$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7169bc70-b9db-4e83-beac-24cc0c5a1537.roa File: 7169bc70-b9db-4e83-beac-24cc0c5a1537.roa (raw, json) Hash identifier: pXKGUpSbZNAdde6qrX0D+MgsyG0ka1xMzt+s3E0x2bU= Subject key identifier: 78:3E:B0:75:5B:62:54:D7:71:50:2B:CD:65:9E:9F:28:94:3B:19:91 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F9735F3B63F2D32FA034D2EFC38EE8FBA3076DC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7169bc70-b9db-4e83-beac-24cc0c5a1537.roa Signing time: Tue 20 Oct 2026 00:20:30 +0000 ROA not before: Tue 20 Oct 2026 00:20:30 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:97:35:f3:b6:3f:2d:32:fa:03:4d:2e:fc:38:ee:8f:ba:30:76:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:20:30 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=c8a80f8372e35d59436d316b2974f790c9d1833b0c95f419abf09b0417726d3a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:85:d2:e1:01:7f:23:e7:f0:a6:e7:9b:98: a4:01:28:6b:a5:e7:ba:ee:3a:3a:c0:d4:d0:58:6e: 77:4a:00:04:42:a8:1a:b5:80:2c:6f:8b:d9:25:95: f7:f0:12:5c:f6:e5:4a:2f:c8:1b:05:3a:a0:cf:21: 70:67:c8:e4:b4:7a:26:0e:4f:7e:ad:49:b5:41:b4: 5e:bf:f2:9b:81:cc:de:0e:06:10:9b:ba:81:87:a8: f4:80:94:e2:c1:8d:e9:55:77:fd:77:78:37:17:b7: 1d:a9:1c:37:d8:67:78:0f:4d:6a:5f:56:b7:c4:be: 4b:65:59:00:a2:05:07:d3:85:89:18:b5:a8:ed:f4: 53:1b:b4:5c:9a:65:db:26:72:69:05:0b:e3:98:3b: ac:9f:9c:bb:bb:85:45:b5:5c:b4:70:7e:96:a0:11: 0c:a4:02:45:a9:ff:a1:0a:be:3f:88:46:9a:27:2b: b7:85:48:84:5b:c4:1f:b1:06:2a:a9:2c:b5:51:26: e4:a5:51:88:98:66:88:63:27:d7:a5:41:fa:77:dd: 2d:40:d3:ef:45:10:ea:e7:18:ec:2b:8a:4e:2a:f9: 99:65:2f:5e:0e:62:d2:90:1e:95:13:a2:e8:df:2b: a1:ea:f1:33:ea:4b:76:11:a7:57:bc:c5:a7:e9:44: 81:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3E:B0:75:5B:62:54:D7:71:50:2B:CD:65:9E:9F:28:94:3B:19:91 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7169bc70-b9db-4e83-beac-24cc0c5a1537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:8000::/40 Signature Algorithm: sha256WithRSAEncryption 45:97:02:5a:13:a6:9b:3d:9d:57:d9:78:a9:20:04:9b:59:e3: dd:c2:76:85:9c:8b:ec:3d:a8:89:b8:84:88:dc:85:6d:02:9b: 99:d6:f4:3a:ea:3b:d2:da:11:5c:bd:db:17:43:b9:81:aa:33: 1e:7a:c6:33:6b:d7:7b:2a:51:e9:0c:b3:64:d4:e2:1b:97:ad: 82:63:41:ff:c3:5b:9f:34:9e:98:f5:5c:30:50:a6:8b:1f:ae: ca:a8:42:3f:d8:aa:59:a1:bc:7e:2f:4a:1f:ba:7f:92:60:6b: b7:b5:95:0c:f0:2a:00:5d:f0:da:d9:0b:bc:9b:d9:ca:d4:e6: 65:f0:1f:2d:81:32:4b:23:31:6d:a9:74:6b:91:c8:02:fe:5f: ad:7a:87:70:9e:29:bc:b9:09:55:27:5f:43:4c:ca:c5:aa:38: fd:d5:91:b1:0b:36:b0:ef:a0:6b:cc:1c:62:46:86:49:13:2b: f1:b5:03:c8:97:4f:3e:d8:8d:fd:36:93:43:ff:ce:b4:d2:31: 40:f2:ea:e0:2a:4b:92:9e:33:1b:29:05:34:1f:23:46:bc:fd: 13:f6:92:04:fb:ee:14:2b:f8:4e:ec:b8:76:d6:6d:3d:ea:7e: ad:f1:be:32:bf:81:05:b1:bf:13:a6:cc:fa:ff:60:86:99:47: 3d:eb:c8:84 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUf5c187Y/LTL6A00u/Djuj7owdtwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMjAzMFoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAYzhhODBmODM3MmUzNWQ1OTQzNmQz MTZiMjk3NGY3OTBjOWQxODMzYjBjOTVmNDE5YWJmMDliMDQxNzcyNmQzYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnOF0uEBfyPn8Kbnm5ikAShrpee6 7jo6wNTQWG53SgAEQqgatYAsb4vZJZX38BJc9uVKL8gbBTqgzyFwZ8jktHomDk9+ rUm1QbRev/KbgczeDgYQm7qBh6j0gJTiwY3pVXf9d3g3F7cdqRw32Gd4D01qX1a3 xL5LZVkAogUH04WJGLWo7fRTG7RcmmXbJnJpBQvjmDusn5y7u4VFtVy0cH6WoBEM pAJFqf+hCr4/iEaaJyu3hUiEW8QfsQYqqSy1USbkpVGImGaIYyfXpUH6d90tQNPv RRDq5xjsK4pOKvmZZS9eDmLSkB6VE6Lo3yuh6vEz6kt2EadXvMWn6USBUQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHg+sHVbYlTXcVArzWWenyiUOxmRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcxNjliYzcwLWI5ZGItNGU4My1iZWFjLTI0Y2MwYzVhMTUzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNoAwDQYJKoZIhvcNAQELBQADggEBAEWXAloTpps9nVfZeKkg BJtZ493CdoWci+w9qIm4hIjchW0Cm5nW9DrqO9LaEVy92xdDuYGqMx56xjNr13sq UekMs2TU4huXrYJjQf/DW580npj1XDBQposfrsqoQj/YqlmhvH4vSh+6f5Jga7e1 lQzwKgBd8NrZC7yb2crU5mXwHy2BMksjMW2pdGuRyAL+X616h3CeKby5CVUnX0NM ysWqOP3VkbELNrDvoGvMHGJGhkkTK/G1A8iXTz7Yjf02k0P/zrTSMUDy6uAqS5Ke MxspBTQfI0a8/RP2kgT77hQr+E7suHbWbT3qfq3xvjK/gQWxvxOmzPr/YIaZRz3r yIQ= -----END CERTIFICATE-----Generated at Sun Nov 8 09:17:40 2026 by rpki-client