$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/afd5a2d0-5e14-4939-9e39-1f9f26e2f67e.roa File: afd5a2d0-5e14-4939-9e39-1f9f26e2f67e.roa (raw, json) Hash identifier: xTjwmx+YteUESkpPu69VUK5Qm5fGLjhXlsBoX/y8PXE= Subject key identifier: CD:80:B8:1E:04:A8:63:C2:41:F7:CD:A9:6D:5E:92:A5:C2:3F:33:0A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6D134564939AFE604C4C93CB0B247F7688D014A2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/afd5a2d0-5e14-4939-9e39-1f9f26e2f67e.roa Signing time: Mon 26 Oct 2026 00:02:45 +0000 ROA not before: Mon 26 Oct 2026 00:02:45 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1a:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 00:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:13:45:64:93:9a:fe:60:4c:4c:93:cb:0b:24:7f:76:88:d0:14:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 26 00:02:45 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=aee003928b904a18ec689546c33bca62f550439fd7c3f941d8b4929c0ebc32bb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:ab:40:75:06:40:06:50:f6:3c:0a:10:a1: 0d:1d:82:d0:7d:13:40:9a:80:77:33:ba:82:6a:49: 55:df:7d:28:d4:64:d1:c1:19:e8:21:e8:b8:22:ae: 57:b4:20:cc:35:a7:f1:42:f4:4e:79:aa:58:38:3b: 8d:01:c5:8d:e8:a7:3e:0a:bf:02:c3:1f:3a:ef:09: 6a:91:10:8e:a9:eb:ba:87:29:0c:06:c9:6b:5e:a0: 0e:c7:27:ab:d4:38:3f:15:84:ca:44:6b:00:36:ad: 61:92:d7:9c:65:83:89:3e:ce:80:00:c0:46:3c:a8: eb:4b:09:61:5c:46:18:a3:95:ae:8d:e4:e5:3c:59: 16:24:11:08:b3:d5:32:21:08:b6:1f:e9:00:fd:fe: 9b:37:05:f9:b8:78:dc:23:6a:68:99:b5:34:9f:94: 34:20:45:d5:82:0e:68:85:57:76:17:ac:8a:a3:52: 5a:32:6d:4f:ae:12:50:64:90:16:3f:d3:ad:d3:59: 43:db:51:c0:97:45:45:7f:ea:c7:d7:98:62:a3:0d: 34:01:98:a9:03:70:df:88:02:35:3b:96:f8:1a:d3: 25:4b:ab:aa:17:ca:df:1c:79:83:06:a1:90:17:2f: c8:f7:64:5a:c5:3b:12:3e:05:5a:0c:43:6e:ec:2a: 97:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:80:B8:1E:04:A8:63:C2:41:F7:CD:A9:6D:5E:92:A5:C2:3F:33:0A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/afd5a2d0-5e14-4939-9e39-1f9f26e2f67e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1a:8000::/36 Signature Algorithm: sha256WithRSAEncryption 10:8d:98:01:30:da:1a:99:34:9c:29:ba:74:47:e5:1c:e5:06: 5d:7e:1a:58:79:58:a4:3b:66:a2:b6:73:c7:62:e9:e7:6a:e5: 8f:19:3c:28:3c:78:e0:60:7c:95:d8:c5:80:53:d6:02:fe:32: 2d:7e:6a:1e:9c:37:9f:92:2b:e4:88:f0:83:7c:24:75:a1:27: 86:69:a2:43:87:72:24:65:c4:08:c8:07:1d:76:e8:35:48:f3: e8:c0:ee:4a:4a:81:88:eb:fa:d1:d0:68:8a:9d:48:27:b1:95: 35:1a:cd:b6:44:7d:b6:07:72:73:19:b7:a9:26:61:4a:5c:50: 0c:45:75:84:15:f5:2a:37:a2:51:10:45:93:9d:8a:f7:6b:ac: 4b:80:cd:36:1e:36:c9:39:18:7e:31:39:be:79:94:0b:d7:69: b6:6e:22:b5:fb:9e:5c:e5:f0:01:5d:ca:d2:f7:e4:f1:7d:5a: 85:25:de:d3:f3:f8:86:48:04:7b:fd:aa:e0:c3:86:7c:93:8e: b8:7d:8c:b6:19:24:59:42:25:2d:4d:cf:a5:27:77:b0:e8:27: 62:e6:78:f0:e1:29:cc:a4:36:35:01:02:1c:12:9a:56:85:2d: 69:2f:cd:47:ee:04:c3:72:f3:97:14:ac:a4:92:b0:de:9a:67: 88:99:47:e1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbRNFZJOa/mBMTJPLCyR/dojQFKIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyNjAwMDI0NVoX DTI3MDEyNDIzNTk1OVowejFJMEcGA1UEBRNAYWVlMDAzOTI4YjkwNGExOGVjNjg5 NTQ2YzMzYmNhNjJmNTUwNDM5ZmQ3YzNmOTQxZDhiNDkyOWMwZWJjMzJiYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA6rQHUGQAZQ9jwKEKENHYLQfRNA moB3M7qCaklV330o1GTRwRnoIei4Iq5XtCDMNafxQvROeapYODuNAcWN6Kc+Cr8C wx867wlqkRCOqeu6hykMBslrXqAOxyer1Dg/FYTKRGsANq1hktecZYOJPs6AAMBG PKjrSwlhXEYYo5WujeTlPFkWJBEIs9UyIQi2H+kA/f6bNwX5uHjcI2pombU0n5Q0 IEXVgg5ohVd2F6yKo1JaMm1PrhJQZJAWP9Ot01lD21HAl0VFf+rH15hiow00AZip A3DfiAI1O5b4GtMlS6uqF8rfHHmDBqGQFy/I92RaxTsSPgVaDENu7CqX8QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFM2AuB4EqGPCQffNqW1ekqXCPzMKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FmZDVhMmQwLTVlMTQtNDkzOS05ZTM5LTFmOWYyNmUyZjY3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaGoAwDQYJKoZIhvcNAQELBQADggEBABCNmAEw2hqZNJwpunRH 5RzlBl1+Glh5WKQ7ZqK2c8di6edq5Y8ZPCg8eOBgfJXYxYBT1gL+Mi1+ah6cN5+S K+SI8IN8JHWhJ4ZpokOHciRlxAjIBx126DVI8+jA7kpKgYjr+tHQaIqdSCexlTUa zbZEfbYHcnMZt6kmYUpcUAxFdYQV9So3olEQRZOdivdrrEuAzTYeNsk5GH4xOb55 lAvXabZuIrX7nlzl8AFdytL35PF9WoUl3tPz+IZIBHv9quDDhnyTjrh9jLYZJFlC JS1Nz6Und7DoJ2LmePDhKcykNjUBAhwSmlaFLWkvzUfuBMNy85cUrKSSsN6aZ4iZ R+E= -----END CERTIFICATE-----Generated at Thu Nov 12 21:59:59 2026 by rpki-client