$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/205af9d8-3799-4d38-b1fb-da840e362ff1.roa File: 205af9d8-3799-4d38-b1fb-da840e362ff1.roa (raw, json) Hash identifier: CfoRQctZVykwqOvE284ka1MeJ4gy7lf22juzaT1cofM= Subject key identifier: 3E:0F:7C:BD:8B:B1:D4:AF:5F:3A:FD:F6:AB:DD:11:0F:E7:0D:0C:8D Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 324F62E3D17B26BF42FA9796319D39225017CA7A Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/205af9d8-3799-4d38-b1fb-da840e362ff1.roa Signing time: Fri 23 Oct 2026 00:02:52 +0000 ROA not before: Fri 23 Oct 2026 00:02:52 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8018::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 00:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4f:62:e3:d1:7b:26:bf:42:fa:97:96:31:9d:39:22:50:17:ca:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 23 00:02:52 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=d3eab7b3b202ca197ec91ab9374a03ce6db8ae508662e6049759be86958931ef, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:c7:69:85:90:f0:bc:3e:ef:33:91:9e:0c: e9:2d:49:ca:6d:f3:55:65:50:59:25:bd:9d:1e:f4: 62:49:3a:47:53:1d:c3:ad:25:d4:74:7b:29:ba:54: 86:77:80:8c:13:f4:56:58:90:db:95:7d:6d:9b:f6: ce:65:8a:e7:83:ae:11:4e:63:be:c7:89:56:56:1b: c3:ee:b3:fa:e4:44:d2:69:38:ae:f0:18:e1:a6:54: 0f:71:91:05:d0:35:74:e7:f0:5e:db:e4:ff:33:3b: 3e:5e:74:b4:66:a3:9d:6e:c7:53:19:61:62:d0:4a: 3c:8b:a8:ff:16:9f:43:a8:d6:51:80:38:30:00:1b: f1:04:ee:f6:45:b6:a8:ce:32:e7:71:fc:9e:e2:7a: 2a:91:8a:bd:4e:a3:7e:64:0a:56:80:a6:f7:a0:93: fd:b1:67:e7:48:d0:b9:92:c3:1b:55:66:c2:5a:ae: 10:4e:27:98:05:82:64:eb:31:c3:56:be:af:49:f7: 95:b8:a5:8a:df:56:e8:4b:39:b0:b0:d5:fd:58:48: 0e:0f:08:59:df:76:a5:c2:00:a3:37:cc:1d:83:d8: 74:ae:88:14:42:c7:51:46:39:62:71:0a:4c:89:d9: ad:04:79:a8:a1:61:15:1b:d4:22:20:79:ad:4c:4a: 29:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0F:7C:BD:8B:B1:D4:AF:5F:3A:FD:F6:AB:DD:11:0F:E7:0D:0C:8D X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/205af9d8-3799-4d38-b1fb-da840e362ff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8018::/36 Signature Algorithm: sha256WithRSAEncryption 02:bd:c8:75:65:27:9f:9c:7e:f2:fd:d5:9a:37:ba:48:cb:76: c2:6f:33:4f:85:92:6b:ad:9e:83:a1:53:91:d4:22:9c:1c:ad: 5a:35:74:2d:ad:42:df:39:bf:88:af:82:2e:41:b2:57:3a:15: 6a:6f:71:c9:57:2d:36:eb:0c:8c:5e:c6:ae:01:78:58:8c:31: 27:ca:c6:d7:5b:82:67:84:06:0c:32:59:c0:52:a8:93:48:94: 50:ca:7b:ce:c5:69:6b:98:b4:6c:53:be:ea:fd:45:8f:3f:41: 25:4f:54:90:0b:24:15:82:3e:1b:4f:ad:a2:8d:c3:a2:f8:64: 7c:c4:dd:32:96:70:b3:e1:7c:c2:44:b1:c1:33:0e:95:ae:38: 2d:cb:fc:04:ec:2f:71:84:a1:aa:4c:59:e2:3f:67:8e:fc:de: 65:28:a9:2b:a3:1d:08:6c:24:37:73:31:f2:bc:6e:e9:15:58: 9a:04:10:18:7d:5f:d5:ed:4b:63:15:a3:10:e4:0c:b3:1b:27: 17:24:de:32:2f:d9:7d:b6:cc:40:dc:15:1c:82:2e:37:5f:bd: 62:f0:3e:e4:7b:b6:08:e9:91:97:55:82:15:af:f0:1f:ee:e8: e6:4b:c2:75:f7:96:27:28:c4:1e:7e:28:92:95:cb:3e:8c:c6: da:0a:29:8b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMk9i49F7Jr9C+peWMZ05IlAXynowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMzAwMDI1MloX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAZDNlYWI3YjNiMjAyY2ExOTdlYzkx YWI5Mzc0YTAzY2U2ZGI4YWU1MDg2NjJlNjA0OTc1OWJlODY5NTg5MzFlZjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMPHaYWQ8Lw+7zORngzpLUnKbfNV ZVBZJb2dHvRiSTpHUx3DrSXUdHspulSGd4CME/RWWJDblX1tm/bOZYrng64RTmO+ x4lWVhvD7rP65ETSaTiu8BjhplQPcZEF0DV05/Be2+T/Mzs+XnS0ZqOdbsdTGWFi 0Eo8i6j/Fp9DqNZRgDgwABvxBO72RbaozjLncfye4noqkYq9TqN+ZApWgKb3oJP9 sWfnSNC5ksMbVWbCWq4QTieYBYJk6zHDVr6vSfeVuKWK31boSzmwsNX9WEgODwhZ 33alwgCjN8wdg9h0rogUQsdRRjlicQpMidmtBHmooWEVG9QiIHmtTEopKwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFD4PfL2LsdSvXzr99qvdEQ/nDQyNMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzIwNWFmOWQ4LTM3OTktNGQzOC1iMWZiLWRhODQwZTM2MmZmMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJA+AGAAwDQYJKoZIhvcNAQELBQADggEBAAK9yHVlJ5+cfvL91Zo3 ukjLdsJvM0+FkmutnoOhU5HUIpwcrVo1dC2tQt85v4ivgi5Bslc6FWpvcclXLTbr DIxexq4BeFiMMSfKxtdbgmeEBgwyWcBSqJNIlFDKe87FaWuYtGxTvur9RY8/QSVP VJALJBWCPhtPraKNw6L4ZHzE3TKWcLPhfMJEscEzDpWuOC3L/ATsL3GEoapMWeI/ Z4783mUoqSujHQhsJDdzMfK8bukVWJoEEBh9X9XtS2MVoxDkDLMbJxck3jIv2X22 zEDcFRyCLjdfvWLwPuR7tgjpkZdVghWv8B/u6OZLwnX3licoxB5+KJKVyz6MxtoK KYs= -----END CERTIFICATE-----Generated at Wed Nov 11 11:51:52 2026 by rpki-client