LSv8bYIzBDkIGf/6R3k8jyAlnmVqWjPFGF5LVpMDPsJBUGckiwL4yOA zeyH1MZnLzLqbmEuI4tYGjeIOIXp7ejeLcVAGR/ndDq77pDbodyPKKQNTKus3yaw oBnKU47dI9euDnwlc9iMHHGtNe1ZlxmWRdAp/xepVxZ+vqk6LDyPCG79IMIZP5N4 nMMhXdLavsFtjewo4S5IZIRsrJZL1g3/YSlAduFmh4emmE6v7sEiJ1gBtf1vw/ZZ JvM= -----END CERTIFICATE-----Generated at Thu Nov 5 15:20:09 2026 by rpki-client