$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83616529-bacc-4cdc-aa1b-66384c85e7b2.roa File: 83616529-bacc-4cdc-aa1b-66384c85e7b2.roa (raw, json) Hash identifier: 9Qt3iXvS/PgrqLVs5Tnl4VVAtPqhoEh9hO6RsVmPl9c= Subject key identifier: BD:00:C9:04:EC:77:DF:EB:2C:6B:EB:6B:8E:31:33:A8:5F:74:90:1B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1E9B643203E5A0972EE7F5D17FA1320DC82D6C7B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83616529-bacc-4cdc-aa1b-66384c85e7b2.roa Signing time: Sun 18 Oct 2026 00:10:34 +0000 ROA not before: Sun 18 Oct 2026 00:10:34 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9b:64:32:03:e5:a0:97:2e:e7:f5:d1:7f:a1:32:0d:c8:2d:6c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:10:34 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=d77a701628f272cd8ef58ce31d42a77977a2d3e5e4ab51058d797f74b73215b1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2f:d3:30:b8:69:e5:00:45:8d:1f:79:f0:93: cd:b4:30:72:e9:2a:91:c2:3c:35:b8:6d:70:72:ac: db:e9:ad:81:08:ab:57:3c:06:25:d2:96:04:c2:45: b1:75:17:4f:36:9c:22:fc:06:58:92:f2:50:77:50: 17:a8:e5:d0:6f:3e:e1:08:a3:5e:81:de:55:d8:c4: c6:71:b0:fe:12:32:16:41:4f:c0:83:4a:94:c5:ce: 33:f9:eb:9c:e5:6e:84:16:3c:2f:e4:6b:30:16:25: cf:cf:93:6c:05:0f:54:d5:af:ff:8e:f6:be:86:0a: af:dc:cd:84:dd:5c:d9:c0:33:90:ba:17:76:b6:df: e0:9f:e3:26:09:91:83:ba:d8:03:fc:82:e1:f0:0a: 46:8b:5e:7f:4f:21:19:59:64:e5:c5:5a:9a:81:84: cb:44:b3:6a:46:01:35:57:a6:73:6c:2a:9d:20:f6: e3:01:92:2e:27:b3:9a:42:ae:bd:b5:8c:cf:73:3f: dd:58:52:85:f4:9d:e9:45:71:b1:ac:33:f6:65:f2: ea:b6:4c:08:84:79:a9:d5:3b:6c:dd:c4:28:c9:5f: 3c:b7:6e:aa:82:8d:2f:e7:85:e9:a4:25:4d:47:d6: dd:6a:7b:13:5d:8b:8c:f8:e7:f8:f0:a0:b3:c9:32: 79:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:00:C9:04:EC:77:DF:EB:2C:6B:EB:6B:8E:31:33:A8:5F:74:90:1B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83616529-bacc-4cdc-aa1b-66384c85e7b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 28:e6:28:ac:da:f6:2d:ed:d3:5b:de:0a:d4:bd:05:7b:7c:a2: d1:d0:67:46:00:63:91:27:9f:1c:2d:9b:5e:16:c2:21:e4:3a: 9e:ab:63:16:73:7a:69:23:01:75:3a:84:5d:78:06:56:8d:b3: 0b:13:3e:8d:22:52:ef:2b:98:a1:25:1c:7a:50:3e:48:35:31: 1f:3c:c8:b0:87:2e:0f:1d:8e:75:62:74:43:55:37:27:00:56: e6:32:ff:57:7b:3c:75:4f:b7:2d:77:a6:0c:08:09:92:d2:af: 51:e3:19:c4:08:5d:18:a8:e7:df:6f:00:0f:aa:aa:0c:8f:07: 25:e9:57:49:3a:4e:1b:fd:42:b6:e5:d0:c0:62:08:87:37:c5: 86:1c:ec:c8:8a:b6:f3:55:26:60:0d:ef:c9:3a:9d:84:ac:cf: 6b:f6:b3:43:54:0c:d1:4c:cc:8b:e2:b9:8f:5d:fc:d4:d7:6d: be:62:ee:07:c3:02:70:61:b8:5b:85:98:df:01:13:ef:c3:1e: 8b:ad:50:fc:1d:11:14:33:de:ec:f6:95:4b:cf:01:09:6d:c1: 20:17:5a:53:50:5e:66:1f:9f:b6:99:79:aa:9e:b8:8f:1e:5e: db:37:34:fc:e4:79:59:f1:3c:36:b8:7c:91:91:e7:30:6e:43: cd:e4:87:4b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHptkMgPloJcu5/XRf6EyDcgtbHswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxODAwMTAzNFoX DTI3MDExNjIzNTk1OVowejFJMEcGA1UEBRNAZDc3YTcwMTYyOGYyNzJjZDhlZjU4 Y2UzMWQ0MmE3Nzk3N2EyZDNlNWU0YWI1MTA1OGQ3OTdmNzRiNzMyMTViMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC/TMLhp5QBFjR958JPNtDBy6SqR wjw1uG1wcqzb6a2BCKtXPAYl0pYEwkWxdRdPNpwi/AZYkvJQd1AXqOXQbz7hCKNe gd5V2MTGcbD+EjIWQU/Ag0qUxc4z+euc5W6EFjwv5GswFiXPz5NsBQ9U1a//jva+ hgqv3M2E3VzZwDOQuhd2tt/gn+MmCZGDutgD/ILh8ApGi15/TyEZWWTlxVqagYTL RLNqRgE1V6ZzbCqdIPbjAZIuJ7OaQq69tYzPcz/dWFKF9J3pRXGxrDP2ZfLqtkwI hHmp1Tts3cQoyV88t26qgo0v54XppCVNR9bdansTXYuM+Of48KCzyTJ5cQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFL0AyQTsd9/rLGvra44xM6hfdJAbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzNjE2NTI5LWJhY2MtNGNkYy1hYTFiLTY2Mzg0Yzg1ZTdiMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaABDAMA0GCSqGSIb3DQEBCwUAA4IBAQAo5iis2vYt7dNb3grU vQV7fKLR0GdGAGORJ58cLZteFsIh5Dqeq2MWc3ppIwF1OoRdeAZWjbMLEz6NIlLv K5ihJRx6UD5INTEfPMiwhy4PHY51YnRDVTcnAFbmMv9Xezx1T7ctd6YMCAmS0q9R 4xnECF0YqOffbwAPqqoMjwcl6VdJOk4b/UK25dDAYgiHN8WGHOzIirbzVSZgDe/J Op2ErM9r9rNDVAzRTMyL4rmPXfzU122+Yu4HwwJwYbhbhZjfARPvwx6LrVD8HREU M97s9pVLzwEJbcEgF1pTUF5mH5+2mXmqnriPHl7bNzT85HlZ8Tw2uHyRkecwbkPN 5IdL -----END CERTIFICATE-----Generated at Thu Nov 5 04:27:52 2026 by rpki-client