$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1ed69c2-5793-4712-a624-2cff13ab19b2.roa File: d1ed69c2-5793-4712-a624-2cff13ab19b2.roa (raw, json) Hash identifier: smXtqDIcK29uh0LibHfJ8vPHZzxXTF0L4JRLdd//bck= Subject key identifier: 0E:5D:B9:03:36:79:9A:5F:34:B0:F8:C8:AA:B5:77:83:7B:32:FC:C2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 195B02910003B2C77672111E1DDC32FA9A9CCFE5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1ed69c2-5793-4712-a624-2cff13ab19b2.roa Signing time: Thu 10 Sep 2026 00:00:40 +0000 ROA not before: Thu 10 Sep 2026 00:00:40 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:5b:02:91:00:03:b2:c7:76:72:11:1e:1d:dc:32:fa:9a:9c:cf:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:00:40 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=f075b7d4cce783ceb94c57857b0180def57f04e1ce6043f0950d91ca0a477c71, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:6b:a8:67:26:7f:47:e6:04:e2:74:45:74: 56:e4:94:76:a8:12:83:b4:ab:80:c4:b8:5a:22:30: a4:9a:6e:77:24:37:7a:ba:07:9d:63:1f:90:57:2f: 77:39:62:df:6f:09:67:3e:51:58:a1:c9:c1:70:24: 3b:82:62:76:b0:eb:da:1d:9e:e2:80:1d:c1:1f:63: 8f:09:51:7b:cc:4e:03:6d:15:0a:24:8b:95:3c:29: 49:45:e8:0e:ef:35:54:ad:50:1c:eb:12:9f:46:a1: e9:0b:df:09:f4:2f:f2:5b:75:ea:73:d3:61:00:d9: 39:e4:f3:36:6f:5e:d2:19:04:db:ef:ee:af:b2:55: e6:5f:75:9f:90:92:8a:d1:22:6b:86:7b:30:3e:86: ed:03:af:9f:af:c1:c0:c0:b3:51:72:1d:e3:db:5b: ca:2a:38:b4:1b:e5:92:17:2d:05:f6:0d:37:32:63: 93:7c:17:3f:f3:d0:ae:10:95:06:fe:c0:1a:4f:ef: e3:cc:13:d9:eb:fa:c7:39:b0:54:39:55:e5:c8:96: e0:f8:64:49:32:50:fd:87:c0:0d:b3:8e:bd:e6:be: 48:8d:ad:dd:d7:17:51:88:62:4f:a9:4b:f4:f9:8d: 32:f3:93:8b:a7:0f:f2:03:db:51:4d:46:2c:5f:ca: 87:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5D:B9:03:36:79:9A:5F:34:B0:F8:C8:AA:B5:77:83:7B:32:FC:C2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1ed69c2-5793-4712-a624-2cff13ab19b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:c000::/40 Signature Algorithm: sha256WithRSAEncryption 81:39:32:3f:c4:70:5a:64:5f:8b:8e:e2:91:b3:7c:17:67:03: 94:95:ed:5a:c9:31:5f:bc:bc:f9:72:2d:c6:26:31:23:f2:8f: bd:7e:56:91:70:cf:72:b2:18:93:36:ec:18:a9:df:7a:d7:78: 22:82:20:0e:2b:1e:aa:40:fa:f1:c3:eb:10:66:05:92:dc:4c: 3a:e0:84:e6:81:32:75:0f:92:31:9b:f4:14:d8:50:3b:f3:af: 0a:22:79:a8:9c:60:df:5e:8b:88:ed:d8:c8:d8:26:0b:aa:49: df:a0:ca:53:bd:ee:40:d6:4d:65:60:47:0b:a3:dc:08:ac:a8: 99:62:59:87:a8:3e:89:4d:51:f8:03:14:f0:b3:1a:c5:fd:6b: c1:31:b5:58:86:9a:9f:35:06:65:99:7c:2a:eb:45:e5:c2:23: 05:23:60:0e:64:a8:12:7c:e0:37:cf:af:29:c3:a4:72:2f:58: b5:9c:bc:35:e4:cd:8c:20:cd:a0:32:cc:3a:4c:c8:0f:92:fe: f9:40:2f:91:51:1d:72:07:3e:7e:98:ef:78:cc:84:53:8f:1e: 99:9a:c6:a7:6d:21:69:24:28:9a:87:44:0d:53:11:0f:23:99: a2:f4:ae:ff:8f:01:26:06:e4:56:e6:2d:0b:33:bd:bf:1b:0a: d0:cb:57:10 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGVsCkQADssd2chEeHdwy+pqcz+UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMDA0MFoX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAZjA3NWI3ZDRjY2U3ODNjZWI5NGM1 Nzg1N2IwMTgwZGVmNTdmMDRlMWNlNjA0M2YwOTUwZDkxY2EwYTQ3N2M3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3NrqGcmf0fmBOJ0RXRW5JR2qBKD tKuAxLhaIjCkmm53JDd6ugedYx+QVy93OWLfbwlnPlFYocnBcCQ7gmJ2sOvaHZ7i gB3BH2OPCVF7zE4DbRUKJIuVPClJRegO7zVUrVAc6xKfRqHpC98J9C/yW3Xqc9Nh ANk55PM2b17SGQTb7+6vslXmX3WfkJKK0SJrhnswPobtA6+fr8HAwLNRch3j21vK Kji0G+WSFy0F9g03MmOTfBc/89CuEJUG/sAaT+/jzBPZ6/rHObBUOVXlyJbg+GRJ MlD9h8ANs4695r5Ija3d1xdRiGJPqUv0+Y0y85OLpw/yA9tRTUYsX8qHrwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFA5duQM2eZpfNLD4yKq1d4N7MvzCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QxZWQ2OWMyLTU3OTMtNDcxMi1hNjI0LTJjZmYxM2FiMTliMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba68AwDQYJKoZIhvcNAQELBQADggEBAIE5Mj/EcFpkX4uO4pGz fBdnA5SV7VrJMV+8vPlyLcYmMSPyj71+VpFwz3KyGJM27Bip33rXeCKCIA4rHqpA +vHD6xBmBZLcTDrghOaBMnUPkjGb9BTYUDvzrwoieaicYN9ei4jt2MjYJguqSd+g ylO97kDWTWVgRwuj3AisqJliWYeoPolNUfgDFPCzGsX9a8ExtViGmp81BmWZfCrr ReXCIwUjYA5kqBJ84DfPrynDpHIvWLWcvDXkzYwgzaAyzDpMyA+S/vlAL5FRHXIH Pn6Y73jMhFOPHpmaxqdtIWkkKJqHRA1TEQ8jmaL0rv+PASYG5FbmLQszvb8bCtDL VxA= -----END CERTIFICATE-----Generated at Mon Sep 21 03:20:18 2026 by rpki-client