$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/266d96b0-d687-4442-ba06-b5d8fd944b82.roa File: 266d96b0-d687-4442-ba06-b5d8fd944b82.roa (raw, json) Hash identifier: JgLAjSDrIkN7UwUCt7+J2Vxwf0f8u+e0facvi9FesWc= Subject key identifier: 54:D0:F3:09:DE:44:F5:0D:BB:A2:B3:85:73:4D:B1:47:56:5E:FE:B1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5121AB4A50737C8E53F8910ABA784661F36852D4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/266d96b0-d687-4442-ba06-b5d8fd944b82.roa Signing time: Thu 29 Oct 2026 00:02:45 +0000 ROA not before: Thu 29 Oct 2026 00:02:45 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:21:ab:4a:50:73:7c:8e:53:f8:91:0a:ba:78:46:61:f3:68:52:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:02:45 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=58f336be07a504efbe099267c244e291c9f9780c37473ae79f3a8b7805f5fd05, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:99:d7:90:94:b8:d0:32:6b:b0:6a:86:3c:4a: be:9d:e6:7d:ba:f7:5d:98:00:5a:84:2a:f6:55:a9: 07:9c:08:b4:99:9a:ed:87:98:d3:18:5d:cd:a2:d7: f2:58:44:44:e1:f0:05:ca:84:35:66:b6:fc:60:f9: 46:54:5a:e5:21:23:96:81:c0:10:f0:3b:52:b9:89: e0:52:89:45:ea:74:89:73:84:be:eb:4a:04:7b:03: ef:74:28:bf:d1:fc:70:6e:15:38:88:6d:5f:92:6a: 0a:c7:c7:0b:71:66:6d:94:92:4a:8d:13:c6:e3:8a: 9f:fc:d8:3a:00:43:73:9c:25:69:1c:bf:03:16:2e: 75:2b:62:4a:67:0c:a2:42:4a:8e:4d:9d:d5:77:da: e1:6d:c5:bc:4b:52:83:8f:87:80:be:78:3a:45:96: 4f:e6:b6:45:74:a5:05:2b:59:f4:e1:49:7f:c9:63: 4f:4c:0a:c3:b7:62:d7:53:4f:8c:85:6e:35:f7:2d: cb:2a:53:00:18:80:b5:d7:0b:d3:c3:99:54:b0:69: ed:ac:53:cd:37:8d:16:47:8c:51:78:32:7c:49:7d: e6:cd:1a:50:6c:5d:dc:c3:39:0c:e6:8a:7a:bd:7c: 4a:dd:2c:37:69:55:67:7e:54:20:d8:11:de:32:d8: 34:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D0:F3:09:DE:44:F5:0D:BB:A2:B3:85:73:4D:B1:47:56:5E:FE:B1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/266d96b0-d687-4442-ba06-b5d8fd944b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:b000::/40 Signature Algorithm: sha256WithRSAEncryption 56:f6:e8:83:09:4d:2f:b2:e3:82:4c:b4:29:aa:df:23:53:77: e2:c1:96:ad:f2:ea:2b:4c:bd:16:d7:bd:f9:75:b9:83:09:27: 91:25:0f:20:12:0d:94:d3:19:b6:cb:b1:d3:bc:ef:f5:c3:a8: 18:38:0f:4f:fd:38:cb:31:58:d8:65:ff:6a:7e:36:23:45:e5: e9:c7:1c:de:2d:d5:bc:61:6b:cb:87:ce:5a:36:54:b4:15:a3: 16:60:aa:23:43:6b:e7:c4:fd:9e:79:5c:04:dc:bd:c9:47:ed: ff:76:5d:29:70:07:9a:28:e1:d6:4d:2d:09:a1:30:b7:29:c0: b5:8c:d2:b9:d8:69:bc:11:73:3a:36:1a:46:db:1e:da:c4:6a: 63:8a:9d:69:96:c4:cc:e0:d9:c0:8e:f9:7a:dc:53:6f:be:e6: 27:d0:a5:b7:98:0f:39:b6:59:66:79:8c:e5:f0:bd:71:19:b1: 17:0e:f5:b8:7a:97:e0:b6:c6:f6:e7:db:a7:10:d9:b1:5b:3b: f7:fd:ca:99:7a:dc:70:af:08:d6:8d:94:05:95:76:ec:ec:0e: 4b:43:2a:ed:a3:a6:db:50:4a:2d:c4:1e:27:92:f3:9d:5a:ac: 22:97:c8:2c:79:ea:78:4d:39:0f:6a:f4:16:0e:42:72:70:b7: a5:e8:0e:b9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUSGrSlBzfI5T+JEKunhGYfNoUtQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyOTAwMDI0NVoX DTI3MDEyNzIzNTk1OVowejFJMEcGA1UEBRNANThmMzM2YmUwN2E1MDRlZmJlMDk5 MjY3YzI0NGUyOTFjOWY5NzgwYzM3NDczYWU3OWYzYThiNzgwNWY1ZmQwNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pnXkJS40DJrsGqGPEq+neZ9uvdd mABahCr2VakHnAi0mZrth5jTGF3NotfyWERE4fAFyoQ1Zrb8YPlGVFrlISOWgcAQ 8DtSuYngUolF6nSJc4S+60oEewPvdCi/0fxwbhU4iG1fkmoKx8cLcWZtlJJKjRPG 44qf/Ng6AENznCVpHL8DFi51K2JKZwyiQkqOTZ3Vd9rhbcW8S1KDj4eAvng6RZZP 5rZFdKUFK1n04Ul/yWNPTArDt2LXU0+MhW419y3LKlMAGIC11wvTw5lUsGntrFPN N40WR4xReDJ8SX3mzRpQbF3cwzkM5op6vXxK3Sw3aVVnflQg2BHeMtg0zwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFTQ8wneRPUNu6KzhXNNsUdWXv6xMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI2NmQ5NmIwLWQ2ODctNDQ0Mi1iYTA2LWI1ZDhmZDk0NGI4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYbAwDQYJKoZIhvcNAQELBQADggEBAFb26IMJTS+y44JMtCmq 3yNTd+LBlq3y6itMvRbXvfl1uYMJJ5ElDyASDZTTGbbLsdO87/XDqBg4D0/9OMsx WNhl/2p+NiNF5enHHN4t1bxha8uHzlo2VLQVoxZgqiNDa+fE/Z55XATcvclH7f92 XSlwB5oo4dZNLQmhMLcpwLWM0rnYabwRczo2GkbbHtrEamOKnWmWxMzg2cCO+Xrc U2++5ifQpbeYDzm2WWZ5jOXwvXEZsRcO9bh6l+C2xvbn26cQ2bFbO/f9ypl63HCv CNaNlAWVduzsDktDKu2jpttQSi3EHieS851arCKXyCx56nhNOQ9q9BYOQnJwt6Xo Drk= -----END CERTIFICATE-----Generated at Thu Nov 5 05:15:52 2026 by rpki-client