$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa File: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (raw, json) Hash identifier: hHS0xXZ6pvh/dRVL58ms/OoVMs9w1l+Mtrrj03/9Ibs= Subject key identifier: 89:87:CB:E4:63:BA:C2:C6:BE:41:9E:92:7D:EB:06:C5:9E:4E:B8:A7 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 05B4EE5EB945ADF8317F0E9C586CEF62A5A929E7 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa Signing time: Fri 23 Oct 2026 00:02:51 +0000 ROA not before: Fri 23 Oct 2026 00:02:51 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Nov 2026 00:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b4:ee:5e:b9:45:ad:f8:31:7f:0e:9c:58:6c:ef:62:a5:a9:29:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Oct 23 00:02:51 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=ad021e9d4acdd5a6cb3cb787f60d1711dff64b2b2d5e890707ad25b2267d10e9, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ee:a4:38:ad:ec:99:4b:d1:8f:8a:2c:3a:77: 1c:b6:d7:93:86:dd:0b:93:cb:98:13:4c:e1:3e:ed: e9:d4:43:db:62:39:d2:a4:1c:2b:9f:c7:97:d6:c2: 25:20:be:7d:da:05:2f:1a:0c:3f:de:2d:b8:db:83: 8c:85:93:e3:0b:07:e3:24:bc:60:b3:71:99:b3:e4: 10:cc:5c:52:66:93:82:74:e4:08:d4:e9:6f:ae:93: 24:d9:ee:ca:5d:e7:21:8b:df:52:aa:03:1b:43:a7: 84:ef:5a:23:71:e2:d0:13:53:6a:c5:52:94:cd:c3: 82:3e:30:77:b4:ab:27:4a:14:75:cf:63:1c:9b:77: 96:77:b6:2a:d6:61:c0:07:f8:bc:b7:f9:80:00:6e: 3e:6a:9b:57:30:af:a4:3f:07:41:f3:33:8f:a4:30: 5e:f1:9f:b8:55:7a:29:e2:ba:2b:20:3e:2a:87:6e: 98:66:75:68:00:07:df:d7:ef:2a:97:68:2a:c3:c1: 63:9b:a7:ce:dd:3a:6e:03:ed:61:bf:ba:a2:eb:13: 0d:2e:d8:f4:42:96:e3:ca:62:c4:ae:29:61:f5:70: ef:8c:e3:a4:61:cd:3a:82:68:c7:4f:2c:7c:f9:19: 48:ed:ee:67:11:89:1e:4b:a6:90:64:2f:82:89:83: cd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:87:CB:E4:63:BA:C2:C6:BE:41:9E:92:7D:EB:06:C5:9E:4E:B8:A7 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300::/48 Signature Algorithm: sha256WithRSAEncryption 23:a8:ba:6a:ef:d4:48:a9:cf:83:47:74:ae:e8:49:7a:e3:b3: 23:fc:c7:43:e1:3f:c1:7e:3a:0f:71:64:f4:00:04:26:e6:b0: 95:27:0f:f5:f9:af:e4:40:47:bb:0b:9c:9d:30:78:ea:c8:8f: 11:16:37:d0:53:4c:7c:62:16:41:fd:b7:7a:ed:41:fa:d6:08: 5c:ce:bb:bc:90:33:d7:0b:f1:9b:77:e1:4a:d7:67:04:7a:a4: 85:e7:69:e7:de:43:86:6e:8b:2b:49:59:c3:90:d9:de:92:79: 09:99:e6:2a:37:0a:cb:29:d8:6d:c7:d8:41:5e:86:d7:a8:8a: 31:7b:28:86:52:07:7d:5e:d4:f7:a7:6a:41:aa:53:d8:77:80: 0b:8f:47:ee:bc:f9:27:33:a2:8c:40:4b:e2:30:b8:9b:62:ca: 72:1d:bf:21:57:29:4b:a4:2a:e1:fe:a3:0a:84:8e:2a:24:de: c6:74:7f:86:c6:f8:5b:18:34:77:23:74:b9:70:32:f6:3b:86: a8:b8:1e:ee:0e:7c:d7:34:08:ee:42:11:dc:83:d2:f1:97:87: 6a:3b:b1:60:d9:a2:60:fb:e4:29:61:f4:fb:2f:e9:74:de:ae: a4:8c:4c:0d:f3:80:68:34:ef:55:85:99:8e:56:e1:68:e2:67: 2f:2e:4a:4f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBbTuXrlFrfgxfw6cWGzvYqWpKecwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MTAyMzAwMDI1MVoX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAYWQwMjFlOWQ0YWNkZDVhNmNiM2Ni Nzg3ZjYwZDE3MTFkZmY2NGIyYjJkNWU4OTA3MDdhZDI1YjIyNjdkMTBlOTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru6kOK3smUvRj4osOncctteTht0L k8uYE0zhPu3p1EPbYjnSpBwrn8eX1sIlIL592gUvGgw/3i2424OMhZPjCwfjJLxg s3GZs+QQzFxSZpOCdOQI1OlvrpMk2e7KXechi99SqgMbQ6eE71ojceLQE1NqxVKU zcOCPjB3tKsnShR1z2Mcm3eWd7Yq1mHAB/i8t/mAAG4+aptXMK+kPwdB8zOPpDBe 8Z+4VXop4rorID4qh26YZnVoAAff1+8ql2gqw8Fjm6fO3TpuA+1hv7qi6xMNLtj0 QpbjymLErilh9XDvjOOkYc06gmjHTyx8+RlI7e5nEYkeS6aQZC+CiYPNnQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFImHy+RjusLGvkGekn3rBsWeTrinMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzM4MWZjNmU2LTVkNDktNDFiYy1iNTg0LWQ5NDM3YzY4ZTNjZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAjqLpq79RIqc+DR3Su 6El647Mj/MdD4T/BfjoPcWT0AAQm5rCVJw/1+a/kQEe7C5ydMHjqyI8RFjfQU0x8 YhZB/bd67UH61ghczru8kDPXC/Gbd+FK12cEeqSF52nn3kOGbosrSVnDkNneknkJ meYqNwrLKdhtx9hBXobXqIoxeyiGUgd9XtT3p2pBqlPYd4ALj0fuvPknM6KMQEvi MLibYspyHb8hVylLpCrh/qMKhI4qJN7GdH+GxvhbGDR3I3S5cDL2O4aouB7uDnzX NAjuQhHcg9Lxl4dqO7Fg2aJg++QpYfT7L+l03q6kjEwN84BoNO9VhZmOVuFo4mcv LkpP -----END CERTIFICATE-----Generated at Mon Nov 9 22:28:15 2026 by rpki-client