$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bc579c9d-b7b6-4596-8243-75fe6e013edd.roa File: bc579c9d-b7b6-4596-8243-75fe6e013edd.roa (raw, json) Hash identifier: EP8cxHzh+49SnKlqaZ5hCO0WffvAjcZgEpDfWPFrpT0= Subject key identifier: 24:B5:85:E7:DD:3E:68:DC:69:FC:87:B3:C0:56:F4:9D:AC:D4:1C:92 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 757EAF2A8BAE03BF78DC45559F135ABC526020E6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bc579c9d-b7b6-4596-8243-75fe6e013edd.roa Signing time: Wed 09 Sep 2026 15:54:39 +0000 ROA not before: Wed 09 Sep 2026 15:54:39 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae7:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7e:af:2a:8b:ae:03:bf:78:dc:45:55:9f:13:5a:bc:52:60:20:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 9 15:54:39 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=d1d3c6f8081a4658156632d70cab848793efd60c96ab677eb169abaaff4ab3c8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:3e:cb:2d:28:b5:53:25:82:e1:f1:5b:8d: 43:bc:ac:17:7b:97:ff:e8:fb:85:40:08:32:90:d1: 3e:9d:0e:e3:b3:4d:b7:11:ba:2e:e7:91:a2:ba:fc: 5a:0b:48:f1:99:50:2b:dc:67:e1:c3:2c:03:22:db: 24:e7:19:c6:80:1c:98:19:d0:af:89:1b:8b:a7:09: d2:5d:c4:b7:77:df:4c:95:b9:25:20:36:87:c7:fa: e0:9d:c8:8c:f7:7d:c0:31:1c:1c:fb:92:4d:05:8b: b0:03:f2:b9:e9:f4:e3:5e:44:e2:d1:28:b5:e7:fc: 35:be:cb:9c:67:c9:f1:b5:e0:16:7e:32:f6:cd:42: b5:65:64:94:3e:5a:bf:d7:49:37:42:de:94:d8:36: 42:ab:7f:42:00:ba:32:cf:1b:7c:bc:cf:fe:e4:05: 58:9f:84:b5:70:e1:15:be:ba:c0:5f:00:19:f2:29: 25:15:e2:2d:93:92:dd:a9:08:68:48:f5:40:86:ae: 1e:91:59:36:16:01:2a:58:f6:8a:1b:a6:42:98:c4: f3:15:ce:b4:f6:74:8f:0e:50:87:70:d4:e7:1c:e8: e6:73:18:d2:a6:06:dc:e8:40:54:3c:1a:c9:d7:b3: 32:97:fb:3f:10:f1:0b:5b:dd:18:db:32:25:6c:3c: 2b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B5:85:E7:DD:3E:68:DC:69:FC:87:B3:C0:56:F4:9D:AC:D4:1C:92 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bc579c9d-b7b6-4596-8243-75fe6e013edd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae7:b000::/40 Signature Algorithm: sha256WithRSAEncryption 67:98:64:56:b3:7e:da:56:b4:8c:2b:f5:60:db:8b:0a:18:fd: 2d:1b:b4:cf:9c:50:06:0b:5d:72:40:5d:ad:17:40:a4:ea:b2: 17:da:28:f1:89:1f:54:c3:83:93:84:63:20:6a:cd:1b:31:b9: 07:5c:59:32:f8:96:8d:d3:14:da:8b:43:0e:40:5a:b8:67:ba: 1d:1b:54:a0:72:cf:5c:ad:03:35:d6:74:9b:eb:ef:22:8d:f4: ce:49:d5:86:84:e4:c4:80:4f:df:54:ef:40:0a:11:69:6a:63: 9c:78:63:0d:a6:95:9c:59:67:3b:6f:0e:17:21:0a:a7:12:9b: 3a:f1:73:45:96:cd:15:25:53:cd:56:55:64:c9:a4:e9:61:a4: d3:dc:94:38:5b:22:1f:08:c1:10:3f:37:76:1c:ce:a5:ee:d9: 79:cb:84:e6:5f:9b:7a:99:b1:19:2b:ae:6e:33:a7:a1:d4:e6: e4:df:67:fe:7c:20:d2:bc:3e:95:7e:07:66:01:0a:6a:bb:16: 06:c4:c7:e5:95:48:06:18:ee:0c:ca:29:50:8a:79:7e:b9:93: d9:97:dd:31:ce:54:9a:b5:12:a4:dd:6b:3d:80:3b:f7:15:8c: 09:54:7c:36:6f:61:be:7a:f3:7c:b0:51:d6:79:d7:f4:90:d2: 90:a1:3b:2f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdX6vKouuA7943EVVnxNavFJgIOYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkwOTE1NTQzOVoX DTI2MTIwODIzNTk1OVowejFJMEcGA1UEBRNAZDFkM2M2ZjgwODFhNDY1ODE1NjYz MmQ3MGNhYjg0ODc5M2VmZDYwYzk2YWI2NzdlYjE2OWFiYWFmZjRhYjNjODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSE+yy0otVMlguHxW41DvKwXe5f/ 6PuFQAgykNE+nQ7js023Ebou55GiuvxaC0jxmVAr3GfhwywDItsk5xnGgByYGdCv iRuLpwnSXcS3d99MlbklIDaHx/rgnciM933AMRwc+5JNBYuwA/K56fTjXkTi0Si1 5/w1vsucZ8nxteAWfjL2zUK1ZWSUPlq/10k3Qt6U2DZCq39CALoyzxt8vM/+5AVY n4S1cOEVvrrAXwAZ8iklFeItk5LdqQhoSPVAhq4ekVk2FgEqWPaKG6ZCmMTzFc60 9nSPDlCHcNTnHOjmcxjSpgbc6EBUPBrJ17Myl/s/EPELW90Y2zIlbDwr4QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCS1hefdPmjcafyHs8BW9J2s1BySMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JjNTc5YzlkLWI3YjYtNDU5Ni04MjQzLTc1ZmU2ZTAxM2VkZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba57AwDQYJKoZIhvcNAQELBQADggEBAGeYZFazftpWtIwr9WDb iwoY/S0btM+cUAYLXXJAXa0XQKTqshfaKPGJH1TDg5OEYyBqzRsxuQdcWTL4lo3T FNqLQw5AWrhnuh0bVKByz1ytAzXWdJvr7yKN9M5J1YaE5MSAT99U70AKEWlqY5x4 Yw2mlZxZZztvDhchCqcSmzrxc0WWzRUlU81WVWTJpOlhpNPclDhbIh8IwRA/N3Yc zqXu2XnLhOZfm3qZsRkrrm4zp6HU5uTfZ/58INK8PpV+B2YBCmq7FgbEx+WVSAYY 7gzKKVCKeX65k9mX3THOVJq1EqTdaz2AO/cVjAlUfDZvYb5683ywUdZ51/SQ0pCh Oy8= -----END CERTIFICATE-----Generated at Sun Sep 20 16:37:23 2026 by rpki-client