$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa File: b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa (raw, json) Hash identifier: AVZSKCwB+erSXBDBK5xWy+3cfumUI4l/pfI364SfK+Y= Subject key identifier: 3A:0A:54:ED:80:99:74:B8:E8:6B:75:F0:DC:9E:14:54:9C:C6:ED:99 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1D6ED690021D54CB5C2888363EF9A65ADDAED48D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa Signing time: Fri 16 Oct 2026 00:08:28 +0000 ROA not before: Fri 16 Oct 2026 00:08:28 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:6e:d6:90:02:1d:54:cb:5c:28:88:36:3e:f9:a6:5a:dd:ae:d4:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 16 00:08:28 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=1112926607bb74975788d2a7ae3d1bd125d820ace431559d91c76ad50e08533c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:95:a1:b5:07:21:35:08:5f:0d:7b:03:db: 17:c5:01:c1:34:b8:c1:0d:1f:9c:6a:ea:bf:0e:71: 3e:4e:7a:45:a4:2a:eb:65:7d:07:21:17:a4:3f:0d: 08:56:72:67:3b:5a:47:17:9e:70:25:eb:2e:40:65: 2f:e5:c6:6a:33:ad:92:e6:a0:01:1c:17:d8:8c:29: ee:6b:56:f0:e7:79:a5:bb:63:92:0e:e5:f2:53:2c: da:d0:eb:bf:df:c7:cd:5a:cb:f2:79:df:31:57:05: 7b:15:43:b7:6c:e3:52:7c:1c:5e:d8:3e:1f:a0:b7: 32:2c:a5:84:d3:fa:5a:71:db:c7:83:40:05:f4:79: 5b:dd:af:1a:47:9b:0d:d0:a9:41:63:99:e5:08:6d: c1:61:eb:69:6b:44:1d:6b:0e:49:e6:cf:bf:01:df: 14:0e:ee:b8:12:fa:b3:55:68:2b:fa:36:a8:84:8e: 3a:4f:78:37:fb:8b:0e:83:d2:4d:fb:f2:22:66:9b: 48:1f:e3:0c:df:d3:e4:21:19:56:cd:af:63:e0:23: 4d:ad:97:f4:5b:5f:bc:87:87:bf:36:08:d1:20:06: 5b:23:9a:fd:26:84:1f:cd:21:fa:fb:c5:8b:a6:9d: b0:49:a8:1d:10:f6:6a:61:a7:dc:2c:3f:ea:64:46: 16:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0A:54:ED:80:99:74:B8:E8:6B:75:F0:DC:9E:14:54:9C:C6:ED:99 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4840::/48 Signature Algorithm: sha256WithRSAEncryption b5:5f:d2:1c:65:95:3a:79:93:de:27:05:ef:1f:29:05:21:79: fd:a6:91:7f:b8:ff:47:07:b9:80:ed:97:4e:84:c1:26:15:cd: 42:fd:f7:cc:9b:a9:52:0d:39:71:d1:8d:a5:95:8c:de:f7:27: b7:68:d5:eb:97:b9:16:bb:e3:93:6c:50:dc:e8:02:ff:73:0e: 0a:7c:10:b9:00:15:5e:f5:9d:35:a0:9f:33:8c:3a:f5:0c:4f: e1:4b:f8:79:65:0d:fd:ca:3b:2e:b6:70:3a:77:8e:2c:bb:fa: b9:8b:1b:5c:b8:f0:3e:d7:da:0c:72:60:69:7e:e0:0a:f5:fb: d6:85:90:e8:2d:21:6a:82:0b:42:aa:44:de:a1:4c:a7:aa:ca: 43:14:8a:34:e9:b0:e3:68:7f:9f:7f:73:6e:0e:71:77:5d:6b: 8f:76:52:bd:c7:33:31:61:0c:a6:bb:e2:89:74:7e:fa:80:4f: b3:b8:77:70:51:2f:f6:ff:f0:ce:30:17:de:a4:eb:73:14:13: 3e:71:c2:73:eb:7e:fc:4e:2a:89:c5:de:42:2d:7e:71:3d:21: b9:be:1e:06:55:af:73:68:d2:82:ad:d8:1d:e0:dd:f2:b8:52: b0:3f:9d:10:ad:25:6d:8d:2f:46:d7:ff:18:b5:84:4e:cd:c6: 72:4e:00:45 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHW7WkAIdVMtcKIg2PvmmWt2u1I0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxNjAwMDgyOFoX DTI3MDExNDIzNTk1OVowejFJMEcGA1UEBRNAMTExMjkyNjYwN2JiNzQ5NzU3ODhk MmE3YWUzZDFiZDEyNWQ4MjBhY2U0MzE1NTlkOTFjNzZhZDUwZTA4NTMzYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqOVobUHITUIXw17A9sXxQHBNLjB DR+cauq/DnE+TnpFpCrrZX0HIRekPw0IVnJnO1pHF55wJesuQGUv5cZqM62S5qAB HBfYjCnua1bw53mlu2OSDuXyUyza0Ou/38fNWsvyed8xVwV7FUO3bONSfBxe2D4f oLcyLKWE0/pacdvHg0AF9Hlb3a8aR5sN0KlBY5nlCG3BYetpa0Qdaw5J5s+/Ad8U Du64EvqzVWgr+jaohI46T3g3+4sOg9JN+/IiZptIH+MM39PkIRlWza9j4CNNrZf0 W1+8h4e/NgjRIAZbI5r9JoQfzSH6+8WLpp2wSagdEPZqYafcLD/qZEYWzwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDoKVO2AmXS46Gt18NyeFFScxu2ZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IzMzRmY2EyLWIyYmMtNGRiNS05NTZjLWUzZmY4ZDk3NWI1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8khAMA0GCSqGSIb3DQEBCwUAA4IBAQC1X9IcZZU6eZPeJwXv HykFIXn9ppF/uP9HB7mA7ZdOhMEmFc1C/ffMm6lSDTlx0Y2llYze9ye3aNXrl7kW u+OTbFDc6AL/cw4KfBC5ABVe9Z01oJ8zjDr1DE/hS/h5ZQ39yjsutnA6d44su/q5 ixtcuPA+19oMcmBpfuAK9fvWhZDoLSFqggtCqkTeoUynqspDFIo06bDjaH+ff3Nu DnF3XWuPdlK9xzMxYQymu+KJdH76gE+zuHdwUS/2//DOMBfepOtzFBM+ccJz6378 TiqJxd5CLX5xPSG5vh4GVa9zaNKCrdgd4N3yuFKwP50QrSVtjS9G1/8YtYROzcZy TgBF -----END CERTIFICATE-----Generated at Thu Nov 5 10:00:19 2026 by rpki-client