$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b07dfd7-5453-4b08-89f3-583f124643f9.roa File: 4b07dfd7-5453-4b08-89f3-583f124643f9.roa (raw, json) Hash identifier: CjXr1MjF9nAR0jEH7k1FRUoYhX+UFu9BrpfinwWwK2U= Subject key identifier: 22:53:84:3D:DD:3A:47:A0:DF:6A:81:B9:36:AA:5B:F9:BA:26:7F:AC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 744F83DBDFBA8A0C51063126ECB4FFE344F1F695 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b07dfd7-5453-4b08-89f3-583f124643f9.roa Signing time: Tue 20 Oct 2026 00:20:10 +0000 ROA not before: Tue 20 Oct 2026 00:20:10 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:4f:83:db:df:ba:8a:0c:51:06:31:26:ec:b4:ff:e3:44:f1:f6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:20:10 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=26f395726d058ac3ed72923d0993dc5ea8fe6c1adc18afd8b9ee62091625daa3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:74:08:8b:56:fa:65:f6:1f:09:02:53:bf:a5: 8c:c9:e1:b5:ac:44:b4:21:37:46:4c:39:fb:c3:b7: c5:c2:d2:43:af:f5:ff:18:9d:a6:7a:09:40:39:3e: 29:a4:d3:17:8e:08:24:30:ce:9f:6c:24:d8:3a:91: a9:ba:aa:c3:d6:1d:ef:b2:70:79:fa:a0:af:b3:7c: 2a:90:c5:64:33:f2:92:5f:43:ee:a4:9c:f0:0d:90: 7f:a0:37:f4:74:3b:cd:35:fa:33:80:25:db:b9:9d: 74:07:af:a0:2f:3f:40:58:23:0b:90:cb:9f:e6:c1: 8c:22:83:21:db:67:08:d3:55:db:84:27:a6:f2:16: 54:00:ce:5e:47:13:33:dd:9a:2e:f0:c7:c6:85:5f: bb:f2:66:9a:2f:5e:73:b5:04:11:f5:18:6f:fa:75: d3:ae:d4:ad:b3:e2:5a:57:9e:8f:71:53:49:94:84: b8:4c:74:55:3b:10:11:c1:50:a5:02:b7:97:98:13: 51:c5:ba:c1:a4:30:30:41:1b:8b:48:45:fc:45:60: 10:85:21:a9:45:1c:35:f8:3d:6c:71:44:5f:c4:f1: 73:23:62:44:65:29:55:6e:22:50:e7:45:6a:81:f1: ec:19:38:11:2d:d7:e7:11:68:ed:32:6b:18:ee:d8: 1a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:53:84:3D:DD:3A:47:A0:DF:6A:81:B9:36:AA:5B:F9:BA:26:7F:AC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b07dfd7-5453-4b08-89f3-583f124643f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14::/36 Signature Algorithm: sha256WithRSAEncryption ac:ed:7d:f1:1b:14:e7:e2:8d:f0:4a:28:7c:28:18:d9:ed:a8: d1:e5:10:18:3f:19:02:b2:19:b3:9e:d9:5b:d5:f3:50:aa:d2: 7d:7d:b3:ce:20:de:74:93:fe:35:33:61:db:6f:6b:22:87:ee: 7f:e9:d2:f6:8d:08:90:71:c8:b1:5e:a1:67:f6:a6:54:15:7f: 29:5e:8e:67:76:fe:79:30:97:4a:86:16:d3:6e:3e:8c:ca:4a: 42:6b:24:24:b1:3f:cd:36:4d:c3:c8:29:b4:34:46:2a:af:2f: 20:85:38:0b:fd:04:90:ce:69:ac:2a:cc:b1:86:5d:97:1d:3f: 1f:3d:4a:08:b7:ae:d4:c0:f9:35:28:82:99:78:5b:e4:3b:e2: 38:07:da:0f:8d:97:88:46:87:d4:02:5d:4f:bd:d6:24:3c:84: a1:3a:15:c6:85:55:95:54:68:1f:c5:56:b0:18:6f:38:7c:23: 78:62:46:c3:28:9b:2e:c1:01:d7:9a:b1:ae:cc:fa:b7:07:ac: 6d:6c:3b:8e:8f:13:d5:cf:74:d9:c7:67:1a:c6:5e:76:24:69: e0:fb:d0:0e:89:14:79:c4:ab:ae:73:66:be:ac:5e:a1:24:1a: ae:d5:71:e3:5f:4c:41:f8:ea:f7:5a:4a:fd:b3:0f:2e:5f:6e: 46:d7:6b:07 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdE+D29+6igxRBjEm7LT/40Tx9pUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMjAxMFoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAMjZmMzk1NzI2ZDA1OGFjM2VkNzI5 MjNkMDk5M2RjNWVhOGZlNmMxYWRjMThhZmQ4YjllZTYyMDkxNjI1ZGFhMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XQIi1b6ZfYfCQJTv6WMyeG1rES0 ITdGTDn7w7fFwtJDr/X/GJ2meglAOT4ppNMXjggkMM6fbCTYOpGpuqrD1h3vsnB5 +qCvs3wqkMVkM/KSX0PupJzwDZB/oDf0dDvNNfozgCXbuZ10B6+gLz9AWCMLkMuf 5sGMIoMh22cI01XbhCem8hZUAM5eRxMz3Zou8MfGhV+78maaL15ztQQR9Rhv+nXT rtSts+JaV56PcVNJlIS4THRVOxARwVClAreXmBNRxbrBpDAwQRuLSEX8RWAQhSGp RRw1+D1scURfxPFzI2JEZSlVbiJQ50VqgfHsGTgRLdfnEWjtMmsY7tga2wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCJThD3dOkeg32qBuTaqW/m6Jn+sMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRiMDdkZmQ3LTU0NTMtNGIwOC04OWYzLTU4M2YxMjQ2NDNmOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaFAAwDQYJKoZIhvcNAQELBQADggEBAKztffEbFOfijfBKKHwo GNntqNHlEBg/GQKyGbOe2VvV81Cq0n19s84g3nST/jUzYdtvayKH7n/p0vaNCJBx yLFeoWf2plQVfylejmd2/nkwl0qGFtNuPozKSkJrJCSxP802TcPIKbQ0RiqvLyCF OAv9BJDOaawqzLGGXZcdPx89Sgi3rtTA+TUogpl4W+Q74jgH2g+Nl4hGh9QCXU+9 1iQ8hKE6FcaFVZVUaB/FVrAYbzh8I3hiRsMomy7BAdeasa7M+rcHrG1sO46PE9XP dNnHZxrGXnYkaeD70A6JFHnEq65zZr6sXqEkGq7VceNfTEH46vdaSv2zDy5fbkbX awc= -----END CERTIFICATE-----Generated at Thu Nov 5 19:19:54 2026 by rpki-client