$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/64aa0337-4cf9-42c7-b236-4cd36e69005e.roa File: 64aa0337-4cf9-42c7-b236-4cd36e69005e.roa (raw, json) Hash identifier: /H4QkYjZt2v6wBPkXcmJEgoFPLgl9IqVYYw1XG6gR5g= Subject key identifier: 4C:3C:F6:55:18:CE:5D:7E:90:47:54:DA:88:4A:29:69:93:FA:B8:23 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 7CDA63599B2FE3FB6DC9F2476562E585D8CE61E3 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/64aa0337-4cf9-42c7-b236-4cd36e69005e.roa Signing time: Fri 23 Oct 2026 00:02:52 +0000 ROA not before: Fri 23 Oct 2026 00:02:52 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80f1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:da:63:59:9b:2f:e3:fb:6d:c9:f2:47:65:62:e5:85:d8:ce:61:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 23 00:02:52 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=c03a0f50dcae78bbdb7464f003e50f71c1ebae9db3e710ae472e41efbcdffc80, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:e9:63:1d:9e:43:08:81:60:44:aa:5b:54: 35:5a:93:f9:ab:ef:c6:24:1b:02:a4:0e:48:18:bc: fd:3c:cd:73:ba:e9:f6:4e:36:fc:8b:f0:08:66:fa: 6f:ce:bb:f6:a2:38:95:be:1b:25:7d:b5:16:d3:1f: 8d:6d:55:70:d3:84:00:4a:82:d6:30:63:da:8e:b2: f0:09:77:55:ea:b3:a6:30:aa:b0:12:f0:2d:48:e7: f3:16:62:45:0a:f3:8e:2f:0a:f9:2c:65:47:c5:91: fd:cc:3c:f3:6b:7a:2e:37:87:51:6b:e0:dd:1a:29: 95:ce:7d:90:0f:15:54:90:98:92:65:54:6b:9b:3c: 76:ca:95:c1:fe:2c:39:cc:47:44:ce:d3:05:95:53: db:9b:51:9e:77:c3:94:28:70:75:46:b1:1a:8c:62: fe:d1:03:cf:20:32:cb:a6:f9:09:16:28:95:1f:66: 9b:de:b8:48:80:e2:c1:14:15:cf:79:7c:31:a3:8f: 57:22:59:01:40:9c:1a:13:13:a0:07:cc:ff:9c:31: 1f:63:e3:d2:d2:d4:2c:61:97:1a:b7:5d:5a:9e:40: e0:ab:80:e3:22:9b:b9:42:da:09:72:0c:24:f6:7c: 34:5a:de:3f:28:8f:5d:d5:53:58:4d:bc:80:59:f2: eb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3C:F6:55:18:CE:5D:7E:90:47:54:DA:88:4A:29:69:93:FA:B8:23 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/64aa0337-4cf9-42c7-b236-4cd36e69005e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80f1::/32 Signature Algorithm: sha256WithRSAEncryption 48:61:d1:15:96:94:7f:e4:a1:c4:2e:e8:1a:5f:62:5d:f4:e0: cc:3c:f0:59:20:9c:60:d0:4f:ad:6b:e6:78:a4:67:3a:5c:88: 97:c8:b0:10:89:f7:46:4a:e1:c3:11:f7:da:2b:31:5f:c2:51: 9d:ab:ed:cf:a8:6a:06:9c:c6:2b:16:a2:e5:9b:9c:a1:d2:d6: e3:3a:8f:8b:e8:03:0e:fb:ab:d4:5e:21:02:e1:31:03:a3:eb: 37:af:18:ab:81:4c:65:6a:70:76:b4:2c:56:87:99:47:5a:fc: 84:42:95:e6:26:39:05:0c:b0:1b:ee:fb:03:c6:58:0b:21:43: 39:79:72:f7:03:af:1b:b1:82:2d:d2:5a:1f:8a:92:a8:11:03: 67:27:b0:4e:8d:c2:78:56:d9:9c:37:75:3b:97:80:88:bb:c4: 57:5e:7a:44:70:ce:fe:17:49:f6:19:d4:6f:71:cf:5a:4b:d1: 66:1f:75:ab:65:9b:77:53:a5:6c:2b:52:d2:df:11:75:9b:ca: b3:7e:41:6a:b7:47:13:85:88:f6:65:9d:cc:56:96:09:6c:fa: 3f:c3:ab:3f:62:72:3c:80:07:ce:93:e6:1b:7b:9e:93:28:da: ab:6c:c7:e4:cb:23:71:c4:d6:64:70:f2:ef:eb:9b:06:12:fe: 60:d5:68:7f -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUfNpjWZsv4/ttyfJHZWLlhdjOYeMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMzAwMDI1MloX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAYzAzYTBmNTBkY2FlNzhiYmRiNzQ2 NGYwMDNlNTBmNzFjMWViYWU5ZGIzZTcxMGFlNDcyZTQxZWZiY2RmZmM4MDEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE/pYx2eQwiBYESqW1Q1WpP5q+/G JBsCpA5IGLz9PM1zuun2Tjb8i/AIZvpvzrv2ojiVvhslfbUW0x+NbVVw04QASoLW MGPajrLwCXdV6rOmMKqwEvAtSOfzFmJFCvOOLwr5LGVHxZH9zDzza3ouN4dRa+Dd GimVzn2QDxVUkJiSZVRrmzx2ypXB/iw5zEdEztMFlVPbm1Ged8OUKHB1RrEajGL+ 0QPPIDLLpvkJFiiVH2ab3rhIgOLBFBXPeXwxo49XIlkBQJwaExOgB8z/nDEfY+PS 0tQsYZcat11ankDgq4DjIpu5QtoJcgwk9nw0Wt4/KI9d1VNYTbyAWfLr/QIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFEw89lUYzl1+kEdU2ohKKWmT+rgjMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzY0YWEwMzM3LTRjZjktNDJjNy1iMjM2LTRjZDM2ZTY5MDA1ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJA+A8TANBgkqhkiG9w0BAQsFAAOCAQEASGHRFZaUf+ShxC7oGl9i XfTgzDzwWSCcYNBPrWvmeKRnOlyIl8iwEIn3RkrhwxH32isxX8JRnavtz6hqBpzG Kxai5ZucodLW4zqPi+gDDvur1F4hAuExA6PrN68Yq4FMZWpwdrQsVoeZR1r8hEKV 5iY5BQywG+77A8ZYCyFDOXly9wOvG7GCLdJaH4qSqBEDZyewTo3CeFbZnDd1O5eA iLvEV156RHDO/hdJ9hnUb3HPWkvRZh91q2Wbd1OlbCtS0t8RdZvKs35BardHE4WI 9mWdzFaWCWz6P8OrP2JyPIAHzpPmG3uekyjaq2zH5MsjccTWZHDy7+ubBhL+YNVo fw== -----END CERTIFICATE-----Generated at Thu Nov 5 05:04:24 2026 by rpki-client