$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71ebe988-77b3-411e-a30e-8b7e536ea4b8.roa File: 71ebe988-77b3-411e-a30e-8b7e536ea4b8.roa (raw, json) Hash identifier: DsouNfyXey4+sYYBlb0a8x6A+MPm7ofHi0nqXJ3Cipk= Subject key identifier: 1D:55:3C:8D:A2:5E:8E:B0:A2:FB:EC:2D:F3:DB:86:62:14:7B:F9:B7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C21DDF9A9B38F094FF6587E5739CCD93D7E6C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71ebe988-77b3-411e-a30e-8b7e536ea4b8.roa Signing time: Thu 29 Oct 2026 00:10:09 +0000 ROA not before: Thu 29 Oct 2026 00:10:09 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:21:dd:f9:a9:b3:8f:09:4f:f6:58:7e:57:39:cc:d9:3d:7e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:10:09 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=9a5831c110d9f50ee01974243690b097bbde2cd1cb0bac3ca3293824f124e8ba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d2:2d:c0:3b:3a:74:75:84:5c:46:49:6d:b8: 0c:90:5a:ef:e2:2b:d0:c5:19:26:15:7e:d6:ff:0a: 00:7c:fd:a4:22:7f:03:5e:7e:b1:a0:90:63:1a:5c: a4:a2:2c:a7:33:e0:e8:8e:18:6d:33:e3:fa:6f:17: ea:90:4c:90:4d:73:cc:ee:e7:cd:3c:9e:85:4f:18: 94:18:6f:a3:70:a2:e0:a0:dd:f1:f6:ca:d6:10:d0: 69:17:06:f6:4b:0a:12:b6:86:3d:b4:29:25:fb:ba: 95:8c:ae:28:69:ab:86:b8:cb:8f:d4:ce:12:ff:28: 0f:49:3d:ee:a2:ab:9a:81:73:52:88:6e:90:12:50: 64:20:ab:f3:f3:9b:eb:fd:c3:47:af:11:35:33:d1: 23:12:d7:64:20:2e:cd:a3:3e:25:a4:d4:f9:6a:c5: 15:bd:41:56:b4:ac:6b:fc:b0:14:ee:d2:3b:fe:92: 17:d9:80:02:78:ea:3b:9a:a5:cd:28:b8:fb:df:fa: 46:ca:31:03:7e:f8:f3:7a:a1:74:e2:a9:08:a2:36: 02:91:da:3d:6a:a5:66:8c:4b:17:5e:5b:4a:b4:2c: 32:ee:f6:67:f2:d7:95:aa:8b:80:7c:37:eb:03:e5: 1b:df:d1:73:31:2b:1a:e9:d8:01:49:89:8a:44:3d: 3f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:55:3C:8D:A2:5E:8E:B0:A2:FB:EC:2D:F3:DB:86:62:14:7B:F9:B7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71ebe988-77b3-411e-a30e-8b7e536ea4b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:6000::/40 Signature Algorithm: sha256WithRSAEncryption 6c:69:31:d8:49:5f:5d:42:41:67:cb:77:78:fd:4a:4b:d9:43: 67:90:c5:2c:25:c8:b7:2c:40:1e:0d:01:fa:77:a9:4b:e0:c7: b6:ea:67:f9:71:f0:79:ca:e2:9b:5f:6a:7a:34:e5:fa:a2:3f: 0e:62:6b:7a:ed:3c:c3:52:7d:df:94:60:72:25:aa:15:d4:b1: 8a:53:6c:66:5c:81:3f:af:82:92:c5:70:5e:bb:01:ed:82:56: b5:b1:3d:55:c3:a8:84:00:01:a6:0b:34:c1:8e:02:04:6c:4b: 66:74:b4:b2:65:47:36:d2:bc:0e:0c:4d:84:11:91:e0:ec:7f: 86:6e:3e:e1:1d:7b:24:25:cc:93:3e:d2:a8:41:5e:1e:e5:97: 41:0d:e7:26:d8:b8:3b:f9:e0:c9:40:0c:3b:0e:4b:d3:15:72: f6:5f:29:b4:df:66:e4:ed:a8:c6:23:f5:46:91:36:2d:03:09: 03:45:16:41:e5:3f:fa:09:19:d1:f1:41:2b:ff:38:59:e1:98: 4b:4a:86:74:1f:f8:32:38:f6:64:75:a9:91:f3:3d:ca:3a:47: 9a:d7:d9:89:01:13:d8:a3:64:15:66:3f:84:b2:f7:a1:b6:0a: 15:8e:ac:e0:61:db:60:bc:b6:02:73:fd:78:3c:16:80:1f:ae: 73:d7:e7:f5 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgITXCHd+amzjwlP9lh+VznM2T1+bDANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjYxMDI5MDAxMDA5WhcN MjcwMTI3MjM1OTU5WjB6MUkwRwYDVQQFE0A5YTU4MzFjMTEwZDlmNTBlZTAxOTc0 MjQzNjkwYjA5N2JiZGUyY2QxY2IwYmFjM2NhMzI5MzgyNGYxMjRlOGJhMS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCD0i3AOzp0dYRcRkltuAyQWu/iK9DF GSYVftb/CgB8/aQifwNefrGgkGMaXKSiLKcz4OiOGG0z4/pvF+qQTJBNc8zu5808 noVPGJQYb6NwouCg3fH2ytYQ0GkXBvZLChK2hj20KSX7upWMrihpq4a4y4/UzhL/ KA9JPe6iq5qBc1KIbpASUGQgq/Pzm+v9w0evETUz0SMS12QgLs2jPiWk1PlqxRW9 QVa0rGv8sBTu0jv+khfZgAJ46juapc0ouPvf+kbKMQN++PN6oXTiqQiiNgKR2j1q pWaMSxdeW0q0LDLu9mfy15Wqi4B8N+sD5Rvf0XMxKxrp2AFJiYpEPT8lAgMBAAGj ggJKMIICRjAdBgNVHQ4EFgQUHVU8jaJejrCi++wt89uGYhR7+bcwHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv NzFlYmU5ODgtNzdiMy00MTFlLWEzMGUtOGI3ZTUzNmVhNGI4LnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkBtroYDANBgkqhkiG9w0BAQsFAAOCAQEAbGkx2ElfXUJBZ8t3eP1K S9lDZ5DFLCXItyxAHg0B+nepS+DHtupn+XHwecrim19qejTl+qI/DmJreu08w1J9 35RgciWqFdSxilNsZlyBP6+CksVwXrsB7YJWtbE9VcOohAABpgs0wY4CBGxLZnS0 smVHNtK8DgxNhBGR4Ox/hm4+4R17JCXMkz7SqEFeHuWXQQ3nJti4O/ngyUAMOw5L 0xVy9l8ptN9m5O2oxiP1RpE2LQMJA0UWQeU/+gkZ0fFBK/84WeGYS0qGdB/4Mjj2 ZHWpkfM9yjpHmtfZiQET2KNkFWY/hLL3obYKFY6s4GHbYLy2AnP9eDwWgB+uc9fn 9Q== -----END CERTIFICATE-----Generated at Thu Nov 5 17:12:42 2026 by rpki-client