$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a2514fe3-5779-4174-ba62-2a19e0c7ddf9.roa File: a2514fe3-5779-4174-ba62-2a19e0c7ddf9.roa (raw, json) Hash identifier: bh3ssBoWj/5AZKUlG+MiaJNCV3FW7tvgMRoJuDd9wuo= Subject key identifier: 0F:DB:39:E3:6E:28:72:1F:10:14:C5:8C:E6:FF:14:F0:55:0A:65:54 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6D7EF5F5D631DD1157CE6DA2602307E61915650D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a2514fe3-5779-4174-ba62-2a19e0c7ddf9.roa Signing time: Sun 11 Oct 2026 00:07:53 +0000 ROA not before: Sun 11 Oct 2026 00:07:53 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da21::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:7e:f5:f5:d6:31:dd:11:57:ce:6d:a2:60:23:07:e6:19:15:65:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 11 00:07:53 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=fea793c1edfa8f6ed5bafc1c401ef8e52632e8ffcf8db28ddabaa44650c12148, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:fd:c2:47:27:16:a9:cd:22:d5:86:40:b9: 46:f9:a8:33:9d:07:58:9b:ff:32:a1:fe:24:5e:69: a4:2a:93:25:27:44:06:cb:1e:96:f9:7e:56:e7:3a: 94:b7:69:b2:78:33:e7:86:1b:6f:f7:a3:bb:8a:15: ee:3b:f4:10:24:84:36:d0:53:30:4b:8e:c7:9e:1e: d5:b9:db:f4:00:df:46:5a:7f:51:8e:d2:54:c9:d6: a9:ee:f3:fa:33:dc:68:90:50:4f:43:7d:58:82:05: 5d:e9:86:8e:ee:c3:33:7d:5c:f0:14:14:ed:75:ed: 3e:8c:8d:4f:2b:09:ca:4b:af:4a:d8:d5:4b:80:2a: 0a:63:16:25:47:c1:78:1d:31:3a:bc:bf:2b:65:85: b2:aa:da:1f:9e:65:6e:af:d8:6a:92:03:87:03:e1: 27:5d:63:25:8d:94:26:13:36:4c:aa:a8:eb:b1:47: f1:0e:00:ee:75:6b:67:71:6b:82:2f:dc:a0:d9:00: ee:1d:03:ce:8e:e9:d1:03:f1:46:b2:da:3b:c5:8d: a1:c9:e5:34:c6:cf:be:ab:2f:27:99:c0:99:1e:6a: 38:c5:a3:d5:b3:d6:eb:72:27:5b:9b:e2:dc:81:b7: 29:1f:9a:af:30:09:9d:58:46:a0:f4:07:53:99:f7: 69:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DB:39:E3:6E:28:72:1F:10:14:C5:8C:E6:FF:14:F0:55:0A:65:54 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a2514fe3-5779-4174-ba62-2a19e0c7ddf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da21::/36 Signature Algorithm: sha256WithRSAEncryption 23:09:46:4d:a9:0f:fa:7b:ee:b7:a8:4c:76:3f:92:b3:65:f1: e3:41:87:e5:52:32:d5:bd:15:32:90:28:37:ca:96:ea:45:70: 9f:06:be:45:73:38:bf:bd:2a:ee:49:40:1d:52:b5:c5:aa:b9: f0:ef:70:94:66:32:be:b2:37:74:ac:99:4a:a1:2f:bd:21:e6: 6d:42:24:ae:de:e7:33:af:48:bf:6e:39:61:75:e0:9e:99:ca: bb:2d:78:ba:c9:2d:6e:7a:0c:33:48:02:6f:2b:ef:de:68:55: c4:34:f8:6a:1f:d4:16:9d:2d:58:b7:34:f9:a6:12:c3:18:47: cd:dd:17:63:6c:bb:6a:8e:b8:b5:93:41:6f:e8:48:2b:84:ee: c5:b0:cc:a1:87:64:af:dc:d6:97:56:10:8e:d9:2e:47:8d:2f: f1:ff:f5:92:53:ea:a4:36:81:a5:4d:39:05:f9:48:42:f1:83: 4e:b0:55:4d:16:95:cf:b0:60:c9:be:b7:bc:d0:bb:4d:31:5b: a7:ef:34:c1:b7:77:1b:9d:48:c3:54:b4:de:71:7a:79:a8:b3: 7d:42:76:e7:d4:30:61:5e:ec:eb:df:09:21:38:cd:fe:97:f5: e6:d5:73:cc:63:5e:97:f5:34:80:5c:ab:6a:a9:9f:8c:a9:7e: ec:6e:49:5a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbX719dYx3RFXzm2iYCMH5hkVZQ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxMTAwMDc1M1oX DTI3MDEwOTIzNTk1OVowejFJMEcGA1UEBRNAZmVhNzkzYzFlZGZhOGY2ZWQ1YmFm YzFjNDAxZWY4ZTUyNjMyZThmZmNmOGRiMjhkZGFiYWE0NDY1MGMxMjE0ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqX9wkcnFqnNItWGQLlG+agznQdY m/8yof4kXmmkKpMlJ0QGyx6W+X5W5zqUt2myeDPnhhtv96O7ihXuO/QQJIQ20FMw S47Hnh7Vudv0AN9GWn9RjtJUydap7vP6M9xokFBPQ31YggVd6YaO7sMzfVzwFBTt de0+jI1PKwnKS69K2NVLgCoKYxYlR8F4HTE6vL8rZYWyqtofnmVur9hqkgOHA+En XWMljZQmEzZMqqjrsUfxDgDudWtncWuCL9yg2QDuHQPOjunRA/FGsto7xY2hyeU0 xs++qy8nmcCZHmo4xaPVs9brcidbm+LcgbcpH5qvMAmdWEag9AdTmfdpswIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFA/bOeNuKHIfEBTFjOb/FPBVCmVUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EyNTE0ZmUzLTU3NzktNDE3NC1iYTYyLTJhMTllMGM3ZGRmOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaIQAwDQYJKoZIhvcNAQELBQADggEBACMJRk2pD/p77reoTHY/ krNl8eNBh+VSMtW9FTKQKDfKlupFcJ8GvkVzOL+9Ku5JQB1StcWqufDvcJRmMr6y N3SsmUqhL70h5m1CJK7e5zOvSL9uOWF14J6ZyrsteLrJLW56DDNIAm8r795oVcQ0 +Gof1BadLVi3NPmmEsMYR83dF2Nsu2qOuLWTQW/oSCuE7sWwzKGHZK/c1pdWEI7Z LkeNL/H/9ZJT6qQ2gaVNOQX5SELxg06wVU0Wlc+wYMm+t7zQu00xW6fvNMG3dxud SMNUtN5xenmos31CdufUMGFe7OvfCSE4zf6X9ebVc8xjXpf1NIBcq2qpn4ypfuxu SVo= -----END CERTIFICATE-----Generated at Thu Nov 5 07:02:29 2026 by rpki-client