$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/da009d01-8c2b-42ca-9b97-f3f891132da7.roa File: da009d01-8c2b-42ca-9b97-f3f891132da7.roa (raw, json) Hash identifier: pxiBrGZv3NNXq4PMGllEIFjbxc4sOyewCCKzM89tRsI= Subject key identifier: 2A:9D:D4:24:91:CF:3E:07:E4:9C:81:76:37:27:56:5F:F4:E9:25:B9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 381960771B7F5D211C9BA08A59304E3DCDC99263 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/da009d01-8c2b-42ca-9b97-f3f891132da7.roa Signing time: Wed 09 Sep 2026 15:54:33 +0000 ROA not before: Wed 09 Sep 2026 15:54:33 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae7:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:19:60:77:1b:7f:5d:21:1c:9b:a0:8a:59:30:4e:3d:cd:c9:92:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 9 15:54:33 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=d0532eeac9167591b035e133dbe012b7598855529f117d9ce04a15be528a5140, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8f:32:13:c3:df:4e:e5:62:ee:92:44:13:14: 41:6f:9a:c7:45:5e:52:25:71:6b:04:c8:c0:5d:7e: e7:94:45:06:1b:c3:64:59:a8:95:cb:bd:01:72:2b: 40:b2:3b:48:4d:c4:fe:ea:59:a7:a5:35:c9:92:94: 68:16:eb:c8:fa:89:b0:31:5a:d6:42:1f:08:b4:76: ef:a6:a7:b4:72:9c:20:59:2d:df:d8:93:4c:a5:fe: 67:d0:bb:73:2e:fd:e5:f7:5f:1a:b5:05:1a:88:9c: 8c:64:ef:88:dd:e0:df:87:15:af:c6:49:0c:ea:c9: 80:5a:68:51:2d:26:be:64:79:bd:8c:1f:09:64:31: a5:a9:19:55:98:99:f1:3a:21:f9:ed:8a:a6:dd:09: 1a:cb:aa:1b:dc:cc:08:bc:94:83:a6:44:19:bf:54: b1:c2:46:f2:68:ee:c0:39:52:bd:52:e0:49:f7:2a: 40:a5:a8:c3:f0:14:2c:ac:40:d4:bc:35:f2:35:ae: 34:02:a0:55:1c:e0:79:e9:74:25:65:75:02:21:42: f1:0b:b4:f3:18:aa:83:a5:eb:75:01:bb:13:93:58: 3e:6a:bb:6c:f3:72:8e:43:aa:2e:83:f0:e1:65:99: 09:41:c9:62:8c:0a:ff:82:b2:f2:dd:fc:91:06:04: 77:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9D:D4:24:91:CF:3E:07:E4:9C:81:76:37:27:56:5F:F4:E9:25:B9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/da009d01-8c2b-42ca-9b97-f3f891132da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae7:1000::/40 Signature Algorithm: sha256WithRSAEncryption 45:f3:5f:7d:28:98:28:e8:da:a9:28:a8:a0:ae:02:d0:cf:18: 87:57:6b:92:a0:e2:79:3e:5a:77:18:e5:85:73:02:c0:10:15: 84:a9:2d:4b:01:2f:17:29:26:39:8d:3f:67:38:97:2f:50:e8: 78:7f:af:52:c8:e1:39:a9:17:61:35:84:cd:8f:53:8a:a3:b3: b0:08:31:99:87:90:01:0d:ec:ca:4a:9a:54:8d:b0:76:26:77: be:f1:8f:a1:aa:90:2e:95:0b:1c:d0:11:64:2b:70:fe:b3:e9: 75:94:87:18:93:34:d5:65:6f:1f:58:13:e4:f7:f5:19:5e:03: b7:00:05:a0:27:ae:d5:46:7d:70:29:19:4c:ad:38:62:c7:c5: b9:66:df:9f:5e:07:1c:87:96:4c:d6:f8:96:c7:77:45:47:d0: 6c:2f:18:f0:bb:bb:50:51:fa:5c:83:78:3f:27:7a:2c:6b:c3: a4:c9:90:42:e3:fb:51:57:69:fc:14:50:b1:fe:0c:6c:b4:66: ab:e5:9d:8e:31:f2:72:f6:ce:37:7c:49:15:00:16:d6:dc:0a: 5e:3b:73:f8:d8:19:a4:88:89:8c:c0:0f:2f:67:2c:13:07:bf: 57:22:27:bc:fc:5a:5c:5b:5d:e7:c0:89:00:50:ef:89:be:7b: 1a:7c:35:94 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOBlgdxt/XSEcm6CKWTBOPc3JkmMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkwOTE1NTQzM1oX DTI2MTIwODIzNTk1OVowejFJMEcGA1UEBRNAZDA1MzJlZWFjOTE2NzU5MWIwMzVl MTMzZGJlMDEyYjc1OTg4NTU1MjlmMTE3ZDljZTA0YTE1YmU1MjhhNTE0MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI8yE8PfTuVi7pJEExRBb5rHRV5S JXFrBMjAXX7nlEUGG8NkWaiVy70BcitAsjtITcT+6lmnpTXJkpRoFuvI+omwMVrW Qh8ItHbvpqe0cpwgWS3f2JNMpf5n0LtzLv3l918atQUaiJyMZO+I3eDfhxWvxkkM 6smAWmhRLSa+ZHm9jB8JZDGlqRlVmJnxOiH57Yqm3Qkay6ob3MwIvJSDpkQZv1Sx wkbyaO7AOVK9UuBJ9ypApajD8BQsrEDUvDXyNa40AqBVHOB56XQlZXUCIULxC7Tz GKqDpet1AbsTk1g+arts83KOQ6oug/DhZZkJQclijAr/grLy3fyRBgR3+QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCqd1CSRzz4H5JyBdjcnVl/06SW5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RhMDA5ZDAxLThjMmItNDJjYS05Yjk3LWYzZjg5MTEzMmRhNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba5xAwDQYJKoZIhvcNAQELBQADggEBAEXzX30omCjo2qkoqKCu AtDPGIdXa5Kg4nk+WncY5YVzAsAQFYSpLUsBLxcpJjmNP2c4ly9Q6Hh/r1LI4Tmp F2E1hM2PU4qjs7AIMZmHkAEN7MpKmlSNsHYmd77xj6GqkC6VCxzQEWQrcP6z6XWU hxiTNNVlbx9YE+T39RleA7cABaAnrtVGfXApGUytOGLHxblm359eBxyHlkzW+JbH d0VH0GwvGPC7u1BR+lyDeD8neixrw6TJkELj+1FXafwUULH+DGy0ZqvlnY4x8nL2 zjd8SRUAFtbcCl47c/jYGaSIiYzADy9nLBMHv1ciJ7z8WlxbXefAiQBQ74m+exp8 NZQ= -----END CERTIFICATE-----Generated at Sun Sep 20 16:37:27 2026 by rpki-client