$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7310f55-3b12-4798-80ca-47e95f2e091c.roa File: c7310f55-3b12-4798-80ca-47e95f2e091c.roa (raw, json) Hash identifier: x033jOhZkGkkXo1tGdNQrwVQxHPkYfYXIheSvvtPKeE= Subject key identifier: AC:53:8B:A4:10:D4:DB:2C:75:D8:D4:C8:FE:C1:FF:40:90:D7:7C:1B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 12E074E53B0BCB19C75938957ECE759738732B48 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7310f55-3b12-4798-80ca-47e95f2e091c.roa Signing time: Mon 19 Oct 2026 00:10:12 +0000 ROA not before: Mon 19 Oct 2026 00:10:12 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e0:74:e5:3b:0b:cb:19:c7:59:38:95:7e:ce:75:97:38:73:2b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:10:12 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=26ca275fdcbe389d328e2a666be3525d51b903ecf73982d566b186d791801361, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:42:5b:05:51:81:9d:74:3d:0b:f2:92:bb: bd:5b:bc:d9:6f:e2:fb:db:fc:a6:10:16:13:f4:e6: 21:4e:2e:43:64:6d:f6:83:49:1e:ea:bd:37:b6:d9: 50:f5:a2:7b:41:93:30:2e:31:6c:ef:f9:e7:c7:ad: b5:c4:52:05:03:dd:28:ef:4c:88:b2:a0:a7:05:b3: a5:19:24:d5:d3:37:59:36:d8:ae:6c:ba:7f:2c:35: 62:66:8d:32:5a:e0:ff:8e:82:2b:36:bf:4d:0b:b5: ee:f4:6a:8f:77:1f:7f:8c:48:e5:c7:d2:e2:9e:13: 0e:bb:77:cf:ec:d0:78:a6:cc:dd:1b:44:e2:fd:b7: 80:b8:e3:67:76:64:64:5d:b7:ef:d4:02:fa:a3:6b: a9:61:68:c1:b4:1e:a3:dc:00:b2:c3:5c:95:81:03: 83:61:a9:cd:08:a8:b6:3b:68:77:94:99:f6:ef:3c: a8:3b:d8:34:d2:6d:e9:90:bc:73:c1:3a:2a:a8:d7: 2f:ee:c1:00:70:f9:a8:80:a3:ee:35:e3:fe:8c:ce: 81:2d:b7:83:01:47:a7:16:14:02:ff:1d:0b:ea:1a: b5:25:23:c6:cf:2c:4f:ce:f9:83:45:bb:44:88:ea: 47:8e:18:e8:2a:8f:75:17:99:59:68:80:f7:43:0e: 3e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:53:8B:A4:10:D4:DB:2C:75:D8:D4:C8:FE:C1:FF:40:90:D7:7C:1B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7310f55-3b12-4798-80ca-47e95f2e091c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:e000::/40 Signature Algorithm: sha256WithRSAEncryption 5f:41:1f:a4:83:9e:26:c1:4a:b7:80:40:af:af:57:07:f7:9d: f3:ae:05:2f:7c:fa:9a:c1:d0:da:e4:84:3c:32:28:b8:4a:60: c3:1c:2e:f8:ab:40:ca:6e:64:20:eb:72:f7:21:9c:7c:00:4f: 0c:a4:dd:06:fa:17:35:85:f9:2f:45:49:51:e1:eb:1a:0f:d0: ea:ca:cf:a3:b7:84:5a:aa:37:5b:19:5c:3c:a9:ed:74:a2:6b: 5c:e2:3b:46:c4:79:49:67:c8:05:c2:49:a8:44:47:12:7d:c4: d9:64:cc:bf:7f:1d:0b:f7:9f:af:ed:7b:c4:14:39:dd:de:8d: fe:60:b4:c9:69:1b:bd:e7:90:5c:3d:9f:72:e8:f3:09:0f:d6: 50:77:a7:a8:6a:f2:8a:58:e3:7f:c2:ea:2a:7e:99:13:ff:91: bb:ae:09:39:b3:2f:42:b1:76:06:15:d0:97:20:1d:51:e1:5a: 79:8c:95:0b:10:4e:9c:73:d3:25:28:d1:e4:1b:c3:37:79:86: ed:a1:06:e2:02:62:97:21:0c:7e:25:39:1c:41:59:02:7f:52: 8c:47:9b:a9:0c:eb:2e:a5:da:b2:3d:69:4d:c6:2d:f6:a3:a4: 5b:63:68:eb:2c:15:f3:d5:6a:1e:0a:e8:a3:6d:bf:64:68:dd: 81:e6:bb:b2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEuB05TsLyxnHWTiVfs51lzhzK0gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxOTAwMTAxMloX DTI3MDExNzIzNTk1OVowejFJMEcGA1UEBRNAMjZjYTI3NWZkY2JlMzg5ZDMyOGUy YTY2NmJlMzUyNWQ1MWI5MDNlY2Y3Mzk4MmQ1NjZiMTg2ZDc5MTgwMTM2MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYtCWwVRgZ10PQvykru9W7zZb+L7 2/ymEBYT9OYhTi5DZG32g0ke6r03ttlQ9aJ7QZMwLjFs7/nnx621xFIFA90o70yI sqCnBbOlGSTV0zdZNtiubLp/LDViZo0yWuD/joIrNr9NC7Xu9GqPdx9/jEjlx9Li nhMOu3fP7NB4pszdG0Ti/beAuONndmRkXbfv1AL6o2upYWjBtB6j3ACyw1yVgQOD YanNCKi2O2h3lJn27zyoO9g00m3pkLxzwToqqNcv7sEAcPmogKPuNeP+jM6BLbeD AUenFhQC/x0L6hq1JSPGzyxPzvmDRbtEiOpHjhjoKo91F5lZaID3Qw4+ZwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKxTi6QQ1NssddjUyP7B/0CQ13wbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M3MzEwZjU1LTNiMTItNDc5OC04MGNhLTQ3ZTk1ZjJlMDkxYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaeAwDQYJKoZIhvcNAQELBQADggEBAF9BH6SDnibBSreAQK+v Vwf3nfOuBS98+prB0NrkhDwyKLhKYMMcLvirQMpuZCDrcvchnHwATwyk3Qb6FzWF +S9FSVHh6xoP0OrKz6O3hFqqN1sZXDyp7XSia1ziO0bEeUlnyAXCSahERxJ9xNlk zL9/HQv3n6/te8QUOd3ejf5gtMlpG73nkFw9n3Lo8wkP1lB3p6hq8opY43/C6ip+ mRP/kbuuCTmzL0KxdgYV0JcgHVHhWnmMlQsQTpxz0yUo0eQbwzd5hu2hBuICYpch DH4lORxBWQJ/UoxHm6kM6y6l2rI9aU3GLfajpFtjaOssFfPVah4K6KNtv2Ro3YHm u7I= -----END CERTIFICATE-----Generated at Thu Nov 5 05:15:21 2026 by rpki-client