$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/831d319a-d7bd-48a2-8eee-31ff33384c47.roa File: 831d319a-d7bd-48a2-8eee-31ff33384c47.roa (raw, json) Hash identifier: aTakaCBWZ3HXTO0xfYIr+mv88OnYwy0J8Le7JBBwjsk= Subject key identifier: CA:DB:69:8A:40:1C:4F:04:C2:BB:8C:DC:51:B8:DF:04:5E:46:97:DD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 14B466861211445A19BEF606981D187EF52595F5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/831d319a-d7bd-48a2-8eee-31ff33384c47.roa Signing time: Thu 15 Oct 2026 00:07:11 +0000 ROA not before: Thu 15 Oct 2026 00:07:11 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b4:66:86:12:11:44:5a:19:be:f6:06:98:1d:18:7e:f5:25:95:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:07:11 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=7c4bb593157fa12806693ce1dedf7fb47088a2cdfc537f602affe7baec3e931f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f2:a4:a9:46:3a:d6:1a:af:4c:aa:b3:70:4e: 13:d9:fc:64:9b:3d:86:17:0a:9e:28:4f:bf:2d:46: d7:f7:d6:0e:d1:a6:bf:bc:a0:76:b8:ff:b2:cd:af: 4a:f4:1a:14:3d:02:e3:1a:d6:c4:f4:45:ca:e0:6b: 00:0e:56:cc:6b:37:16:ad:d8:2a:8b:a0:70:54:0a: db:94:14:eb:46:a4:1a:60:90:0c:76:c2:b2:29:7d: 99:7a:67:b5:73:de:df:56:2d:b1:91:e8:fd:cf:92: 09:f9:c0:6f:6b:8b:df:40:fe:a3:42:fa:6e:a4:97: ea:e8:c4:0b:34:62:0d:c3:94:ec:2d:f9:8a:17:ac: 7f:fc:c7:42:b5:d5:06:ed:51:35:41:90:37:b8:aa: 7b:79:50:6f:8e:bb:5b:fc:40:5e:61:9f:2f:21:db: 58:88:22:d3:47:02:a4:f5:d7:36:95:83:36:cf:c7: 50:1a:77:2f:01:67:f5:a2:be:aa:ca:47:2a:c8:be: bf:91:08:bd:7f:3b:ac:5c:56:f4:bf:0b:07:52:14: b9:0c:c6:54:c5:84:69:bd:05:51:64:ac:89:c9:e1: 36:ea:fb:12:d0:93:ea:bc:5e:1c:ba:ca:31:d2:5e: 41:64:74:af:c9:fc:0b:4d:3a:f4:d0:18:ed:78:d3: 40:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DB:69:8A:40:1C:4F:04:C2:BB:8C:DC:51:B8:DF:04:5E:46:97:DD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/831d319a-d7bd-48a2-8eee-31ff33384c47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:1000::/40 Signature Algorithm: sha256WithRSAEncryption 99:0f:ae:96:bd:72:e5:8b:b3:fa:04:a1:ff:21:e2:3c:76:43: 2c:26:e3:41:f8:04:03:b1:7e:7c:b1:87:c8:d9:c8:72:95:b5: 09:75:e3:e6:fa:5b:cb:5f:cc:22:2d:11:7d:d0:2f:4b:ef:d6: d5:e1:03:99:07:6b:df:85:be:21:8d:98:fa:70:ca:4a:19:79: da:50:ce:4d:ad:04:f9:1f:7f:20:7b:12:a3:3b:c5:30:34:69: 8d:95:df:e9:88:6a:a6:3b:40:39:af:a6:0f:17:4b:1d:c5:1d: e0:75:2b:dd:53:d6:4f:20:0e:fc:82:45:c0:af:74:99:1b:28: 90:b4:7b:f6:b4:a6:1b:38:41:c5:52:c7:48:99:8e:e2:b1:9a: c7:43:de:d9:cb:4c:d8:27:cf:88:e4:57:2e:40:7d:46:27:cd: 9f:18:16:4c:31:64:1d:d5:03:47:06:d1:92:93:d4:70:f7:3c: e7:79:9d:98:9a:05:06:ee:23:33:fc:b7:76:de:19:98:ed:57: 0a:28:e9:40:f9:bd:94:3e:18:ec:c9:1e:6c:22:89:c1:b3:0b: 68:ae:f2:1f:fa:33:e4:f9:45:37:d1:2a:3f:21:64:43:41:9e: 89:d3:53:84:1f:77:c9:66:c7:34:65:33:3c:b5:a5:ce:f3:66: e7:8d:89:29 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFLRmhhIRRFoZvvYGmB0YfvUllfUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxNTAwMDcxMVoX DTI3MDExMzIzNTk1OVowejFJMEcGA1UEBRNAN2M0YmI1OTMxNTdmYTEyODA2Njkz Y2UxZGVkZjdmYjQ3MDg4YTJjZGZjNTM3ZjYwMmFmZmU3YmFlYzNlOTMxZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vKkqUY61hqvTKqzcE4T2fxkmz2G FwqeKE+/LUbX99YO0aa/vKB2uP+yza9K9BoUPQLjGtbE9EXK4GsADlbMazcWrdgq i6BwVArblBTrRqQaYJAMdsKyKX2Zeme1c97fVi2xkej9z5IJ+cBva4vfQP6jQvpu pJfq6MQLNGINw5TsLfmKF6x//MdCtdUG7VE1QZA3uKp7eVBvjrtb/EBeYZ8vIdtY iCLTRwKk9dc2lYM2z8dQGncvAWf1or6qykcqyL6/kQi9fzusXFb0vwsHUhS5DMZU xYRpvQVRZKyJyeE26vsS0JPqvF4cusox0l5BZHSvyfwLTTr00BjteNNA/wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMrbaYpAHE8EwruM3FG43wReRpfdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzMWQzMTlhLWQ3YmQtNDhhMi04ZWVlLTMxZmYzMzM4NGM0Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9BAwDQYJKoZIhvcNAQELBQADggEBAJkPrpa9cuWLs/oEof8h 4jx2Qywm40H4BAOxfnyxh8jZyHKVtQl14+b6W8tfzCItEX3QL0vv1tXhA5kHa9+F viGNmPpwykoZedpQzk2tBPkffyB7EqM7xTA0aY2V3+mIaqY7QDmvpg8XSx3FHeB1 K91T1k8gDvyCRcCvdJkbKJC0e/a0phs4QcVSx0iZjuKxmsdD3tnLTNgnz4jkVy5A fUYnzZ8YFkwxZB3VA0cG0ZKT1HD3POd5nZiaBQbuIzP8t3beGZjtVwoo6UD5vZQ+ GOzJHmwiicGzC2iu8h/6M+T5RTfRKj8hZENBnonTU4Qfd8lmxzRlMzy1pc7zZueN iSk= -----END CERTIFICATE-----Generated at Thu Nov 5 15:19:16 2026 by rpki-client