$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6726238-8e0b-4518-8844-5c38ea3f41a4.roa File: a6726238-8e0b-4518-8844-5c38ea3f41a4.roa (raw, json) Hash identifier: 67mec6ewAVvzGB2tpN0dN6yGyVS06haUG1vnrqg3VP4= Subject key identifier: A9:E4:63:4B:07:A3:7D:97:37:94:BA:F9:02:D4:79:AA:F6:20:ED:F4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0AB40891AB6E34F150F31EE7AC4DD10CA32E68C6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6726238-8e0b-4518-8844-5c38ea3f41a4.roa Signing time: Thu 15 Oct 2026 00:07:48 +0000 ROA not before: Thu 15 Oct 2026 00:07:48 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b4:08:91:ab:6e:34:f1:50:f3:1e:e7:ac:4d:d1:0c:a3:2e:68:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:07:48 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=54419e9c47cc856c7df3117ae1ef62c4787290f11f94a398570f51e6717e283a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:57:65:a0:5b:24:20:cb:5c:bb:c9:92:4e:e9: a9:ed:81:de:95:1b:0a:34:3f:a5:12:32:72:a0:8d: b0:26:b2:e1:e6:df:5d:51:0a:12:3f:70:6c:aa:d4: 83:ad:b6:29:85:cd:b8:be:19:1f:97:a4:3c:e3:fb: 81:40:a8:bf:bc:ec:dd:9f:e8:bb:cb:ad:28:6d:8c: ef:29:39:19:9d:bb:91:b9:a9:63:af:c5:44:da:15: 7b:01:a6:c1:b4:f4:23:d2:d5:32:c6:24:40:7b:13: 11:22:1c:7c:52:0a:56:9e:98:6e:e6:8f:0d:29:ff: ba:7c:b0:b0:00:e0:83:4e:09:af:c3:81:c0:38:88: 9b:5b:df:4c:b0:83:6b:6e:d3:d6:3c:b9:e4:48:18: 57:fa:8b:bc:4b:18:8e:c4:97:78:1c:53:12:28:be: c7:77:9b:80:6b:76:46:f4:36:34:6a:88:56:1a:b0: ff:1e:72:b1:6a:d4:a7:b8:20:98:89:c0:60:9a:a5: 62:34:c4:f9:0d:d7:7e:10:ce:5a:7b:0f:df:39:a5: d9:e1:3a:c4:c4:f6:70:a5:55:33:62:4f:32:91:36: 32:ca:51:9f:a6:59:0a:9b:20:f1:e8:a6:35:13:6e: 4c:18:f5:4e:b6:0a:f8:07:3a:45:f8:d4:92:13:b6: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E4:63:4B:07:A3:7D:97:37:94:BA:F9:02:D4:79:AA:F6:20:ED:F4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6726238-8e0b-4518-8844-5c38ea3f41a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:a000::/40 Signature Algorithm: sha256WithRSAEncryption c8:ee:f3:a9:54:ed:ff:47:95:9b:58:4c:f2:72:57:38:20:f1: 12:b7:3b:4b:a7:0a:3a:11:19:07:2e:ad:17:d0:fd:d0:d3:04: c2:9a:ef:1f:75:2f:fb:3b:8b:39:5c:16:a0:4b:6d:85:e1:4b: 5e:66:0b:e7:79:ec:da:cd:07:a7:32:fc:b4:35:25:80:a5:23: 1c:e1:11:e7:f5:25:b1:f3:45:b6:16:9d:c4:84:a8:06:b0:38: 7b:00:2e:96:2c:8c:13:b1:9e:fb:0d:e8:ed:5f:4e:b2:7c:a0: 22:72:f1:6d:90:99:21:7b:de:b6:ab:ef:a7:5a:59:96:c4:c7: a2:ab:04:3b:3b:40:3f:68:27:ee:0c:30:b6:6e:24:56:44:58: cf:26:10:0c:74:63:b7:5c:f6:23:09:02:a7:e1:f6:13:b2:15: 19:f7:d9:25:46:8b:e4:21:b7:37:a9:7e:f3:a5:43:fe:cd:4d: 54:64:da:50:67:fe:8b:0a:da:dc:e8:c7:ab:2a:31:8c:fb:f1: e6:2d:68:76:31:d7:8f:69:4e:9f:db:11:2b:66:43:5d:70:13: dc:3c:fe:40:9a:58:22:46:ee:90:13:00:38:66:eb:5f:ed:af: c7:24:45:c6:78:d0:51:0b:81:00:89:12:3d:22:ec:bc:bb:e0: fb:f8:56:f0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCrQIkatuNPFQ8x7nrE3RDKMuaMYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxNTAwMDc0OFoX DTI3MDExMzIzNTk1OVowejFJMEcGA1UEBRNANTQ0MTllOWM0N2NjODU2YzdkZjMx MTdhZTFlZjYyYzQ3ODcyOTBmMTFmOTRhMzk4NTcwZjUxZTY3MTdlMjgzYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApldloFskIMtcu8mSTump7YHelRsK ND+lEjJyoI2wJrLh5t9dUQoSP3BsqtSDrbYphc24vhkfl6Q84/uBQKi/vOzdn+i7 y60obYzvKTkZnbuRualjr8VE2hV7AabBtPQj0tUyxiRAexMRIhx8UgpWnphu5o8N Kf+6fLCwAOCDTgmvw4HAOIibW99MsINrbtPWPLnkSBhX+ou8SxiOxJd4HFMSKL7H d5uAa3ZG9DY0aohWGrD/HnKxatSnuCCYicBgmqViNMT5Ddd+EM5aew/fOaXZ4TrE xPZwpVUzYk8ykTYyylGfplkKmyDx6KY1E25MGPVOtgr4BzpF+NSSE7ZVXQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKnkY0sHo32XN5S6+QLUear2IO30MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E2NzI2MjM4LThlMGItNDUxOC04ODQ0LTVjMzhlYTNmNDFhNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9KAwDQYJKoZIhvcNAQELBQADggEBAMju86lU7f9HlZtYTPJy Vzgg8RK3O0unCjoRGQcurRfQ/dDTBMKa7x91L/s7izlcFqBLbYXhS15mC+d57NrN B6cy/LQ1JYClIxzhEef1JbHzRbYWncSEqAawOHsALpYsjBOxnvsN6O1fTrJ8oCJy 8W2QmSF73rar76daWZbEx6KrBDs7QD9oJ+4MMLZuJFZEWM8mEAx0Y7dc9iMJAqfh 9hOyFRn32SVGi+QhtzepfvOlQ/7NTVRk2lBn/osK2tzox6sqMYz78eYtaHYx149p Tp/bEStmQ11wE9w8/kCaWCJG7pATADhm61/tr8ckRcZ40FELgQCJEj0i7Ly74Pv4 VvA= -----END CERTIFICATE-----Generated at Thu Nov 5 12:17:24 2026 by rpki-client