$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e03dfac3-f785-4c98-af49-2d4e3a8c09e5.roa File: e03dfac3-f785-4c98-af49-2d4e3a8c09e5.roa (raw, json) Hash identifier: EBei1V6LfFMrBdvP/DUjmmTwSJBo3sdTzCDpmHYXGy8= Subject key identifier: 1D:CD:25:A4:4E:26:A5:85:85:C8:95:63:D3:BE:B6:33:4B:7E:87:A0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 08C6091538A583CED8A6A66EDEA076363579DBC8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e03dfac3-f785-4c98-af49-2d4e3a8c09e5.roa Signing time: Sun 18 Oct 2026 00:08:41 +0000 ROA not before: Sun 18 Oct 2026 00:08:41 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c6:09:15:38:a5:83:ce:d8:a6:a6:6e:de:a0:76:36:35:79:db:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:08:41 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=fd227e207047c98ed990b6253fb966a5abb117c8b64a4fab0d412146778206f0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:c7:a7:12:bd:dd:02:9a:50:d6:fc:2d:f2: 29:f8:73:96:07:68:08:6a:04:47:bc:9d:07:f7:29: 1c:d1:cf:92:32:20:1c:2a:cd:ad:be:ea:38:4c:13: a8:e0:43:57:b1:25:e1:d8:4a:ed:7c:4a:e1:75:21: 4f:77:bf:f2:7e:a5:cd:83:95:52:10:7e:ec:47:9b: 49:44:3b:bc:7c:86:68:c0:5d:86:1f:c7:7c:1a:56: 02:38:8e:ee:e9:29:78:73:8e:d9:c0:ac:e4:e9:3a: 80:5e:f3:27:c0:02:4e:dc:67:4b:30:11:9b:12:98: 2f:50:bb:06:bf:ed:5a:69:5c:23:fd:e5:06:14:9f: 68:47:09:e3:31:81:0b:a2:8e:1e:3f:24:09:98:f6: c9:5c:fb:e8:26:c4:2f:9b:bf:31:c7:16:42:e0:f3: e7:5c:73:c5:a4:db:f5:26:34:dc:cd:49:f4:26:ce: 4f:db:ce:5b:2c:a6:ba:68:d3:35:c0:56:eb:18:ae: 39:6e:b8:11:13:db:fa:17:0c:e8:ab:47:ac:04:22: 2d:cd:ca:5b:8a:4a:50:77:0b:0f:00:e2:08:87:df: fc:b9:25:a4:c8:ed:b1:fd:19:8e:e0:1d:7e:88:58: 4a:0b:a3:80:b1:e2:4f:28:c1:11:d7:0f:07:76:c4: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CD:25:A4:4E:26:A5:85:85:C8:95:63:D3:BE:B6:33:4B:7E:87:A0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e03dfac3-f785-4c98-af49-2d4e3a8c09e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:6040::/48 Signature Algorithm: sha256WithRSAEncryption 0b:92:aa:de:1e:91:6c:05:99:d4:14:12:1c:ec:3f:10:15:23: 5a:72:ef:50:9e:23:04:35:53:26:66:05:34:ef:37:80:62:b5: ce:9a:e2:ca:d3:3d:71:b8:13:55:3f:1e:d8:5b:fc:d5:54:73: c4:b0:86:cd:19:91:df:c1:14:e4:ed:cc:08:bb:ec:ab:48:82: 15:1a:0d:b2:a4:78:63:1a:d6:77:0c:69:01:07:9b:0d:66:77: 01:00:56:37:ab:03:72:58:1d:5d:6b:9a:23:bb:b8:d2:a3:3e: e6:bb:b3:af:ff:53:4a:51:33:a5:11:be:bc:70:a5:bf:80:2f: 79:12:51:8b:80:73:85:9e:0a:1c:97:18:87:f7:6f:47:c6:9a: 6c:d8:be:d1:77:32:f1:a0:38:55:26:a9:ab:76:3b:a8:dc:37: d9:d1:55:2b:f3:e7:d8:55:f5:ed:55:b2:4e:39:3e:06:4c:b0: 43:da:b8:54:13:1f:a3:a9:c9:60:a2:9d:f2:ea:ad:f9:c6:db: 2e:65:d1:cb:e8:6f:1d:a5:33:f0:10:93:7b:df:c3:c0:b0:20: 4c:0a:3d:0f:f2:89:97:60:92:95:7e:74:08:c5:12:34:98:18: 43:f0:05:a5:22:4b:e2:65:41:7b:99:e5:f5:a9:1d:a9:08:04: 42:7c:ef:ff -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCMYJFTilg87YpqZu3qB2NjV528gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxODAwMDg0MVoX DTI3MDExNjIzNTk1OVowejFJMEcGA1UEBRNAZmQyMjdlMjA3MDQ3Yzk4ZWQ5OTBi NjI1M2ZiOTY2YTVhYmIxMTdjOGI2NGE0ZmFiMGQ0MTIxNDY3NzgyMDZmMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+HHpxK93QKaUNb8LfIp+HOWB2gI agRHvJ0H9ykc0c+SMiAcKs2tvuo4TBOo4ENXsSXh2ErtfErhdSFPd7/yfqXNg5VS EH7sR5tJRDu8fIZowF2GH8d8GlYCOI7u6Sl4c47ZwKzk6TqAXvMnwAJO3GdLMBGb EpgvULsGv+1aaVwj/eUGFJ9oRwnjMYELoo4ePyQJmPbJXPvoJsQvm78xxxZC4PPn XHPFpNv1JjTczUn0Js5P285bLKa6aNM1wFbrGK45brgRE9v6Fwzoq0esBCItzcpb ikpQdwsPAOIIh9/8uSWkyO2x/RmO4B1+iFhKC6OAseJPKMER1w8HdsSqRwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFB3NJaROJqWFhciVY9O+tjNLfoegMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwM2RmYWMzLWY3ODUtNGM5OC1hZjQ5LTJkNGUzYThjMDllNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/2BAMA0GCSqGSIb3DQEBCwUAA4IBAQALkqreHpFsBZnUFBIc 7D8QFSNacu9QniMENVMmZgU07zeAYrXOmuLK0z1xuBNVPx7YW/zVVHPEsIbNGZHf wRTk7cwIu+yrSIIVGg2ypHhjGtZ3DGkBB5sNZncBAFY3qwNyWB1da5oju7jSoz7m u7Ov/1NKUTOlEb68cKW/gC95ElGLgHOFngoclxiH929Hxpps2L7RdzLxoDhVJqmr djuo3DfZ0VUr8+fYVfXtVbJOOT4GTLBD2rhUEx+jqclgop3y6q35xtsuZdHL6G8d pTPwEJN738PAsCBMCj0P8omXYJKVfnQIxRI0mBhD8AWlIkviZUF7meX1qR2pCARC fO// -----END CERTIFICATE-----Generated at Thu Nov 5 11:24:29 2026 by rpki-client