$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/36780eb4-ec67-447e-93dc-7aee759e06ed.roa File: 36780eb4-ec67-447e-93dc-7aee759e06ed.roa (raw, json) Hash identifier: MyBNeRNTsQwZHYhyjP1hvtY57dHtRW6SxIMSFiJGyFE= Subject key identifier: 41:FB:D3:F3:06:7B:E2:C6:97:78:D9:D9:1F:5B:0A:B7:16:36:01:52 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 143EF8371DFF93089EFEBCEA5C7A74D8FE9C14FE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/36780eb4-ec67-447e-93dc-7aee759e06ed.roa Signing time: Fri 16 Oct 2026 00:09:11 +0000 ROA not before: Fri 16 Oct 2026 00:09:11 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3e:f8:37:1d:ff:93:08:9e:fe:bc:ea:5c:7a:74:d8:fe:9c:14:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 16 00:09:11 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=6e5e8cc49b7ff97e8c800625841960dae2678aa7c47fe03479b12fba31cd5824, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d6:5e:3c:0b:a6:ba:5f:2f:09:4f:f0:00:de: 1a:3d:f5:3a:fe:0b:99:df:00:6a:5e:3c:f7:3e:b7: 00:18:33:ca:fc:9f:dd:a6:f1:3a:18:4d:db:b3:44: 0b:25:14:b6:7f:42:db:c2:55:c7:de:d0:47:1a:55: df:19:4e:c4:bd:8a:7a:be:9e:34:93:45:be:fb:50: 9d:b7:c4:61:c2:93:56:1c:8a:a1:be:e3:25:b7:02: 16:66:a9:94:cc:c5:10:f3:a8:d7:18:c7:f2:a1:c2: c1:7f:55:86:29:f2:eb:a6:80:18:b0:90:cf:63:b5: e0:78:a6:f3:2b:0f:cf:3b:e7:bb:b2:11:7a:a8:6f: 37:b8:0a:af:ed:72:02:53:58:0b:3b:34:c6:c6:59: 24:a8:31:ec:02:05:3c:a1:8a:6c:c1:c7:26:28:5e: 43:6d:bd:05:ea:b4:70:eb:c1:01:bf:4e:f3:5a:e7: a6:b6:37:60:a9:e5:f5:42:d0:26:b9:0f:54:c2:29: ef:42:12:40:84:20:ee:ec:af:27:aa:4d:2c:77:8a: b3:42:8c:ec:da:88:b5:07:f8:5e:2e:3b:18:45:1c: 20:a3:35:46:7f:03:7f:5d:9a:f6:93:d7:81:de:7d: 5a:64:4f:61:c7:ee:74:e8:3d:74:ea:89:f4:22:e0: 8c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FB:D3:F3:06:7B:E2:C6:97:78:D9:D9:1F:5B:0A:B7:16:36:01:52 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/36780eb4-ec67-447e-93dc-7aee759e06ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00::/48 Signature Algorithm: sha256WithRSAEncryption 3a:95:4e:1a:f8:75:61:5f:eb:75:61:b2:b0:14:86:b8:2d:83: 8b:73:1e:14:69:d3:04:5c:fe:8f:94:b2:d6:6a:7c:b5:9c:89: 53:86:ce:00:f7:60:be:f1:de:96:42:a6:13:5e:15:e0:b5:79: 3c:7f:9d:88:65:d0:f7:de:e4:bb:cd:47:08:81:53:b2:18:bf: 9d:0f:6b:51:38:c9:5f:e6:7f:71:79:8c:9b:8b:9f:4e:c2:24: 4b:d8:4d:85:09:03:92:66:1a:d8:d5:80:81:c8:c4:18:49:92: 58:f4:1a:fa:db:82:e3:d4:5d:4d:4f:f2:9e:15:25:25:be:3e: 48:63:de:83:bf:f0:bd:81:8f:6c:62:02:eb:f9:4a:a8:20:52: 9d:16:2a:6f:9a:a4:43:be:83:16:89:83:cd:7e:0c:57:1c:a7: 54:b9:8c:bc:93:a3:d4:42:e2:a7:fc:08:8e:b6:28:cc:86:f5: b5:97:07:46:6e:c9:bd:63:b2:7c:8e:56:3c:f4:df:96:54:3c: b8:b0:cd:ec:d6:b2:a0:7b:b1:91:c1:16:ae:2b:8f:26:45:c5: d8:bc:04:3d:57:34:ec:c9:55:a8:c0:5a:45:cc:94:4a:49:e0: b2:83:1f:0f:b6:a7:e1:34:df:f5:2a:f4:ad:88:4b:5d:4a:29: f3:87:3e:f8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFD74Nx3/kwie/rzqXHp02P6cFP4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxNjAwMDkxMVoX DTI3MDExNDIzNTk1OVowejFJMEcGA1UEBRNANmU1ZThjYzQ5YjdmZjk3ZThjODAw NjI1ODQxOTYwZGFlMjY3OGFhN2M0N2ZlMDM0NzliMTJmYmEzMWNkNTgyNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tZePAumul8vCU/wAN4aPfU6/guZ 3wBqXjz3PrcAGDPK/J/dpvE6GE3bs0QLJRS2f0LbwlXH3tBHGlXfGU7EvYp6vp40 k0W++1Cdt8RhwpNWHIqhvuMltwIWZqmUzMUQ86jXGMfyocLBf1WGKfLrpoAYsJDP Y7XgeKbzKw/PO+e7shF6qG83uAqv7XICU1gLOzTGxlkkqDHsAgU8oYpswccmKF5D bb0F6rRw68EBv07zWuemtjdgqeX1QtAmuQ9UwinvQhJAhCDu7K8nqk0sd4qzQozs 2oi1B/heLjsYRRwgozVGfwN/XZr2k9eB3n1aZE9hx+506D106on0IuCM5wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEH70/MGe+LGl3jZ2R9bCrcWNgFSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM2NzgwZWI0LWVjNjctNDQ3ZS05M2RjLTdhZWU3NTllMDZlZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQA6lU4a+HVhX+t1YbKw FIa4LYOLcx4UadMEXP6PlLLWany1nIlThs4A92C+8d6WQqYTXhXgtXk8f52IZdD3 3uS7zUcIgVOyGL+dD2tROMlf5n9xeYybi59OwiRL2E2FCQOSZhrY1YCByMQYSZJY 9Br624Lj1F1NT/KeFSUlvj5IY96Dv/C9gY9sYgLr+UqoIFKdFipvmqRDvoMWiYPN fgxXHKdUuYy8k6PUQuKn/AiOtijMhvW1lwdGbsm9Y7J8jlY89N+WVDy4sM3s1rKg e7GRwRauK48mRcXYvAQ9VzTsyVWowFpFzJRKSeCygx8PtqfhNN/1KvStiEtdSinz hz74 -----END CERTIFICATE-----Generated at Thu Nov 5 19:19:51 2026 by rpki-client