$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71d1a287-2d4f-4345-ae49-debf8605c516.roa File: 71d1a287-2d4f-4345-ae49-debf8605c516.roa (raw, json) Hash identifier: cVUhwOBh5yrnWv72udjzHbwzSjKVWQlRvGXL6wYtI0M= Subject key identifier: 92:DC:73:12:64:84:31:1B:CC:FC:CE:39:30:99:33:7F:40:1F:65:07 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1BE74293FD5FE085DE64D5FEAA810BEAF082D7C4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71d1a287-2d4f-4345-ae49-debf8605c516.roa Signing time: Tue 20 Oct 2026 00:20:34 +0000 ROA not before: Tue 20 Oct 2026 00:20:34 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da11::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e7:42:93:fd:5f:e0:85:de:64:d5:fe:aa:81:0b:ea:f0:82:d7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:20:34 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=ed0122a12a8ca5f30cf3c3b76406f803c5645b0fe251c3ef3c46f5d0f8d82620, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f2:f6:b7:e5:c5:ce:5c:24:4d:14:16:ba:64: 6c:8f:ea:71:be:f5:24:df:e4:1c:97:fb:87:88:3e: 5f:e9:61:c3:fa:f0:2c:0f:5f:35:98:88:bf:6c:53: e2:28:aa:88:be:ea:46:4e:72:38:ae:ab:50:61:19: d4:83:73:ba:35:86:2b:50:76:c9:ef:59:82:d1:70: eb:38:3c:df:48:43:45:71:e2:04:fd:e9:55:f3:24: ba:a0:97:9b:b7:b4:8b:2a:3c:1f:97:1e:cd:44:0e: 51:ef:0e:17:0b:1c:00:dc:68:ff:6e:fb:6f:79:3d: 1e:ca:d0:8c:d3:da:fd:66:71:f9:73:a0:57:d2:ed: da:0a:5f:14:4f:bb:69:df:22:07:aa:95:7c:ba:f2: 22:22:4d:d7:c3:a3:5e:5d:62:22:c9:af:53:7e:ef: f3:d3:ff:2f:90:f9:c2:b7:a8:0b:de:89:25:2b:fa: 93:75:c7:cc:3f:68:10:a8:be:d5:c6:bf:84:23:74: df:59:37:c6:c0:52:ed:df:0c:2d:59:6f:d9:cf:68: a2:4f:4e:87:5a:28:d1:0c:b6:75:48:04:16:b0:c6: 17:27:ae:05:e2:70:d2:eb:53:35:5c:63:63:60:4f: 2b:16:3e:69:da:6b:28:6e:0e:98:cb:e1:98:be:09: 1e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DC:73:12:64:84:31:1B:CC:FC:CE:39:30:99:33:7F:40:1F:65:07 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71d1a287-2d4f-4345-ae49-debf8605c516.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da11::/38 Signature Algorithm: sha256WithRSAEncryption 91:ca:d6:11:3c:85:9d:70:ce:09:55:4e:f1:9c:bd:c2:43:34: 05:1c:c1:7d:ae:fc:3a:f0:75:4f:d7:4c:5b:ed:fc:aa:04:09: 9b:eb:04:79:31:59:26:00:1f:d1:b1:88:2a:8c:4c:d8:01:2c: 65:c0:9d:65:99:b8:d3:3c:20:2d:2f:a6:fa:70:13:31:4c:1c: 66:11:da:c8:5a:7e:fb:f1:4c:63:72:1e:c3:32:ae:59:02:0e: 40:ec:25:f0:0d:07:e2:ce:e8:5d:ad:20:11:33:31:69:e2:2d: 2c:92:15:f1:40:dd:e8:17:b6:d8:e9:f2:cc:17:29:0e:ad:57: e0:58:d1:d0:8d:64:ed:b1:13:c9:13:ed:c6:b2:5c:8a:72:80: 98:78:80:0b:b0:5e:75:74:5c:d2:bd:5c:f8:a5:39:b5:22:53: 01:9c:5b:87:85:98:66:0d:9b:f0:2f:cf:9b:55:13:ba:42:ce: ee:97:23:a2:cc:28:f4:cc:f2:19:b8:e9:be:9b:41:d9:1b:ad: ec:76:45:84:11:a2:f1:f5:a5:05:08:b7:21:d6:23:e0:85:bd: 61:fd:9c:44:f1:49:3c:04:39:a3:b0:c7:2d:c2:26:3a:63:53: 38:10:67:e2:ac:f8:48:14:4c:3f:07:96:ed:02:18:28:59:54: a7:0f:ed:0c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUG+dCk/1f4IXeZNX+qoEL6vCC18QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMjAzNFoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAZWQwMTIyYTEyYThjYTVmMzBjZjNj M2I3NjQwNmY4MDNjNTY0NWIwZmUyNTFjM2VmM2M0NmY1ZDBmOGQ4MjYyMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvL2t+XFzlwkTRQWumRsj+pxvvUk 3+Qcl/uHiD5f6WHD+vAsD181mIi/bFPiKKqIvupGTnI4rqtQYRnUg3O6NYYrUHbJ 71mC0XDrODzfSENFceIE/elV8yS6oJebt7SLKjwflx7NRA5R7w4XCxwA3Gj/bvtv eT0eytCM09r9ZnH5c6BX0u3aCl8UT7tp3yIHqpV8uvIiIk3Xw6NeXWIiya9Tfu/z 0/8vkPnCt6gL3oklK/qTdcfMP2gQqL7Vxr+EI3TfWTfGwFLt3wwtWW/Zz2iiT06H WijRDLZ1SAQWsMYXJ64F4nDS61M1XGNjYE8rFj5p2msobg6Yy+GYvgkeFQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJLccxJkhDEbzPzOOTCZM39AH2UHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcxZDFhMjg3LTJkNGYtNDM0NS1hZTQ5LWRlYmY4NjA1YzUxNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEQAwDQYJKoZIhvcNAQELBQADggEBAJHK1hE8hZ1wzglVTvGc vcJDNAUcwX2u/DrwdU/XTFvt/KoECZvrBHkxWSYAH9GxiCqMTNgBLGXAnWWZuNM8 IC0vpvpwEzFMHGYR2shafvvxTGNyHsMyrlkCDkDsJfANB+LO6F2tIBEzMWniLSyS FfFA3egXttjp8swXKQ6tV+BY0dCNZO2xE8kT7cayXIpygJh4gAuwXnV0XNK9XPil ObUiUwGcW4eFmGYNm/Avz5tVE7pCzu6XI6LMKPTM8hm46b6bQdkbrex2RYQRovH1 pQUItyHWI+CFvWH9nETxSTwEOaOwxy3CJjpjUzgQZ+Ks+EgUTD8Hlu0CGChZVKcP 7Qw= -----END CERTIFICATE-----Generated at Thu Nov 5 17:15:15 2026 by rpki-client