$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77b66450-4698-44c5-9f99-8e8f76945e37.roa File: 77b66450-4698-44c5-9f99-8e8f76945e37.roa (raw, json) Hash identifier: pAQhn96ZBc8ffzZBQdvdJGVymJVZOziIXdvWlljWKjs= Subject key identifier: 20:A7:29:CE:59:9D:D7:A0:C5:CC:CE:E9:CC:73:4D:4C:60:A9:45:6E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 21E853CB5746681368EDDFDDACE60548F55017D3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77b66450-4698-44c5-9f99-8e8f76945e37.roa Signing time: Mon 19 Oct 2026 00:10:30 +0000 ROA not before: Mon 19 Oct 2026 00:10:30 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e8:53:cb:57:46:68:13:68:ed:df:dd:ac:e6:05:48:f5:50:17:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:10:30 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=bc86f6b366584e988f00c0d2f364f86683eaaef2b0628b278c8afc5ffa9d7e61, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3e:4a:6a:89:a8:5d:4d:af:b1:66:20:95:23: 55:9d:32:ce:a1:79:a5:3e:5d:b6:c5:7f:c4:89:fb: 19:73:c8:e9:b4:3a:73:66:bc:fc:78:3d:e0:31:53: 97:cb:32:2a:91:11:54:31:d0:14:22:d2:3b:b4:f9: 0b:44:68:d5:5b:65:af:fb:18:f6:32:e3:60:95:62: 70:e8:d1:c8:ad:cc:fd:12:41:88:1b:35:5c:ab:4f: ca:31:9d:21:4e:20:a4:c2:43:0e:7b:4e:25:2e:45: fc:1d:05:8c:a0:02:ef:49:c8:e0:cc:23:40:f0:f1: 3b:c5:80:3c:aa:ab:ad:02:70:67:81:0c:33:25:db: 3d:db:74:37:a0:c4:a9:fa:6c:9d:c7:52:1a:9a:81: ef:95:b3:2d:ae:70:05:78:80:b8:66:f7:bd:dc:7c: 21:39:de:1a:14:90:d5:41:0b:4c:85:24:74:29:16: 74:3c:36:fe:17:e4:e2:7b:16:4d:60:32:25:74:f8: fb:c8:87:09:20:3c:15:81:d8:8a:46:21:58:07:98: a0:f7:0f:0b:22:a7:2c:fc:ff:ce:68:b0:6f:e0:aa: 5e:9c:fa:83:3a:e4:91:1f:d9:f6:b4:48:df:da:b3: bf:25:11:26:dc:a6:24:c2:6c:a4:c5:6c:c2:c3:d4: 09:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A7:29:CE:59:9D:D7:A0:C5:CC:CE:E9:CC:73:4D:4C:60:A9:45:6E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77b66450-4698-44c5-9f99-8e8f76945e37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:1000::/40 Signature Algorithm: sha256WithRSAEncryption 02:45:0c:1e:a2:f8:3a:89:a4:64:22:ef:e1:16:7f:db:75:8a: 62:c6:77:9d:0e:4b:cd:d2:9b:5b:3e:28:8c:06:36:5f:97:8c: 1c:c7:e3:c4:3b:e9:32:26:12:ca:9c:00:2d:64:f7:3a:53:fa: 43:0e:68:26:f7:fc:90:85:88:6e:39:07:2d:3d:92:68:af:5c: c9:de:07:21:8a:89:18:ab:ab:ce:66:55:dc:ae:cc:3a:1c:21: 40:bb:83:1e:4c:1c:cd:98:7f:73:59:f3:d2:17:ab:ab:5b:e8: cb:6f:e7:6f:97:2d:7e:a3:43:5a:27:9b:f5:da:52:94:44:88: b4:16:29:a1:a1:8b:61:f8:5a:5b:1d:45:32:9f:a9:56:bc:cc: 1c:8f:ea:04:ac:ba:51:3c:7d:ad:e8:bf:64:62:8b:f6:1b:d5: 54:9a:52:98:6f:ef:6b:30:dc:48:72:83:eb:d0:87:39:9d:6b: e2:07:fd:a2:94:ef:84:30:8d:a1:64:0f:e3:10:e6:f5:e0:92: 3f:38:8f:32:a5:1a:9c:1b:ec:27:c5:4c:e4:cc:3f:69:76:48: 25:e4:62:22:25:9a:ce:47:fe:7b:78:75:87:7b:83:04:ce:28: 06:6f:27:08:08:4b:fb:8f:ef:31:6f:1c:57:0f:41:7f:03:53: 91:8f:3f:23 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIehTy1dGaBNo7d/drOYFSPVQF9MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxOTAwMTAzMFoX DTI3MDExNzIzNTk1OVowejFJMEcGA1UEBRNAYmM4NmY2YjM2NjU4NGU5ODhmMDBj MGQyZjM2NGY4NjY4M2VhYWVmMmIwNjI4YjI3OGM4YWZjNWZmYTlkN2U2MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD5KaomoXU2vsWYglSNVnTLOoXml Pl22xX/EifsZc8jptDpzZrz8eD3gMVOXyzIqkRFUMdAUItI7tPkLRGjVW2Wv+xj2 MuNglWJw6NHIrcz9EkGIGzVcq0/KMZ0hTiCkwkMOe04lLkX8HQWMoALvScjgzCNA 8PE7xYA8qqutAnBngQwzJds923Q3oMSp+mydx1IamoHvlbMtrnAFeIC4Zve93Hwh Od4aFJDVQQtMhSR0KRZ0PDb+F+TiexZNYDIldPj7yIcJIDwVgdiKRiFYB5ig9w8L Iqcs/P/OaLBv4KpenPqDOuSRH9n2tEjf2rO/JREm3KYkwmykxWzCw9QJjwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCCnKc5ZndegxczO6cxzTUxgqUVuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3YjY2NDUwLTQ2OTgtNDRjNS05Zjk5LThlOGY3Njk0NWUzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+xAwDQYJKoZIhvcNAQELBQADggEBAAJFDB6i+DqJpGQi7+EW f9t1imLGd50OS83Sm1s+KIwGNl+XjBzH48Q76TImEsqcAC1k9zpT+kMOaCb3/JCF iG45By09kmivXMneByGKiRirq85mVdyuzDocIUC7gx5MHM2Yf3NZ89IXq6tb6Mtv 52+XLX6jQ1onm/XaUpREiLQWKaGhi2H4WlsdRTKfqVa8zByP6gSsulE8fa3ov2Ri i/Yb1VSaUphv72sw3Ehyg+vQhzmda+IH/aKU74QwjaFkD+MQ5vXgkj84jzKlGpwb 7CfFTOTMP2l2SCXkYiIlms5H/nt4dYd7gwTOKAZvJwgIS/uP7zFvHFcPQX8DU5GP PyM= -----END CERTIFICATE-----Generated at Thu Nov 5 07:02:41 2026 by rpki-client