$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b0a1579-844b-4192-8162-b5c113e8eea7.roa File: 6b0a1579-844b-4192-8162-b5c113e8eea7.roa (raw, json) Hash identifier: ko43FkMmAQdyJBV2shgR0fJFmsxHMzMB4h7dwCDhMnc= Subject key identifier: D8:EA:92:E8:B9:19:9A:DE:E5:9E:73:BF:A7:4F:4B:A5:CE:32:E5:E6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 74BF54DF6A4689E3D54AE0A3E6BE0751B9C4A27B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b0a1579-844b-4192-8162-b5c113e8eea7.roa Signing time: Tue 20 Oct 2026 00:30:59 +0000 ROA not before: Tue 20 Oct 2026 00:30:59 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da19::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:bf:54:df:6a:46:89:e3:d5:4a:e0:a3:e6:be:07:51:b9:c4:a2:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:30:59 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=6b4705197fb3090f671be3debd22f8bcceadab78348449cb07003b044409c06b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:26:6b:80:8a:17:b3:cc:34:4f:c6:47:48:48: c4:00:35:d6:c4:e8:bf:29:89:76:f6:db:61:19:bd: b9:a3:c1:85:14:aa:3b:53:1f:17:04:75:32:a8:e4: 2f:d7:c4:a0:11:d1:2d:a7:34:fb:8d:bc:5a:43:0a: 5b:05:c4:5a:a3:66:3c:c7:80:c5:1b:de:96:f9:8b: 80:ee:aa:3d:a2:82:00:68:81:78:21:3b:22:72:28: 41:a8:90:01:4f:a7:8c:0f:0d:9e:8a:01:ee:06:43: b8:74:d3:75:25:c9:88:d0:33:b7:ee:e2:4e:4d:83: 74:d4:da:9c:77:3b:7f:bf:70:6b:be:a9:3a:30:28: 41:99:e5:71:18:b8:37:78:5d:fa:9a:fa:30:bd:5a: dc:de:d4:74:ca:1d:70:6a:be:7f:a5:12:c3:c5:6e: 88:63:17:0d:e3:ec:7a:d3:ba:13:d7:83:e5:3e:4f: f0:b5:92:86:4a:8c:8e:c4:d1:ec:9f:5c:7c:c8:09: b9:ad:4a:a5:45:4a:23:53:c9:7f:d6:49:b9:8c:a8: f3:4f:73:d6:f1:1f:4e:82:84:0c:33:f2:9a:4e:c7: 70:6f:80:9a:94:d9:fa:49:d0:53:c0:db:81:36:42: a9:7d:47:b3:ba:9b:2f:8f:20:b4:21:08:15:b7:e4: c5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EA:92:E8:B9:19:9A:DE:E5:9E:73:BF:A7:4F:4B:A5:CE:32:E5:E6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b0a1579-844b-4192-8162-b5c113e8eea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da19::/36 Signature Algorithm: sha256WithRSAEncryption 76:70:56:81:11:30:23:d5:94:ae:3f:be:13:ea:b4:b0:fc:e5: b0:ed:70:8e:45:8d:47:db:d6:11:80:05:3f:4f:f1:8c:76:01: 9f:40:98:13:63:e1:35:88:69:6a:f1:88:5d:32:87:15:de:2c: 6d:a7:9c:35:92:1c:b0:3e:cd:63:32:03:90:6a:3a:b6:0d:5c: 49:ab:7f:c6:d0:de:da:6f:3e:52:3d:f4:13:7e:52:aa:be:b8: fc:c7:6b:a7:e2:e4:65:1e:9a:2f:55:ca:87:46:d7:12:fa:09: e4:b2:56:15:1f:97:12:e8:fd:84:88:d7:d2:17:fc:c2:1c:11: 03:9c:04:8e:a0:3a:80:d9:7c:09:ac:58:75:bc:13:14:69:03: 66:71:8c:67:de:53:ac:d6:a7:10:cf:46:da:a4:f4:75:ce:a5: 8c:bb:f0:f9:ed:d8:4f:d2:f1:46:cc:68:65:9b:1f:e2:0a:51: a3:a4:2a:b6:25:67:3f:28:03:ce:4b:82:d1:eb:68:e8:95:7b: 93:0e:67:ff:26:07:32:dc:22:e3:dd:3b:c3:80:1b:99:ac:7e: 8f:bc:34:a1:42:06:05:be:eb:db:e8:90:ed:9b:99:a2:f2:5a: b1:71:e0:8b:e5:28:61:7a:49:8c:50:bc:c4:31:e2:d9:d9:9e: ae:d7:81:0a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdL9U32pGiePVSuCj5r4HUbnEonswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMzA1OVoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNANmI0NzA1MTk3ZmIzMDkwZjY3MWJl M2RlYmQyMmY4YmNjZWFkYWI3ODM0ODQ0OWNiMDcwMDNiMDQ0NDA5YzA2YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyZrgIoXs8w0T8ZHSEjEADXWxOi/ KYl29tthGb25o8GFFKo7Ux8XBHUyqOQv18SgEdEtpzT7jbxaQwpbBcRao2Y8x4DF G96W+YuA7qo9ooIAaIF4ITsicihBqJABT6eMDw2eigHuBkO4dNN1JcmI0DO37uJO TYN01Nqcdzt/v3Brvqk6MChBmeVxGLg3eF36mvowvVrc3tR0yh1war5/pRLDxW6I YxcN4+x607oT14PlPk/wtZKGSoyOxNHsn1x8yAm5rUqlRUojU8l/1km5jKjzT3PW 8R9OgoQMM/KaTsdwb4CalNn6SdBTwNuBNkKpfUezupsvjyC0IQgVt+TFzwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNjqkui5GZre5Z5zv6dPS6XOMuXmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZiMGExNTc5LTg0NGItNDE5Mi04MTYyLWI1YzExM2U4ZWVhNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaGQAwDQYJKoZIhvcNAQELBQADggEBAHZwVoERMCPVlK4/vhPq tLD85bDtcI5FjUfb1hGABT9P8Yx2AZ9AmBNj4TWIaWrxiF0yhxXeLG2nnDWSHLA+ zWMyA5BqOrYNXEmrf8bQ3tpvPlI99BN+Uqq+uPzHa6fi5GUemi9VyodG1xL6CeSy VhUflxLo/YSI19IX/MIcEQOcBI6gOoDZfAmsWHW8ExRpA2ZxjGfeU6zWpxDPRtqk 9HXOpYy78Pnt2E/S8UbMaGWbH+IKUaOkKrYlZz8oA85LgtHraOiVe5MOZ/8mBzLc IuPdO8OAG5msfo+8NKFCBgW+69vokO2bmaLyWrFx4IvlKGF6SYxQvMQx4tnZnq7X gQo= -----END CERTIFICATE-----Generated at Thu Nov 5 05:17:59 2026 by rpki-client