$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e8909db-8041-4fde-8d76-0663b8b608ed.roa File: 3e8909db-8041-4fde-8d76-0663b8b608ed.roa (raw, json) Hash identifier: KSSuW/GAsCdeQA5hzm3GTER7cI2k24rpTlKxk+IItiM= Subject key identifier: 0B:39:0C:06:97:1B:90:90:D0:E8:CE:5F:B9:49:DD:70:E0:6B:A5:F9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 159B84261C8C3F80F5ED68AB7ED68C59A93F9F53 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e8909db-8041-4fde-8d76-0663b8b608ed.roa Signing time: Tue 20 Oct 2026 00:09:25 +0000 ROA not before: Tue 20 Oct 2026 00:09:25 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:9b:84:26:1c:8c:3f:80:f5:ed:68:ab:7e:d6:8c:59:a9:3f:9f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:09:25 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=168cd63f29d0ee728b9e504135089acc6ff8b956a8d5024f96e1dbe6e36e6b8e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a6:fa:fe:b3:3d:3a:c1:2b:41:e7:a8:f0:7b: 4b:61:f8:07:fa:82:40:3c:0f:f1:5b:23:f6:77:8f: fb:75:e6:27:b2:6b:6d:0e:93:fe:ad:99:10:a0:62: 57:11:2d:2a:6e:5e:f8:bb:94:a3:9a:71:01:59:03: 05:5f:06:bc:6f:6c:74:89:b8:99:69:2c:12:61:17: 8e:55:07:52:3c:f2:0b:08:5b:f3:97:d9:e2:86:70: 33:a3:5b:46:54:ee:01:ab:c5:c2:52:4e:37:ac:aa: 94:16:07:83:87:b6:b2:0f:ea:e7:86:df:3f:d0:3d: 90:9f:7f:d4:38:2a:da:ce:43:c7:8d:a9:73:b3:45: 48:32:30:3e:db:7e:fc:1b:cd:71:3b:66:5a:de:c2: c6:c8:78:75:ed:a0:83:32:bf:79:da:1a:45:78:08: 82:09:d3:00:84:88:86:2d:3a:6d:56:51:ad:bc:a6: 08:5f:95:64:a8:9e:78:18:3b:d3:61:ad:7d:5f:9e: e0:84:1e:f1:64:b0:fd:26:30:eb:a4:65:3d:2e:44: e7:f1:27:60:e4:d8:57:b1:d4:4a:9b:85:61:73:ee: 59:45:e5:38:5e:f5:62:66:a0:bb:6d:70:8e:93:e8: 4a:73:60:6a:2f:2e:3a:c2:53:a6:25:55:54:da:b2: 1d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:39:0C:06:97:1B:90:90:D0:E8:CE:5F:B9:49:DD:70:E0:6B:A5:F9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e8909db-8041-4fde-8d76-0663b8b608ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38::/32 Signature Algorithm: sha256WithRSAEncryption 33:a0:44:ea:9c:df:c0:91:6d:56:cb:73:32:62:e7:2f:65:eb: 24:71:29:07:57:df:7d:5c:e8:f8:51:51:cb:08:6c:ce:11:23: fd:9d:b7:84:6d:a6:21:71:17:c7:08:5e:61:5b:76:ab:19:af: 02:24:f6:11:e6:00:74:3a:bf:80:d7:03:23:ca:63:e2:47:09: a8:bd:a3:33:13:59:9c:7d:0d:5e:f7:f6:10:b9:8a:92:f0:02: e6:86:d0:7a:28:f6:56:5c:2e:87:9d:1e:9e:74:a4:e2:62:6e: 77:6f:99:80:b9:d5:75:d9:10:5e:d0:bc:05:b0:c6:72:ee:21: 37:a4:95:cf:91:33:be:5f:fa:05:1d:c5:cb:d2:ea:d9:36:2d: 65:74:02:5a:e7:b1:13:0c:1f:16:39:e3:e5:62:f8:2c:3b:75: d6:c0:74:b0:11:e6:fd:1f:fe:ec:67:b2:9f:2a:3d:4f:7e:1d: 31:b3:e8:7c:61:ce:cb:19:44:0f:99:fc:ac:d3:be:4b:a1:a9: 30:79:f2:6e:b9:22:7e:6b:d1:17:31:d8:fc:8e:7f:1b:17:06: 11:4f:3e:ff:1a:0e:76:25:b6:16:c6:dc:eb:9a:86:d4:a8:d9: f9:9c:03:b0:56:5c:09:09:5e:7d:cc:6a:f9:70:19:26:2a:d5: 6b:08:41:42 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUFZuEJhyMP4D17WirftaMWak/n1MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMDkyNVoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAMTY4Y2Q2M2YyOWQwZWU3MjhiOWU1 MDQxMzUwODlhY2M2ZmY4Yjk1NmE4ZDUwMjRmOTZlMWRiZTZlMzZlNmI4ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKb6/rM9OsErQeeo8HtLYfgH+oJA PA/xWyP2d4/7deYnsmttDpP+rZkQoGJXES0qbl74u5SjmnEBWQMFXwa8b2x0ibiZ aSwSYReOVQdSPPILCFvzl9nihnAzo1tGVO4Bq8XCUk43rKqUFgeDh7ayD+rnht8/ 0D2Qn3/UOCrazkPHjalzs0VIMjA+2378G81xO2Za3sLGyHh17aCDMr952hpFeAiC CdMAhIiGLTptVlGtvKYIX5VkqJ54GDvTYa19X57ghB7xZLD9JjDrpGU9LkTn8Sdg 5NhXsdRKm4Vhc+5ZReU4XvViZqC7bXCOk+hKc2BqLy46wlOmJVVU2rIdwwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFAs5DAaXG5CQ0OjOX7lJ3XDga6X5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNlODkwOWRiLTgwNDEtNGZkZS04ZDc2LTA2NjNiOGI2MDhlZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaODANBgkqhkiG9w0BAQsFAAOCAQEAM6BE6pzfwJFtVstzMmLn L2XrJHEpB1fffVzo+FFRywhszhEj/Z23hG2mIXEXxwheYVt2qxmvAiT2EeYAdDq/ gNcDI8pj4kcJqL2jMxNZnH0NXvf2ELmKkvAC5obQeij2Vlwuh50ennSk4mJud2+Z gLnVddkQXtC8BbDGcu4hN6SVz5Ezvl/6BR3Fy9Lq2TYtZXQCWuexEwwfFjnj5WL4 LDt11sB0sBHm/R/+7Geynyo9T34dMbPofGHOyxlED5n8rNO+S6GpMHnybrkifmvR FzHY/I5/GxcGEU8+/xoOdiW2Fsbc65qG1KjZ+ZwDsFZcCQlefcxq+XAZJirVawhB Qg== -----END CERTIFICATE-----Generated at Sat Nov 7 09:57:05 2026 by rpki-client