$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d5f74125-db8b-4584-80cb-ea57db1765ad.roa File: d5f74125-db8b-4584-80cb-ea57db1765ad.roa (raw, json) Hash identifier: M0M8r3SkOb5W8VrGcrkxFkxMVrF1zLm/rQP6n6lRuME= Subject key identifier: F2:5D:68:8E:DE:B0:DB:76:AE:1C:BF:54:57:1C:10:3E:D5:81:BD:42 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 15852C1AB683E32B8C429E1504F8589FD0000AD0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d5f74125-db8b-4584-80cb-ea57db1765ad.roa Signing time: Sat 07 Nov 2026 00:02:55 +0000 ROA not before: Sat 07 Nov 2026 00:02:55 +0000 ROA not after: Fri 05 Feb 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:85:2c:1a:b6:83:e3:2b:8c:42:9e:15:04:f8:58:9f:d0:00:0a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:02:55 2026 GMT Not After : Feb 5 23:59:59 2027 GMT Subject: serialNumber=d1c3d6f8c5b1fd216e4054177396cf7471ab0ab09721f2288514b9fcbd86d61d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:ff:3a:09:a2:38:0f:f2:79:70:d8:67:6c: 18:d9:0e:b6:da:c0:7b:a7:03:d1:c3:fe:95:20:a7: 0b:6d:b9:9c:0a:54:b7:3a:b5:08:63:b5:f3:81:d0: 18:df:21:db:fb:c0:0b:a6:f3:6c:ba:27:9e:c8:4c: 5c:54:a1:b3:bf:e6:00:c9:c0:13:b5:99:d3:34:5b: ee:87:7c:53:09:e8:02:8f:c3:82:f9:36:6f:a8:6c: 4d:6a:b4:0c:de:87:62:c6:c2:84:ee:58:b9:38:9a: 0f:6d:46:d5:d4:4b:13:14:e0:59:d4:65:50:99:01: bb:85:4e:54:93:84:ee:5c:b9:82:17:c1:4d:f0:b4: c7:a6:d2:eb:5b:5b:08:98:dc:7e:3b:c4:2a:dd:b7: 3c:0c:b5:ab:54:7c:b0:ae:4a:0a:e6:a8:96:03:a7: 9a:6e:1b:8d:5d:ae:be:85:f6:ef:70:e6:51:85:c6: 61:97:e6:9c:b2:6e:63:1b:f3:6a:99:02:2e:0a:1b: ce:f2:ba:82:d4:03:75:3d:a9:43:d8:d4:72:1e:02: bd:e9:da:a7:f2:1e:24:0b:15:09:d2:9f:18:91:fe: 81:46:a5:92:15:9d:e6:ba:dc:fc:29:1c:b2:f6:96: bb:bc:18:07:28:07:8d:1f:fc:d0:03:1a:5b:00:54: f6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5D:68:8E:DE:B0:DB:76:AE:1C:BF:54:57:1C:10:3E:D5:81:BD:42 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d5f74125-db8b-4584-80cb-ea57db1765ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption af:3b:9f:0e:76:ca:67:7f:37:9f:77:c2:52:f9:e9:73:ef:cd: 9e:c9:97:41:6a:56:8a:d2:7e:f4:dc:c3:b7:65:c6:2b:08:ab: 0a:77:89:bf:da:79:17:ef:c3:92:40:6d:d5:54:ee:af:25:2f: 16:fb:80:6f:e5:7f:21:6e:c3:e8:b2:dd:61:fc:43:4f:84:ed: e5:be:cd:11:72:29:41:3b:0f:77:a8:59:94:77:98:1a:30:44: 73:63:dd:84:c5:32:e1:9f:09:d7:2e:7c:63:2e:c2:3c:4e:58: 38:76:ea:c4:06:0f:a2:88:29:59:1c:91:08:de:1b:9c:1e:4d: 4b:6c:65:72:15:b7:91:95:3c:da:cc:e0:e9:12:08:f3:23:07: 39:08:44:d8:e7:3d:0d:b0:7e:fc:f9:f7:c4:54:80:92:89:03: de:e4:05:75:66:e0:f0:b5:53:ed:2c:75:8d:b4:09:8a:60:aa: 20:29:76:d6:99:a3:0e:12:1c:e6:49:cc:43:21:90:9e:7b:ea: 3f:32:72:96:e4:3c:63:ea:04:26:42:f0:14:fb:58:19:d2:90: 9f:16:79:07:2c:97:57:bf:38:66:23:5b:6a:24:d5:4f:56:11: 24:b8:83:58:db:43:d9:e4:86:9b:ce:98:4b:83:19:8e:a7:68: b9:91:58:63 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFYUsGraD4yuMQp4VBPhYn9AACtAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTEwNzAwMDI1NVoX DTI3MDIwNTIzNTk1OVowejFJMEcGA1UEBRNAZDFjM2Q2ZjhjNWIxZmQyMTZlNDA1 NDE3NzM5NmNmNzQ3MWFiMGFiMDk3MjFmMjI4ODUxNGI5ZmNiZDg2ZDYxZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMn/OgmiOA/yeXDYZ2wY2Q622sB7 pwPRw/6VIKcLbbmcClS3OrUIY7XzgdAY3yHb+8ALpvNsuieeyExcVKGzv+YAycAT tZnTNFvuh3xTCegCj8OC+TZvqGxNarQM3odixsKE7li5OJoPbUbV1EsTFOBZ1GVQ mQG7hU5Uk4TuXLmCF8FN8LTHptLrW1sImNx+O8Qq3bc8DLWrVHywrkoK5qiWA6ea bhuNXa6+hfbvcOZRhcZhl+acsm5jG/NqmQIuChvO8rqC1AN1PalD2NRyHgK96dqn 8h4kCxUJ0p8Ykf6BRqWSFZ3mutz8KRyy9pa7vBgHKAeNH/zQAxpbAFT2hwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPJdaI7esNt2rhy/VFccED7Vgb1CMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q1Zjc0MTI1LWRiOGItNDU4NC04MGNiLWVhNTdkYjE3NjVhZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6cDAMA0GCSqGSIb3DQEBCwUAA4IBAQCvO58Odspnfzefd8JS +elz782eyZdBalaK0n703MO3ZcYrCKsKd4m/2nkX78OSQG3VVO6vJS8W+4Bv5X8h bsPost1h/ENPhO3lvs0RcilBOw93qFmUd5gaMERzY92ExTLhnwnXLnxjLsI8Tlg4 durEBg+iiClZHJEI3hucHk1LbGVyFbeRlTzazODpEgjzIwc5CETY5z0NsH78+ffE VICSiQPe5AV1ZuDwtVPtLHWNtAmKYKogKXbWmaMOEhzmScxDIZCee+o/MnKW5Dxj 6gQmQvAU+1gZ0pCfFnkHLJdXvzhmI1tqJNVPVhEkuINY20PZ5IabzphLgxmOp2i5 kVhj -----END CERTIFICATE-----Generated at Sun Nov 8 18:00:21 2026 by rpki-client