$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30b671bd-156b-4a81-a500-a0a4b031317e.roa File: 30b671bd-156b-4a81-a500-a0a4b031317e.roa (raw, json) Hash identifier: RvfmyK/YHsVu0Ubba1geTAbFTyoejo93n5ZC5n+CTQM= Subject key identifier: A8:6E:0D:7E:5A:F2:0D:57:F2:D7:59:1F:9A:96:D4:BB:DE:09:F3:DE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C31D6A9C6E0B5835B49A64CA237B46E8105C7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30b671bd-156b-4a81-a500-a0a4b031317e.roa Signing time: Sun 18 Oct 2026 00:10:17 +0000 ROA not before: Sun 18 Oct 2026 00:10:17 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:6020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Nov 2026 00:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:31:d6:a9:c6:e0:b5:83:5b:49:a6:4c:a2:37:b4:6e:81:05:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:10:17 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=076fb8e4f5f5098648c44ce91e71b22e602e6ef3972e92355c8febb195b18ff4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:d0:3e:75:31:f1:39:ed:bc:16:fc:d4:19: 32:5b:0d:8a:91:32:2f:12:df:58:c9:61:6d:29:bf: 62:7a:29:f3:e4:62:5e:1f:65:a3:11:b9:83:ff:ee: 15:7a:0f:ba:d8:7d:a5:c6:f4:5c:7a:78:a4:33:46: e3:c3:9d:56:dc:32:4f:88:4d:77:63:6c:76:04:21: 53:98:33:99:60:f8:ca:83:c2:78:e4:39:2c:be:a5: 56:41:ff:8e:2b:a4:ce:6b:bf:5e:16:e0:7d:36:db: 34:e6:ca:40:6c:e3:36:31:a2:9b:6f:71:8f:d1:2e: f6:fb:db:fd:a1:fa:0f:b8:8d:30:63:b0:d0:35:10: 6f:25:61:0f:6b:a9:a2:63:3a:18:75:5d:99:46:de: ec:f8:64:d3:cf:4c:31:99:69:18:ff:3a:86:54:90: 75:21:9b:e0:7d:1e:03:5d:81:f1:ed:69:3e:cc:40: 95:5d:8f:f3:e1:c8:28:f8:49:d6:14:ff:e7:3b:a0: 05:fc:c0:6b:37:3c:2b:c0:37:10:99:ce:44:72:bf: 68:8f:32:8f:75:64:ee:8c:94:95:13:76:1a:6b:f6: a1:94:bd:82:5f:d8:4e:5d:20:bb:26:eb:4f:ef:b9: e2:55:37:cc:c2:61:b5:76:c6:e5:ed:39:e4:52:f9: cf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6E:0D:7E:5A:F2:0D:57:F2:D7:59:1F:9A:96:D4:BB:DE:09:F3:DE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30b671bd-156b-4a81-a500-a0a4b031317e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:6020::/48 Signature Algorithm: sha256WithRSAEncryption b5:e4:96:f7:b7:43:f9:d7:b9:94:98:f5:5d:c3:d6:fc:5d:43: 36:c6:9a:02:17:7c:86:17:90:3e:e4:c1:ce:a4:57:9e:35:af: 84:8b:17:f2:ec:7a:1f:05:09:a8:41:73:9c:68:20:5e:d9:5b: 78:fa:1c:a9:a7:f1:0f:e8:d9:fe:3e:89:33:eb:61:4f:38:f6: bf:b2:d2:88:e7:e3:ee:3c:e9:fb:42:ea:dc:90:68:da:47:ac: 5e:44:1d:30:7b:a8:a4:f7:bb:a0:63:0e:77:ee:cc:a3:ca:03: d6:66:bb:f7:99:19:8a:ba:8c:1e:70:bf:05:93:a1:24:96:8c: ee:68:29:36:6d:8a:7e:df:5b:5b:a3:96:86:74:2a:8e:21:4e: ad:53:57:20:0b:3a:bc:e2:c5:e3:73:47:97:e5:14:a1:f2:6e: d6:dc:1f:3d:13:e7:b4:c8:0a:e7:6f:ba:35:50:f8:fd:ae:19: e3:5c:6f:91:c1:df:67:b4:ed:c6:2a:b9:c4:52:cc:3f:71:c5: 40:d7:00:18:c1:c1:b0:54:39:4e:87:0e:53:35:fc:62:7a:d5: 3a:37:62:55:81:b7:07:d9:f7:3b:a1:82:e1:11:ff:73:05:cc: eb:de:27:e0:08:a6:06:61:dc:29:59:a0:00:e9:bd:1e:ab:a1: 03:96:81:11 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgITPDHWqcbgtYNbSaZMoje0boEFxzANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjYxMDE4MDAxMDE3WhcN MjcwMTE2MjM1OTU5WjB6MUkwRwYDVQQFE0AwNzZmYjhlNGY1ZjUwOTg2NDhjNDRj ZTkxZTcxYjIyZTYwMmU2ZWYzOTcyZTkyMzU1YzhmZWJiMTk1YjE4ZmY0MS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoTtA+dTHxOe28FvzUGTJbDYqRMi8S 31jJYW0pv2J6KfPkYl4fZaMRuYP/7hV6D7rYfaXG9Fx6eKQzRuPDnVbcMk+ITXdj bHYEIVOYM5lg+MqDwnjkOSy+pVZB/44rpM5rv14W4H022zTmykBs4zYxoptvcY/R Lvb72/2h+g+4jTBjsNA1EG8lYQ9rqaJjOhh1XZlG3uz4ZNPPTDGZaRj/OoZUkHUh m+B9HgNdgfHtaT7MQJVdj/PhyCj4SdYU/+c7oAX8wGs3PCvANxCZzkRyv2iPMo91 ZO6MlJUTdhpr9qGUvYJf2E5dILsm60/vueJVN8zCYbV2xuXtOeRS+c95AgMBAAGj ggJLMIICRzAdBgNVHQ4EFgQUqG4NflryDVfy11kfmpbUu94J894wHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv MzBiNjcxYmQtMTU2Yi00YTgxLWE1MDAtYTBhNGIwMzEzMTdlLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkBtoAYCAwDQYJKoZIhvcNAQELBQADggEBALXklve3Q/nXuZSY9V3D 1vxdQzbGmgIXfIYXkD7kwc6kV541r4SLF/Lseh8FCahBc5xoIF7ZW3j6HKmn8Q/o 2f4+iTPrYU849r+y0ojn4+486ftC6tyQaNpHrF5EHTB7qKT3u6BjDnfuzKPKA9Zm u/eZGYq6jB5wvwWToSSWjO5oKTZtin7fW1ujloZ0Ko4hTq1TVyALOrzixeNzR5fl FKHybtbcHz0T57TICudvujVQ+P2uGeNcb5HB32e07cYqucRSzD9xxUDXABjBwbBU OU6HDlM1/GJ61To3YlWBtwfZ9zuhguER/3MFzOveJ+AIpgZh3ClZoADpvR6roQOW gRE= -----END CERTIFICATE-----Generated at Mon Nov 9 23:32:14 2026 by rpki-client