$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/53dc8acc-0c30-42d3-abfa-5792ea5bf7de.roa File: 53dc8acc-0c30-42d3-abfa-5792ea5bf7de.roa (raw, json) Hash identifier: tt1qAjf+I7m0CHcHTeKWehvyUjux8+bM9Le8Vdz/f0M= Subject key identifier: C0:AF:6B:8A:64:89:13:4D:C1:8D:BD:C0:BC:09:6D:FC:FA:AF:95:AF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63890CBF809DCBF5144C13CBEEABE3BC0E944959 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/53dc8acc-0c30-42d3-abfa-5792ea5bf7de.roa Signing time: Mon 19 Oct 2026 00:09:29 +0000 ROA not before: Mon 19 Oct 2026 00:09:29 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:89:0c:bf:80:9d:cb:f5:14:4c:13:cb:ee:ab:e3:bc:0e:94:49:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:09:29 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=d295c910c9e646c06f115a373e566218b1af840672c72d5eff7ba8534ff5a9b4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:d3:ae:6e:14:89:a6:c2:8e:59:bd:a6:40: 98:85:e4:e7:09:4b:c9:24:ad:e9:d5:6f:44:c9:2c: 1d:62:3f:67:72:8e:7e:b4:3b:c5:47:7f:4f:c7:90: 50:08:9e:f2:49:f6:31:38:0e:39:d2:e8:39:ad:b1: 14:4d:0f:5d:d5:d8:e8:98:19:99:67:e0:dd:15:1c: 3d:96:fb:43:5c:db:02:ee:80:d6:11:26:c2:93:27: e6:00:a2:5f:38:44:fb:14:09:46:df:20:cd:fb:5d: 8f:e7:2b:28:22:a4:de:0b:04:00:8e:d4:aa:4a:44: 21:e0:82:7d:e6:4d:6f:e9:cb:b4:35:b5:7c:b4:31: da:c7:08:a4:12:b6:2b:45:e0:87:02:5e:3d:a7:e7: 1c:25:75:46:cf:3a:b1:03:d7:c4:1a:64:1f:9b:fc: 2a:74:a9:1f:74:98:29:95:fa:2c:ab:30:e5:49:3f: c0:39:ab:89:69:7a:f5:32:ec:6e:b8:a0:4a:25:cf: 42:e1:5e:02:90:c0:61:f6:8e:81:ca:5b:7b:e6:47: 72:d9:57:fa:0b:c5:57:97:b2:1f:77:ce:28:90:82: 32:ef:05:86:68:e1:ff:85:7b:1c:4b:c0:71:07:ae: 86:47:e1:6e:2a:32:15:0b:6a:ef:71:ca:e0:d3:a9: b9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AF:6B:8A:64:89:13:4D:C1:8D:BD:C0:BC:09:6D:FC:FA:AF:95:AF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/53dc8acc-0c30-42d3-abfa-5792ea5bf7de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:2000::/40 Signature Algorithm: sha256WithRSAEncryption c0:28:03:bd:d8:3e:25:fa:0b:21:de:04:d2:b3:9c:5a:d6:18: 69:7d:31:dc:a9:0b:8f:50:24:ee:68:db:dd:8e:29:b1:2f:3b: ce:ab:4c:79:9a:07:a1:45:1e:67:33:fd:47:85:27:35:24:b4: f7:e5:cb:d5:a2:b2:ae:63:91:86:87:c1:53:a0:a9:3d:9b:b6: 52:2c:07:3d:15:fb:70:b1:5b:3d:71:05:70:30:a8:36:3f:cb: 5a:81:5a:5a:d6:41:b8:fb:a3:ee:98:70:d1:b1:13:10:9d:49: ba:7e:85:f0:aa:4c:8f:e6:c4:58:19:c7:73:ad:7b:5d:15:8f: e8:4c:5a:a5:b3:12:b0:91:d0:55:46:b8:0e:cc:98:fd:15:5f: 0f:fb:54:2a:b7:b1:3f:66:6f:81:af:e7:ae:e3:62:fc:42:78: c5:79:4f:77:71:a3:14:56:d9:57:e8:62:d2:36:46:88:2b:d3: 52:0d:02:64:b8:7f:d2:27:3b:c2:a0:d3:84:06:55:82:84:9a: 92:c1:18:bc:bb:2b:59:6e:f3:85:62:1b:20:97:56:f5:b8:45: 51:b0:82:55:ca:90:bf:60:db:87:47:ec:15:06:23:03:23:57: a3:66:52:7e:3f:b1:6f:23:a8:21:36:f0:b2:c9:5e:d2:8f:08: ce:ac:ad:57 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUY4kMv4Cdy/UUTBPL7qvjvA6USVkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxOTAwMDkyOVoX DTI3MDExNzIzNTk1OVowejFJMEcGA1UEBRNAZDI5NWM5MTBjOWU2NDZjMDZmMTE1 YTM3M2U1NjYyMThiMWFmODQwNjcyYzcyZDVlZmY3YmE4NTM0ZmY1YTliNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4XTrm4UiabCjlm9pkCYheTnCUvJ JK3p1W9EySwdYj9nco5+tDvFR39Px5BQCJ7ySfYxOA450ug5rbEUTQ9d1djomBmZ Z+DdFRw9lvtDXNsC7oDWESbCkyfmAKJfOET7FAlG3yDN+12P5ysoIqTeCwQAjtSq SkQh4IJ95k1v6cu0NbV8tDHaxwikErYrReCHAl49p+ccJXVGzzqxA9fEGmQfm/wq dKkfdJgplfosqzDlST/AOauJaXr1MuxuuKBKJc9C4V4CkMBh9o6Bylt75kdy2Vf6 C8VXl7Ifd84okIIy7wWGaOH/hXscS8BxB66GR+FuKjIVC2rvccrg06m5ywIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMCva4pkiRNNwY29wLwJbfz6r5WvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUzZGM4YWNjLTBjMzAtNDJkMy1hYmZhLTU3OTJlYTViZjdkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/yAwDQYJKoZIhvcNAQELBQADggEBAMAoA73YPiX6CyHeBNKz nFrWGGl9MdypC49QJO5o292OKbEvO86rTHmaB6FFHmcz/UeFJzUktPfly9Wisq5j kYaHwVOgqT2btlIsBz0V+3CxWz1xBXAwqDY/y1qBWlrWQbj7o+6YcNGxExCdSbp+ hfCqTI/mxFgZx3Ote10Vj+hMWqWzErCR0FVGuA7MmP0VXw/7VCq3sT9mb4Gv567j YvxCeMV5T3dxoxRW2VfoYtI2Rogr01INAmS4f9InO8Kg04QGVYKEmpLBGLy7K1lu 84ViGyCXVvW4RVGwglXKkL9g24dH7BUGIwMjV6NmUn4/sW8jqCE28LLJXtKPCM6s rVc= -----END CERTIFICATE-----Generated at Thu Nov 5 15:20:03 2026 by rpki-client