$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39d9ccaa-9c45-4ebb-a444-c59334cce5f3.roa File: 39d9ccaa-9c45-4ebb-a444-c59334cce5f3.roa (raw, json) Hash identifier: ZNIL8iNZj1dZ3WWv+91p331xJqg/NeZDFoxMAaIXdfg= Subject key identifier: 89:F9:13:5E:FE:29:FD:EC:7A:8A:B5:BF:3D:B8:86:34:BE:67:AA:93 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E5A8E2E41CA7B80D045D2479C1F799D1EE11642 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39d9ccaa-9c45-4ebb-a444-c59334cce5f3.roa Signing time: Tue 20 Oct 2026 00:30:26 +0000 ROA not before: Tue 20 Oct 2026 00:30:26 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:5a:8e:2e:41:ca:7b:80:d0:45:d2:47:9c:1f:79:9d:1e:e1:16:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:30:26 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=00fc474efc3f94e2c3d24b1742f4165b0e665127bad3e0c21547366d9a6cf4da, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ba:d0:d2:9a:1c:dc:e9:b6:cf:00:93:4f:6a: e6:73:12:13:43:89:8a:b9:a6:db:9e:83:e6:ba:f0: 42:52:5e:72:dd:b7:e2:5c:14:ac:b1:12:41:ba:33: 79:e1:4a:d0:02:17:a4:61:99:95:1b:52:fd:32:f0: 1c:ed:d7:33:7c:e6:7b:3b:95:6b:32:70:fb:ec:11: 0c:44:1a:e5:01:35:c1:6e:0f:2b:a9:f5:7c:70:58: 06:8f:d1:75:85:b5:4c:50:cf:be:6e:60:2c:43:9d: dc:13:8a:5f:96:86:89:54:18:1d:9d:4a:9d:bc:21: 74:10:08:8f:72:d3:c0:4c:db:97:ea:97:16:86:04: e8:0d:0b:b7:db:3d:40:7d:47:98:c7:9d:37:1e:56: ec:85:35:7d:db:c3:4f:97:6e:9f:55:0d:c8:d2:25: 6c:51:5b:95:88:44:92:a1:16:0b:09:e8:35:93:a3: 40:eb:d7:9a:95:f0:5d:b2:c9:71:bc:b5:26:4f:d4: 9f:29:39:b6:96:0e:76:3e:31:b2:9e:ba:67:13:6b: 0c:4b:9f:66:63:21:6a:43:9c:92:1a:06:bc:51:05: 45:2f:2c:cd:9f:08:58:24:4e:2a:82:df:85:30:be: bd:bc:eb:61:14:bd:6d:9f:50:41:2e:6e:7a:ad:70: 0c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F9:13:5E:FE:29:FD:EC:7A:8A:B5:BF:3D:B8:86:34:BE:67:AA:93 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/39d9ccaa-9c45-4ebb-a444-c59334cce5f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:b000::/40 Signature Algorithm: sha256WithRSAEncryption 40:1f:e6:96:15:81:56:d5:dd:73:83:28:ce:13:d6:fb:95:e1: 87:4a:be:46:8f:79:d8:fb:2d:dc:c9:09:b8:0d:69:a7:aa:f8: fe:e2:e0:cd:3e:a4:7e:d5:03:fe:e3:82:28:12:e8:8e:a3:00: f2:ae:ad:e9:6d:ed:83:44:8d:22:0a:a1:31:3b:d9:c4:7e:6e: 9c:ba:fa:22:e7:21:83:b2:15:50:26:56:86:4e:94:34:89:7e: 59:26:85:32:de:03:e9:48:62:63:49:c0:0d:89:e9:a1:7e:5f: c9:ee:33:a8:4d:49:98:ed:48:cc:1d:18:c7:78:61:01:b1:ea: 9e:fc:80:2d:38:b7:db:63:53:b7:1d:5a:0a:58:01:eb:f1:46: 86:81:b2:5c:bc:e6:dc:f1:72:37:9e:33:84:48:51:29:04:bd: 6b:51:d6:78:b5:f6:f9:94:2d:e2:ea:d8:9d:3f:c6:5e:eb:e9: bb:ec:24:d0:b3:92:1b:65:a0:6e:6d:da:1b:75:89:57:82:69: d1:18:72:f9:2c:b7:13:88:c4:f2:45:72:b1:35:cc:57:85:ca: 4e:e8:a3:05:67:e2:e2:62:86:67:19:c9:d1:7b:6b:d3:60:8f: ac:6b:7a:16:c3:00:87:25:9a:2a:79:9e:fe:93:d6:31:fb:f9: 2f:63:03:ca -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULlqOLkHKe4DQRdJHnB95nR7hFkIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMzAyNloX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAMDBmYzQ3NGVmYzNmOTRlMmMzZDI0 YjE3NDJmNDE2NWIwZTY2NTEyN2JhZDNlMGMyMTU0NzM2NmQ5YTZjZjRkYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LrQ0poc3Om2zwCTT2rmcxITQ4mK uabbnoPmuvBCUl5y3bfiXBSssRJBujN54UrQAhekYZmVG1L9MvAc7dczfOZ7O5Vr MnD77BEMRBrlATXBbg8rqfV8cFgGj9F1hbVMUM++bmAsQ53cE4pfloaJVBgdnUqd vCF0EAiPctPATNuX6pcWhgToDQu32z1AfUeYx503HlbshTV928NPl26fVQ3I0iVs UVuViESSoRYLCeg1k6NA69ealfBdsslxvLUmT9SfKTm2lg52PjGynrpnE2sMS59m YyFqQ5ySGga8UQVFLyzNnwhYJE4qgt+FML69vOthFL1tn1BBLm56rXAMqQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIn5E17+Kf3seoq1vz24hjS+Z6qTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM5ZDljY2FhLTljNDUtNGViYi1hNDQ0LWM1OTMzNGNjZTVmMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacLAwDQYJKoZIhvcNAQELBQADggEBAEAf5pYVgVbV3XODKM4T 1vuV4YdKvkaPedj7LdzJCbgNaaeq+P7i4M0+pH7VA/7jgigS6I6jAPKurelt7YNE jSIKoTE72cR+bpy6+iLnIYOyFVAmVoZOlDSJflkmhTLeA+lIYmNJwA2J6aF+X8nu M6hNSZjtSMwdGMd4YQGx6p78gC04t9tjU7cdWgpYAevxRoaBsly85tzxcjeeM4RI USkEvWtR1ni19vmULeLq2J0/xl7r6bvsJNCzkhtloG5t2ht1iVeCadEYcvkstxOI xPJFcrE1zFeFyk7oowVn4uJihmcZydF7a9Ngj6xrehbDAIclmip5nv6T1jH7+S9j A8o= -----END CERTIFICATE-----Generated at Sun Nov 8 10:34:07 2026 by rpki-client