$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa File: 4f190963-16ca-4ba3-9370-65813f5adc68.roa (raw, json) Hash identifier: tTUapyNiIhE36szwpKRPKV4M/OZpbfUzEQg3AhO854k= Subject key identifier: AB:60:36:4B:55:2E:F1:44:56:E3:7F:90:39:87:4B:74:56:14:8B:8F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 463F1CE072A9C08C2ECF09DAA9CC2124FD13E495 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa Signing time: Tue 20 Oct 2026 00:09:07 +0000 ROA not before: Tue 20 Oct 2026 00:09:07 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Nov 2026 00:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:3f:1c:e0:72:a9:c0:8c:2e:cf:09:da:a9:cc:21:24:fd:13:e4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:09:07 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=2e394647d5d6a92924dbc747611dee63bc0600870ee8b6c2ef0c43f209ffc0f4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2b:a8:ca:b4:73:0f:00:a0:e4:2b:2a:85:54: ab:54:fb:82:39:6b:bf:44:64:99:24:d0:95:78:37: ed:33:e4:d9:3a:38:5c:33:4d:28:dd:58:f2:07:af: d2:74:03:7b:93:a0:38:ee:39:b0:43:2f:0d:3d:79: af:33:c5:6c:65:69:0a:f4:f9:cb:2c:24:d6:b2:19: 93:0d:b1:4f:9a:46:1e:37:5f:a1:4f:5f:0a:ce:b2: 50:ec:ce:a7:7e:c4:0b:2d:08:fe:0a:0c:46:b9:39: 6e:88:c4:d8:d4:95:32:6f:52:31:9f:cd:71:03:f3: 39:23:83:69:05:fb:4d:eb:aa:23:61:a2:ce:b8:8f: 5e:e6:3f:a4:74:ad:df:d6:cd:73:40:f2:02:45:f4: ff:23:f4:c3:53:b3:2e:c9:6c:f5:3a:52:08:b2:c3: 80:44:c4:0f:0c:a7:bf:1b:7b:b1:7f:a2:71:56:4d: 58:69:6f:98:f6:7c:c0:8c:da:07:8b:ef:73:9b:c8: 47:a0:83:c4:2c:b3:ca:7b:54:ff:2d:b3:e0:09:b9: 27:e4:78:1d:7c:d3:36:04:18:df:4b:27:21:3d:fb: ef:82:3f:5c:20:94:b9:53:4a:ed:46:11:e1:8f:86: 51:b9:98:ab:da:67:53:fc:18:c8:13:c6:d8:9c:68: 69:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:60:36:4B:55:2E:F1:44:56:E3:7F:90:39:87:4B:74:56:14:8B:8F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:2000::/40 Signature Algorithm: sha256WithRSAEncryption 46:b8:ef:a6:91:72:75:af:89:c5:d5:54:ab:0a:ec:40:ba:6e: 25:84:c2:46:2c:eb:5e:df:6c:1f:9f:ad:22:a1:f4:71:28:3f: 52:38:d6:65:c8:c9:58:44:f5:27:91:63:6b:70:c5:11:09:0b: 9d:9a:d7:2b:32:d4:5c:b6:8a:a3:a1:25:91:97:a8:61:d5:a7: 4b:40:8d:7e:a4:31:92:d1:5e:1a:ca:a4:77:87:ec:d5:0d:f4: 41:0f:b7:57:ae:78:e9:cb:c4:2a:8c:e0:77:94:a8:b2:f0:a4: 1f:6a:a5:b6:f0:88:5c:af:2f:c4:02:f5:c8:03:43:6a:1f:39: 14:4e:02:5c:70:1c:7b:ce:bc:7a:07:74:71:14:8e:ae:33:f2: 3b:64:fc:df:02:69:2f:5e:16:31:a6:21:3f:bd:82:10:80:7c: 08:5a:1e:3c:c2:0b:a8:df:a3:91:ba:bc:90:d6:1b:23:b6:3a: a5:56:83:a4:b7:98:b5:97:71:a1:8f:cd:9d:3d:4f:0b:79:9e: a8:c3:20:34:4e:dd:5f:29:d4:ac:6a:54:15:8d:36:e5:af:af: 25:72:89:80:87:c5:98:46:8d:bc:cf:01:fa:b9:8f:3f:9c:19: 89:aa:54:8f:dd:e0:b5:ae:c9:d5:66:cb:2a:60:ea:53:14:8a: 47:5a:d1:c6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURj8c4HKpwIwuzwnaqcwhJP0T5JUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMDkwN1oX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAMmUzOTQ2NDdkNWQ2YTkyOTI0ZGJj NzQ3NjExZGVlNjNiYzA2MDA4NzBlZThiNmMyZWYwYzQzZjIwOWZmYzBmNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSuoyrRzDwCg5CsqhVSrVPuCOWu/ RGSZJNCVeDftM+TZOjhcM00o3VjyB6/SdAN7k6A47jmwQy8NPXmvM8VsZWkK9PnL LCTWshmTDbFPmkYeN1+hT18KzrJQ7M6nfsQLLQj+CgxGuTluiMTY1JUyb1Ixn81x A/M5I4NpBftN66ojYaLOuI9e5j+kdK3f1s1zQPICRfT/I/TDU7MuyWz1OlIIssOA RMQPDKe/G3uxf6JxVk1YaW+Y9nzAjNoHi+9zm8hHoIPELLPKe1T/LbPgCbkn5Hgd fNM2BBjfSychPfvvgj9cIJS5U0rtRhHhj4ZRuZir2mdT/BjIE8bYnGhp0QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKtgNktVLvFEVuN/kDmHS3RWFIuPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRmMTkwOTYzLTE2Y2EtNGJhMy05MzcwLTY1ODEzZjVhZGM2OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauSAwDQYJKoZIhvcNAQELBQADggEBAEa476aRcnWvicXVVKsK 7EC6biWEwkYs617fbB+frSKh9HEoP1I41mXIyVhE9SeRY2twxREJC52a1ysy1Fy2 iqOhJZGXqGHVp0tAjX6kMZLRXhrKpHeH7NUN9EEPt1eueOnLxCqM4HeUqLLwpB9q pbbwiFyvL8QC9cgDQ2ofORROAlxwHHvOvHoHdHEUjq4z8jtk/N8CaS9eFjGmIT+9 ghCAfAhaHjzCC6jfo5G6vJDWGyO2OqVWg6S3mLWXcaGPzZ09Twt5nqjDIDRO3V8p 1KxqVBWNNuWvryVyiYCHxZhGjbzPAfq5jz+cGYmqVI/d4LWuydVmyypg6lMUikda 0cY= -----END CERTIFICATE-----Generated at Tue Nov 10 17:41:31 2026 by rpki-client