$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/baa01805-cb98-4c85-9fa0-fdff4c3b18af.roa File: baa01805-cb98-4c85-9fa0-fdff4c3b18af.roa (raw, json) Hash identifier: eRwGP/m0icEyDqsjhbWx8JnbkC7jP9WYmgxfbLsody0= Subject key identifier: 3A:59:5C:2F:68:2B:A3:F8:F6:D6:58:00:CA:D9:FE:86:92:9C:72:70 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 23E6105EFF340DC27BB74EEE1EC8BB197AA0C5E1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/baa01805-cb98-4c85-9fa0-fdff4c3b18af.roa Signing time: Mon 19 Oct 2026 00:09:59 +0000 ROA not before: Mon 19 Oct 2026 00:09:59 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 00:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e6:10:5e:ff:34:0d:c2:7b:b7:4e:ee:1e:c8:bb:19:7a:a0:c5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:09:59 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=8c4553b5afaed970b8412866bc5665e62f33c504a11291a83e94b2d6ec1e3a62, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:f5:94:fa:eb:37:08:ef:e8:68:e5:a7:73: 51:55:cf:5a:3f:be:4f:3e:c7:af:21:53:22:5f:c9: 92:72:c4:7a:9c:59:ac:04:f7:9f:22:96:41:80:5b: 7f:aa:0a:65:09:c6:dd:94:a7:fd:5b:19:fe:86:65: 16:cc:89:7f:d6:e7:3d:87:08:fe:d0:0f:b3:f5:b2: 92:c3:45:39:b8:43:6b:98:d2:f3:01:08:4b:f0:25: 06:06:98:58:62:28:e3:5e:d9:95:2b:12:a1:c0:c0: f8:c1:2a:74:6e:7c:6c:c9:db:6b:ba:c7:05:c8:c4: 2c:15:11:55:0d:91:aa:96:77:1a:53:d3:c6:94:42: bc:fc:39:de:8c:e8:c3:94:d3:c2:84:e4:52:08:71: 20:bc:79:46:df:1f:99:0b:f9:d3:8b:6e:a2:e6:2f: 86:fc:5a:95:5b:0a:fb:62:0b:09:09:ba:64:9b:a2: f8:a6:e0:a2:fc:75:05:e3:37:61:f9:46:59:7e:d3: f1:69:2c:01:df:90:8e:bf:11:fd:43:91:99:29:ec: fd:a6:80:df:42:2a:b7:fc:e8:52:c1:c8:4c:a1:e0: bc:c7:d6:da:88:d6:5d:ac:4d:75:40:b9:dc:ee:b0: 63:98:a0:f2:38:1e:75:2c:87:41:40:12:6b:80:f3: 23:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:59:5C:2F:68:2B:A3:F8:F6:D6:58:00:CA:D9:FE:86:92:9C:72:70 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/baa01805-cb98-4c85-9fa0-fdff4c3b18af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:7000::/48 Signature Algorithm: sha256WithRSAEncryption 69:3c:50:71:c8:f3:dd:26:a5:cd:da:ba:96:55:e7:d6:06:dd: 4d:b4:6f:20:38:2d:07:57:89:52:cc:57:a3:65:6a:35:90:4d: 22:ec:84:03:cc:1c:7d:48:36:8d:38:f0:11:95:b6:55:6f:66: ef:89:32:b9:b1:5e:cb:5f:d3:06:87:28:49:89:02:c9:94:6b: 28:52:2f:28:b1:9c:14:dc:1b:eb:96:a0:93:e4:ea:1d:14:2b: 0c:ec:13:97:5a:34:c1:5c:fb:31:63:3b:bd:26:40:b3:65:b8: 1d:8d:63:f0:0e:40:a5:50:ae:06:9d:64:f5:01:a3:ec:2a:16: a7:2c:2e:35:05:cf:d7:b0:aa:1d:c7:9b:31:ad:ea:00:bf:b1: f3:ad:84:eb:9b:62:73:07:b3:df:e2:d3:1a:d5:5f:04:8c:67: 73:10:b6:34:b3:dd:db:bd:6a:14:18:fd:f5:52:8f:24:5d:52: 5f:02:c9:d0:82:d8:49:f5:6b:36:0f:a2:15:70:bb:47:71:a2: 90:3e:08:33:df:8c:58:37:56:bc:4e:bd:9e:87:55:8e:9f:c8: a3:6f:8e:2a:1b:13:68:83:85:21:37:e0:24:16:e6:cb:4f:9c: 7f:e9:a0:d7:11:69:f1:d5:db:0f:2c:37:30:29:66:5c:ed:14: 20:17:27:e5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUI+YQXv80DcJ7t07uHsi7GXqgxeEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxOTAwMDk1OVoX DTI3MDExNzIzNTk1OVowejFJMEcGA1UEBRNAOGM0NTUzYjVhZmFlZDk3MGI4NDEy ODY2YmM1NjY1ZTYyZjMzYzUwNGExMTI5MWE4M2U5NGIyZDZlYzFlM2E2MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiL1lPrrNwjv6Gjlp3NRVc9aP75P PsevIVMiX8mScsR6nFmsBPefIpZBgFt/qgplCcbdlKf9Wxn+hmUWzIl/1uc9hwj+ 0A+z9bKSw0U5uENrmNLzAQhL8CUGBphYYijjXtmVKxKhwMD4wSp0bnxsydtruscF yMQsFRFVDZGqlncaU9PGlEK8/DnejOjDlNPChORSCHEgvHlG3x+ZC/nTi26i5i+G /FqVWwr7YgsJCbpkm6L4puCi/HUF4zdh+UZZftPxaSwB35COvxH9Q5GZKez9poDf Qiq3/OhSwchMoeC8x9baiNZdrE11QLnc7rBjmKDyOB51LIdBQBJrgPMj2wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDpZXC9oK6P49tZYAMrZ/oaSnHJwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JhYTAxODA1LWNiOTgtNGM4NS05ZmEwLWZkZmY0YzNiMThhZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7HAAMA0GCSqGSIb3DQEBCwUAA4IBAQBpPFBxyPPdJqXN2rqW VefWBt1NtG8gOC0HV4lSzFejZWo1kE0i7IQDzBx9SDaNOPARlbZVb2bviTK5sV7L X9MGhyhJiQLJlGsoUi8osZwU3BvrlqCT5OodFCsM7BOXWjTBXPsxYzu9JkCzZbgd jWPwDkClUK4GnWT1AaPsKhanLC41Bc/XsKodx5sxreoAv7HzrYTrm2JzB7Pf4tMa 1V8EjGdzELY0s93bvWoUGP31Uo8kXVJfAsnQgthJ9Ws2D6IVcLtHcaKQPggz34xY N1a8Tr2eh1WOn8ijb44qGxNog4UhN+AkFubLT5x/6aDXEWnx1dsPLDcwKWZc7RQg Fyfl -----END CERTIFICATE-----Generated at Thu Nov 12 20:51:54 2026 by rpki-client