$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a75b627d-5e8e-43ef-b339-c430dc1dc703.roa File: a75b627d-5e8e-43ef-b339-c430dc1dc703.roa (raw, json) Hash identifier: i3xHDsW3rcfOWD8qM2kI+T8c6wbo8lmVkJ+oZWiP0xM= Subject key identifier: 14:94:81:9B:58:CD:E1:7A:AE:94:1C:A2:00:3C:81:E3:BE:2B:25:26 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1C540C6F9C359528A02F7790C5DC109945F5F238 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a75b627d-5e8e-43ef-b339-c430dc1dc703.roa Signing time: Mon 26 Oct 2026 00:02:36 +0000 ROA not before: Mon 26 Oct 2026 00:02:36 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:54:0c:6f:9c:35:95:28:a0:2f:77:90:c5:dc:10:99:45:f5:f2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 26 00:02:36 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=fc81af7624b0f2eed8786c833e4826eba2936fe46e0090cc876e9a23c094e9c2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:67:a6:67:c8:95:16:57:1f:0f:c3:45:a4: 54:6f:12:6b:79:40:94:13:53:e1:1a:3e:01:56:29: 5b:01:9d:66:2a:5b:5f:d0:3c:6c:16:77:f1:df:5c: f5:be:44:11:5f:a0:2b:c4:71:d4:d9:3a:e3:69:f6: ea:e6:59:0e:cc:f3:54:f1:5a:fb:22:0c:c7:93:cd: b4:9e:56:09:da:87:5f:bc:1f:51:0c:20:7d:28:8a: 94:db:f2:82:1b:b0:80:7b:fc:45:e6:be:49:8b:bf: 10:b2:4a:cb:65:7d:55:89:1c:11:87:4b:93:2b:46: 60:5b:58:de:a9:f5:75:85:de:25:47:35:0b:86:85: 06:63:ce:ab:f9:6f:a2:1f:11:ee:cb:da:77:b5:b5: 74:8d:ce:3c:17:17:22:f2:ac:1b:8a:d2:d0:9e:b2: 6f:58:3a:c6:41:7c:43:57:f2:96:9b:a3:b9:3c:d8: 47:2e:61:38:e4:f3:23:4b:ee:f4:1b:96:14:5c:83: 15:67:30:97:aa:3b:8e:c7:3c:b0:e7:10:52:f2:24: 45:12:cc:d1:3c:65:e9:05:a6:96:4f:29:72:58:bd: f7:ca:39:28:71:bc:57:44:98:fe:24:3b:0c:61:48: 73:81:04:7e:6b:bd:6c:ac:df:06:93:ad:d4:d7:fa: e1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:94:81:9B:58:CD:E1:7A:AE:94:1C:A2:00:3C:81:E3:BE:2B:25:26 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a75b627d-5e8e-43ef-b339-c430dc1dc703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:800::/40 Signature Algorithm: sha256WithRSAEncryption 39:0d:b0:84:4f:de:d0:02:ee:04:28:49:c2:fb:24:16:ed:25: 95:d2:bf:76:c2:d4:e1:0f:d3:eb:cb:71:14:f3:ac:51:d3:22: c2:2d:de:f0:29:2d:dc:6c:27:c7:83:75:b5:e5:df:a9:25:56: 56:ed:f8:d7:a0:80:d5:52:05:74:7c:26:9e:e6:b1:a5:b8:96: d8:93:81:d6:c2:07:e5:a9:68:d7:b7:66:78:fb:ea:a7:13:74: f2:95:d6:6c:37:4b:05:42:a1:90:73:d0:88:4c:c5:ed:a7:38: d0:cb:4b:bb:72:3d:26:1e:a4:4f:6f:60:e6:6b:67:b6:25:f1: 4a:62:46:9f:a8:f9:db:d8:8e:a6:ba:47:aa:93:8d:68:86:77: 3e:77:a8:04:1e:80:71:05:87:81:f6:a8:e3:df:44:80:af:28: 7c:19:5b:fd:fd:d9:df:b6:30:23:cc:3c:71:4d:05:86:dd:93: 4d:90:41:9d:7a:c3:fe:e3:41:dd:a3:cd:c0:f1:30:d2:23:c8: 35:12:a7:ec:a5:0b:0c:1f:09:d0:60:c5:8c:27:1b:17:b4:09: 94:ae:0e:f9:14:3a:bd:3d:4c:28:1c:74:86:69:ab:45:af:d7: 38:6b:b4:61:50:f3:46:09:d8:72:37:2c:bb:78:af:75:82:85: 9f:a1:63:f3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHFQMb5w1lSigL3eQxdwQmUX18jgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyNjAwMDIzNloX DTI3MDEyNDIzNTk1OVowejFJMEcGA1UEBRNAZmM4MWFmNzYyNGIwZjJlZWQ4Nzg2 YzgzM2U0ODI2ZWJhMjkzNmZlNDZlMDA5MGNjODc2ZTlhMjNjMDk0ZTljMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr49npmfIlRZXHw/DRaRUbxJreUCU E1PhGj4BVilbAZ1mKltf0DxsFnfx31z1vkQRX6ArxHHU2Trjafbq5lkOzPNU8Vr7 IgzHk820nlYJ2odfvB9RDCB9KIqU2/KCG7CAe/xF5r5Ji78QskrLZX1ViRwRh0uT K0ZgW1jeqfV1hd4lRzULhoUGY86r+W+iHxHuy9p3tbV0jc48Fxci8qwbitLQnrJv WDrGQXxDV/KWm6O5PNhHLmE45PMjS+70G5YUXIMVZzCXqjuOxzyw5xBS8iRFEszR PGXpBaaWTylyWL33yjkocbxXRJj+JDsMYUhzgQR+a71srN8Gk63U1/rhVwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBSUgZtYzeF6rpQcogA8geO+KyUmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E3NWI2MjdkLTVlOGUtNDNlZi1iMzM5LWM0MzBkYzFkYzcwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7wgwDQYJKoZIhvcNAQELBQADggEBADkNsIRP3tAC7gQoScL7 JBbtJZXSv3bC1OEP0+vLcRTzrFHTIsIt3vApLdxsJ8eDdbXl36klVlbt+NeggNVS BXR8Jp7msaW4ltiTgdbCB+WpaNe3Znj76qcTdPKV1mw3SwVCoZBz0IhMxe2nONDL S7tyPSYepE9vYOZrZ7Yl8UpiRp+o+dvYjqa6R6qTjWiGdz53qAQegHEFh4H2qOPf RICvKHwZW/392d+2MCPMPHFNBYbdk02QQZ16w/7jQd2jzcDxMNIjyDUSp+ylCwwf CdBgxYwnGxe0CZSuDvkUOr09TCgcdIZpq0Wv1zhrtGFQ80YJ2HI3LLt4r3WChZ+h Y/M= -----END CERTIFICATE-----Generated at Sun Nov 8 18:04:32 2026 by rpki-client