$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df32b4dc-f216-4f87-832d-d0230fac751f.roa File: df32b4dc-f216-4f87-832d-d0230fac751f.roa (raw, json) Hash identifier: tbC9TWFxFflrkOC/rIK1iOoQ6GM4qHv86MFzI7kh/LM= Subject key identifier: 6B:38:32:F0:F1:6E:E1:C0:9B:19:10:68:9B:46:EE:1B:6A:F1:9C:17 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4A618F2A29F373EE6FF276FEA01F2DB36E3FD176 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df32b4dc-f216-4f87-832d-d0230fac751f.roa Signing time: Sun 18 Oct 2026 00:09:16 +0000 ROA not before: Sun 18 Oct 2026 00:09:16 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:61:8f:2a:29:f3:73:ee:6f:f2:76:fe:a0:1f:2d:b3:6e:3f:d1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:09:16 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=0e012787ed5ce5fbd9db2fb2e6c870b09c8ae54eecb33e5f59591c273b291422, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:37:d5:f3:23:26:fb:7f:97:72:6c:32:68:dd: 45:19:24:b5:24:da:f9:29:bf:07:5f:60:9e:06:83: 52:e9:f0:c0:f7:ae:99:46:71:f0:8c:2d:63:0c:b3: 99:18:a6:c8:d6:e2:c8:5a:b3:31:ae:c8:4c:e0:07: 20:2b:eb:38:6f:6d:50:0c:66:ef:83:2f:30:5b:04: 2b:a6:26:0f:66:2e:f5:1a:d9:a1:07:36:dd:ce:22: 47:24:01:a1:3e:01:20:de:b6:d3:9e:04:d4:cc:58: 57:b1:e6:c6:09:36:c0:19:ff:5c:17:11:0c:08:61: 45:db:ab:1d:84:1f:90:bb:0c:ef:4c:99:4c:0c:e8: c5:5e:67:8b:48:93:d4:0a:49:87:17:b9:3e:57:5c: 43:4c:50:bb:d2:0d:7f:e8:c0:54:d2:3b:3e:8c:d5: 77:94:f3:db:46:2a:fd:48:74:b3:f1:29:95:98:44: 26:73:ba:ec:29:70:6b:85:b4:35:26:1f:1f:66:de: b7:9e:7e:60:30:17:c8:c6:bf:e4:81:90:1d:74:5b: ec:5b:3a:e0:aa:84:97:17:e3:8c:72:9e:9d:3a:28: a7:07:5e:e7:78:cc:81:ea:07:ab:fd:83:48:39:0e: ac:3f:63:d9:0a:64:fd:a5:bb:1e:53:9b:30:8c:81: 7a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:38:32:F0:F1:6E:E1:C0:9B:19:10:68:9B:46:EE:1B:6A:F1:9C:17 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df32b4dc-f216-4f87-832d-d0230fac751f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:9000::/40 Signature Algorithm: sha256WithRSAEncryption 3d:9d:65:41:94:49:6f:d3:ed:1d:bd:bc:be:3d:96:76:68:54: 6a:b0:41:5d:36:28:1b:ba:13:58:f8:b7:0e:45:12:a7:98:21: 45:f7:63:40:18:a8:46:7a:40:5e:d4:8d:74:76:f0:d0:7a:0c: 7c:b1:1d:84:28:3e:b6:60:d4:48:79:c7:92:46:fb:cc:d2:b5: 53:f6:eb:dd:df:50:1a:64:31:10:84:ab:9f:20:a3:7b:3a:70: 0a:42:f9:02:c3:be:5b:c2:d0:7f:44:fe:9f:5c:53:a6:d8:f2: 25:8c:e4:05:90:2b:52:70:08:a5:f3:f8:ac:a8:62:c3:60:d1: dc:ed:81:9a:95:60:74:48:1a:77:82:50:10:ce:b3:52:79:2e: 17:59:32:e5:66:0a:21:a2:53:e1:01:79:23:47:3e:de:df:33: 75:7b:ed:88:43:ee:c7:33:5f:46:2b:94:64:63:a3:12:81:9f: bf:47:59:60:15:16:69:3c:d7:ba:03:7d:da:62:c3:ba:0a:d6: 1a:db:f6:92:1b:e4:65:8b:e1:9c:51:ae:d8:98:43:2d:c0:64: 24:d9:47:d9:45:86:b4:55:f9:a7:24:1e:10:87:7c:37:62:19: 32:69:86:bf:e2:52:5a:45:59:76:14:26:bd:fe:1f:64:bc:d6: 01:3c:79:46 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSmGPKinzc+5v8nb+oB8ts24/0XYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxODAwMDkxNloX DTI3MDExNjIzNTk1OVowejFJMEcGA1UEBRNAMGUwMTI3ODdlZDVjZTVmYmQ5ZGIy ZmIyZTZjODcwYjA5YzhhZTU0ZWVjYjMzZTVmNTk1OTFjMjczYjI5MTQyMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTfV8yMm+3+XcmwyaN1FGSS1JNr5 Kb8HX2CeBoNS6fDA966ZRnHwjC1jDLOZGKbI1uLIWrMxrshM4AcgK+s4b21QDGbv gy8wWwQrpiYPZi71GtmhBzbdziJHJAGhPgEg3rbTngTUzFhXsebGCTbAGf9cFxEM CGFF26sdhB+QuwzvTJlMDOjFXmeLSJPUCkmHF7k+V1xDTFC70g1/6MBU0js+jNV3 lPPbRir9SHSz8SmVmEQmc7rsKXBrhbQ1Jh8fZt63nn5gMBfIxr/kgZAddFvsWzrg qoSXF+OMcp6dOiinB17neMyB6ger/YNIOQ6sP2PZCmT9pbseU5swjIF6DwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGs4MvDxbuHAmxkQaJtG7htq8ZwXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmMzJiNGRjLWYyMTYtNGY4Ny04MzJkLWQwMjMwZmFjNzUxZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8pAwDQYJKoZIhvcNAQELBQADggEBAD2dZUGUSW/T7R29vL49 lnZoVGqwQV02KBu6E1j4tw5FEqeYIUX3Y0AYqEZ6QF7UjXR28NB6DHyxHYQoPrZg 1Eh5x5JG+8zStVP2693fUBpkMRCEq58go3s6cApC+QLDvlvC0H9E/p9cU6bY8iWM 5AWQK1JwCKXz+KyoYsNg0dztgZqVYHRIGneCUBDOs1J5LhdZMuVmCiGiU+EBeSNH Pt7fM3V77YhD7sczX0YrlGRjoxKBn79HWWAVFmk817oDfdpiw7oK1hrb9pIb5GWL 4ZxRrtiYQy3AZCTZR9lFhrRV+ackHhCHfDdiGTJphr/iUlpFWXYUJr3+H2S81gE8 eUY= -----END CERTIFICATE-----Generated at Thu Nov 5 06:10:18 2026 by rpki-client