$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa File: b235d168-8a46-461c-98e6-45ec802567db.roa (raw, json) Hash identifier: zFYC14b2ikrAWNCjeI/rzEoTV45qcGHFZwji+P0ckqs= Subject key identifier: 75:49:46:B9:16:07:B9:B7:1F:96:A5:3C:E9:6D:9D:42:8B:6C:DB:28 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 06020AD8FFB31422E3834780031A254F5C7565D3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa Signing time: Tue 20 Oct 2026 00:30:44 +0000 ROA not before: Tue 20 Oct 2026 00:30:44 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:02:0a:d8:ff:b3:14:22:e3:83:47:80:03:1a:25:4f:5c:75:65:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:30:44 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=9b266f3ebde639ef02dc1cae2cc0ab5e64cde37bb9f04888198124fb234d7fd6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:ca:f0:1e:eb:7c:94:9a:e0:cd:04:3d:44: 0e:3d:48:74:26:d9:d7:36:ca:6f:95:a4:da:1a:ac: d7:95:34:1d:8d:98:6e:56:fb:62:81:d1:5c:1f:3c: b2:06:72:64:cb:c5:27:28:de:80:69:16:16:a2:4d: 35:29:e9:b5:57:2a:51:a3:28:78:bb:5c:92:81:62: bc:97:7f:09:e6:5b:a1:08:3a:16:3b:78:a1:aa:47: 97:9a:3c:3a:4b:8c:79:21:ff:a2:e7:80:af:1c:ae: ba:c5:b2:61:f6:ea:31:c2:00:bf:9e:ee:8d:7c:62: 33:a8:8e:50:f3:cd:8a:b0:83:b9:5a:93:b6:d3:47: 44:2c:43:c3:c4:ba:b7:24:35:0d:74:2b:91:e8:d5: c1:da:56:63:e6:9f:f2:a0:f9:e5:a9:53:5f:50:91: b1:ec:85:d1:70:5c:ea:3e:b1:36:cb:a7:6d:0d:62: 39:18:0a:53:c0:4f:ff:a6:a4:fe:cd:9e:32:0f:26: 45:34:73:e1:0e:27:b8:5d:22:07:2f:4e:66:3a:fd: 47:20:f1:c3:9c:5e:ae:2d:53:ba:be:4f:ec:80:71: 02:ec:d7:be:ef:da:be:53:0f:21:2c:65:ef:e7:6d: 41:c7:68:8d:b5:0f:3e:64:2c:71:b0:e2:57:99:cc: 0e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:49:46:B9:16:07:B9:B7:1F:96:A5:3C:E9:6D:9D:42:8B:6C:DB:28 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:9000::/40 Signature Algorithm: sha256WithRSAEncryption a2:2b:54:eb:fe:0b:5a:f0:aa:c6:f6:d5:cf:69:45:1a:d5:51: 4c:06:03:21:f6:e0:3d:fc:f6:f7:55:89:5b:0d:5d:de:54:4b: e3:27:54:ed:ee:e0:fa:30:59:d6:bf:78:cb:08:18:61:e7:49: f8:42:7a:ed:2f:21:d7:68:1f:0c:13:c8:db:62:a3:0e:22:d4: d0:0f:9e:25:a6:4d:42:92:04:6f:39:01:70:a4:c4:42:b6:f6: 17:35:d4:c8:36:d4:20:25:09:2f:5a:db:80:f4:70:46:e0:9b: cd:bc:27:f0:ec:a1:b6:b1:26:be:9f:2d:49:17:d6:07:d0:a4: f6:85:56:d1:9e:0e:7f:a1:88:68:e0:ab:72:1f:26:46:24:c0: 90:c3:08:db:c0:81:c2:67:e3:5e:19:a5:e1:3a:fd:d8:02:ae: b5:28:f1:a7:17:a5:91:84:23:49:86:dd:9e:ff:1c:59:91:55: b3:fd:54:89:c8:63:f7:bf:7f:4d:fc:86:64:53:a8:3c:ce:7d: b7:25:b3:80:fa:d9:a5:4e:82:52:0f:36:03:a8:66:fd:c3:2c: 71:9e:95:0f:f8:bd:01:e8:d6:ef:74:66:72:61:2b:ae:ef:bd: d0:60:1c:29:60:5c:55:f5:4b:82:fa:f5:0c:41:4f:6a:09:e3: d4:20:67:5a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBgIK2P+zFCLjg0eAAxolT1x1ZdMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMzA0NFoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAOWIyNjZmM2ViZGU2MzllZjAyZGMx Y2FlMmNjMGFiNWU2NGNkZTM3YmI5ZjA0ODg4MTk4MTI0ZmIyMzRkN2ZkNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBXK8B7rfJSa4M0EPUQOPUh0JtnX NspvlaTaGqzXlTQdjZhuVvtigdFcHzyyBnJky8UnKN6AaRYWok01Kem1VypRoyh4 u1ySgWK8l38J5luhCDoWO3ihqkeXmjw6S4x5If+i54CvHK66xbJh9uoxwgC/nu6N fGIzqI5Q882KsIO5WpO200dELEPDxLq3JDUNdCuR6NXB2lZj5p/yoPnlqVNfUJGx 7IXRcFzqPrE2y6dtDWI5GApTwE//pqT+zZ4yDyZFNHPhDie4XSIHL05mOv1HIPHD nF6uLVO6vk/sgHEC7Ne+79q+Uw8hLGXv521Bx2iNtQ8+ZCxxsOJXmcwOJQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHVJRrkWB7m3H5alPOltnUKLbNsoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IyMzVkMTY4LThhNDYtNDYxYy05OGU2LTQ1ZWM4MDI1NjdkYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8ZAwDQYJKoZIhvcNAQELBQADggEBAKIrVOv+C1rwqsb21c9p RRrVUUwGAyH24D389vdViVsNXd5US+MnVO3u4PowWda/eMsIGGHnSfhCeu0vIddo HwwTyNtiow4i1NAPniWmTUKSBG85AXCkxEK29hc11Mg21CAlCS9a24D0cEbgm828 J/DsobaxJr6fLUkX1gfQpPaFVtGeDn+hiGjgq3IfJkYkwJDDCNvAgcJn414ZpeE6 /dgCrrUo8acXpZGEI0mG3Z7/HFmRVbP9VInIY/e/f038hmRTqDzOfbcls4D62aVO glIPNgOoZv3DLHGelQ/4vQHo1u90ZnJhK67vvdBgHClgXFX1S4L69QxBT2oJ49Qg Z1o= -----END CERTIFICATE-----Generated at Thu Nov 5 15:25:01 2026 by rpki-client