$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa File: b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa (raw, json) Hash identifier: Ni5wPh4RdgYCncPQCd9a2o+RZu45cSc7vGovDvZTcQ4= Subject key identifier: EE:11:44:3B:CC:83:F5:36:97:F4:0D:E5:69:8A:F8:1A:72:F2:59:83 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 75F9D6A9A6D096F2C110FA9AE0BFAEF4FA199AED Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa Signing time: Sun 18 Oct 2026 00:08:43 +0000 ROA not before: Sun 18 Oct 2026 00:08:43 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f9:d6:a9:a6:d0:96:f2:c1:10:fa:9a:e0:bf:ae:f4:fa:19:9a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:08:43 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=1f0a826803c01d3528769dbf12ad835889f81a80c40c8e13daa59b63c0af4aff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:9b:d2:76:e2:85:97:61:e7:20:19:b9:fd: 99:5a:76:be:25:be:ff:c5:06:91:e2:e5:dc:c4:5f: 48:6f:8c:87:92:08:31:ab:91:4f:db:92:de:3c:4d: 87:8f:4c:0a:68:55:b2:34:82:82:7a:a8:ea:08:2a: a5:cd:9b:a6:f0:23:b2:de:ff:ca:0a:64:1a:0b:6b: 2f:aa:4e:1d:de:59:4f:7a:89:3b:55:cf:35:bf:6b: a4:49:2c:63:bc:b7:6a:f3:79:47:11:fc:f4:bc:83: 78:94:ba:db:23:f7:3e:aa:33:31:ac:83:4d:17:08: 45:ef:b5:71:e5:87:72:23:3f:75:d7:e1:0b:c4:7e: 93:57:52:57:e0:8d:27:f7:fa:0c:14:48:7c:5a:b3: bb:e8:5c:49:8c:f9:f3:85:a4:28:7a:74:c7:78:e5: 16:f2:08:77:a2:91:dc:5f:f1:ee:20:6f:7a:90:c6: 70:c0:1a:be:07:09:e7:bf:11:9a:5b:5c:db:63:fc: cd:27:51:37:d9:b7:ae:06:fe:fa:1a:ad:cd:8c:a3: dc:17:29:e6:44:8e:74:54:2a:98:a1:69:c2:55:97: ca:73:4a:b0:74:7b:f0:f0:ca:a0:d7:62:30:14:5c: 75:12:eb:fd:aa:16:6e:58:23:20:15:62:5f:5f:e6: 95:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:11:44:3B:CC:83:F5:36:97:F4:0D:E5:69:8A:F8:1A:72:F2:59:83 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption 03:c6:a7:7e:5a:d7:23:f3:dd:c0:a5:23:10:92:46:d2:f5:15: 38:36:9c:45:60:43:70:60:ea:97:d0:2c:b8:39:53:ef:39:a8: 1a:ca:e4:88:bb:c4:b0:92:6e:94:23:fa:b6:32:9c:72:af:30: fc:9c:85:43:a1:0f:9a:3c:59:65:91:2f:08:4f:b5:d7:73:54: b4:85:02:d7:99:11:11:d7:9a:98:4f:9a:09:25:70:36:ac:b6: ee:1f:b0:54:7a:57:eb:58:35:78:9c:5e:85:dd:39:d6:90:52: 00:d1:0a:99:70:e0:9e:1c:e9:e5:f7:a0:5b:c7:16:17:95:99: d4:0a:69:66:3f:47:8e:c2:44:b2:a2:d2:76:1b:32:6e:e2:01: 1a:46:e2:08:37:79:6a:a9:a1:69:d2:22:18:b8:94:2c:1e:10: 11:5e:9e:dc:f0:58:3c:05:c3:c8:ea:59:64:92:ff:35:2e:5a: 07:57:a3:ff:3e:e9:aa:44:04:b1:c7:5d:89:8c:5a:dc:52:24: cc:7b:46:d3:b2:07:53:1a:09:95:da:e6:3f:59:45:84:0b:ad: c1:c0:06:2c:b6:44:6a:e5:a4:6c:33:c9:bd:e9:f1:ff:8e:35: 68:81:3e:1d:02:01:0e:8f:31:8d:d6:4b:0f:5b:9b:0a:b1:04: 81:85:16:96 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdfnWqabQlvLBEPqa4L+u9PoZmu0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxODAwMDg0M1oX DTI3MDExNjIzNTk1OVowejFJMEcGA1UEBRNAMWYwYTgyNjgwM2MwMWQzNTI4NzY5 ZGJmMTJhZDgzNTg4OWY4MWE4MGM0MGM4ZTEzZGFhNTliNjNjMGFmNGFmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooab0nbihZdh5yAZuf2ZWna+Jb7/ xQaR4uXcxF9Ib4yHkggxq5FP25LePE2Hj0wKaFWyNIKCeqjqCCqlzZum8COy3v/K CmQaC2svqk4d3llPeok7Vc81v2ukSSxjvLdq83lHEfz0vIN4lLrbI/c+qjMxrINN FwhF77Vx5YdyIz911+ELxH6TV1JX4I0n9/oMFEh8WrO76FxJjPnzhaQoenTHeOUW 8gh3opHcX/HuIG96kMZwwBq+BwnnvxGaW1zbY/zNJ1E32beuBv76Gq3NjKPcFynm RI50VCqYoWnCVZfKc0qwdHvw8Mqg12IwFFx1Euv9qhZuWCMgFWJfX+aVMQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFO4RRDvMg/U2l/QN5WmK+Bpy8lmDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3OTI3MjIwLTY1ZjYtNDY3Mi05YmM5LWFjZjhjZmU4YWRmNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAPDAMA0GCSqGSIb3DQEBCwUAA4IBAQADxqd+Wtcj893ApSMQ kkbS9RU4NpxFYENwYOqX0Cy4OVPvOagayuSIu8Swkm6UI/q2MpxyrzD8nIVDoQ+a PFllkS8IT7XXc1S0hQLXmRER15qYT5oJJXA2rLbuH7BUelfrWDV4nF6F3TnWkFIA 0QqZcOCeHOnl96BbxxYXlZnUCmlmP0eOwkSyotJ2GzJu4gEaRuIIN3lqqaFp0iIY uJQsHhARXp7c8Fg8BcPI6llkkv81LloHV6P/PumqRASxx12JjFrcUiTMe0bTsgdT GgmV2uY/WUWEC63BwAYstkRq5aRsM8m96fH/jjVogT4dAgEOjzGN1ksPW5sKsQSB hRaW -----END CERTIFICATE-----Generated at Thu Nov 5 07:07:24 2026 by rpki-client