$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3da8573f-609a-4599-b333-1dfc12d79f4e.roa File: 3da8573f-609a-4599-b333-1dfc12d79f4e.roa (raw, json) Hash identifier: gsmk61+PO12GZwFTodHAtMyiTc6Ww1GD2sXxfKjDZsY= Subject key identifier: A1:3B:86:3B:77:F1:4B:02:45:36:B1:7E:3D:1E:6B:62:36:BE:DA:C6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 191A893C4EC90B58EF18977ADE42F1CF4E8BE4B9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3da8573f-609a-4599-b333-1dfc12d79f4e.roa Signing time: Thu 10 Sep 2026 00:00:43 +0000 ROA not before: Thu 10 Sep 2026 00:00:43 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:1a:89:3c:4e:c9:0b:58:ef:18:97:7a:de:42:f1:cf:4e:8b:e4:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:00:43 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=8102d0ee9fdd9d6047ebca0777a1b85c94a06ba874b55239678b5adc0c39e04a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8b:de:43:18:ca:4e:65:92:72:0d:86:3e:e6: c0:ae:7b:0e:3a:4a:08:89:d9:7a:e3:72:c9:c4:96: 0d:e4:40:8c:cf:bf:7f:ed:ac:ed:6b:54:e8:d1:cd: 8b:db:13:83:f6:65:13:db:d3:2c:c0:e4:0c:df:b3: b9:31:6c:56:9c:b3:3d:53:9d:ff:b9:5c:d1:a6:e2: 78:38:12:b0:ef:f8:9b:c4:ea:87:10:2a:6b:5d:f6: 6c:66:53:69:91:88:51:5a:d1:a1:ae:bb:cf:bc:de: 79:a4:aa:d4:03:08:59:39:68:70:8a:0d:bc:28:5f: ea:0f:b7:d8:0f:7c:81:b6:2d:bc:0d:e5:c0:9b:b6: 7e:d3:3e:2c:dc:bb:ac:40:c6:db:15:18:13:f0:6b: fe:6d:a3:1e:c7:5f:57:2f:66:5d:a0:bc:24:d7:73: 40:23:11:b3:cb:33:aa:66:f5:62:8b:6f:b8:94:1d: 8c:72:36:7f:08:c5:93:1a:68:f4:63:3a:e1:77:19: d5:10:25:a1:1c:96:cd:b2:3e:74:d4:85:79:91:cd: 07:47:4d:a0:07:d0:c4:49:fe:8a:9a:d9:32:70:c9: 55:7c:11:0b:ba:d6:64:69:e8:6d:54:d0:c3:f1:4a: a1:60:b1:34:42:0c:b7:f6:d7:58:10:34:a7:35:48: 0f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3B:86:3B:77:F1:4B:02:45:36:B1:7E:3D:1E:6B:62:36:BE:DA:C6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3da8573f-609a-4599-b333-1dfc12d79f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 5a:c3:c1:47:ab:4b:5f:9c:ce:b9:3e:17:3b:76:96:21:59:43: d3:cd:c7:2e:e6:7d:26:d9:53:de:2b:18:f1:bc:78:a6:98:ca: 3a:1e:bb:12:59:db:0a:41:2a:f9:ad:48:a5:31:05:28:76:09: 18:3e:7b:db:4a:fa:48:a4:86:6e:01:cb:8c:d8:d3:8e:13:52: b2:dd:12:e1:f7:d7:51:a3:a6:f3:b6:e7:b1:f5:5a:39:cd:29: 10:3b:73:f1:f7:bd:a5:81:33:70:db:7e:3c:9d:cc:7e:59:a2: 2d:75:a7:7b:88:09:81:12:b0:13:c8:72:79:2d:3c:51:de:4c: 74:ad:1b:af:c9:6c:20:ce:82:2a:bd:27:48:ad:26:19:bc:3b: dd:0d:6d:58:e7:b6:93:6b:88:e0:58:0d:ab:58:7d:75:a6:9b: b9:a1:6e:cc:17:43:c6:6f:fd:a9:1a:b6:24:6c:ce:57:f4:b2: a7:ab:6b:b9:f8:13:ad:bd:cd:1d:4b:41:28:b5:1b:51:9c:70: f3:a6:00:f4:0f:96:ee:b6:e4:d2:ee:08:e1:02:11:eb:f0:ca: cf:d7:e3:c4:cf:77:c6:af:2d:3e:d8:d9:23:6d:50:d7:30:87: d2:90:12:cf:88:06:f5:91:b2:58:42:0a:eb:5f:35:dc:d6:33: 70:3d:b0:88 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGRqJPE7JC1jvGJd63kLxz06L5LkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMDA0M1oX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAODEwMmQwZWU5ZmRkOWQ2MDQ3ZWJj YTA3NzdhMWI4NWM5NGEwNmJhODc0YjU1MjM5Njc4YjVhZGMwYzM5ZTA0YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oveQxjKTmWScg2GPubArnsOOkoI idl643LJxJYN5ECMz79/7azta1To0c2L2xOD9mUT29MswOQM37O5MWxWnLM9U53/ uVzRpuJ4OBKw7/ibxOqHECprXfZsZlNpkYhRWtGhrrvPvN55pKrUAwhZOWhwig28 KF/qD7fYD3yBti28DeXAm7Z+0z4s3LusQMbbFRgT8Gv+baMex19XL2ZdoLwk13NA IxGzyzOqZvVii2+4lB2McjZ/CMWTGmj0YzrhdxnVECWhHJbNsj501IV5kc0HR02g B9DESf6KmtkycMlVfBELutZkaehtVNDD8UqhYLE0Qgy39tdYEDSnNUgPwQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKE7hjt38UsCRTaxfj0ea2I2vtrGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNkYTg1NzNmLTYwOWEtNDU5OS1iMzMzLTFkZmMxMmQ3OWY0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba60DAMA0GCSqGSIb3DQEBCwUAA4IBAQBaw8FHq0tfnM65Phc7 dpYhWUPTzccu5n0m2VPeKxjxvHimmMo6HrsSWdsKQSr5rUilMQUodgkYPnvbSvpI pIZuAcuM2NOOE1Ky3RLh99dRo6bztuex9Vo5zSkQO3Px972lgTNw2348ncx+WaIt dad7iAmBErATyHJ5LTxR3kx0rRuvyWwgzoIqvSdIrSYZvDvdDW1Y57aTa4jgWA2r WH11ppu5oW7MF0PGb/2pGrYkbM5X9LKnq2u5+BOtvc0dS0EotRtRnHDzpgD0D5bu tuTS7gjhAhHr8MrP1+PEz3fGry0+2NkjbVDXMIfSkBLPiAb1kbJYQgrrXzXc1jNw PbCI -----END CERTIFICATE-----Generated at Mon Sep 21 02:11:31 2026 by rpki-client