$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8b00db97-2511-430d-9f35-06dea72e4d33.roa File: 8b00db97-2511-430d-9f35-06dea72e4d33.roa (raw, json) Hash identifier: NhnR2B0f8n7RmAWuHF9n8N7z6xFMOEl4hDz3FfNQuwE= Subject key identifier: 80:EC:FD:D4:F4:59:5D:ED:7C:34:00:2D:78:20:C5:9F:B9:82:16:59 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1A81A655197DE6FD5E12400731E109044DC6B3A3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8b00db97-2511-430d-9f35-06dea72e4d33.roa Signing time: Thu 29 Oct 2026 00:03:19 +0000 ROA not before: Thu 29 Oct 2026 00:03:19 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:81:a6:55:19:7d:e6:fd:5e:12:40:07:31:e1:09:04:4d:c6:b3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:03:19 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=f13219efee91901cd551b45b7aba00827341852d646b842216f727632f27cc94, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:58:e1:86:2c:8e:91:d4:4e:75:4f:62:97:33: 72:77:85:47:97:d4:14:1f:5b:89:bb:b9:0b:a7:76: f0:a6:12:a3:c2:43:86:fa:9b:56:dd:0f:7b:4c:e1: a1:e9:5b:12:10:6b:5b:b0:dc:c4:00:70:d6:c1:59: 25:54:7a:72:83:2e:4c:f1:02:e3:f3:60:2a:8f:8f: 76:e5:57:f0:14:64:ba:87:bc:b1:43:0a:c5:07:d2: c1:6a:88:4f:93:ff:74:72:ad:9d:98:00:2e:04:ec: 00:a2:b3:a5:e7:47:ac:f2:22:24:9c:eb:de:e0:c0: 3c:79:f1:49:91:49:24:d8:15:23:e8:b4:55:3d:f3: 44:42:80:f7:95:e5:38:34:48:ff:f2:7e:8b:c1:c4: e4:ac:8b:02:fb:4f:67:85:d7:8b:3b:55:f2:74:71: a3:0a:ed:9f:ab:b7:7f:92:44:53:cc:e5:ba:b8:c4: ae:af:d9:45:64:8e:40:2a:96:02:e2:76:33:f2:17: 37:66:9e:f1:f6:64:1b:f8:80:e1:50:71:4a:ba:52: cf:ea:90:4b:73:93:94:cc:e8:11:03:35:75:18:fe: 5e:47:ef:f4:58:5b:ad:fc:3f:17:cd:b9:94:d9:82: 5d:56:43:fe:8b:8e:14:bb:fd:84:e6:df:92:85:d2: 2c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EC:FD:D4:F4:59:5D:ED:7C:34:00:2D:78:20:C5:9F:B9:82:16:59 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8b00db97-2511-430d-9f35-06dea72e4d33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:4000::/40 Signature Algorithm: sha256WithRSAEncryption 48:08:52:b9:fa:48:6a:a3:75:e2:a9:c5:52:0a:6c:7f:eb:15: c2:6a:91:78:23:34:be:e7:e8:bf:7f:5c:cb:82:84:41:75:43: 7b:ed:ba:4a:20:22:71:20:c3:45:62:23:bd:7a:69:ab:6a:c8: 76:58:58:e7:d7:a3:17:4d:58:b8:92:db:e1:6f:c9:70:5f:c6: bf:7f:9f:da:7b:98:b7:36:e4:98:37:fa:a6:0a:80:7d:75:cb: bd:de:7e:41:91:26:f9:71:a9:21:25:91:0d:97:15:d6:05:48: ae:03:b2:40:28:68:a2:9a:f6:f8:88:cd:31:3e:af:a4:22:2e: 44:26:df:fb:87:f3:53:b0:b2:0c:76:cd:12:75:6e:32:b5:b7: b5:33:4b:6b:4d:b7:29:6c:dc:33:8a:a0:d4:cb:6c:8b:c9:0d: 0f:f4:a2:3f:74:28:3c:f6:2d:21:f5:ee:41:69:82:f4:f3:ff: 59:c6:26:79:de:8c:80:4b:1b:03:f7:6e:a2:bd:6f:72:27:56: 40:88:9e:b9:df:6b:ef:a2:89:1b:14:e8:86:d1:45:42:48:f4: 64:5e:fc:e1:d6:d4:b8:aa:27:d0:ca:96:30:ed:14:92:e3:03: 36:57:2c:51:e8:9f:80:08:18:10:a6:3a:b9:bb:98:85:24:80: 10:e1:34:5b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGoGmVRl95v1eEkAHMeEJBE3Gs6MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyOTAwMDMxOVoX DTI3MDEyNzIzNTk1OVowejFJMEcGA1UEBRNAZjEzMjE5ZWZlZTkxOTAxY2Q1NTFi NDViN2FiYTAwODI3MzQxODUyZDY0NmI4NDIyMTZmNzI3NjMyZjI3Y2M5NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1jhhiyOkdROdU9ilzNyd4VHl9QU H1uJu7kLp3bwphKjwkOG+ptW3Q97TOGh6VsSEGtbsNzEAHDWwVklVHpygy5M8QLj 82Aqj4925VfwFGS6h7yxQwrFB9LBaohPk/90cq2dmAAuBOwAorOl50es8iIknOve 4MA8efFJkUkk2BUj6LRVPfNEQoD3leU4NEj/8n6LwcTkrIsC+09nhdeLO1XydHGj Cu2fq7d/kkRTzOW6uMSur9lFZI5AKpYC4nYz8hc3Zp7x9mQb+IDhUHFKulLP6pBL c5OUzOgRAzV1GP5eR+/0WFut/D8XzbmU2YJdVkP+i44Uu/2E5t+ShdIsewIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIDs/dT0WV3tfDQALXggxZ+5ghZZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiMDBkYjk3LTI1MTEtNDMwZC05ZjM1LTA2ZGVhNzJlNGQzMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6EAwDQYJKoZIhvcNAQELBQADggEBAEgIUrn6SGqjdeKpxVIK bH/rFcJqkXgjNL7n6L9/XMuChEF1Q3vtukogInEgw0ViI716aatqyHZYWOfXoxdN WLiS2+FvyXBfxr9/n9p7mLc25Jg3+qYKgH11y73efkGRJvlxqSElkQ2XFdYFSK4D skAoaKKa9viIzTE+r6QiLkQm3/uH81Owsgx2zRJ1bjK1t7UzS2tNtyls3DOKoNTL bIvJDQ/0oj90KDz2LSH17kFpgvTz/1nGJnnejIBLGwP3bqK9b3InVkCInrnfa++i iRsU6IbRRUJI9GRe/OHW1LiqJ9DKljDtFJLjAzZXLFHon4AIGBCmOrm7mIUkgBDh NFs= -----END CERTIFICATE-----Generated at Thu Nov 5 09:03:08 2026 by rpki-client