$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f8c4d340-c0df-4a5d-b1b5-e0a4c5a9350c.roa File: f8c4d340-c0df-4a5d-b1b5-e0a4c5a9350c.roa (raw, json) Hash identifier: OcWCdqLEy4e9tbcE2srXw1K3PjjfUXHagLadpH0vmPA= Subject key identifier: 4F:0F:91:05:17:7C:5A:B7:C2:05:14:25:39:67:7C:21:97:3E:69:8D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 26F3A5FA9480BDD82D652F60B525580D53160859 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f8c4d340-c0df-4a5d-b1b5-e0a4c5a9350c.roa Signing time: Sat 24 Oct 2026 00:03:03 +0000 ROA not before: Sat 24 Oct 2026 00:03:03 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f3:a5:fa:94:80:bd:d8:2d:65:2f:60:b5:25:58:0d:53:16:08:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 24 00:03:03 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=106578389dd955b472da6ece003340b3cad374a80c0c747a2210f6ac184cfea6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:57:24:cd:ea:f0:01:32:ed:85:8b:7d:dc: d7:f2:e2:9a:d7:aa:14:be:7a:cf:e9:72:bd:8e:a3: 5b:ea:c9:45:c4:89:e1:24:d3:06:a0:1b:1e:05:1f: 4f:dc:53:e5:07:24:24:e6:5b:c9:c9:9f:b3:8b:e2: 02:97:99:ae:a7:30:0b:dd:9d:ac:a7:c4:2d:10:3d: a6:35:ec:8e:35:e8:99:16:3f:73:e4:1b:2e:11:bc: b4:11:6f:3d:02:bb:20:36:2d:f6:92:84:84:53:84: 4e:ad:f2:89:cb:57:e3:d0:a5:f5:22:65:3d:7e:46: 7b:16:99:d2:3d:45:b6:a5:4d:34:5d:e6:21:2d:67: 8d:bd:d1:9c:ad:8d:be:e9:88:b8:05:50:9a:f2:8f: 1d:3e:d3:12:69:9e:36:1c:19:9e:30:f8:32:be:9e: 87:28:0e:7d:f5:0b:fa:08:dc:5a:3c:b1:74:ee:89: 70:73:08:8b:e9:3c:b0:ee:43:8a:31:d0:6c:cf:82: 59:a3:16:fc:84:a0:7c:1f:eb:a7:b1:e6:b1:85:70: 12:0d:b0:73:b6:6a:54:0e:12:97:6a:48:fc:b0:01: f1:ae:bf:95:e0:0b:3c:4b:0f:38:25:ea:43:34:31: ec:22:54:41:0f:76:ba:f6:68:6b:71:9e:c3:57:18: fc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0F:91:05:17:7C:5A:B7:C2:05:14:25:39:67:7C:21:97:3E:69:8D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f8c4d340-c0df-4a5d-b1b5-e0a4c5a9350c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:b000::/40 Signature Algorithm: sha256WithRSAEncryption 59:d9:72:6b:5c:6d:f0:80:ee:64:ff:6a:36:50:cf:65:56:c7: ba:ac:8b:fb:00:93:f9:32:45:c4:59:2d:82:ff:66:9c:6e:10: 11:c1:a6:3a:6b:53:ca:7c:f5:d5:f2:4c:d0:21:15:d8:40:98: e0:ee:27:6a:97:4e:f2:f1:2a:8b:ac:50:7c:c1:94:3e:51:11: b0:1c:4e:0f:6a:77:76:99:8a:10:3e:af:f2:0a:f6:e2:7f:54: 1b:bc:67:03:bb:06:43:9b:cf:19:7e:a3:16:95:52:d7:9c:26: e2:49:a5:ae:c0:f3:91:64:ad:7b:c7:fd:28:0b:a7:77:f4:49: 0b:33:83:a0:85:24:93:a0:71:7b:09:e5:b4:5a:d2:ec:06:1e: 71:89:53:dd:5c:2e:86:36:70:a3:cc:a8:37:17:d1:35:5c:56: 92:b5:20:4d:9c:af:b4:82:37:5e:24:a9:2f:7d:81:c4:b4:11: 70:27:ef:6a:e8:b7:3b:1f:e5:75:0a:07:ad:cf:03:ab:70:ad: 6c:c0:2d:87:be:be:bb:fa:9e:36:31:92:05:86:3d:b3:c1:0c: fb:0f:cd:af:ff:db:33:6a:25:ad:08:3a:1d:65:8e:d8:d3:58: ab:6f:39:05:26:6c:ff:b3:d4:be:c0:a8:86:f0:1e:7f:74:1c: 2c:a7:03:bf -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJvOl+pSAvdgtZS9gtSVYDVMWCFkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyNDAwMDMwM1oX DTI3MDEyMjIzNTk1OVowejFJMEcGA1UEBRNAMTA2NTc4Mzg5ZGQ5NTViNDcyZGE2 ZWNlMDAzMzQwYjNjYWQzNzRhODBjMGM3NDdhMjIxMGY2YWMxODRjZmVhNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur1XJM3q8AEy7YWLfdzX8uKa16oU vnrP6XK9jqNb6slFxInhJNMGoBseBR9P3FPlByQk5lvJyZ+zi+ICl5mupzAL3Z2s p8QtED2mNeyONeiZFj9z5BsuEby0EW89ArsgNi32koSEU4ROrfKJy1fj0KX1ImU9 fkZ7FpnSPUW2pU00XeYhLWeNvdGcrY2+6Yi4BVCa8o8dPtMSaZ42HBmeMPgyvp6H KA599Qv6CNxaPLF07olwcwiL6Tyw7kOKMdBsz4JZoxb8hKB8H+unseaxhXASDbBz tmpUDhKXakj8sAHxrr+V4As8Sw84JepDNDHsIlRBD3a69mhrcZ7DVxj8HwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE8PkQUXfFq3wgUUJTlnfCGXPmmNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y4YzRkMzQwLWMwZGYtNGE1ZC1iMWI1LWUwYTRjNWE5MzUwYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7bAwDQYJKoZIhvcNAQELBQADggEBAFnZcmtcbfCA7mT/ajZQ z2VWx7qsi/sAk/kyRcRZLYL/ZpxuEBHBpjprU8p89dXyTNAhFdhAmODuJ2qXTvLx KousUHzBlD5REbAcTg9qd3aZihA+r/IK9uJ/VBu8ZwO7BkObzxl+oxaVUtecJuJJ pa7A85FkrXvH/SgLp3f0SQszg6CFJJOgcXsJ5bRa0uwGHnGJU91cLoY2cKPMqDcX 0TVcVpK1IE2cr7SCN14kqS99gcS0EXAn72rotzsf5XUKB63PA6twrWzALYe+vrv6 njYxkgWGPbPBDPsPza//2zNqJa0IOh1ljtjTWKtvOQUmbP+z1L7AqIbwHn90HCyn A78= -----END CERTIFICATE-----Generated at Thu Nov 5 04:24:57 2026 by rpki-client