$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b990f5b3-241d-4db7-8197-5e39d9181be8.roa File: b990f5b3-241d-4db7-8197-5e39d9181be8.roa (raw, json) Hash identifier: 67IQ1VL1euJuWy40b3lweiRrh8Y3hcvcO++cX5SafUI= Subject key identifier: EB:84:C7:06:9C:07:94:B5:9A:96:59:43:7A:A4:CE:F2:30:8E:02:EE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 563DAA617B3B94A00C6132864BFBD79C3203297C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b990f5b3-241d-4db7-8197-5e39d9181be8.roa Signing time: Sun 18 Oct 2026 00:10:57 +0000 ROA not before: Sun 18 Oct 2026 00:10:57 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:3d:aa:61:7b:3b:94:a0:0c:61:32:86:4b:fb:d7:9c:32:03:29:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:10:57 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=b35b7541f788ae5313aa3d7cca2564e464c9d84cbcf771223ac26830d5ed939a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9c:f6:6d:ea:d3:d7:fc:c1:a1:a4:43:92:f0: 01:c6:7a:ee:fb:33:80:18:2f:8c:aa:c6:7e:b1:91: cc:b3:c8:bb:3c:3b:b3:d1:63:33:44:6f:c8:f2:09: 16:6c:b1:76:11:8a:4e:7e:2a:9a:e0:d1:7b:13:59: 05:84:6d:04:bc:cf:b6:ac:ed:6f:d0:41:ba:bf:4e: 77:07:46:ec:e5:09:9c:2f:fc:98:84:15:5e:5c:3d: b9:e8:7d:c5:06:2b:06:30:10:68:63:ca:2c:c9:23: 9a:70:96:01:3f:65:d4:2d:94:84:c7:d7:fc:3f:a5: 87:e6:1c:af:4a:aa:2c:fd:d8:f1:4b:68:60:9a:22: 8e:a6:b5:18:4e:fc:e7:ea:08:ac:a4:a4:76:05:05: af:d3:de:6b:2b:34:b8:cd:50:a6:cc:37:79:9f:c1: a6:44:da:b0:7c:d5:64:77:24:d1:31:49:22:5d:e1: b7:c7:55:37:78:4a:38:9d:7f:c5:a6:e8:a9:fa:fc: 5b:90:75:da:72:e0:4b:d9:b1:63:92:d4:e2:1b:22: 14:70:a8:6b:df:df:e4:78:84:08:a4:1d:27:42:2c: e2:13:fa:44:44:81:c1:bb:2c:a3:ac:04:b1:7f:a6: 1e:f7:1a:8d:77:81:56:c4:86:83:82:f1:05:e0:70: db:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:84:C7:06:9C:07:94:B5:9A:96:59:43:7A:A4:CE:F2:30:8E:02:EE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b990f5b3-241d-4db7-8197-5e39d9181be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:2840::/48 Signature Algorithm: sha256WithRSAEncryption b3:79:a2:cf:b6:df:d3:d1:58:46:cc:7e:6a:40:fc:fc:ac:5a: 0c:d9:8e:d9:bf:61:89:30:70:fe:24:a7:cb:6d:a6:5e:b4:ac: 29:79:6a:74:64:8b:0d:47:ed:66:a8:3f:b6:5f:bc:c3:1a:aa: 88:a6:41:30:f4:1f:7d:b6:12:cd:42:17:68:fc:9f:f4:70:32: 03:57:cb:c3:02:c2:09:34:d1:58:95:52:25:7a:db:1e:3d:55: d1:15:7d:60:12:a8:79:a1:20:af:10:fe:32:27:ad:aa:d0:94: 2a:6b:42:ee:3f:63:5e:78:4b:c8:81:26:3c:64:be:dc:81:0f: 7e:1e:f4:f1:15:9b:30:d0:fb:c9:11:4c:b0:9a:97:8a:f8:60: 7d:1d:c6:34:b2:e2:9c:e3:99:48:5e:38:46:96:9a:9a:32:e5: 3e:3e:7b:8d:68:86:9e:f1:f4:e8:48:95:7f:e4:e1:21:89:bd: 71:53:28:84:d5:85:4c:ba:40:b9:c4:f9:80:55:ac:e6:15:8f: cd:00:76:d8:60:b6:38:b9:2f:61:d3:1a:43:d0:2e:09:71:be: bb:7f:d7:c5:09:32:aa:95:e2:c0:f0:74:32:91:44:43:90:df: 02:59:d6:07:d7:5a:bc:53:f2:00:49:c1:43:18:5e:51:27:3b: f4:49:1b:dd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVj2qYXs7lKAMYTKGS/vXnDIDKXwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxODAwMTA1N1oX DTI3MDExNjIzNTk1OVowejFJMEcGA1UEBRNAYjM1Yjc1NDFmNzg4YWU1MzEzYWEz ZDdjY2EyNTY0ZTQ2NGM5ZDg0Y2JjZjc3MTIyM2FjMjY4MzBkNWVkOTM5YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5z2berT1/zBoaRDkvABxnru+zOA GC+MqsZ+sZHMs8i7PDuz0WMzRG/I8gkWbLF2EYpOfiqa4NF7E1kFhG0EvM+2rO1v 0EG6v053B0bs5QmcL/yYhBVeXD256H3FBisGMBBoY8osySOacJYBP2XULZSEx9f8 P6WH5hyvSqos/djxS2hgmiKOprUYTvzn6gispKR2BQWv095rKzS4zVCmzDd5n8Gm RNqwfNVkdyTRMUkiXeG3x1U3eEo4nX/Fpuip+vxbkHXacuBL2bFjktTiGyIUcKhr 39/keIQIpB0nQiziE/pERIHBuyyjrASxf6Ye9xqNd4FWxIaDgvEF4HDbQQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOuExwacB5S1mpZZQ3qkzvIwjgLuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I5OTBmNWIzLTI0MWQtNGRiNy04MTk3LTVlMzlkOTE4MWJlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8ihAMA0GCSqGSIb3DQEBCwUAA4IBAQCzeaLPtt/T0VhGzH5q QPz8rFoM2Y7Zv2GJMHD+JKfLbaZetKwpeWp0ZIsNR+1mqD+2X7zDGqqIpkEw9B99 thLNQhdo/J/0cDIDV8vDAsIJNNFYlVIletsePVXRFX1gEqh5oSCvEP4yJ62q0JQq a0LuP2NeeEvIgSY8ZL7cgQ9+HvTxFZsw0PvJEUywmpeK+GB9HcY0suKc45lIXjhG lpqaMuU+PnuNaIae8fToSJV/5OEhib1xUyiE1YVMukC5xPmAVazmFY/NAHbYYLY4 uS9h0xpD0C4Jcb67f9fFCTKqleLA8HQykURDkN8CWdYH11q8U/IAScFDGF5RJzv0 SRvd -----END CERTIFICATE-----Generated at Thu Nov 5 05:15:32 2026 by rpki-client