$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9c7da266-a0f7-4bdd-805d-e6ae1385a509.roa File: 9c7da266-a0f7-4bdd-805d-e6ae1385a509.roa (raw, json) Hash identifier: WOBf5L5ePWPmGWB+3OwnLnUqbIDAjCGWp1JRk6wTSDI= Subject key identifier: B0:64:62:C8:1E:05:E6:6B:9D:C0:91:9D:63:E1:17:98:AD:8C:B9:88 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 456A3B4C7E248AFAA509E994CE6FF9AB09E7DA0E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9c7da266-a0f7-4bdd-805d-e6ae1385a509.roa Signing time: Thu 10 Sep 2026 00:00:31 +0000 ROA not before: Thu 10 Sep 2026 00:00:31 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6a:3b:4c:7e:24:8a:fa:a5:09:e9:94:ce:6f:f9:ab:09:e7:da:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:00:31 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=0885cd48d8d667f0b23e5984e08761e8058e25dbf2c34c97d252ed639249917d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:84:e3:e8:4a:6c:db:59:c1:48:9b:a1:ac:1b: 1c:4e:3a:64:45:52:d0:4e:bc:55:d3:df:62:cb:78: 53:3f:b2:5c:0c:90:aa:55:cd:49:ea:5c:57:e3:bf: aa:ca:8b:9f:7b:da:5e:99:8c:4a:99:25:b0:71:ab: 86:bd:4a:94:c9:7d:49:b0:92:e7:5a:01:fc:ad:36: 1f:17:41:5b:f2:6e:ea:4a:53:0f:05:03:29:c1:bb: ec:e8:59:88:48:4b:10:a6:bb:09:6b:65:22:a0:39: 73:67:89:74:0f:2a:95:4b:5e:fe:e9:0e:c9:1a:4f: 6e:96:ea:ea:9f:5e:e5:a9:e4:51:87:7a:2f:57:ca: 7e:d6:ce:c8:47:d3:fc:f5:ed:07:48:22:9a:d7:7e: 09:21:2d:a8:43:ea:74:10:e9:8b:e4:6e:a4:b6:2c: 4b:09:57:77:5d:ea:53:55:09:c8:74:45:00:9d:a1: 39:14:bc:2e:6c:b8:a1:ab:55:84:35:a3:e1:f0:32: 6c:ce:1b:df:11:64:c7:3f:e1:11:c9:81:53:4e:e6: e3:f8:44:b7:ac:ca:db:03:90:fe:75:07:01:fa:e5: ab:21:53:a4:44:d1:6b:2d:db:f7:49:ba:61:b5:73: 1f:02:a4:d9:82:a7:b0:f0:9a:bc:3e:38:6a:7b:91: ff:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:64:62:C8:1E:05:E6:6B:9D:C0:91:9D:63:E1:17:98:AD:8C:B9:88 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9c7da266-a0f7-4bdd-805d-e6ae1385a509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:8800::/40 Signature Algorithm: sha256WithRSAEncryption b0:04:58:63:96:e9:2c:b2:38:b6:2d:73:f3:8a:37:e5:f1:24: 79:1e:c5:da:0c:3e:b1:7e:d9:04:69:a4:32:7b:e8:dd:72:4d: 81:3e:84:2b:96:4c:a0:ea:2f:3c:ba:05:71:db:ca:4a:89:59: af:96:01:4e:0b:dc:67:8c:49:21:8a:b7:02:48:a8:38:8a:ee: b7:da:01:a2:0b:77:e6:57:11:3d:eb:19:d9:d0:92:d5:82:df: c0:6d:6d:ae:38:1d:fd:b8:fb:8b:6c:f3:64:b0:2f:67:9a:63: 85:7d:e9:7c:1c:da:c7:71:59:17:65:70:a3:98:57:e9:b6:b1: 3f:85:0a:d4:ce:23:7e:42:d0:7b:85:10:70:f0:19:d1:74:02: 47:30:df:60:7e:bd:a6:56:29:99:0e:ab:14:e2:dc:14:73:91: 49:3c:48:a4:98:0f:7b:ec:64:fc:71:1c:57:76:12:2b:61:ad: dc:bb:b4:26:81:80:a3:1a:94:0b:03:9b:17:7f:5f:c9:d3:61: 69:2e:42:70:f7:96:1f:3b:4c:8c:d8:a6:96:eb:a9:0b:18:aa: 3d:e7:16:f3:df:e8:0c:4f:29:c9:ca:00:e2:5d:e5:7d:48:af: 9c:f9:9b:2e:56:a9:0a:b1:cf:a4:32:16:18:69:a4:55:a0:a4: 75:11:60:dd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURWo7TH4kivqlCemUzm/5qwnn2g4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMDAzMVoX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAMDg4NWNkNDhkOGQ2NjdmMGIyM2U1 OTg0ZTA4NzYxZTgwNThlMjVkYmYyYzM0Yzk3ZDI1MmVkNjM5MjQ5OTE3ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oTj6Eps21nBSJuhrBscTjpkRVLQ TrxV099iy3hTP7JcDJCqVc1J6lxX47+qyoufe9pemYxKmSWwcauGvUqUyX1JsJLn WgH8rTYfF0Fb8m7qSlMPBQMpwbvs6FmISEsQprsJa2UioDlzZ4l0DyqVS17+6Q7J Gk9ulurqn17lqeRRh3ovV8p+1s7IR9P89e0HSCKa134JIS2oQ+p0EOmL5G6ktixL CVd3XepTVQnIdEUAnaE5FLwubLihq1WENaPh8DJszhvfEWTHP+ERyYFTTubj+ES3 rMrbA5D+dQcB+uWrIVOkRNFrLdv3SbphtXMfAqTZgqew8Jq8Pjhqe5H/IQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLBkYsgeBeZrncCRnWPhF5itjLmIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzljN2RhMjY2LWEwZjctNGJkZC04MDVkLWU2YWUxMzg1YTUwOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba64gwDQYJKoZIhvcNAQELBQADggEBALAEWGOW6SyyOLYtc/OK N+XxJHkexdoMPrF+2QRppDJ76N1yTYE+hCuWTKDqLzy6BXHbykqJWa+WAU4L3GeM SSGKtwJIqDiK7rfaAaILd+ZXET3rGdnQktWC38Btba44Hf24+4ts82SwL2eaY4V9 6Xwc2sdxWRdlcKOYV+m2sT+FCtTOI35C0HuFEHDwGdF0Akcw32B+vaZWKZkOqxTi 3BRzkUk8SKSYD3vsZPxxHFd2Eithrdy7tCaBgKMalAsDmxd/X8nTYWkuQnD3lh87 TIzYppbrqQsYqj3nFvPf6AxPKcnKAOJd5X1Ir5z5my5WqQqxz6QyFhhppFWgpHUR YN0= -----END CERTIFICATE-----Generated at Mon Sep 21 13:45:07 2026 by rpki-client