$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db727801-736f-41c5-bf1a-e19ab3b36eff.roa File: db727801-736f-41c5-bf1a-e19ab3b36eff.roa (raw, json) Hash identifier: +M1dTLlkuPLDk3RJrRtaRRPDUHPUeAZ9AGj9b3NxOZA= Subject key identifier: 91:07:C9:B9:BC:FC:71:66:04:9D:45:85:B5:1E:F9:75:5E:E0:9B:A9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 55A5F18D994967105FC0C457CA5A195F6BB2CE8D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db727801-736f-41c5-bf1a-e19ab3b36eff.roa Signing time: Sun 18 Oct 2026 00:08:46 +0000 ROA not before: Sun 18 Oct 2026 00:08:46 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:8880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:a5:f1:8d:99:49:67:10:5f:c0:c4:57:ca:5a:19:5f:6b:b2:ce:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:08:46 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=b40d30a1ccf32ccbc4f2ce61a6dafafc883c46f4c88719468aee8074697a6b86, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:7c:87:0f:e9:94:ec:7f:a0:85:2d:2c:e6: 33:30:4e:18:24:b5:91:bb:eb:7a:16:1c:60:13:80: 6e:b7:1b:52:12:cc:d8:2d:10:1b:a7:9c:3a:fc:fb: 73:03:29:59:ae:3e:48:29:62:ce:32:03:8f:f4:42: 6f:46:b2:f9:77:3e:12:de:64:a2:d2:a2:43:65:00: 60:bf:bf:88:5f:61:37:e1:70:33:8b:fa:63:20:38: b2:93:d0:bc:a0:18:4d:d9:59:ed:ac:37:a3:c4:dd: 3d:15:4d:f8:28:51:77:da:81:94:8f:3d:78:6a:9c: b8:41:58:58:3b:1f:9d:45:2f:de:3c:64:fe:26:2b: a1:6f:c9:35:a9:04:95:5b:a0:2c:bd:e9:70:ec:1e: 57:62:ed:5c:8f:82:08:43:33:fd:8c:ca:3c:f8:9f: cf:f6:1e:14:0f:66:65:96:8c:8f:61:76:9c:d0:4c: 71:0e:c8:25:3d:c5:03:25:e3:a6:7a:03:48:a7:28: 07:60:35:33:7c:01:ab:57:8f:68:0d:4b:3b:69:8c: b5:56:bc:1e:9e:c7:89:e4:92:c1:a7:2e:64:a5:3e: 4b:3c:53:68:9b:bf:6b:67:99:44:cb:8a:69:fe:da: 04:2f:40:5d:4c:cc:13:c6:79:5a:ff:6a:38:f4:f1: 90:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:07:C9:B9:BC:FC:71:66:04:9D:45:85:B5:1E:F9:75:5E:E0:9B:A9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db727801-736f-41c5-bf1a-e19ab3b36eff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:8880::/48 Signature Algorithm: sha256WithRSAEncryption 44:43:62:d8:16:5d:96:83:fa:af:b9:9f:38:e1:e5:e7:4c:6a: 45:1c:81:51:84:74:81:7e:dc:03:5b:c6:49:c6:aa:2e:72:79: 6c:47:4a:5e:31:09:b0:b9:d8:0a:27:f1:b9:fe:de:ec:45:e3: 9e:fd:10:a9:3f:17:f5:0f:79:3a:b5:28:c9:21:83:15:f0:1a: 8f:39:58:0e:fd:70:c8:0d:11:72:bb:58:a1:99:d7:15:2d:cb: 82:f5:2b:34:6c:30:22:f6:cc:f5:34:90:76:de:5e:31:e0:1d: 2c:af:6b:cc:df:6b:99:df:a5:c5:95:84:e2:73:7a:78:ae:cd: e7:40:37:6b:ce:aa:6a:90:4c:d4:13:a4:2e:d3:b2:e3:45:e3: 27:ea:29:57:bd:79:b9:37:a7:6f:18:3f:33:aa:b8:80:89:94: 4b:0f:5c:d1:fb:2e:59:8a:55:64:9e:69:b8:72:67:ac:66:10: 14:2f:e6:2d:62:36:34:2d:82:96:36:dd:6b:9f:da:25:d5:64: a1:17:3a:bf:8e:57:0a:02:16:b9:ca:c3:d6:e6:c3:25:4f:46: 05:41:4a:33:87:64:4c:cb:21:c6:99:a9:75:25:84:72:ec:f2: 1d:7e:d0:33:57:db:50:1d:b9:46:3e:de:7a:cc:04:da:7b:98: 05:61:26:47 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVaXxjZlJZxBfwMRXyloZX2uyzo0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxODAwMDg0NloX DTI3MDExNjIzNTk1OVowejFJMEcGA1UEBRNAYjQwZDMwYTFjY2YzMmNjYmM0ZjJj ZTYxYTZkYWZhZmM4ODNjNDZmNGM4ODcxOTQ2OGFlZTgwNzQ2OTdhNmI4NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuZ8hw/plOx/oIUtLOYzME4YJLWR u+t6FhxgE4ButxtSEszYLRAbp5w6/PtzAylZrj5IKWLOMgOP9EJvRrL5dz4S3mSi 0qJDZQBgv7+IX2E34XAzi/pjIDiyk9C8oBhN2VntrDejxN09FU34KFF32oGUjz14 apy4QVhYOx+dRS/ePGT+Jiuhb8k1qQSVW6Asvelw7B5XYu1cj4IIQzP9jMo8+J/P 9h4UD2ZlloyPYXac0ExxDsglPcUDJeOmegNIpygHYDUzfAGrV49oDUs7aYy1Vrwe nseJ5JLBpy5kpT5LPFNom79rZ5lEy4pp/toEL0BdTMwTxnla/2o49PGQnwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJEHybm8/HFmBJ1FhbUe+XVe4JupMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RiNzI3ODAxLTczNmYtNDFjNS1iZjFhLWUxOWFiM2IzNmVmZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8oiAMA0GCSqGSIb3DQEBCwUAA4IBAQBEQ2LYFl2Wg/qvuZ84 4eXnTGpFHIFRhHSBftwDW8ZJxqoucnlsR0peMQmwudgKJ/G5/t7sReOe/RCpPxf1 D3k6tSjJIYMV8BqPOVgO/XDIDRFyu1ihmdcVLcuC9Ss0bDAi9sz1NJB23l4x4B0s r2vM32uZ36XFlYTic3p4rs3nQDdrzqpqkEzUE6Qu07LjReMn6ilXvXm5N6dvGD8z qriAiZRLD1zR+y5ZilVknmm4cmesZhAUL+YtYjY0LYKWNt1rn9ol1WShFzq/jlcK Aha5ysPW5sMlT0YFQUozh2RMyyHGmal1JYRy7PIdftAzV9tQHblGPt56zATae5gF YSZH -----END CERTIFICATE-----Generated at Thu Nov 5 04:24:54 2026 by rpki-client