$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f611f5b8-6400-4b10-bf6f-3c313ca38db5.roa File: f611f5b8-6400-4b10-bf6f-3c313ca38db5.roa (raw, json) Hash identifier: RTBX2jgYEfzWSl4GsMkdvE55TgYf1isJMej4D+zPmto= Subject key identifier: FD:96:52:29:54:87:EA:D0:51:DD:B8:93:66:56:7E:8D:81:F2:97:46 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3BBABE4953A0411B462867AD43016ACF3E40BC1C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f611f5b8-6400-4b10-bf6f-3c313ca38db5.roa Signing time: Mon 26 Oct 2026 00:02:46 +0000 ROA not before: Mon 26 Oct 2026 00:02:46 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ba:be:49:53:a0:41:1b:46:28:67:ad:43:01:6a:cf:3e:40:bc:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 26 00:02:46 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=c41524cf51bbad16ba8e7293d83ad1bd8faac7b2185d6c5dd7998ea6c5be19ac, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9c:91:55:42:2c:ee:d7:ab:dc:d6:51:f5:82: 84:19:9e:48:22:33:c3:09:af:85:25:dc:ad:5f:bf: 4c:35:d3:a1:b0:27:2d:ae:a1:ca:e2:17:92:e4:30: 5f:d9:c9:f8:a6:62:a9:53:94:73:b9:42:70:66:32: 61:09:fb:11:05:04:fe:17:6e:2a:f4:72:3c:28:82: a8:7c:de:00:10:e9:d7:49:8d:2c:b9:ea:2d:de:78: 07:5a:1c:e6:4e:ef:a7:76:99:6c:ba:e2:ad:4e:ce: 78:b7:f2:cf:3f:d6:88:66:be:52:36:94:e9:cd:cb: 14:45:a1:da:43:54:1c:31:6f:da:e0:b2:39:3d:b0: 93:87:3a:3b:c2:42:43:88:0f:67:92:8d:0f:23:8d: 40:ce:e4:f0:3d:4c:da:25:67:8f:fb:21:5a:9c:2c: 54:c7:05:e9:ea:ca:c8:4f:5f:5c:11:9c:c1:9e:b2: 63:0d:ef:38:b1:b5:d7:6b:0e:35:c7:1b:47:19:22: 0e:a4:53:1e:72:75:c4:40:ca:50:a3:82:7b:d5:dd: a1:1d:3f:0f:ee:4a:db:26:fd:98:ae:dc:a3:64:dd: 3f:61:37:0f:12:50:02:9e:fd:0f:4f:82:fb:62:fb: f7:f8:ed:ca:96:42:31:45:51:d5:ac:b8:d9:60:5e: 6f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:96:52:29:54:87:EA:D0:51:DD:B8:93:66:56:7E:8D:81:F2:97:46 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f611f5b8-6400-4b10-bf6f-3c313ca38db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:4000::/40 Signature Algorithm: sha256WithRSAEncryption 57:0c:5e:aa:bb:29:af:33:a4:2c:70:a9:7a:2d:f9:c5:09:1d: d0:86:0b:a0:5b:7b:62:a9:69:fb:7c:62:42:f9:b3:b5:9c:de: 68:22:54:f7:a8:3b:03:2f:04:c6:a9:d1:7d:71:8e:ef:a7:d3: d3:dd:32:00:ed:16:f8:b5:fa:1e:8b:10:48:2b:d0:85:4b:f3: 96:a3:15:6b:70:af:91:62:b0:49:ea:9c:82:fb:c9:ad:71:58: 37:35:e3:86:d6:62:f2:76:56:00:ec:2f:95:8e:59:ff:d9:2e: cb:d6:e3:90:df:18:16:c0:7c:54:6b:9f:9d:54:88:09:01:c5: 05:54:14:b3:fd:15:52:91:c5:0d:1d:a1:62:be:13:ca:bf:b7: a1:cb:07:2a:89:16:9d:41:22:a4:db:bc:c6:72:da:5b:35:72: 67:00:b9:2d:94:2e:e4:d9:9d:4d:d8:90:f1:de:66:7e:48:94: a2:5b:ce:73:95:04:fe:9d:d2:9a:04:bb:8c:bd:ab:9e:f2:39: d6:16:27:e2:b5:93:2d:64:a9:30:60:1e:53:25:c0:59:99:44: b5:fe:39:7e:82:e3:c5:81:93:70:04:c7:c0:d9:96:cf:84:e7: e3:35:1e:d9:1d:ee:37:bb:4d:7c:58:4f:50:d2:91:86:63:fc: ab:d9:cf:bd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUO7q+SVOgQRtGKGetQwFqzz5AvBwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyNjAwMDI0NloX DTI3MDEyNDIzNTk1OVowejFJMEcGA1UEBRNAYzQxNTI0Y2Y1MWJiYWQxNmJhOGU3 MjkzZDgzYWQxYmQ4ZmFhYzdiMjE4NWQ2YzVkZDc5OThlYTZjNWJlMTlhYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25yRVUIs7ter3NZR9YKEGZ5IIjPD Ca+FJdytX79MNdOhsCctrqHK4heS5DBf2cn4pmKpU5RzuUJwZjJhCfsRBQT+F24q 9HI8KIKofN4AEOnXSY0sueot3ngHWhzmTu+ndplsuuKtTs54t/LPP9aIZr5SNpTp zcsURaHaQ1QcMW/a4LI5PbCThzo7wkJDiA9nko0PI41AzuTwPUzaJWeP+yFanCxU xwXp6srIT19cEZzBnrJjDe84sbXXaw41xxtHGSIOpFMecnXEQMpQo4J71d2hHT8P 7krbJv2YrtyjZN0/YTcPElACnv0PT4L7Yvv3+O3KlkIxRVHVrLjZYF5vnwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP2WUilUh+rQUd24k2ZWfo2B8pdGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y2MTFmNWI4LTY0MDAtNGIxMC1iZjZmLTNjMzEzY2EzOGRiNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba70AwDQYJKoZIhvcNAQELBQADggEBAFcMXqq7Ka8zpCxwqXot +cUJHdCGC6Bbe2Kpaft8YkL5s7Wc3mgiVPeoOwMvBMap0X1xju+n09PdMgDtFvi1 +h6LEEgr0IVL85ajFWtwr5FisEnqnIL7ya1xWDc144bWYvJ2VgDsL5WOWf/ZLsvW 45DfGBbAfFRrn51UiAkBxQVUFLP9FVKRxQ0doWK+E8q/t6HLByqJFp1BIqTbvMZy 2ls1cmcAuS2ULuTZnU3YkPHeZn5IlKJbznOVBP6d0poEu4y9q57yOdYWJ+K1ky1k qTBgHlMlwFmZRLX+OX6C48WBk3AEx8DZls+E5+M1Htkd7je7TXxYT1DSkYZj/KvZ z70= -----END CERTIFICATE-----Generated at Thu Nov 5 09:02:41 2026 by rpki-client