$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc6018c2-5114-40b5-8a1b-8a6f01680f9e.roa File: dc6018c2-5114-40b5-8a1b-8a6f01680f9e.roa (raw, json) Hash identifier: 9VbBnQ1EW3bvTQYY3B7GIrhsQEGA8tmKEGVPvro+5xA= Subject key identifier: 66:51:C7:97:BA:E8:34:57:23:2A:C3:90:F7:E3:B6:FD:D2:FA:15:C9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 31BEAD3EC47F367CA0436CCC4AE530451E6AC48A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc6018c2-5114-40b5-8a1b-8a6f01680f9e.roa Signing time: Mon 19 Oct 2026 00:09:05 +0000 ROA not before: Mon 19 Oct 2026 00:09:05 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 00:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:be:ad:3e:c4:7f:36:7c:a0:43:6c:cc:4a:e5:30:45:1e:6a:c4:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:09:05 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=ce54ca623a52e5e15bb034b9541bb7d0785f2173e9b5dc3749a66a8d361d1422, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:54:9d:41:47:b2:68:81:66:92:c5:1d:1e: 9d:f6:e7:dc:5a:86:de:d9:78:f6:c3:f9:97:62:90: 96:c7:5c:25:c3:8d:c8:e7:7a:bd:e6:ab:bd:8e:6d: 63:58:73:8b:08:81:0f:27:a2:56:60:85:b7:42:6b: 44:fd:49:0c:77:a7:46:b2:62:39:fd:6f:75:ab:7c: 38:54:68:29:28:c1:5f:56:ce:6e:3f:d6:e4:c5:ce: 7f:28:d6:8e:12:3e:f0:77:14:80:a1:9a:c0:21:35: 13:29:42:38:b2:35:2c:2d:24:eb:09:c3:4f:33:d0: f3:b8:4f:fc:a0:7f:2b:92:b0:fa:2e:cd:f3:4e:28: b6:3a:08:e6:80:d5:4f:eb:75:0b:6b:9c:17:92:1b: 04:8f:df:05:d3:24:0e:d0:19:71:02:39:fc:26:04: 11:f7:d4:4d:0c:b7:d4:0c:44:2c:f5:8f:1f:cb:b6: 08:38:3a:5b:3e:85:f5:3c:d9:8b:9a:c3:1d:ee:f0: 53:42:64:be:5b:eb:7e:2d:76:dd:e6:7d:6f:20:64: 7b:8d:91:f0:f8:d8:ac:78:65:c1:6e:38:b9:ef:b1: 4b:67:4e:b4:5f:e2:2b:8d:b4:96:b2:2c:5d:40:22: b8:bf:2a:d6:cd:39:25:9a:4e:55:54:b5:df:2b:eb: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:51:C7:97:BA:E8:34:57:23:2A:C3:90:F7:E3:B6:FD:D2:FA:15:C9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc6018c2-5114-40b5-8a1b-8a6f01680f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:f000::/48 Signature Algorithm: sha256WithRSAEncryption 22:5b:27:e6:8e:9d:4e:63:89:9e:91:0d:8f:67:f9:81:40:0a: cf:c5:a7:db:34:38:57:28:48:72:ff:8d:32:1f:28:c4:1a:d9: c7:0b:f1:bd:9d:2a:f5:b5:a4:15:a7:2b:36:9f:85:b6:e3:a6: b7:08:46:97:62:93:cc:33:d0:03:7c:e6:ac:f5:27:7d:65:6c: 6c:45:35:58:4a:e4:01:4d:9a:dd:dd:f4:73:c9:51:e0:af:0b: 07:45:b1:b6:0b:9f:ec:b7:5a:0c:8e:b1:40:95:3a:35:38:58: ed:7e:55:ab:af:40:d3:40:7c:c4:31:0a:87:24:38:d9:f4:3a: 12:71:91:a1:09:5b:c3:90:d8:92:a4:1c:10:10:1c:5e:76:e3: a9:1a:82:6a:93:0a:12:52:10:09:8a:cb:bf:8c:d2:41:ad:8f: 06:65:e2:97:ba:ba:4f:5b:49:2f:14:07:ef:b2:57:8b:ca:c0: 73:27:89:ca:d3:fe:e2:63:e8:d2:d2:a7:57:cd:87:fc:63:66: fd:01:0b:4f:06:bf:b0:0c:9c:10:ec:27:b4:89:10:d6:da:e6: 82:fd:15:a1:9d:6f:dc:79:cd:4a:7c:e6:ce:c7:7d:a4:e3:ca: 63:86:e9:b4:ea:55:91:b9:9e:aa:62:44:87:4e:c9:8f:b4:9e: ca:6a:fd:2a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMb6tPsR/NnygQ2zMSuUwRR5qxIowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxOTAwMDkwNVoX DTI3MDExNzIzNTk1OVowejFJMEcGA1UEBRNAY2U1NGNhNjIzYTUyZTVlMTViYjAz NGI5NTQxYmI3ZDA3ODVmMjE3M2U5YjVkYzM3NDlhNjZhOGQzNjFkMTQyMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoxUnUFHsmiBZpLFHR6d9ufcWobe 2Xj2w/mXYpCWx1wlw43I53q95qu9jm1jWHOLCIEPJ6JWYIW3QmtE/UkMd6dGsmI5 /W91q3w4VGgpKMFfVs5uP9bkxc5/KNaOEj7wdxSAoZrAITUTKUI4sjUsLSTrCcNP M9DzuE/8oH8rkrD6Ls3zTii2OgjmgNVP63ULa5wXkhsEj98F0yQO0BlxAjn8JgQR 99RNDLfUDEQs9Y8fy7YIODpbPoX1PNmLmsMd7vBTQmS+W+t+LXbd5n1vIGR7jZHw +NiseGXBbji577FLZ060X+IrjbSWsixdQCK4vyrWzTklmk5VVLXfK+soUwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGZRx5e66DRXIyrDkPfjtv3S+hXJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RjNjAxOGMyLTUxMTQtNDBiNS04YTFiLThhNmYwMTY4MGY5ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7PAAMA0GCSqGSIb3DQEBCwUAA4IBAQAiWyfmjp1OY4mekQ2P Z/mBQArPxafbNDhXKEhy/40yHyjEGtnHC/G9nSr1taQVpys2n4W246a3CEaXYpPM M9ADfOas9Sd9ZWxsRTVYSuQBTZrd3fRzyVHgrwsHRbG2C5/st1oMjrFAlTo1OFjt flWrr0DTQHzEMQqHJDjZ9DoScZGhCVvDkNiSpBwQEBxeduOpGoJqkwoSUhAJisu/ jNJBrY8GZeKXurpPW0kvFAfvsleLysBzJ4nK0/7iY+jS0qdXzYf8Y2b9AQtPBr+w DJwQ7Ce0iRDW2uaC/RWhnW/cec1KfObOx32k48pjhum06lWRuZ6qYkSHTsmPtJ7K av0q -----END CERTIFICATE-----Generated at Thu Nov 12 20:58:40 2026 by rpki-client