$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5ce1b811-df58-4679-aa09-91a36ae19500.roa File: 5ce1b811-df58-4679-aa09-91a36ae19500.roa (raw, json) Hash identifier: Xk7TjHxbvfkj2Mos2y1tOn73elt1UD2FkJvorZJ26UU= Subject key identifier: 0B:55:EC:E6:72:4F:0E:66:95:B8:BA:4B:0D:DC:48:CC:8F:D4:2D:3B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 12B984656D999781D43273E1769AAF53B631C71A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5ce1b811-df58-4679-aa09-91a36ae19500.roa Signing time: Thu 29 Oct 2026 00:03:35 +0000 ROA not before: Thu 29 Oct 2026 00:03:35 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae0:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b9:84:65:6d:99:97:81:d4:32:73:e1:76:9a:af:53:b6:31:c7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:03:35 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=8d55fa708117e33d3492e5107c47d062f3045c98e8a547fbac1d6a964b038f27, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:08:4b:d3:b4:df:2f:c3:a9:66:e7:44:a0:bb: b7:be:e2:f5:21:58:57:5b:62:58:2a:ef:93:00:30: 19:8e:86:ed:21:7d:5d:46:12:bd:96:c2:f6:00:2a: 5f:e1:d4:b7:ba:35:a6:fc:69:6b:c3:97:ba:9e:07: 69:29:5f:7e:82:5d:df:e7:0a:8c:71:66:f8:eb:d1: ea:dd:2d:0d:3b:7e:29:ee:fe:ae:35:76:a6:58:de: 1c:c3:a2:8e:c4:da:5f:50:71:92:3e:4d:07:83:4d: 2b:da:4a:ea:c1:bc:53:7b:b3:f5:39:5b:eb:0b:32: 60:1d:97:ed:b0:89:17:07:81:03:7c:77:61:25:e4: ce:b8:29:94:a2:75:6d:03:67:47:34:11:91:20:83: 19:43:22:aa:a9:a6:cf:88:bd:37:7a:32:f0:db:ce: 4e:67:dc:c1:21:53:a0:2b:ea:c6:cf:83:87:14:16: 0d:29:9e:e2:8e:11:bf:d0:1d:5c:15:e4:d3:fc:73: 93:cb:cf:12:56:60:b5:1c:36:13:c9:cf:de:9e:c2: e8:a5:52:67:10:6d:50:57:44:5c:3b:75:84:61:df: 51:f9:8c:a5:d5:09:fe:1e:e8:2e:ac:7e:50:1d:aa: fc:43:fc:49:18:8a:b8:96:41:c0:e8:f6:72:b4:10: 92:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:55:EC:E6:72:4F:0E:66:95:B8:BA:4B:0D:DC:48:CC:8F:D4:2D:3B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5ce1b811-df58-4679-aa09-91a36ae19500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae0:8000::/40 Signature Algorithm: sha256WithRSAEncryption 1f:b2:77:14:76:4a:12:bd:45:6f:2d:26:c3:ee:90:a4:de:31: 17:34:bc:44:98:2f:b5:7c:f1:67:32:16:62:e8:7b:22:41:51: 36:99:30:d1:c8:58:14:a0:47:63:60:14:66:a1:9d:55:7e:74: 30:ac:95:b4:86:7f:fa:fb:14:8f:29:14:6f:8c:ef:ac:8a:21: 54:a6:ff:79:b8:79:45:8a:96:89:69:2f:4e:e9:b9:01:41:c6: ae:a7:fe:0a:93:4a:2f:b7:70:c6:cf:fd:de:34:bb:db:ae:b4: 8f:b3:d6:b7:3a:50:cd:a3:a1:5a:26:96:61:ff:e4:e0:92:3a: f1:a0:54:01:8b:91:a3:2c:2f:a6:29:23:c1:65:2e:00:01:be: ca:6c:de:b0:29:b9:88:f0:f3:87:c0:b5:33:3b:b3:87:a4:25: e6:e3:18:48:d4:96:de:48:94:ea:46:4b:02:fa:59:e8:f0:f2: ca:4e:8d:a6:d3:67:c2:c6:f1:a4:bf:15:e0:48:46:6a:82:dd: 8b:d8:d1:f1:4e:ed:7f:f4:d9:af:69:30:9c:31:62:a3:c8:1d: 6d:ee:80:a7:49:92:99:69:03:ef:a0:ea:ab:22:4d:5a:22:cd: 4d:08:ad:10:27:49:78:0a:e2:24:f4:e6:73:8b:86:79:e0:1b: 8e:65:6f:e6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUErmEZW2Zl4HUMnPhdpqvU7YxxxowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyOTAwMDMzNVoX DTI3MDEyNzIzNTk1OVowejFJMEcGA1UEBRNAOGQ1NWZhNzA4MTE3ZTMzZDM0OTJl NTEwN2M0N2QwNjJmMzA0NWM5OGU4YTU0N2ZiYWMxZDZhOTY0YjAzOGYyNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9whL07TfL8OpZudEoLu3vuL1IVhX W2JYKu+TADAZjobtIX1dRhK9lsL2ACpf4dS3ujWm/Glrw5e6ngdpKV9+gl3f5wqM cWb469Hq3S0NO34p7v6uNXamWN4cw6KOxNpfUHGSPk0Hg00r2krqwbxTe7P1OVvr CzJgHZftsIkXB4EDfHdhJeTOuCmUonVtA2dHNBGRIIMZQyKqqabPiL03ejLw285O Z9zBIVOgK+rGz4OHFBYNKZ7ijhG/0B1cFeTT/HOTy88SVmC1HDYTyc/ensLopVJn EG1QV0RcO3WEYd9R+Yyl1Qn+HugurH5QHar8Q/xJGIq4lkHA6PZytBCSNwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAtV7OZyTw5mlbi6Sw3cSMyP1C07MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVjZTFiODExLWRmNTgtNDY3OS1hYTA5LTkxYTM2YWUxOTUwMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4IAwDQYJKoZIhvcNAQELBQADggEBAB+ydxR2ShK9RW8tJsPu kKTeMRc0vESYL7V88WcyFmLoeyJBUTaZMNHIWBSgR2NgFGahnVV+dDCslbSGf/r7 FI8pFG+M76yKIVSm/3m4eUWKlolpL07puQFBxq6n/gqTSi+3cMbP/d40u9uutI+z 1rc6UM2joVomlmH/5OCSOvGgVAGLkaMsL6YpI8FlLgABvsps3rApuYjw84fAtTM7 s4ekJebjGEjUlt5IlOpGSwL6Wejw8spOjabTZ8LG8aS/FeBIRmqC3YvY0fFO7X/0 2a9pMJwxYqPIHW3ugKdJkplpA++g6qsiTVoizU0IrRAnSXgK4iT05nOLhnngG45l b+Y= -----END CERTIFICATE-----Generated at Thu Nov 5 05:18:12 2026 by rpki-client