$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61255253-23f9-44a2-80e2-03c17530aafa.roa File: 61255253-23f9-44a2-80e2-03c17530aafa.roa (raw, json) Hash identifier: udLTZBlnpDslDHxbu5ZjJDUlOLHSkJEu1sE7c9Dz0xc= Subject key identifier: 78:30:CF:B7:1E:13:6D:7E:84:3B:AF:40:FB:49:28:E6:0C:28:28:3D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 269B5AB06760E15C903FF7401443F66DDE40BC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61255253-23f9-44a2-80e2-03c17530aafa.roa Signing time: Mon 19 Oct 2026 00:09:54 +0000 ROA not before: Mon 19 Oct 2026 00:09:54 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9b:5a:b0:67:60:e1:5c:90:3f:f7:40:14:43:f6:6d:de:40:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:09:54 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=3b05c665424270000faf1308bbe6dc44068379a889c37e3da799c0f8fad6bfa6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f3:b6:f6:25:2b:74:7b:16:94:bb:c7:f7:05: 48:f1:b1:7d:e3:04:12:70:c9:f4:e1:dd:cf:5e:a5: 52:ad:7c:4c:fb:84:c7:b9:01:2e:f1:01:1e:09:e3: 25:f1:7f:78:74:0e:df:43:89:b9:d8:73:be:e0:ab: ec:db:ce:69:16:00:de:b7:70:a7:f5:08:4a:dd:84: e0:88:15:46:cd:81:6f:93:47:aa:b9:67:cb:45:83: ef:d3:61:66:53:75:df:22:fe:f2:26:63:23:0b:ba: 38:7f:32:50:ac:a7:b1:45:e3:36:19:fd:1c:68:92: 24:7a:d0:a6:83:e4:24:e1:cd:c6:aa:8d:0e:37:70: 19:fb:47:83:8a:32:a0:4f:e5:ab:82:fc:6e:29:31: 61:81:ec:aa:91:ba:02:8c:25:8d:05:ac:dd:54:b0: 16:15:7e:c3:fa:2c:a6:88:b9:12:dd:b0:62:ca:27: 03:eb:43:91:bc:fa:e6:63:4d:1f:9c:28:a8:b1:cb: 59:0a:2c:4b:18:bc:6b:9b:6a:6b:6f:19:93:68:fd: 5e:5c:41:79:72:3e:1b:62:a6:9b:b1:0c:74:84:c3: fe:ad:1d:15:20:f9:51:6a:d9:20:dc:0e:12:0b:fe: c4:2f:02:61:d1:70:4d:8e:7f:76:03:7d:7e:93:32: 97:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:30:CF:B7:1E:13:6D:7E:84:3B:AF:40:FB:49:28:E6:0C:28:28:3D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61255253-23f9-44a2-80e2-03c17530aafa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:a000::/40 Signature Algorithm: sha256WithRSAEncryption a0:04:81:90:27:41:a0:20:f9:f3:3e:c5:e3:c0:89:28:51:74: d8:19:04:62:94:ce:fc:9e:78:4d:9c:ba:03:07:9d:98:55:67: b5:09:13:22:bb:40:4e:19:d3:8b:1b:cb:75:e0:cf:b1:0d:5c: f2:12:e1:81:6c:84:55:1d:76:9f:e7:cb:cf:ed:e1:fb:d7:9b: 84:a6:95:fd:26:20:2c:28:d0:a5:1d:29:3f:c9:f2:35:3b:71: bf:98:94:49:cf:28:76:ab:9d:cd:b8:97:25:0b:98:58:fb:9b: 36:06:7f:1d:ad:e5:72:54:3a:06:5c:24:43:e3:07:4c:7f:b9: 08:16:e5:66:40:d2:62:1e:3d:a3:51:b1:13:de:65:2b:e2:9f: 9e:20:11:66:54:ae:72:ae:a2:09:07:ab:73:40:e5:7a:65:a4: fd:2f:06:9a:2c:a4:0c:b6:82:b6:85:b7:38:a3:ee:cb:d5:96: 80:31:2c:bd:f1:43:60:5e:b8:37:78:97:5c:64:b5:6b:c3:b4: 96:ec:21:8f:6c:66:c4:dd:b7:b4:3e:85:7b:cd:15:7d:6b:d2: 5e:a2:7a:a1:75:36:90:60:70:05:5a:21:29:b9:4e:fe:8c:fe: b5:fd:25:4c:65:c1:41:06:4b:1a:c7:1f:19:1c:d8:22:32:e2: ed:6d:a7:e5 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgITJptasGdg4VyQP/dAFEP2bd5AvDANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjYxMDE5MDAwOTU0WhcN MjcwMTE3MjM1OTU5WjB6MUkwRwYDVQQFE0AzYjA1YzY2NTQyNDI3MDAwMGZhZjEz MDhiYmU2ZGM0NDA2ODM3OWE4ODljMzdlM2RhNzk5YzBmOGZhZDZiZmE2MS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS87b2JSt0exaUu8f3BUjxsX3jBBJw yfTh3c9epVKtfEz7hMe5AS7xAR4J4yXxf3h0Dt9DibnYc77gq+zbzmkWAN63cKf1 CErdhOCIFUbNgW+TR6q5Z8tFg+/TYWZTdd8i/vImYyMLujh/MlCsp7FF4zYZ/Rxo kiR60KaD5CThzcaqjQ43cBn7R4OKMqBP5auC/G4pMWGB7KqRugKMJY0FrN1UsBYV fsP6LKaIuRLdsGLKJwPrQ5G8+uZjTR+cKKixy1kKLEsYvGubamtvGZNo/V5cQXly PhtippuxDHSEw/6tHRUg+VFq2SDcDhIL/sQvAmHRcE2Of3YDfX6TMpdfAgMBAAGj ggJKMIICRjAdBgNVHQ4EFgQUeDDPtx4TbX6EO69A+0ko5gwoKD0wHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv NjEyNTUyNTMtMjNmOS00NGEyLTgwZTItMDNjMTc1MzBhYWZhLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkBtppoDANBgkqhkiG9w0BAQsFAAOCAQEAoASBkCdBoCD58z7F48CJ KFF02BkEYpTO/J54TZy6AwedmFVntQkTIrtAThnTixvLdeDPsQ1c8hLhgWyEVR12 n+fLz+3h+9ebhKaV/SYgLCjQpR0pP8nyNTtxv5iUSc8odqudzbiXJQuYWPubNgZ/ Ha3lclQ6BlwkQ+MHTH+5CBblZkDSYh49o1GxE95lK+KfniARZlSucq6iCQerc0Dl emWk/S8GmiykDLaCtoW3OKPuy9WWgDEsvfFDYF64N3iXXGS1a8O0luwhj2xmxN23 tD6Fe80VfWvSXqJ6oXU2kGBwBVohKblO/oz+tf0lTGXBQQZLGscfGRzYIjLi7W2n 5Q== -----END CERTIFICATE-----Generated at Thu Nov 5 19:30:01 2026 by rpki-client