$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a360bd55-77d7-4e3d-a097-033c65d92a13.roa File: a360bd55-77d7-4e3d-a097-033c65d92a13.roa (raw, json) Hash identifier: enTR/IJ5qeb5ZDvWb6c/98WrF+hDAVnJDkCKZ7rIaKo= Subject key identifier: 97:B2:08:FB:9A:90:70:BF:BF:0A:CA:91:A3:28:41:6F:E2:CB:F5:8E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 193744AED845990517A5202F7665F67F138AACC0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a360bd55-77d7-4e3d-a097-033c65d92a13.roa Signing time: Sun 01 Nov 2026 00:02:29 +0000 ROA not before: Sun 01 Nov 2026 00:02:29 +0000 ROA not after: Sat 30 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:37:44:ae:d8:45:99:05:17:a5:20:2f:76:65:f6:7f:13:8a:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 1 00:02:29 2026 GMT Not After : Jan 30 23:59:59 2027 GMT Subject: serialNumber=93c8abf9f22db5d38c92c72cdec6a6f6a54e711ad639c4317993a9f093a47bf8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:3c:47:54:74:4e:75:98:9a:11:25:4e:c3: 00:b8:73:81:40:5c:f3:5c:68:68:a5:e6:b5:e0:b4: 4c:95:fc:04:a7:81:46:95:b2:36:e8:a3:30:f1:41: 1c:c9:42:86:47:87:60:3e:91:3d:2b:1c:64:b0:ed: f4:f1:97:f6:f1:b4:b3:24:ca:48:5e:05:33:f7:b2: 47:2c:e3:f4:8d:b9:d7:49:2f:5a:17:2f:d2:60:ab: 61:ca:3b:a4:24:e8:b0:30:10:e8:9d:60:21:56:1e: a9:a5:d9:5b:3f:8f:0a:15:46:f0:33:20:dd:a8:3c: fa:60:a7:6f:13:ac:7e:2e:48:ff:cb:ab:bf:fb:ad: a8:da:3d:bc:7f:94:47:55:d4:51:05:dd:3f:7c:28: e1:59:26:c3:dd:65:02:a6:4d:8d:07:ab:0f:46:40: 5a:6e:a3:e5:d2:e7:2b:1b:ff:13:ca:65:92:35:b3: 00:d7:df:ce:c3:8e:b5:e8:48:4a:0f:c8:88:9e:56: e8:30:42:d4:0a:60:5d:12:7e:74:7b:be:35:8c:6a: e5:64:db:71:f7:0a:7a:83:19:a2:36:31:ba:34:ae: 5c:55:ee:24:19:7b:de:cf:c0:64:7e:33:9e:48:26: 85:91:9e:19:ae:86:80:b7:1c:eb:10:e0:9c:dd:4c: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B2:08:FB:9A:90:70:BF:BF:0A:CA:91:A3:28:41:6F:E2:CB:F5:8E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a360bd55-77d7-4e3d-a097-033c65d92a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea::/32 Signature Algorithm: sha256WithRSAEncryption cb:32:12:12:a2:df:2c:b7:56:7b:b3:96:a1:22:1c:59:c9:4a: 7e:a0:e0:0d:c9:3d:7b:68:fd:8e:ea:0d:a7:fc:2e:d7:bd:d0: bc:5e:36:ae:a5:b9:a3:7f:43:d2:17:1a:3c:cc:36:f7:c1:1d: 3b:33:df:76:7a:01:00:e6:ac:27:4c:0a:4f:74:c6:3f:ec:1a: fe:c1:f9:13:0e:7e:42:6a:b1:35:f0:4b:52:87:d9:e0:d7:61: db:8f:1c:56:f3:06:1d:53:48:fa:43:5a:76:1e:87:71:d2:5b: 38:d0:a6:de:f7:df:0d:7d:ac:b9:29:9d:21:ff:d3:e8:f0:b4: 1f:be:9c:c0:8a:97:1b:e4:be:dd:73:9a:fa:59:96:8f:6f:ab: 0f:4a:eb:12:e8:b1:4c:b8:b7:31:83:e3:86:5d:23:c5:6d:e6: ff:eb:f1:44:69:22:f7:ce:95:54:f4:4a:14:d9:22:5f:17:de: 31:e8:52:5f:98:82:40:c3:6d:55:ba:11:d0:dd:89:a8:e0:bb: eb:ca:93:c6:c0:a0:45:84:18:60:e6:14:66:46:c8:52:ca:89: e4:44:b5:cb:e1:33:51:75:d3:8b:ae:72:d7:cc:af:af:31:60: c7:0b:03:71:29:df:78:1d:82:04:f7:d0:a7:11:9a:a5:b5:5c: 2e:21:93:f6 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUGTdErthFmQUXpSAvdmX2fxOKrMAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTEwMTAwMDIyOVoX DTI3MDEzMDIzNTk1OVowejFJMEcGA1UEBRNAOTNjOGFiZjlmMjJkYjVkMzhjOTJj NzJjZGVjNmE2ZjZhNTRlNzExYWQ2MzljNDMxNzk5M2E5ZjA5M2E0N2JmODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpo8R1R0TnWYmhElTsMAuHOBQFzz XGhopea14LRMlfwEp4FGlbI26KMw8UEcyUKGR4dgPpE9KxxksO308Zf28bSzJMpI XgUz97JHLOP0jbnXSS9aFy/SYKthyjukJOiwMBDonWAhVh6ppdlbP48KFUbwMyDd qDz6YKdvE6x+Lkj/y6u/+62o2j28f5RHVdRRBd0/fCjhWSbD3WUCpk2NB6sPRkBa bqPl0ucrG/8TymWSNbMA19/Ow4616EhKD8iInlboMELUCmBdEn50e741jGrlZNtx 9wp6gxmiNjG6NK5cVe4kGXvez8BkfjOeSCaFkZ4ZroaAtxzrEOCc3UxeDQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFJeyCPuakHC/vwrKkaMoQW/iy/WOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EzNjBiZDU1LTc3ZDctNGUzZC1hMDk3LTAzM2M2NWQ5MmExMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba6jANBgkqhkiG9w0BAQsFAAOCAQEAyzISEqLfLLdWe7OWoSIc WclKfqDgDck9e2j9juoNp/wu173QvF42rqW5o39D0hcaPMw298EdOzPfdnoBAOas J0wKT3TGP+wa/sH5Ew5+QmqxNfBLUofZ4Ndh248cVvMGHVNI+kNadh6HcdJbONCm 3vffDX2suSmdIf/T6PC0H76cwIqXG+S+3XOa+lmWj2+rD0rrEuixTLi3MYPjhl0j xW3m/+vxRGki986VVPRKFNkiXxfeMehSX5iCQMNtVboR0N2JqOC768qTxsCgRYQY YOYUZkbIUsqJ5ES1y+EzUXXTi65y18yvrzFgxwsDcSnfeB2CBPfQpxGapbVcLiGT 9g== -----END CERTIFICATE-----Generated at Sat Nov 7 12:12:58 2026 by rpki-client