$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/825b729c-7c4f-404b-b26e-13e5d882a631.roa File: 825b729c-7c4f-404b-b26e-13e5d882a631.roa (raw, json) Hash identifier: eumd3S/pJtBSey51BN5NCXXWgH5vnxb9pHEpp1iVBtk= Subject key identifier: CD:C9:01:03:6D:1F:FA:70:49:2F:2B:CB:72:B9:D7:E2:AE:BC:AE:87 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 49D5E8FF32EECD3BF8053FCC4520CDA8E4B4D425 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/825b729c-7c4f-404b-b26e-13e5d882a631.roa Signing time: Tue 13 Oct 2026 00:09:17 +0000 ROA not before: Tue 13 Oct 2026 00:09:17 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d5:e8:ff:32:ee:cd:3b:f8:05:3f:cc:45:20:cd:a8:e4:b4:d4:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 00:09:17 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=43bd5cac05e67e6ae3fd6e6110e0e92b083fdf3e9313ddfa655f6783008daa37, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d5:57:94:ab:8b:02:01:bf:77:3d:b1:46:6c: f9:11:39:de:cc:73:ae:a1:c4:fc:33:c9:82:d5:e6: b4:0d:b6:1d:41:a1:29:2b:77:42:34:93:b1:c8:4e: bf:e3:90:77:24:8a:d4:81:6b:2c:14:71:ef:14:94: 8f:bd:79:62:ff:19:a5:d1:7a:49:b9:15:f6:70:4b: 70:be:81:25:5b:c9:d6:0e:c7:ee:95:8c:7a:e9:9c: 85:c3:5f:2e:98:c6:db:fb:d8:62:10:9b:91:91:fb: e1:a1:08:b5:df:d5:31:dc:ae:0f:7f:3b:81:d9:76: 02:62:13:40:f7:53:2c:a2:db:4f:9b:3e:35:5f:7c: 9d:a6:78:35:91:7b:cd:25:e7:ca:2f:93:15:ea:82: e3:9d:10:60:c6:5f:76:e8:dc:e9:00:8a:a1:a8:99: 9d:3b:6c:ae:19:4c:1c:67:a5:68:ef:5d:7e:9e:43: 56:24:58:e2:01:f6:5e:4e:8b:fa:2d:38:c4:2f:b5: 9b:a1:2d:1b:f9:91:41:3f:b3:bb:64:e8:08:f8:03: 68:bb:95:d7:b1:72:f1:25:32:76:2d:e4:5b:f7:71: 7f:35:1b:a9:99:35:6f:67:58:72:0b:48:a1:40:71: 64:b7:6b:19:04:24:0d:3f:84:c1:d2:f6:01:ad:5b: 75:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C9:01:03:6D:1F:FA:70:49:2F:2B:CB:72:B9:D7:E2:AE:BC:AE:87 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/825b729c-7c4f-404b-b26e-13e5d882a631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:b000::/40 Signature Algorithm: sha256WithRSAEncryption 40:e3:1b:c0:4a:0c:0e:8b:56:af:d0:af:48:85:dc:c8:37:b0: 4e:1e:26:88:2a:d7:2a:6d:36:7e:ae:62:fd:43:25:15:e9:d3: 21:b2:54:e0:3e:09:64:95:4b:26:0a:45:8e:d4:a3:d1:89:41: 7e:6b:1b:11:eb:98:02:d0:1e:1d:0f:43:11:88:41:3a:f9:24: d3:c5:df:3d:1f:ed:fc:8c:8b:5e:59:1d:c1:a6:7a:47:91:a5: be:19:a7:da:b1:b0:ca:b7:62:a1:ff:6b:a8:84:92:44:32:33: 28:9b:c1:90:6b:c4:42:cd:cb:15:c5:0c:e4:e4:95:24:f1:96: b5:2a:d1:92:7a:f0:47:14:7a:a8:de:ec:8c:87:9c:bf:b0:19: 74:e3:4e:17:8e:0b:be:2d:09:21:d0:ae:c1:3e:ba:76:19:3e: 98:ca:d9:73:f6:d4:cc:61:ac:e0:30:b6:6f:e0:4b:96:aa:ce: a2:fd:8a:ba:6c:34:fa:e0:af:71:97:93:30:71:4c:9d:58:87: 51:03:6c:2d:fa:c5:d6:52:bb:f3:2f:11:e2:c2:80:c1:1e:d8: 62:3d:3e:08:94:08:8d:1a:5d:89:16:5d:c1:3d:4d:9e:11:a5: 65:b1:3a:f6:f5:3e:4d:5c:9b:37:97:3f:cf:cf:2a:0e:b8:be: 28:ce:7e:eb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSdXo/zLuzTv4BT/MRSDNqOS01CUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxMzAwMDkxN1oX DTI3MDExMTIzNTk1OVowejFJMEcGA1UEBRNANDNiZDVjYWMwNWU2N2U2YWUzZmQ2 ZTYxMTBlMGU5MmIwODNmZGYzZTkzMTNkZGZhNjU1ZjY3ODMwMDhkYWEzNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNVXlKuLAgG/dz2xRmz5ETnezHOu ocT8M8mC1ea0DbYdQaEpK3dCNJOxyE6/45B3JIrUgWssFHHvFJSPvXli/xml0XpJ uRX2cEtwvoElW8nWDsfulYx66ZyFw18umMbb+9hiEJuRkfvhoQi139Ux3K4PfzuB 2XYCYhNA91MsottPmz41X3ydpng1kXvNJefKL5MV6oLjnRBgxl926NzpAIqhqJmd O2yuGUwcZ6Vo711+nkNWJFjiAfZeTov6LTjEL7WboS0b+ZFBP7O7ZOgI+ANou5XX sXLxJTJ2LeRb93F/NRupmTVvZ1hyC0ihQHFkt2sZBCQNP4TB0vYBrVt1YQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFM3JAQNtH/pwSS8ry3K51+KuvK6HMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgyNWI3MjljLTdjNGYtNDA0Yi1iMjZlLTEzZTVkODgyYTYzMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYLAwDQYJKoZIhvcNAQELBQADggEBAEDjG8BKDA6LVq/Qr0iF 3Mg3sE4eJogq1yptNn6uYv1DJRXp0yGyVOA+CWSVSyYKRY7Uo9GJQX5rGxHrmALQ Hh0PQxGIQTr5JNPF3z0f7fyMi15ZHcGmekeRpb4Zp9qxsMq3YqH/a6iEkkQyMyib wZBrxELNyxXFDOTklSTxlrUq0ZJ68EcUeqje7IyHnL+wGXTjTheOC74tCSHQrsE+ unYZPpjK2XP21MxhrOAwtm/gS5aqzqL9irpsNPrgr3GXkzBxTJ1Yh1EDbC36xdZS u/MvEeLCgMEe2GI9PgiUCI0aXYkWXcE9TZ4RpWWxOvb1Pk1cmzeXP8/PKg64vijO fus= -----END CERTIFICATE-----Generated at Thu Nov 5 14:26:23 2026 by rpki-client