$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/370f03d8-51d7-4063-98be-9a7f8ce41bda.roa File: 370f03d8-51d7-4063-98be-9a7f8ce41bda.roa (raw, json) Hash identifier: eUYmRu+Cmo0Wayw6r+Jin27OhMyYgEstymKXo9B8yJo= Subject key identifier: 83:C0:7F:FA:7F:49:64:03:C1:37:18:93:8D:34:47:9F:32:81:6E:56 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 50ACB570FD96CC16D3AD542F355CA20FA54BC18E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/370f03d8-51d7-4063-98be-9a7f8ce41bda.roa Signing time: Sun 18 Oct 2026 00:20:41 +0000 ROA not before: Sun 18 Oct 2026 00:20:41 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ac:b5:70:fd:96:cc:16:d3:ad:54:2f:35:5c:a2:0f:a5:4b:c1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:20:41 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=e6ef1993bc7f55c6e5e22994f3364642ceac6bffc85c7da5ad3ff3da4fa15262, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:69:c8:1b:21:af:7b:13:a7:1d:c2:8a:a3: 32:c2:04:cf:cd:98:d2:f2:85:df:80:ca:50:72:4b: 3c:04:cd:5f:f4:9f:7c:3a:a8:0a:19:90:9f:51:58: 40:0f:31:bc:1e:5b:75:0e:6d:13:bb:64:de:f0:88: fa:4a:f9:a1:bc:32:8c:5a:a4:9e:d4:38:fb:3d:94: 11:55:4c:c2:5f:a2:8f:30:25:5b:35:a6:00:ce:0e: 93:02:a1:16:ed:3b:ce:94:5b:c4:f6:a8:7d:93:06: f3:c5:85:b1:1e:3e:50:f0:bb:f1:58:df:ba:d8:22: ed:b5:10:3b:47:0a:29:24:6e:37:ad:9b:85:f7:99: 37:e6:d3:7e:f1:70:de:ee:b5:8e:73:09:b1:0d:ad: 36:99:32:cd:3d:dd:95:62:2a:af:bf:7d:67:2c:4a: 50:0b:05:c9:4a:f0:b0:11:f7:84:2b:95:e2:da:4e: be:60:15:5f:cc:6f:15:5f:e4:bc:c3:2b:98:3e:5d: 13:88:5e:36:e8:74:cb:8e:3e:56:46:d4:af:e8:c0: dd:d8:33:59:96:8b:92:4d:e0:39:9c:2d:dc:74:52: e1:7b:11:de:28:6d:b4:79:31:48:d4:cc:3f:83:a0: d6:90:22:a7:03:66:cf:16:69:44:c1:6d:9b:73:bf: 7f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C0:7F:FA:7F:49:64:03:C1:37:18:93:8D:34:47:9F:32:81:6E:56 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/370f03d8-51d7-4063-98be-9a7f8ce41bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:e040::/48 Signature Algorithm: sha256WithRSAEncryption 30:82:72:7f:8d:1b:f3:67:fc:00:60:7e:c4:10:5d:25:39:5a: d4:53:2b:8e:f8:6c:f3:d6:d6:04:18:eb:69:20:e1:d9:c7:34: e0:3c:5a:c4:37:cd:46:17:d9:ee:5b:86:ae:3d:91:a3:f1:d2: 6e:c3:04:e3:eb:0d:3d:99:bb:dd:a0:f4:fc:f6:fc:96:01:8b: d4:7f:64:36:51:1d:ec:13:75:ac:de:4e:88:5c:5d:26:cc:f8: d5:ef:9c:92:5b:64:67:75:3b:d0:73:77:17:70:dc:84:04:ce: 2e:7c:0b:55:12:93:bc:20:40:b2:23:f6:6b:7e:a6:a1:0d:4d: ff:2b:71:8c:61:28:9c:00:f4:5b:1d:dd:d4:49:b0:13:9b:16: 00:0f:a3:c9:83:26:80:1e:1d:05:c6:04:33:4e:ab:ec:26:77: 83:27:5a:7e:91:1f:a3:20:fa:eb:c9:70:22:f2:58:2f:f7:4d: 51:a7:01:05:8f:36:e1:b6:02:29:12:05:3e:07:e9:39:2c:f8: 61:a3:9e:75:3d:c9:3f:d4:0b:8a:83:1f:19:5b:f0:7d:81:c5: c9:16:1b:6f:4c:81:d9:f3:f9:06:0b:c8:81:36:68:1f:b6:1a: d9:13:41:fb:63:0b:ba:a0:b6:88:08:11:33:e4:d3:61:6f:60: ae:95:2c:c7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUKy1cP2WzBbTrVQvNVyiD6VLwY4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxODAwMjA0MVoX DTI3MDExNjIzNTk1OVowejFJMEcGA1UEBRNAZTZlZjE5OTNiYzdmNTVjNmU1ZTIy OTk0ZjMzNjQ2NDJjZWFjNmJmZmM4NWM3ZGE1YWQzZmYzZGE0ZmExNTI2MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3ZpyBshr3sTpx3CiqMywgTPzZjS 8oXfgMpQcks8BM1f9J98OqgKGZCfUVhADzG8Hlt1Dm0Tu2Te8Ij6SvmhvDKMWqSe 1Dj7PZQRVUzCX6KPMCVbNaYAzg6TAqEW7TvOlFvE9qh9kwbzxYWxHj5Q8LvxWN+6 2CLttRA7RwopJG43rZuF95k35tN+8XDe7rWOcwmxDa02mTLNPd2VYiqvv31nLEpQ CwXJSvCwEfeEK5Xi2k6+YBVfzG8VX+S8wyuYPl0TiF426HTLjj5WRtSv6MDd2DNZ louSTeA5nC3cdFLhexHeKG20eTFI1Mw/g6DWkCKnA2bPFmlEwW2bc79/HQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIPAf/p/SWQDwTcYk400R58ygW5WMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM3MGYwM2Q4LTUxZDctNDA2My05OGJlLTlhN2Y4Y2U0MWJkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/+BAMA0GCSqGSIb3DQEBCwUAA4IBAQAwgnJ/jRvzZ/wAYH7E EF0lOVrUUyuO+Gzz1tYEGOtpIOHZxzTgPFrEN81GF9nuW4auPZGj8dJuwwTj6w09 mbvdoPT89vyWAYvUf2Q2UR3sE3Ws3k6IXF0mzPjV75ySW2RndTvQc3cXcNyEBM4u fAtVEpO8IECyI/ZrfqahDU3/K3GMYSicAPRbHd3USbATmxYAD6PJgyaAHh0FxgQz TqvsJneDJ1p+kR+jIPrryXAi8lgv901RpwEFjzbhtgIpEgU+B+k5LPhho551Pck/ 1AuKgx8ZW/B9gcXJFhtvTIHZ8/kGC8iBNmgfthrZE0H7Ywu6oLaICBEz5NNhb2Cu lSzH -----END CERTIFICATE-----Generated at Thu Nov 5 12:19:28 2026 by rpki-client