$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/81a75577-34c8-4142-a2a3-26cc5fc63e8f.roa File: 81a75577-34c8-4142-a2a3-26cc5fc63e8f.roa (raw, json) Hash identifier: eAOvdoX41ZTTT0tC6T1VTfJfntoADIdseYNcjAs4JsA= Subject key identifier: 2E:69:25:62:12:6C:A2:77:91:F7:BC:DD:43:5B:B7:6B:17:8B:CB:0D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 17E49F26BDBA711C2C7BB4B4AB278E6A8A9DE12F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/81a75577-34c8-4142-a2a3-26cc5fc63e8f.roa Signing time: Thu 10 Sep 2026 00:00:38 +0000 ROA not before: Thu 10 Sep 2026 00:00:38 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e4:9f:26:bd:ba:71:1c:2c:7b:b4:b4:ab:27:8e:6a:8a:9d:e1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:00:38 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=1c1c098b8238cdea2f389500e63f4dca837764a091d9e65562fa6dfb04178f11, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:80:f6:35:04:8f:ad:26:ed:a1:7f:19:b2: c3:04:03:e4:9c:cd:ab:57:59:34:1e:39:a8:3a:9b: 5a:42:bc:1c:8e:fa:26:15:ea:6b:3b:9b:06:c9:6b: e9:0d:5f:9e:e0:c1:58:d0:68:8e:d7:22:49:8c:ba: e1:3d:6e:18:60:12:f1:6f:36:13:d9:91:bb:33:33: eb:b3:b3:a5:de:67:fe:93:a9:a4:08:29:a5:b8:21: 7b:fd:fb:4e:23:a7:78:f3:0f:e4:0e:33:b2:10:1b: a4:90:cc:41:40:5d:f7:8d:5e:ec:a7:cb:1f:25:aa: 8f:81:17:21:12:5c:65:f1:1f:f8:6e:44:9e:e8:c5: 7d:2c:be:59:a1:8a:e0:b8:35:14:05:c8:c5:44:51: ed:0f:13:ca:dd:cf:3f:17:26:0d:bd:f3:fb:57:fd: 5b:f6:da:49:c9:22:5a:1f:58:7e:da:a9:07:70:4b: 39:c4:bc:bb:be:b8:99:fe:c5:a2:e9:bf:5b:9d:21: dc:e4:b7:31:6d:35:0b:d0:68:e7:8f:eb:eb:b5:66: 74:96:14:b1:56:d7:dd:75:c3:83:51:89:0d:6e:23: 69:44:bb:32:01:68:21:fc:74:e4:3c:07:8a:de:7e: 82:a4:b2:5f:28:64:b2:af:47:89:49:94:bf:bf:26: dc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:69:25:62:12:6C:A2:77:91:F7:BC:DD:43:5B:B7:6B:17:8B:CB:0D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/81a75577-34c8-4142-a2a3-26cc5fc63e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:6040::/48 Signature Algorithm: sha256WithRSAEncryption 48:9f:82:6b:79:7a:50:bb:26:95:b9:5f:8f:09:d2:b4:1a:20: e1:23:7b:16:df:9f:5c:b6:9c:88:58:ea:a8:d2:fd:90:26:28: 59:4a:cc:8a:71:ea:b4:e1:4d:f3:ef:0b:b6:ca:04:b0:9a:1f: 22:c2:87:b3:b5:db:44:0a:4c:77:fe:0b:d7:07:13:ca:70:2a: fc:52:3a:a1:be:44:fa:19:3e:24:69:fc:90:4b:aa:a6:46:44: 50:27:c3:2b:fb:f0:d3:da:33:c0:0d:dd:e8:3d:df:71:4c:37: 95:37:68:95:bf:64:a6:ab:bb:20:59:88:07:db:89:c2:e0:3d: e8:6f:8e:c0:e3:f1:66:27:19:22:e4:f4:ec:62:97:03:06:e2: fa:93:eb:c5:da:ec:c9:bf:25:91:bd:9b:78:0f:5a:42:29:82: 62:b5:f2:ff:4b:53:c5:68:59:64:b0:36:9e:0c:b3:69:3c:30: 99:c7:09:fc:fa:a2:4a:c7:d0:21:0e:f9:41:e2:d2:24:59:65: b8:47:88:b2:46:f2:44:45:fe:5c:4c:eb:97:c1:27:92:6e:3c: 36:fc:ef:65:cb:23:2f:7f:b3:c3:7c:b3:e8:a9:80:dd:4b:87: 15:d0:4b:11:d0:4d:f1:ca:cd:f6:d5:de:2e:89:d9:8d:24:b9: 17:62:06:0a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUF+SfJr26cRwse7S0qyeOaoqd4S8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMDAzOFoX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAMWMxYzA5OGI4MjM4Y2RlYTJmMzg5 NTAwZTYzZjRkY2E4Mzc3NjRhMDkxZDllNjU1NjJmYTZkZmIwNDE3OGYxMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruOA9jUEj60m7aF/GbLDBAPknM2r V1k0HjmoOptaQrwcjvomFeprO5sGyWvpDV+e4MFY0GiO1yJJjLrhPW4YYBLxbzYT 2ZG7MzPrs7Ol3mf+k6mkCCmluCF7/ftOI6d48w/kDjOyEBukkMxBQF33jV7sp8sf JaqPgRchElxl8R/4bkSe6MV9LL5ZoYrguDUUBcjFRFHtDxPK3c8/FyYNvfP7V/1b 9tpJySJaH1h+2qkHcEs5xLy7vriZ/sWi6b9bnSHc5LcxbTUL0Gjnj+vrtWZ0lhSx VtfddcODUYkNbiNpRLsyAWgh/HTkPAeK3n6CpLJfKGSyr0eJSZS/vybcpwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFC5pJWISbKJ3kfe83UNbt2sXi8sNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgxYTc1NTc3LTM0YzgtNDE0Mi1hMmEzLTI2Y2M1ZmM2M2U4Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba62BAMA0GCSqGSIb3DQEBCwUAA4IBAQBIn4JreXpQuyaVuV+P CdK0GiDhI3sW359ctpyIWOqo0v2QJihZSsyKceq04U3z7wu2ygSwmh8iwoeztdtE Ckx3/gvXBxPKcCr8UjqhvkT6GT4kafyQS6qmRkRQJ8Mr+/DT2jPADd3oPd9xTDeV N2iVv2Smq7sgWYgH24nC4D3ob47A4/FmJxki5PTsYpcDBuL6k+vF2uzJvyWRvZt4 D1pCKYJitfL/S1PFaFlksDaeDLNpPDCZxwn8+qJKx9AhDvlB4tIkWWW4R4iyRvJE Rf5cTOuXwSeSbjw2/O9lyyMvf7PDfLPoqYDdS4cV0EsR0E3xys321d4uidmNJLkX YgYK -----END CERTIFICATE-----Generated at Sun Sep 20 20:06:27 2026 by rpki-client