$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa File: b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa (raw, json) Hash identifier: ZNhkvUgSyECguz9Sp20qc/2DmpZX0QzS+ugDe+ZsYE0= Subject key identifier: D5:B5:62:98:91:F9:E9:3D:B0:2D:C6:87:79:D0:A5:08:4C:D5:B6:F6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3048F641756BE1684252DACA6A1860E87EA181B5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa Signing time: Tue 20 Oct 2026 00:20:50 +0000 ROA not before: Tue 20 Oct 2026 00:20:50 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1c:8800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:48:f6:41:75:6b:e1:68:42:52:da:ca:6a:18:60:e8:7e:a1:81:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:20:50 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=9200d96a1aea7b223495e0d203634d11415da304886d3cde6c4037dfe2ab3009, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:61:36:d3:ae:ed:8f:06:c7:ea:8f:1a:c4:48: 55:3d:44:72:a3:78:14:f0:8e:20:ba:3a:3e:84:c8: b6:bd:28:8b:a3:48:33:75:92:87:8c:c3:1f:63:e1: 16:e0:1f:9d:90:c7:f1:2c:8e:1a:90:e0:9e:86:fc: e2:5f:37:6b:f2:d5:bf:53:c6:e8:1d:e3:e1:d8:b7: 01:8c:41:74:cb:c0:f8:b2:8b:8c:85:be:d1:d3:24: 52:cf:ed:ee:96:cc:f0:cd:60:d5:b0:9e:04:8d:ff: b7:39:f6:62:d4:e7:e4:fc:6e:4d:87:02:e3:4e:09: a6:fa:a7:ce:d4:51:79:98:d9:fd:c0:37:7a:18:c4: c7:2b:83:c6:c8:78:61:00:05:7c:fa:be:ba:3a:10: 2e:d9:54:67:33:6f:ce:10:45:52:35:db:70:c9:ec: c0:c6:4a:9c:89:68:f6:79:f4:37:25:4e:84:b5:dd: 47:5c:48:be:3b:32:cd:71:42:6e:68:08:11:41:c4: 0c:b7:95:31:16:08:07:d9:00:20:d9:de:9e:91:88: 61:b3:20:81:fe:7c:07:68:fa:d2:35:a4:d7:4d:05: fb:17:a4:a2:a3:0b:fb:26:c6:c6:3f:f0:13:ac:38: 27:56:18:df:61:5a:53:51:b4:26:ed:f4:82:b2:b4: 4a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B5:62:98:91:F9:E9:3D:B0:2D:C6:87:79:D0:A5:08:4C:D5:B6:F6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1c:8800::/38 Signature Algorithm: sha256WithRSAEncryption 0e:c4:12:73:d1:67:5e:cf:24:2d:92:be:1d:7a:a3:6a:dd:92: a7:45:9f:ad:0f:c3:3e:d6:d7:67:ab:f1:e2:58:7e:2e:3c:39: f6:bc:2a:83:a6:cd:28:86:6d:08:a0:ba:39:4c:eb:2e:23:c0: f5:89:57:7e:81:4e:7c:0a:84:6e:f6:a3:90:c3:3e:de:20:a7: b7:fc:2b:2f:01:07:14:d3:1b:41:22:ef:9c:90:28:15:36:b4: df:3b:5c:92:5a:d3:bc:f1:2d:d8:8f:dc:e4:ae:ca:7c:ad:ed: 2c:9f:5e:8b:fb:08:46:60:88:13:40:b0:49:db:31:21:83:60: d3:21:c7:f8:b8:c1:0f:f2:08:09:91:80:8f:a4:e2:89:9e:ad: 48:1a:5b:57:7d:93:8c:0f:f2:6d:90:d1:42:e9:ed:53:51:66: c0:24:46:ea:fc:99:c1:5d:fa:bd:1f:c3:c6:ee:f8:28:f4:a6: 07:7a:e6:5c:be:dd:62:be:80:5a:2c:b0:23:3e:0a:03:45:3b: c8:87:8f:39:0d:ab:00:8e:49:79:5b:db:e4:a2:3e:85:ad:a9: c2:77:18:e1:8c:7c:78:f1:95:f0:40:ab:a0:92:c9:69:64:32: 83:d7:06:c5:d4:f3:32:68:0d:0e:e3:0c:93:c8:1a:d2:c3:b3: 7a:66:26:37 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMEj2QXVr4WhCUtrKahhg6H6hgbUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMjA1MFoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAOTIwMGQ5NmExYWVhN2IyMjM0OTVl MGQyMDM2MzRkMTE0MTVkYTMwNDg4NmQzY2RlNmM0MDM3ZGZlMmFiMzAwOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02E2067tjwbH6o8axEhVPURyo3gU 8I4gujo+hMi2vSiLo0gzdZKHjMMfY+EW4B+dkMfxLI4akOCehvziXzdr8tW/U8bo HePh2LcBjEF0y8D4souMhb7R0yRSz+3ulszwzWDVsJ4Ejf+3OfZi1Ofk/G5NhwLj Tgmm+qfO1FF5mNn9wDd6GMTHK4PGyHhhAAV8+r66OhAu2VRnM2/OEEVSNdtwyezA xkqciWj2efQ3JU6Etd1HXEi+OzLNcUJuaAgRQcQMt5UxFggH2QAg2d6ekYhhsyCB /nwHaPrSNaTXTQX7F6Siowv7JsbGP/ATrDgnVhjfYVpTUbQm7fSCsrRK+wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNW1YpiR+ek9sC3Gh3nQpQhM1bb2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3YzY0NjhlLTBiNzktNDJjYy05OWY0LWM2ODE2YzZhMWY5NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHIgwDQYJKoZIhvcNAQELBQADggEBAA7EEnPRZ17PJC2Svh16 o2rdkqdFn60Pwz7W12er8eJYfi48Ofa8KoOmzSiGbQigujlM6y4jwPWJV36BTnwK hG72o5DDPt4gp7f8Ky8BBxTTG0Ei75yQKBU2tN87XJJa07zxLdiP3OSuynyt7Syf Xov7CEZgiBNAsEnbMSGDYNMhx/i4wQ/yCAmRgI+k4omerUgaW1d9k4wP8m2Q0ULp 7VNRZsAkRur8mcFd+r0fw8bu+Cj0pgd65ly+3WK+gFossCM+CgNFO8iHjzkNqwCO SXlb2+SiPoWtqcJ3GOGMfHjxlfBAq6CSyWlkMoPXBsXU8zJoDQ7jDJPIGtLDs3pm Jjc= -----END CERTIFICATE-----Generated at Mon Nov 9 06:57:31 2026 by rpki-client