$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c670c602-2b57-47d8-86f4-92e2ac7bc247.roa File: c670c602-2b57-47d8-86f4-92e2ac7bc247.roa (raw, json) Hash identifier: LKclxpqoCO+Ox1v1iVKPYIgmtXuaiL2qxbF6rWQNspg= Subject key identifier: FB:A0:A6:80:9E:0E:26:C2:CD:07:5B:CD:22:56:0E:17:90:B6:43:61 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2BE79C4DA013A1817C93338FA15A77BFBCEF25B5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c670c602-2b57-47d8-86f4-92e2ac7bc247.roa Signing time: Thu 29 Oct 2026 00:03:31 +0000 ROA not before: Thu 29 Oct 2026 00:03:31 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae2:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e7:9c:4d:a0:13:a1:81:7c:93:33:8f:a1:5a:77:bf:bc:ef:25:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:03:31 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=0804fd59ba131a53d31fa8a2d0826d327e00ffc2f1cf09a08cbc72cb1e866823, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:7c:b5:dd:1f:1c:18:7c:f9:70:93:1b:bd: 4c:b2:ee:6d:41:0e:c3:a4:26:63:88:69:54:c2:30: a8:d4:96:12:c4:1a:78:65:13:8a:e3:f7:e5:6b:56: 1c:1b:66:d0:68:8e:36:63:39:e9:bd:0f:9d:84:0b: 85:a9:3a:91:f9:7e:6b:d0:28:25:e4:c7:73:d4:73: 1f:a2:51:a5:0d:f0:63:a9:55:13:47:47:d4:f3:ee: d2:21:b6:c6:98:f7:c5:25:45:c3:72:61:af:25:fe: 9e:77:cd:94:a3:ab:ea:b4:f0:6e:97:62:75:9a:2f: ce:83:36:7e:50:6f:38:13:2f:62:6f:3d:0a:58:45: 34:6a:73:dd:5a:d5:14:f0:6a:3c:48:f1:9a:72:03: 49:a5:dc:61:a4:d3:67:db:b5:3e:d2:f4:f5:32:41: b6:90:47:34:57:dd:35:c1:a0:e8:f6:3c:5b:f6:ca: 8c:cb:83:60:2b:ce:c7:bc:0c:80:81:ec:ac:9b:c8: 77:d3:b1:5f:53:9e:93:c2:fd:33:03:cd:d0:62:80: 2d:cb:f9:4e:ef:00:88:40:63:6a:2b:b8:54:15:0e: 27:34:4d:ac:aa:73:7c:81:dd:5a:15:c0:59:99:2d: b3:89:a0:19:66:7b:26:b8:36:26:ea:25:6b:ac:22: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A0:A6:80:9E:0E:26:C2:CD:07:5B:CD:22:56:0E:17:90:B6:43:61 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c670c602-2b57-47d8-86f4-92e2ac7bc247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae2:9000::/40 Signature Algorithm: sha256WithRSAEncryption b2:43:0d:eb:fc:e2:72:14:8c:62:cb:c0:74:8d:c9:f8:8c:f6: f7:95:36:22:09:74:15:bd:36:e2:2a:e0:92:c8:1b:9e:24:80: 23:bc:ff:d6:4b:88:8f:91:e1:10:c1:eb:2d:2a:3c:07:fe:4b: eb:cc:b2:ca:04:4e:49:ca:68:67:a5:37:bb:3b:90:bf:80:55: 05:1b:5e:50:27:51:7f:5a:3b:2d:e5:6c:12:7d:e4:31:0f:13: 86:89:6d:25:40:23:49:56:34:6f:97:b8:02:fd:bb:9d:07:00: f2:7d:3f:c5:ac:37:eb:63:9d:6a:c7:be:27:ff:27:90:6c:f6: 13:19:1a:40:06:c9:e1:94:ec:ca:cd:59:30:ea:ea:d3:22:53: fe:68:46:e1:99:4d:fc:3e:e2:0c:bc:ae:33:d1:8c:da:23:2e: e9:9a:1a:73:1b:a7:dd:2b:bd:6a:93:26:70:35:17:c6:5a:00: 34:90:1e:8a:c1:50:9d:36:31:dc:d5:eb:d9:34:a7:58:9a:60: 72:dc:a1:de:86:20:5d:8a:78:40:2e:c6:0b:6b:0f:b7:06:48: 11:26:9c:1e:d6:2d:5a:dc:fc:8d:8a:6e:b0:d2:56:01:12:26: 1a:97:26:3c:88:ac:47:43:a1:16:c4:86:84:ea:f2:7e:2f:dd: 05:61:77:6e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUK+ecTaAToYF8kzOPoVp3v7zvJbUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyOTAwMDMzMVoX DTI3MDEyNzIzNTk1OVowejFJMEcGA1UEBRNAMDgwNGZkNTliYTEzMWE1M2QzMWZh OGEyZDA4MjZkMzI3ZTAwZmZjMmYxY2YwOWEwOGNiYzcyY2IxZTg2NjgyMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8h8td0fHBh8+XCTG71Msu5tQQ7D pCZjiGlUwjCo1JYSxBp4ZROK4/fla1YcG2bQaI42YznpvQ+dhAuFqTqR+X5r0Cgl 5Mdz1HMfolGlDfBjqVUTR0fU8+7SIbbGmPfFJUXDcmGvJf6ed82Uo6vqtPBul2J1 mi/OgzZ+UG84Ey9ibz0KWEU0anPdWtUU8Go8SPGacgNJpdxhpNNn27U+0vT1MkG2 kEc0V901waDo9jxb9sqMy4NgK87HvAyAgeysm8h307FfU56Twv0zA83QYoAty/lO 7wCIQGNqK7hUFQ4nNE2sqnN8gd1aFcBZmS2ziaAZZnsmuDYm6iVrrCKxrQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPugpoCeDibCzQdbzSJWDheQtkNhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M2NzBjNjAyLTJiNTctNDdkOC04NmY0LTkyZTJhYzdiYzI0Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4pAwDQYJKoZIhvcNAQELBQADggEBALJDDev84nIUjGLLwHSN yfiM9veVNiIJdBW9NuIq4JLIG54kgCO8/9ZLiI+R4RDB6y0qPAf+S+vMssoETknK aGelN7s7kL+AVQUbXlAnUX9aOy3lbBJ95DEPE4aJbSVAI0lWNG+XuAL9u50HAPJ9 P8WsN+tjnWrHvif/J5Bs9hMZGkAGyeGU7MrNWTDq6tMiU/5oRuGZTfw+4gy8rjPR jNojLumaGnMbp90rvWqTJnA1F8ZaADSQHorBUJ02MdzV69k0p1iaYHLcod6GIF2K eEAuxgtrD7cGSBEmnB7WLVrc/I2KbrDSVgESJhqXJjyIrEdDoRbEhoTq8n4v3QVh d24= -----END CERTIFICATE-----Generated at Thu Nov 5 18:43:37 2026 by rpki-client