$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c92d86f-d096-414c-bd9a-599ba8ca213f.roa File: 5c92d86f-d096-414c-bd9a-599ba8ca213f.roa (raw, json) Hash identifier: +UYjSGU4oO4aCue5Qjh3swfvbw2h833ySd7S2gPYlsc= Subject key identifier: 6E:5C:BF:E0:A5:F3:AB:46:76:86:BC:DC:7F:1E:E1:74:3F:BC:AC:01 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0EBDB8361956AF4563E2BD0B4912E6214605869B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c92d86f-d096-414c-bd9a-599ba8ca213f.roa Signing time: Tue 20 Oct 2026 00:20:31 +0000 ROA not before: Tue 20 Oct 2026 00:20:31 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:bd:b8:36:19:56:af:45:63:e2:bd:0b:49:12:e6:21:46:05:86:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:20:31 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=60d74fc2ab55782547701047a2cb834f1cb618328dfef95b2ee7dc6fefd91a4b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b8:35:b8:38:6a:ed:ff:d9:9a:ed:8b:6f:dd: 6d:bd:e6:80:44:9e:68:f4:03:c4:7f:ab:4e:7e:25: f2:b2:14:d2:db:f1:e9:f4:78:d3:db:c5:ff:98:32: d8:56:8a:46:7e:f1:9c:8b:d7:33:ce:99:51:f9:f5: a6:da:b5:b3:af:c9:3a:62:ab:9b:cd:d0:b1:38:a4: b9:95:f6:38:c6:3d:13:7c:0c:c1:2f:33:1f:44:2a: 50:f5:61:aa:aa:95:ea:a9:33:7a:6f:7f:46:86:3f: 39:ea:b9:2f:78:3c:ff:eb:02:20:e4:7c:8a:ae:c3: 81:ad:37:4d:bd:fe:2c:8a:ba:f9:4f:8c:b7:66:a7: 4b:c0:f6:d6:64:4b:c4:2f:06:31:d0:18:8f:88:76: 05:f7:82:3f:8f:c1:84:3a:e0:78:26:d0:67:f0:ee: c8:52:48:10:77:d4:c5:8f:9d:5e:46:18:58:85:b0: 38:a2:f6:70:90:89:52:25:dc:24:dd:8d:8a:16:56: a2:d6:84:b2:b1:31:8a:00:cf:72:aa:4d:89:c7:5f: 2f:76:13:21:ed:e7:73:55:4d:5c:3e:6a:3b:68:f8: c6:8e:4b:55:bc:58:3c:76:bb:45:ef:1e:bb:65:4f: c2:62:f0:91:5c:0f:ec:28:5a:ff:a7:de:b2:bf:ec: 63:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5C:BF:E0:A5:F3:AB:46:76:86:BC:DC:7F:1E:E1:74:3F:BC:AC:01 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c92d86f-d096-414c-bd9a-599ba8ca213f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:2800::/40 Signature Algorithm: sha256WithRSAEncryption b4:04:ef:eb:66:46:61:af:13:11:63:50:2d:54:15:6a:15:c4: ad:da:58:1b:d2:5e:45:15:13:81:d5:99:98:6d:f9:8b:cd:5b: 40:1a:46:5b:5a:04:85:6a:92:f9:a7:e3:fc:fa:92:82:12:a1: 19:1b:3d:4e:58:b6:a3:09:90:1f:49:93:43:a4:8b:94:4b:0d: 34:cf:95:9d:6d:87:c0:bc:8e:54:b6:bc:ed:56:98:75:e8:dd: e7:f9:1b:04:4b:d8:c6:69:87:66:d6:d8:62:f7:1e:e1:e2:3b: 64:d5:47:11:2e:bb:89:da:b4:95:52:45:ee:33:da:24:5b:cc: db:85:19:bb:71:17:1f:96:8c:d2:de:8d:08:8a:90:5f:11:3b: 5d:2f:07:4a:51:95:a1:98:4d:d8:df:21:95:81:00:dd:6d:bc: 7e:db:dc:52:5a:e2:e0:96:6f:1d:3c:63:df:43:2c:17:f2:61: f6:cf:10:09:c1:13:17:5e:f4:e6:d6:7f:f9:dc:b3:0d:f4:7e: ea:c3:c4:66:1e:83:9f:0c:22:29:82:5e:a0:5b:d3:6b:c9:8a: d1:5c:04:e9:93:84:50:ac:d5:0b:cf:95:82:22:d1:30:8f:f3: 96:f3:72:0c:4e:5d:5d:07:9e:34:a1:1e:eb:dc:64:f3:b9:b7: cc:b8:58:d1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDr24NhlWr0Vj4r0LSRLmIUYFhpswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMjAzMVoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNANjBkNzRmYzJhYjU1NzgyNTQ3NzAx MDQ3YTJjYjgzNGYxY2I2MTgzMjhkZmVmOTViMmVlN2RjNmZlZmQ5MWE0YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrg1uDhq7f/Zmu2Lb91tveaARJ5o 9APEf6tOfiXyshTS2/Hp9HjT28X/mDLYVopGfvGci9czzplR+fWm2rWzr8k6Yqub zdCxOKS5lfY4xj0TfAzBLzMfRCpQ9WGqqpXqqTN6b39Ghj856rkveDz/6wIg5HyK rsOBrTdNvf4sirr5T4y3ZqdLwPbWZEvELwYx0BiPiHYF94I/j8GEOuB4JtBn8O7I UkgQd9TFj51eRhhYhbA4ovZwkIlSJdwk3Y2KFlai1oSysTGKAM9yqk2Jx18vdhMh 7edzVU1cPmo7aPjGjktVvFg8drtF7x67ZU/CYvCRXA/sKFr/p96yv+xjxQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG5cv+Cl86tGdoa83H8e4XQ/vKwBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVjOTJkODZmLWQwOTYtNDE0Yy1iZDlhLTU5OWJhOGNhMjEzZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacCgwDQYJKoZIhvcNAQELBQADggEBALQE7+tmRmGvExFjUC1U FWoVxK3aWBvSXkUVE4HVmZht+YvNW0AaRltaBIVqkvmn4/z6koISoRkbPU5YtqMJ kB9Jk0Oki5RLDTTPlZ1th8C8jlS2vO1WmHXo3ef5GwRL2MZph2bW2GL3HuHiO2TV RxEuu4natJVSRe4z2iRbzNuFGbtxFx+WjNLejQiKkF8RO10vB0pRlaGYTdjfIZWB AN1tvH7b3FJa4uCWbx08Y99DLBfyYfbPEAnBExde9ObWf/ncsw30furDxGYeg58M IimCXqBb02vJitFcBOmThFCs1QvPlYIi0TCP85bzcgxOXV0HnjShHuvcZPO5t8y4 WNE= -----END CERTIFICATE-----Generated at Thu Nov 5 15:24:57 2026 by rpki-client