$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/861a1c37-79a1-4501-baae-1067838a063b.roa File: 861a1c37-79a1-4501-baae-1067838a063b.roa (raw, json) Hash identifier: fBtqWW830+hK4JsoVLrINwQ8vbWzHAOo51B9+OFvjTQ= Subject key identifier: 86:D2:FD:11:A5:44:6F:69:AE:51:D3:A4:7B:D6:90:46:B6:58:AD:D7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 39C5EB34F41FFCD6B86595E80C9634AABA3CE660 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/861a1c37-79a1-4501-baae-1067838a063b.roa Signing time: Sun 18 Oct 2026 00:08:44 +0000 ROA not before: Sun 18 Oct 2026 00:08:44 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c5:eb:34:f4:1f:fc:d6:b8:65:95:e8:0c:96:34:aa:ba:3c:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:08:44 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=677911ee6d6cd0e9e706b02f346196a60d09034b04fbc15d5ac90831b9c16c20, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0a:c5:cc:d6:dc:a3:eb:5e:36:13:ee:ca:cc: c9:07:03:b5:51:02:f6:04:75:bc:5a:fa:51:ab:5a: c5:03:e4:8c:c3:ab:e0:50:15:19:da:8d:ea:8c:4b: 54:38:c5:8e:79:3a:85:c7:d9:3f:9b:27:a0:05:78: 30:dd:9a:32:7f:9e:5c:ee:22:e4:56:36:ea:ba:e9: f8:fd:22:84:5c:36:b4:c2:df:9b:17:25:f8:1d:87: 28:69:ae:9d:aa:33:96:61:5f:ed:9a:43:bd:05:b7: ab:74:1b:5f:18:a1:cc:79:03:e1:5a:60:bc:fa:2d: c5:57:27:92:f9:02:df:0d:85:a5:63:99:31:98:73: 71:6c:b5:30:05:b8:38:c4:3e:ed:02:a2:45:8c:05: e3:20:f1:dc:5c:c2:88:f5:05:b8:a0:de:05:72:72: b3:6e:e8:2f:fe:c0:44:70:5f:cf:5d:a7:98:10:d0: 4c:b1:6a:8e:21:74:25:b5:ff:2a:40:f1:44:e8:32: 9b:cb:26:2a:44:0e:e1:52:0c:83:02:b2:6f:d5:0f: 1a:ce:1f:af:7f:d2:ab:2c:37:23:97:10:16:aa:7b: 15:74:ba:28:b5:df:e1:2b:f4:43:71:63:99:14:33: 69:c3:26:61:e7:0d:ae:59:50:15:96:fb:ed:3c:c8: c3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D2:FD:11:A5:44:6F:69:AE:51:D3:A4:7B:D6:90:46:B6:58:AD:D7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/861a1c37-79a1-4501-baae-1067838a063b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:80c0::/48 Signature Algorithm: sha256WithRSAEncryption ba:fe:63:c8:65:1a:60:06:c4:b7:d4:bc:b0:5c:96:83:74:ae: d2:39:ca:c8:a3:a0:4a:1e:d0:78:6d:6c:95:fe:da:b0:6e:66: 98:3d:90:f4:9d:ad:da:76:27:d2:32:78:8d:df:c6:17:b9:91: bb:f2:9b:71:22:09:1f:43:f9:02:8a:b2:84:8b:c2:4d:5d:bb: 0d:71:15:7c:06:73:27:39:cd:de:d4:cf:9c:54:a5:db:9d:0f: 1a:c3:91:31:a3:d7:11:7a:92:fa:30:43:ac:0f:1d:72:9a:3a: ea:fa:d7:65:f0:d0:b5:ca:de:85:64:15:c3:c0:f2:1a:46:a1: bc:c4:3d:c4:8d:e2:f3:a3:29:bb:a8:04:44:03:03:3b:a5:11: 0e:a1:85:76:fe:56:59:f5:62:75:b4:6c:8d:a6:10:1e:14:90: dc:e2:5d:e7:83:84:f5:31:3c:3c:88:39:81:46:0f:12:00:83: 2b:33:10:e4:4c:10:f0:96:19:cf:13:58:27:00:8a:69:38:83: 29:4a:2e:c1:5f:28:9b:db:68:11:eb:7c:f3:82:93:7f:33:11: 14:28:28:1b:08:a6:e7:0c:87:ca:3b:62:fd:a4:68:2a:58:84: a6:f5:db:e2:30:8c:25:66:ff:c6:a9:97:f6:ea:b9:e7:9e:97: 1d:05:d3:55 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOcXrNPQf/Na4ZZXoDJY0qro85mAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxODAwMDg0NFoX DTI3MDExNjIzNTk1OVowejFJMEcGA1UEBRNANjc3OTExZWU2ZDZjZDBlOWU3MDZi MDJmMzQ2MTk2YTYwZDA5MDM0YjA0ZmJjMTVkNWFjOTA4MzFiOWMxNmMyMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wrFzNbco+teNhPuyszJBwO1UQL2 BHW8WvpRq1rFA+SMw6vgUBUZ2o3qjEtUOMWOeTqFx9k/myegBXgw3Zoyf55c7iLk Vjbquun4/SKEXDa0wt+bFyX4HYcoaa6dqjOWYV/tmkO9BberdBtfGKHMeQPhWmC8 +i3FVyeS+QLfDYWlY5kxmHNxbLUwBbg4xD7tAqJFjAXjIPHcXMKI9QW4oN4FcnKz bugv/sBEcF/PXaeYENBMsWqOIXQltf8qQPFE6DKbyyYqRA7hUgyDArJv1Q8azh+v f9KrLDcjlxAWqnsVdLootd/hK/RDcWOZFDNpwyZh5w2uWVAVlvvtPMjDuwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIbS/RGlRG9prlHTpHvWkEa2WK3XMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg2MWExYzM3LTc5YTEtNDUwMS1iYWFlLTEwNjc4MzhhMDYzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAIDAMA0GCSqGSIb3DQEBCwUAA4IBAQC6/mPIZRpgBsS31Lyw XJaDdK7SOcrIo6BKHtB4bWyV/tqwbmaYPZD0na3adifSMniN38YXuZG78ptxIgkf Q/kCirKEi8JNXbsNcRV8BnMnOc3e1M+cVKXbnQ8aw5Exo9cRepL6MEOsDx1ymjrq +tdl8NC1yt6FZBXDwPIaRqG8xD3EjeLzoym7qAREAwM7pREOoYV2/lZZ9WJ1tGyN phAeFJDc4l3ng4T1MTw8iDmBRg8SAIMrMxDkTBDwlhnPE1gnAIppOIMpSi7BXyib 22gR63zzgpN/MxEUKCgbCKbnDIfKO2L9pGgqWISm9dviMIwlZv/GqZf26rnnnpcd BdNV -----END CERTIFICATE-----Generated at Thu Nov 5 04:33:59 2026 by rpki-client