$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/768a1d35-dcb0-4972-b5ee-33708b8e02d0.roa File: 768a1d35-dcb0-4972-b5ee-33708b8e02d0.roa (raw, json) Hash identifier: oHREpGuUGDhrHo5HYvTep0tB7Vr+5TtC99HyZXXXeiw= Subject key identifier: 84:CD:1E:5A:44:45:11:DA:56:98:BF:12:53:67:FD:2F:B7:36:34:DC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6B2CC21D0843810382A0CA6A2226A1CC72C3C011 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/768a1d35-dcb0-4972-b5ee-33708b8e02d0.roa Signing time: Mon 19 Oct 2026 00:10:13 +0000 ROA not before: Mon 19 Oct 2026 00:10:13 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:b0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:2c:c2:1d:08:43:81:03:82:a0:ca:6a:22:26:a1:cc:72:c3:c0:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:10:13 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=ff55402f17fe3a1ee43f9e5c7902908a51ec0c140c210a3a5dc20b42bc90ee7b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:26:47:3f:c5:7f:ad:91:33:3d:77:5b:00: e1:13:08:60:65:e0:fa:f0:27:df:e2:d5:d6:ae:9b: da:d2:8f:e6:00:5b:ec:14:c1:ae:3d:8a:e8:38:97: 05:a0:09:ea:0b:bf:5e:db:0d:bb:b7:5c:cf:c8:d8: 1c:ca:be:da:94:45:08:d8:01:f1:e7:a0:19:14:cd: ad:e4:61:66:72:39:53:28:a1:f5:d5:5b:53:a8:07: 5f:ce:90:37:21:38:f3:7e:52:09:1b:4b:61:83:cc: 7e:5f:f8:c4:55:d0:af:eb:79:d7:da:d3:d6:ec:29: 0e:63:30:88:a8:16:e8:2f:21:2f:e8:94:90:48:58: 08:4b:b8:de:08:51:c1:75:11:54:3f:4f:0e:c2:b3: 0a:02:d1:22:d0:60:9e:f6:86:59:85:95:a7:cf:56: 02:74:54:34:1f:ff:2a:b3:86:62:8c:63:06:d9:d1: 4f:e2:20:1a:ce:0f:dd:46:fc:6c:67:b3:24:47:d3: 09:78:6b:7a:10:47:49:13:f7:7a:c0:9d:9e:95:a5: 4b:ae:21:87:5c:50:71:a9:fe:42:35:e6:2d:ec:58: a5:07:31:01:23:03:0b:99:8e:c8:11:72:e3:b8:da: cb:74:c7:86:fd:0b:3f:e0:fe:a0:25:f7:75:38:59: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CD:1E:5A:44:45:11:DA:56:98:BF:12:53:67:FD:2F:B7:36:34:DC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/768a1d35-dcb0-4972-b5ee-33708b8e02d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:b0c0::/48 Signature Algorithm: sha256WithRSAEncryption 36:a0:b4:20:e0:49:3f:e0:d4:b9:35:9f:7c:10:47:49:86:6f: 8a:45:ac:9c:62:03:70:1c:7d:ac:ba:bb:53:7b:8a:c6:2b:a5: 78:2c:dd:d4:69:b7:98:58:dc:ca:2d:7d:99:1c:6e:39:1f:e1: 0b:a8:df:55:5e:3e:16:eb:cd:34:bf:61:38:e4:ed:51:78:c7: e5:47:6c:38:32:e9:ba:df:88:6c:c2:66:d5:81:0a:31:c3:e1: d8:c9:e6:38:8e:c0:2e:ed:3f:72:79:26:b7:ea:3f:f1:f1:b9: 28:3a:53:b7:fc:9d:9a:10:e6:3e:86:03:ba:9f:79:50:e2:97: 50:4b:69:2d:8e:65:22:05:ed:da:54:f7:78:c2:89:87:bb:35: ee:ef:dd:7b:ea:3c:11:fd:6a:46:82:e8:16:48:da:ed:fc:b2: 0c:ae:86:a6:7b:87:d7:b2:0c:7a:d5:8f:3f:0e:18:fa:6b:7d: 1b:f8:0b:d6:67:ab:80:59:64:9c:04:71:e6:89:4f:0f:a5:c9: 65:5b:38:c0:e7:ea:00:72:64:15:35:db:92:d3:4d:7b:18:8a: e7:48:c7:3f:da:f9:a7:10:46:65:8d:44:f8:1b:70:39:51:dc: 2e:12:13:93:cc:47:d3:69:7e:12:f8:ae:b8:58:fc:cc:c0:aa: 33:d9:81:c9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUayzCHQhDgQOCoMpqIiahzHLDwBEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxOTAwMTAxM1oX DTI3MDExNzIzNTk1OVowejFJMEcGA1UEBRNAZmY1NTQwMmYxN2ZlM2ExZWU0M2Y5 ZTVjNzkwMjkwOGE1MWVjMGMxNDBjMjEwYTNhNWRjMjBiNDJiYzkwZWU3YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3EmRz/Ff62RMz13WwDhEwhgZeD6 8Cff4tXWrpva0o/mAFvsFMGuPYroOJcFoAnqC79e2w27t1zPyNgcyr7alEUI2AHx 56AZFM2t5GFmcjlTKKH11VtTqAdfzpA3ITjzflIJG0thg8x+X/jEVdCv63nX2tPW 7CkOYzCIqBboLyEv6JSQSFgIS7jeCFHBdRFUP08OwrMKAtEi0GCe9oZZhZWnz1YC dFQ0H/8qs4ZijGMG2dFP4iAazg/dRvxsZ7MkR9MJeGt6EEdJE/d6wJ2elaVLriGH XFBxqf5CNeYt7FilBzEBIwMLmY7IEXLjuNrLdMeG/Qs/4P6gJfd1OFkSCQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFITNHlpERRHaVpi/ElNn/S+3NjTcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc2OGExZDM1LWRjYjAtNDk3Mi1iNWVlLTMzNzA4YjhlMDJkMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8rDAMA0GCSqGSIb3DQEBCwUAA4IBAQA2oLQg4Ek/4NS5NZ98 EEdJhm+KRaycYgNwHH2surtTe4rGK6V4LN3UabeYWNzKLX2ZHG45H+ELqN9VXj4W 6800v2E45O1ReMflR2w4Mum634hswmbVgQoxw+HYyeY4jsAu7T9yeSa36j/x8bko OlO3/J2aEOY+hgO6n3lQ4pdQS2ktjmUiBe3aVPd4womHuzXu79176jwR/WpGgugW SNrt/LIMroame4fXsgx61Y8/Dhj6a30b+AvWZ6uAWWScBHHmiU8PpcllWzjA5+oA cmQVNduS0017GIrnSMc/2vmnEEZljUT4G3A5UdwuEhOTzEfTaX4S+K64WPzMwKoz 2YHJ -----END CERTIFICATE-----Generated at Mon Nov 9 06:57:46 2026 by rpki-client