$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/982d87a7-4e0b-42ab-a73f-f497b43a2a36.roa File: 982d87a7-4e0b-42ab-a73f-f497b43a2a36.roa (raw, json) Hash identifier: BJ+7f+5ci7JonpgT7YNmpYTyOPs8invz9q7uuphnVs0= Subject key identifier: E9:68:A1:93:62:00:D1:6F:FC:0D:BB:16:26:1D:0B:67:A6:A1:67:91 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2B1F512A538833A04DCB3783B66C4BFD65DCD0BF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/982d87a7-4e0b-42ab-a73f-f497b43a2a36.roa Signing time: Mon 12 Oct 2026 00:08:57 +0000 ROA not before: Mon 12 Oct 2026 00:08:57 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:1f:51:2a:53:88:33:a0:4d:cb:37:83:b6:6c:4b:fd:65:dc:d0:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 12 00:08:57 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=95e1a8c93c68b4f40ca82ac217187fbbddae38b43b50788145ce454049e44ee3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:0d:bd:a0:d6:d1:a8:a7:ad:c0:20:86:7f:03: 6b:1c:78:e5:77:75:5c:a0:bf:3c:e2:f4:fa:ae:a4: d9:aa:65:f2:9c:55:d6:68:8b:ed:59:e9:27:75:89: e3:25:43:1d:c3:f8:4f:be:32:06:04:28:bb:55:86: bb:d1:15:be:db:de:a4:b2:4a:ee:fb:74:fa:3c:8a: 4e:70:d1:3d:c4:a0:2d:e8:79:af:5b:80:8c:3e:1c: a4:5b:0e:f8:27:06:92:bf:46:b9:be:2d:65:c1:fb: 27:f7:91:fb:8a:4d:98:29:57:a4:f1:5b:45:de:fd: 45:78:21:91:dd:fd:86:34:0b:59:a5:94:26:28:8e: 19:da:9f:d2:74:59:c8:67:6f:99:e7:f5:55:48:02: 40:47:c0:52:63:ee:15:76:af:c5:2b:51:da:aa:17: 06:51:ad:82:bc:06:35:f6:66:95:94:23:37:08:3f: 71:b5:5d:1a:2c:c2:a4:3b:e9:af:cd:59:21:2a:ce: 21:1e:69:32:a4:0b:b8:e0:e7:d0:e6:a3:de:1a:09: 6c:1c:66:e9:f3:f2:90:74:7f:36:53:96:44:ca:3e: 2c:c3:52:8b:92:b1:82:55:6b:be:ad:30:54:0d:16: 27:05:64:0d:2b:18:98:4a:68:b5:50:90:9c:87:9a: 17:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:68:A1:93:62:00:D1:6F:FC:0D:BB:16:26:1D:0B:67:A6:A1:67:91 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/982d87a7-4e0b-42ab-a73f-f497b43a2a36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:800::/40 Signature Algorithm: sha256WithRSAEncryption 7b:e2:01:f2:5c:d5:7b:c3:21:82:6c:84:16:50:75:f4:28:8c: 4e:5e:a1:31:38:92:f0:ad:00:7b:a4:86:ef:e9:29:7c:44:eb: 17:78:56:84:ed:02:53:ad:4d:a9:60:62:08:58:3c:bd:00:23: 60:13:ab:14:0f:fa:6b:58:cd:26:6b:62:c4:65:55:09:66:26: 17:45:f1:40:c9:e7:e4:09:39:aa:c3:79:b4:6f:24:b7:7c:ce: d3:f3:7f:d4:d1:bb:7b:f1:39:6f:89:fc:b1:0f:1d:91:a6:e8: 9f:ac:db:fe:0c:54:f6:7c:c6:7d:30:89:b0:8d:65:92:07:c3: 13:43:9f:e5:7e:a0:9d:e2:90:1e:62:95:fe:3a:4f:21:9b:29: 9f:00:8a:1b:9a:d8:dd:61:89:fd:02:d3:83:ad:68:dd:e5:02: 16:79:44:a9:2f:f6:5a:08:b4:3f:14:a1:0f:1f:4b:9a:31:5a: 2d:28:6f:ad:09:48:7a:9e:90:7d:88:2c:cd:66:a4:bc:56:17: fd:59:2e:8f:e1:49:e1:0d:a2:5d:f0:c1:b5:c0:15:8c:15:e0: cb:e7:1c:32:37:49:ee:44:be:b1:78:74:20:0f:86:5c:a4:9f: 9e:68:0a:a3:25:1e:80:87:76:81:40:4c:81:e9:3a:f2:af:44: dd:30:71:5f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKx9RKlOIM6BNyzeDtmxL/WXc0L8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxMjAwMDg1N1oX DTI3MDExMDIzNTk1OVowejFJMEcGA1UEBRNAOTVlMWE4YzkzYzY4YjRmNDBjYTgy YWMyMTcxODdmYmJkZGFlMzhiNDNiNTA3ODgxNDVjZTQ1NDA0OWU0NGVlMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Q29oNbRqKetwCCGfwNrHHjld3Vc oL884vT6rqTZqmXynFXWaIvtWekndYnjJUMdw/hPvjIGBCi7VYa70RW+296kskru +3T6PIpOcNE9xKAt6HmvW4CMPhykWw74JwaSv0a5vi1lwfsn95H7ik2YKVek8VtF 3v1FeCGR3f2GNAtZpZQmKI4Z2p/SdFnIZ2+Z5/VVSAJAR8BSY+4Vdq/FK1HaqhcG Ua2CvAY19maVlCM3CD9xtV0aLMKkO+mvzVkhKs4hHmkypAu44OfQ5qPeGglsHGbp 8/KQdH82U5ZEyj4sw1KLkrGCVWu+rTBUDRYnBWQNKxiYSmi1UJCch5oX3wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOlooZNiANFv/A27FiYdC2emoWeRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk4MmQ4N2E3LTRlMGItNDJhYi1hNzNmLWY0OTdiNDNhMmEzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauQgwDQYJKoZIhvcNAQELBQADggEBAHviAfJc1XvDIYJshBZQ dfQojE5eoTE4kvCtAHukhu/pKXxE6xd4VoTtAlOtTalgYghYPL0AI2ATqxQP+mtY zSZrYsRlVQlmJhdF8UDJ5+QJOarDebRvJLd8ztPzf9TRu3vxOW+J/LEPHZGm6J+s 2/4MVPZ8xn0wibCNZZIHwxNDn+V+oJ3ikB5ilf46TyGbKZ8Aihua2N1hif0C04Ot aN3lAhZ5RKkv9loItD8UoQ8fS5oxWi0ob60JSHqekH2ILM1mpLxWF/1ZLo/hSeEN ol3wwbXAFYwV4MvnHDI3Se5EvrF4dCAPhlykn55oCqMlHoCHdoFATIHpOvKvRN0w cV8= -----END CERTIFICATE-----Generated at Thu Nov 5 04:29:01 2026 by rpki-client