$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996429fb-4fb5-4437-9fbd-29531436e253.roa File: 996429fb-4fb5-4437-9fbd-29531436e253.roa (raw, json) Hash identifier: 9m59CME6JLGWTVyCGcY1WuhGIA8i6IG6yu/kusCu5DU= Subject key identifier: B8:ED:86:03:A5:04:44:AC:B7:D1:6B:91:A4:C2:BD:59:A7:F8:24:88 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 077293C17E7C9A90E6F1ACF45F35DA130D57FB63 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996429fb-4fb5-4437-9fbd-29531436e253.roa Signing time: Tue 20 Oct 2026 00:09:39 +0000 ROA not before: Tue 20 Oct 2026 00:09:39 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:72:93:c1:7e:7c:9a:90:e6:f1:ac:f4:5f:35:da:13:0d:57:fb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:09:39 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=a5538474eb8001176c418d28d00b39ee0f4a9df8e55298e87a0fe37f60bb4053, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fe:ad:cb:7c:d7:7a:06:9d:94:87:2b:c9:a8: f1:fa:93:0c:fa:6c:5c:be:73:bc:d7:b8:46:3f:a8: b3:d5:ff:e2:64:aa:2e:ad:7c:c4:d2:62:ee:11:66: a1:45:cc:29:ce:95:ee:2c:d2:5b:72:ec:76:59:30: 18:40:e3:34:7a:ee:a9:cb:d1:51:8c:02:3d:2a:b9: f2:a8:b8:b1:d4:7e:ae:6e:97:c0:ab:c0:b7:fa:a8: e2:80:2e:86:8a:c6:09:8d:6d:d4:a1:98:a1:ab:08: f3:08:d5:54:62:c1:48:a3:ea:4f:b7:70:1d:1b:ea: ad:4a:58:48:d7:f8:e3:7a:82:5b:ee:6d:d1:a3:e4: c4:14:3b:4e:b9:5e:c4:a4:00:5c:23:58:59:9e:16: 97:24:51:40:3e:2c:44:0e:d4:fc:d4:7c:05:db:cd: e1:fe:f4:ff:25:79:4f:59:67:dc:52:bd:71:b2:69: 4d:d1:45:23:8f:64:a5:6e:1b:37:20:c8:3c:f3:68: dc:1d:2c:8f:1e:00:35:6d:65:e0:c4:9a:bf:66:20: d9:b1:5c:29:18:fe:e0:f9:9b:a5:68:28:b0:c1:61: 4e:7e:7e:f5:00:0a:d6:7f:87:6e:9d:84:a5:43:45: 41:1e:8c:4c:03:93:38:50:2f:53:ed:21:54:5d:6b: ed:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:ED:86:03:A5:04:44:AC:B7:D1:6B:91:A4:C2:BD:59:A7:F8:24:88 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996429fb-4fb5-4437-9fbd-29531436e253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:c000::/40 Signature Algorithm: sha256WithRSAEncryption 73:80:8d:e4:0e:4e:8c:da:99:45:9b:db:1e:c8:b3:c8:a7:c2: b3:ed:ca:a3:61:9c:a8:9f:d5:ff:d4:e4:16:7f:01:94:5b:06: 95:36:96:93:e3:e4:1c:65:3d:16:9a:e7:65:4c:c9:44:9b:91: 45:b9:c8:49:9d:47:d2:68:3b:e1:5b:bf:38:ee:f1:73:e5:ee: df:a8:bf:34:23:83:ab:91:4d:4f:f8:ef:3d:ef:15:f3:1c:16: 26:a4:aa:e3:a5:d7:b9:cd:d1:99:25:3a:95:b0:f9:0b:54:1a: 83:4d:f5:8f:51:da:7c:15:ee:c7:33:1e:e8:03:7c:53:8f:2b: c1:af:ae:8c:33:ac:62:2d:14:f4:62:00:4b:2a:44:d7:56:1f: 9b:96:95:52:f9:4c:d9:d4:15:03:d1:00:4a:19:e0:60:02:6f: db:7a:7d:02:14:30:5d:ab:8c:22:84:87:46:19:f1:04:01:60: 98:48:91:b5:17:cf:d3:98:1a:18:3d:6f:24:4c:c1:1b:64:ef: ed:62:85:d6:d0:1f:f0:6f:77:84:99:08:b0:74:47:ef:45:82: 7b:c9:9a:51:31:4d:a1:2f:e3:dd:c2:69:1d:fe:0e:bf:0f:7d: a5:4a:09:d4:8b:5a:22:82:3d:c9:93:af:e7:02:d6:1f:31:ed: 0d:ca:af:9d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUB3KTwX58mpDm8az0XzXaEw1X+2MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMDkzOVoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAYTU1Mzg0NzRlYjgwMDExNzZjNDE4 ZDI4ZDAwYjM5ZWUwZjRhOWRmOGU1NTI5OGU4N2EwZmUzN2Y2MGJiNDA1MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP6ty3zXegadlIcryajx+pMM+mxc vnO817hGP6iz1f/iZKourXzE0mLuEWahRcwpzpXuLNJbcux2WTAYQOM0eu6py9FR jAI9KrnyqLix1H6ubpfAq8C3+qjigC6GisYJjW3UoZihqwjzCNVUYsFIo+pPt3Ad G+qtSlhI1/jjeoJb7m3Ro+TEFDtOuV7EpABcI1hZnhaXJFFAPixEDtT81HwF283h /vT/JXlPWWfcUr1xsmlN0UUjj2Slbhs3IMg882jcHSyPHgA1bWXgxJq/ZiDZsVwp GP7g+ZulaCiwwWFOfn71AArWf4dunYSlQ0VBHoxMA5M4UC9T7SFUXWvtkQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLjthgOlBESst9FrkaTCvVmn+CSIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5NjQyOWZiLTRmYjUtNDQzNy05ZmJkLTI5NTMxNDM2ZTI1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaucAwDQYJKoZIhvcNAQELBQADggEBAHOAjeQOTozamUWb2x7I s8inwrPtyqNhnKif1f/U5BZ/AZRbBpU2lpPj5BxlPRaa52VMyUSbkUW5yEmdR9Jo O+Fbvzju8XPl7t+ovzQjg6uRTU/47z3vFfMcFiakquOl17nN0ZklOpWw+QtUGoNN 9Y9R2nwV7sczHugDfFOPK8GvrowzrGItFPRiAEsqRNdWH5uWlVL5TNnUFQPRAEoZ 4GACb9t6fQIUMF2rjCKEh0YZ8QQBYJhIkbUXz9OYGhg9byRMwRtk7+1ihdbQH/Bv d4SZCLB0R+9FgnvJmlExTaEv493CaR3+Dr8PfaVKCdSLWiKCPcmTr+cC1h8x7Q3K r50= -----END CERTIFICATE-----Generated at Thu Nov 5 11:24:46 2026 by rpki-client