$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa File: 9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa (raw, json) Hash identifier: Wo39Qa62qmgS/iEC1HADnLa5FJlwE/CaFeNnHXZU+cg= Subject key identifier: A1:F6:69:49:6D:17:4F:B7:63:F3:25:82:7C:12:D8:77:7F:47:F8:11 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 718F218006A8E6AAD903FB7CCD46BA07BC03A08C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa Signing time: Mon 19 Oct 2026 00:10:47 +0000 ROA not before: Mon 19 Oct 2026 00:10:47 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:8f:21:80:06:a8:e6:aa:d9:03:fb:7c:cd:46:ba:07:bc:03:a0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:10:47 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=73cf611c86ebc986e35c07b829bb5f21bf49332ce1d3ea44585cf08a67f13883, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:18:73:23:7c:4a:ae:db:53:c7:bc:ae:2e: c6:a1:f4:bb:3a:86:56:54:fb:bb:7f:6a:20:eb:e2: 98:0b:78:55:a0:81:44:29:71:88:11:83:bb:36:cd: a8:ef:1c:21:be:f0:17:7c:34:fc:05:78:3b:cc:52: 58:70:a4:dc:e7:da:bf:11:cf:a0:72:3a:2a:3f:73: f8:88:e3:be:3a:6e:88:7b:5b:07:b2:73:f5:9f:0c: 7c:27:51:e7:d5:ff:80:82:ce:28:9b:d0:d7:49:cd: ee:0a:4c:31:4c:0a:06:79:a5:11:c6:b3:8b:46:13: 03:a3:61:54:60:4d:3a:81:9e:d2:3d:3b:c3:b6:93: e8:f2:cf:3e:6f:fb:0a:58:d4:bb:d4:8c:72:ef:2e: 20:18:ea:75:fe:80:51:0a:c7:94:c4:bf:1a:e9:ce: e2:c1:71:b0:c1:ad:ae:24:cf:60:bc:20:f4:7e:da: 4d:13:67:b4:c6:fb:55:b2:ea:9e:ff:57:60:c0:2d: ff:89:ac:89:fc:bd:11:92:0d:ab:1d:80:c8:93:5b: 83:a0:a6:dd:3e:b4:43:52:3e:a9:a0:e4:a4:80:61: 8d:65:46:18:9b:98:02:70:3c:89:c7:34:9f:48:c9: d7:c8:0c:ed:29:bf:97:af:96:02:1b:b6:c0:c2:05: f7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F6:69:49:6D:17:4F:B7:63:F3:25:82:7C:12:D8:77:7F:47:F8:11 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:70c0::/48 Signature Algorithm: sha256WithRSAEncryption 22:e4:49:34:04:7f:10:27:1b:56:1a:8a:c8:ba:5d:35:73:9b: 38:c0:54:96:7c:c8:23:18:85:13:3c:55:af:8f:65:fa:d1:2d: 3a:6f:b4:46:c3:87:6c:2f:76:f3:53:9a:de:68:32:a3:a2:ae: cf:20:93:05:1b:4b:50:cb:c8:a3:39:22:67:eb:e5:02:57:58: ef:f5:24:da:fc:3f:f8:3b:aa:4c:16:8c:7f:58:c0:6c:ba:cf: 0b:53:a2:98:e4:2d:c9:f1:ec:18:71:87:28:f4:5e:4e:c4:90: 1a:81:57:6c:76:2c:69:a1:60:6e:c2:ca:83:f6:c3:7f:c8:bd: 65:f9:23:ba:cd:55:b6:25:6a:d3:03:12:59:70:43:7b:96:c2: ea:55:ff:b7:60:19:57:7c:58:18:5f:54:03:00:72:68:e7:97: bc:3b:79:1d:48:fc:ee:3b:33:51:d9:04:36:54:f5:68:7b:3c: 6c:dd:18:1c:8e:ee:8c:58:6c:7a:6f:1c:7c:49:b2:ae:a1:ca: fa:4f:da:f3:41:1a:92:2c:4f:cd:ff:4d:96:7d:85:dd:ec:29: 70:9e:46:7b:8e:36:92:91:b0:8f:61:b2:51:5a:58:6a:50:f9: d7:23:71:71:4c:13:1d:6f:d7:00:87:c8:13:00:cc:01:cf:70: 4c:8e:db:dc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcY8hgAao5qrZA/t8zUa6B7wDoIwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxOTAwMTA0N1oX DTI3MDExNzIzNTk1OVowejFJMEcGA1UEBRNANzNjZjYxMWM4NmViYzk4NmUzNWMw N2I4MjliYjVmMjFiZjQ5MzMyY2UxZDNlYTQ0NTg1Y2YwOGE2N2YxMzg4MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpEYcyN8Sq7bU8e8ri7GofS7OoZW VPu7f2og6+KYC3hVoIFEKXGIEYO7Ns2o7xwhvvAXfDT8BXg7zFJYcKTc59q/Ec+g cjoqP3P4iOO+Om6Ie1sHsnP1nwx8J1Hn1f+Ags4om9DXSc3uCkwxTAoGeaURxrOL RhMDo2FUYE06gZ7SPTvDtpPo8s8+b/sKWNS71Ixy7y4gGOp1/oBRCseUxL8a6c7i wXGwwa2uJM9gvCD0ftpNE2e0xvtVsuqe/1dgwC3/iayJ/L0Rkg2rHYDIk1uDoKbd PrRDUj6poOSkgGGNZUYYm5gCcDyJxzSfSMnXyAztKb+Xr5YCG7bAwgX3bwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKH2aUltF0+3Y/MlgnwS2Hd/R/gRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmMWFiYzJlLWQzMDUtNDIxNi04MWQ4LTNkMGY3OTJkNzljNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAHDAMA0GCSqGSIb3DQEBCwUAA4IBAQAi5Ek0BH8QJxtWGorI ul01c5s4wFSWfMgjGIUTPFWvj2X60S06b7RGw4dsL3bzU5reaDKjoq7PIJMFG0tQ y8ijOSJn6+UCV1jv9STa/D/4O6pMFox/WMBsus8LU6KY5C3J8ewYcYco9F5OxJAa gVdsdixpoWBuwsqD9sN/yL1l+SO6zVW2JWrTAxJZcEN7lsLqVf+3YBlXfFgYX1QD AHJo55e8O3kdSPzuOzNR2QQ2VPVoezxs3Rgcju6MWGx6bxx8SbKuocr6T9rzQRqS LE/N/02WfYXd7ClwnkZ7jjaSkbCPYbJRWlhqUPnXI3FxTBMdb9cAh8gTAMwBz3BM jtvc -----END CERTIFICATE-----Generated at Thu Nov 5 09:03:14 2026 by rpki-client