$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa File: 23ecebb0-098e-41b3-815b-beadfef6484a.roa (raw, json) Hash identifier: omZoiMm63x7k1vY8XylVXV1PVCKn2rZxSCbTq5GvSMw= Subject key identifier: C2:DF:75:B2:8C:E4:00:66:04:6F:3D:FB:28:EC:0E:3C:F3:D5:6B:46 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 39EC214DA3199152BA50C7D6E6DB662D4E1719A4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa Signing time: Tue 20 Oct 2026 00:09:24 +0000 ROA not before: Tue 20 Oct 2026 00:09:24 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ec:21:4d:a3:19:91:52:ba:50:c7:d6:e6:db:66:2d:4e:17:19:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:09:24 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=773bd30778a85f91cf5f7ed02ebd2fb2c7bf255141754fe6d4778c7d5d8979c6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:92:42:b0:37:52:7f:95:8e:b4:f7:c3:26:c9: 6d:6f:c7:ef:fb:c3:05:a5:44:93:97:13:40:e8:c8: 15:1d:70:86:ef:6a:c3:fc:6b:ce:14:1e:00:a6:1b: 38:93:4b:8c:b0:55:61:07:db:c5:4c:22:f4:a3:3b: c6:da:dd:fd:82:5a:33:18:1e:78:3b:b5:07:65:95: e0:13:3e:1e:48:8f:2d:e9:70:91:fa:07:26:70:a0: 12:92:22:c2:d8:51:ac:98:55:0b:fb:a8:f2:7e:bd: 28:53:df:5e:ac:b5:55:24:00:fc:b3:5f:9c:f4:73: 25:48:f8:9f:d6:53:a6:16:8e:95:cf:68:99:40:19: ca:9e:5e:d6:c1:ba:69:26:fd:a6:c6:aa:f7:4b:90: 09:e7:5f:af:95:1e:81:da:63:2b:a9:e3:58:de:91: 87:1f:93:80:bc:8e:f4:f6:d5:7d:63:b2:c3:ac:17: 59:74:95:d6:9e:be:12:c3:19:ce:03:47:f8:b4:79: 06:52:2c:45:b5:3a:8d:ce:02:59:3a:5e:58:ba:6b: f8:4b:54:dd:9f:89:6d:90:2d:98:00:cd:3e:c2:08: d9:42:c5:f0:6a:38:f3:02:48:df:1d:cd:cf:a5:57: 1b:bb:2e:7d:d3:21:65:ca:04:38:cb:3c:77:8f:f5: 70:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DF:75:B2:8C:E4:00:66:04:6F:3D:FB:28:EC:0E:3C:F3:D5:6B:46 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6::/32 Signature Algorithm: sha256WithRSAEncryption 95:6d:6f:94:17:2e:02:eb:42:39:12:e2:20:78:13:24:65:01: 87:bb:43:51:cd:2b:01:7e:e5:d1:1f:1e:de:7a:99:8c:30:79: 28:6c:37:87:91:f3:c5:f1:75:7d:76:81:9f:95:6b:70:02:c0: 5f:63:cc:0a:82:ba:87:88:7c:1b:db:8d:25:9f:9c:c3:a0:5d: 66:93:68:69:37:a4:2d:fd:96:a8:61:34:de:33:fe:ae:ea:a7: a1:2a:45:77:26:44:a1:94:02:bd:04:a9:46:2a:d6:60:1f:f7: ac:0a:ef:19:81:1a:dd:da:b7:fa:27:87:ad:93:08:91:d9:c4: 40:b6:d6:33:9e:6a:7a:45:1e:7f:d4:a6:a8:d5:91:34:b1:bd: dc:20:0c:3b:53:c0:7f:45:9a:d3:8c:8e:e4:2f:24:99:bf:59: 9e:8c:63:ee:d0:f4:29:8a:b7:2c:03:0c:87:f6:27:7c:7d:ff: e6:ea:fa:7c:b2:61:75:68:b5:c6:2d:ae:66:0e:4a:4e:f1:0f: 35:6c:04:0c:0b:7b:e6:43:26:ca:57:7e:d5:86:41:6f:0f:4a: 54:2e:3c:fd:e0:a1:5b:86:02:d7:c8:d8:07:9d:7b:ff:e5:40: 2e:aa:8e:50:3c:00:a8:28:38:35:3c:7d:94:a5:42:0e:32:56: 2e:f3:92:84 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUOewhTaMZkVK6UMfW5ttmLU4XGaQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMDkyNFoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNANzczYmQzMDc3OGE4NWY5MWNmNWY3 ZWQwMmViZDJmYjJjN2JmMjU1MTQxNzU0ZmU2ZDQ3NzhjN2Q1ZDg5NzljNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZJCsDdSf5WOtPfDJsltb8fv+8MF pUSTlxNA6MgVHXCG72rD/GvOFB4Aphs4k0uMsFVhB9vFTCL0ozvG2t39glozGB54 O7UHZZXgEz4eSI8t6XCR+gcmcKASkiLC2FGsmFUL+6jyfr0oU99erLVVJAD8s1+c 9HMlSPif1lOmFo6Vz2iZQBnKnl7WwbppJv2mxqr3S5AJ51+vlR6B2mMrqeNY3pGH H5OAvI709tV9Y7LDrBdZdJXWnr4SwxnOA0f4tHkGUixFtTqNzgJZOl5Yumv4S1Td n4ltkC2YAM0+wgjZQsXwajjzAkjfHc3PpVcbuy590yFlygQ4yzx3j/VwnwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFMLfdbKM5ABmBG89+yjsDjzz1WtGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzZWNlYmIwLTA5OGUtNDFiMy04MTViLWJlYWRmZWY2NDg0YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba9jANBgkqhkiG9w0BAQsFAAOCAQEAlW1vlBcuAutCORLiIHgT JGUBh7tDUc0rAX7l0R8e3nqZjDB5KGw3h5HzxfF1fXaBn5VrcALAX2PMCoK6h4h8 G9uNJZ+cw6BdZpNoaTekLf2WqGE03jP+ruqnoSpFdyZEoZQCvQSpRirWYB/3rArv GYEa3dq3+ieHrZMIkdnEQLbWM55qekUef9SmqNWRNLG93CAMO1PAf0Wa04yO5C8k mb9Znoxj7tD0KYq3LAMMh/YnfH3/5ur6fLJhdWi1xi2uZg5KTvEPNWwEDAt75kMm yld+1YZBbw9KVC48/eChW4YC18jYB517/+VALqqOUDwAqCg4NTx9lKVCDjJWLvOS hA== -----END CERTIFICATE-----Generated at Thu Nov 5 05:16:08 2026 by rpki-client