$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ecee49-7d64-49c8-b1d0-58cc2a1f16bd.roa File: a7ecee49-7d64-49c8-b1d0-58cc2a1f16bd.roa (raw, json) Hash identifier: dGaiHeLpscGbdUC5PpYwEt727KlS6l3r4WIqmIRGnC8= Subject key identifier: E4:B1:23:84:9B:6B:95:93:CC:A2:C5:5B:A9:6D:A2:27:2E:93:41:34 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3084B31256809E697EBFFF68C3A706B7CED5A2E6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ecee49-7d64-49c8-b1d0-58cc2a1f16bd.roa Signing time: Sun 18 Oct 2026 00:09:14 +0000 ROA not before: Sun 18 Oct 2026 00:09:14 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:84:b3:12:56:80:9e:69:7e:bf:ff:68:c3:a7:06:b7:ce:d5:a2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:09:14 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=a372eea20db0ef213ea8712d02f908d65a220caad2df846b8998c2da782e2fa0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:97:03:b8:13:f1:e6:cf:89:f7:47:23:5c: c9:42:b6:95:74:99:4a:a1:68:8e:6c:ce:14:70:c2: 6b:fe:c2:67:5e:d4:d3:68:7f:7f:ed:48:9f:37:38: f5:45:b2:df:f6:96:fe:d0:75:bd:a6:d6:3a:dd:16: b2:f1:d1:43:e9:3c:2b:75:db:00:01:b7:d6:15:40: 89:b1:1c:38:d2:10:7c:ad:2f:34:58:47:99:81:b2: d4:68:9d:dc:32:96:12:ab:27:26:48:9b:7b:ff:8e: a6:14:69:4e:f6:76:c2:1c:79:52:5d:68:5a:e0:7c: 40:96:3b:31:05:4c:5e:63:bd:f9:08:94:09:db:83: 74:d9:d8:6c:72:ee:76:1b:13:ee:0c:93:44:ed:50: 6f:12:94:50:87:ab:77:62:70:37:46:f9:38:a7:bd: 90:b2:72:e1:fb:14:85:d2:7c:c9:a0:77:e5:12:69: f3:63:41:48:a5:03:c7:c6:02:b2:96:4e:32:27:47: d3:c4:1c:b9:15:fd:09:4a:b3:49:d0:1f:97:11:80: 77:2c:5d:30:c4:f2:c6:d1:89:c8:31:9d:5f:e7:08: 23:39:fc:0a:0f:e3:03:49:e0:75:b9:62:e9:4a:48: 60:2e:3b:8e:b9:9f:51:ff:61:9c:ce:73:17:4d:ce: c9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B1:23:84:9B:6B:95:93:CC:A2:C5:5B:A9:6D:A2:27:2E:93:41:34 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ecee49-7d64-49c8-b1d0-58cc2a1f16bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4000::/40 Signature Algorithm: sha256WithRSAEncryption 95:6d:d8:61:0d:cd:d2:8d:23:b5:60:c8:89:1b:a0:54:27:08: 60:17:d2:6a:9d:33:b4:9e:0a:fb:68:fb:6a:06:17:af:fb:4f: 97:6a:7a:7d:1a:58:e1:3c:4e:de:47:37:ed:1b:6c:bc:2a:d4: 1e:17:57:a0:be:2f:85:39:d7:d6:d8:76:a2:4a:06:0e:bf:bb: e5:80:c4:d7:d0:a2:4d:fe:d4:ef:8c:76:0d:ee:21:b6:cc:cd: f6:32:19:a0:8a:32:d6:49:ad:d5:c9:0a:cc:0c:ea:b2:a0:89: c4:03:8d:28:77:e8:0f:dd:2a:d6:fe:5f:31:19:81:26:0e:5b: ff:d7:5a:a0:dc:00:2b:71:17:17:04:4f:00:00:d9:4f:50:ee: 83:8e:ba:ca:a7:91:96:d8:7b:d4:47:0e:0d:46:d7:0b:8c:d9: b5:70:a7:18:af:29:39:18:f3:b7:82:6b:ca:7a:b0:db:72:7c: 18:58:cf:1b:04:5c:c3:00:17:be:5d:e9:7d:a0:5f:48:a1:d2: 97:7c:65:fb:6a:bb:6d:47:9f:79:14:4b:dc:c5:50:df:1b:b5: 02:5d:7a:12:63:a4:7f:0b:5d:34:69:43:56:58:11:4c:d3:a8: 32:4f:b0:e5:65:ca:ab:cf:40:e5:e8:64:39:55:de:ba:a6:c1: 5c:11:81:84 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMISzElaAnml+v/9ow6cGt87VouYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxODAwMDkxNFoX DTI3MDExNjIzNTk1OVowejFJMEcGA1UEBRNAYTM3MmVlYTIwZGIwZWYyMTNlYTg3 MTJkMDJmOTA4ZDY1YTIyMGNhYWQyZGY4NDZiODk5OGMyZGE3ODJlMmZhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCaXA7gT8ebPifdHI1zJQraVdJlK oWiObM4UcMJr/sJnXtTTaH9/7UifNzj1RbLf9pb+0HW9ptY63Ray8dFD6TwrddsA AbfWFUCJsRw40hB8rS80WEeZgbLUaJ3cMpYSqycmSJt7/46mFGlO9nbCHHlSXWha 4HxAljsxBUxeY735CJQJ24N02dhscu52GxPuDJNE7VBvEpRQh6t3YnA3Rvk4p72Q snLh+xSF0nzJoHflEmnzY0FIpQPHxgKylk4yJ0fTxBy5Ff0JSrNJ0B+XEYB3LF0w xPLG0YnIMZ1f5wgjOfwKD+MDSeB1uWLpSkhgLjuOuZ9R/2GcznMXTc7JDwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOSxI4Sba5WTzKLFW6ltoicuk0E0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E3ZWNlZTQ5LTdkNjQtNDljOC1iMWQwLTU4Y2MyYTFmMTZiZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8kAwDQYJKoZIhvcNAQELBQADggEBAJVt2GENzdKNI7VgyIkb oFQnCGAX0mqdM7SeCvto+2oGF6/7T5dqen0aWOE8Tt5HN+0bbLwq1B4XV6C+L4U5 19bYdqJKBg6/u+WAxNfQok3+1O+Mdg3uIbbMzfYyGaCKMtZJrdXJCswM6rKgicQD jSh36A/dKtb+XzEZgSYOW//XWqDcACtxFxcETwAA2U9Q7oOOusqnkZbYe9RHDg1G 1wuM2bVwpxivKTkY87eCa8p6sNtyfBhYzxsEXMMAF75d6X2gX0ih0pd8Zftqu21H n3kUS9zFUN8btQJdehJjpH8LXTRpQ1ZYEUzTqDJPsOVlyqvPQOXoZDlV3rqmwVwR gYQ= -----END CERTIFICATE-----Generated at Sun Nov 8 05:19:31 2026 by rpki-client