$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa File: 29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa (raw, json) Hash identifier: YkhhA+7JbSEsrpRYjiC64ZxMiv+Z+QwUViU8RwB0amg= Subject key identifier: B0:D4:30:75:D8:AE:29:F5:61:18:75:17:D2:83:6B:0F:F8:3B:79:7A Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 31788AC7ED4CCBD180C30BE540A19E5D0047E53F Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa Signing time: Fri 23 Oct 2026 00:03:03 +0000 ROA not before: Fri 23 Oct 2026 00:03:03 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8018:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 00:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:78:8a:c7:ed:4c:cb:d1:80:c3:0b:e5:40:a1:9e:5d:00:47:e5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 23 00:03:03 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=979d833408db8abf4b594a1978cf0f63f33132522d78883694fb8da9cde9601b, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:00:02:e7:60:1a:7a:cc:24:8f:09:0d:85:58: d1:dd:a6:99:07:15:31:f6:5c:e1:a9:4d:21:f5:ff: ad:ec:d7:f5:08:0a:eb:2d:a5:b0:91:65:89:3e:ce: b1:99:ec:a8:eb:bc:d5:6c:4a:ae:96:9f:29:ad:de: df:b6:2d:ca:1d:9d:f9:cf:0f:95:ac:02:a6:b8:2c: 7b:d0:be:06:66:13:ae:b3:9c:b3:cd:33:ca:24:2e: 13:7b:68:7b:26:b1:7c:fa:c9:f7:2d:dd:06:3a:e3: d5:9e:8a:ea:a8:19:03:49:99:5a:2e:3a:7b:30:81: 58:c4:73:a9:b8:39:59:3e:d6:33:d5:62:df:4a:c6: d1:5a:aa:2c:e1:c5:da:59:86:bb:9e:b7:e4:4f:bd: de:e7:2b:63:30:e1:97:76:e4:6b:0d:cf:5a:23:56: 22:13:2e:b4:35:d3:41:86:f2:ed:45:bb:e9:33:e4: c9:51:ec:4d:2c:aa:29:5d:a0:0a:3e:de:b0:40:5f: 93:ac:b5:b5:df:12:f8:0c:42:43:8c:1d:15:46:1d: 2b:81:d6:93:dd:26:ec:b2:86:c2:dd:34:48:4f:60: 77:c9:a2:83:d7:67:97:2b:5f:22:6e:98:c4:2b:9d: 72:e2:7b:4d:00:3d:f2:f0:59:b8:cd:19:63:9a:59: 4e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D4:30:75:D8:AE:29:F5:61:18:75:17:D2:83:6B:0F:F8:3B:79:7A X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8018:c00::/38 Signature Algorithm: sha256WithRSAEncryption 8a:4a:41:7d:11:6b:9d:01:ed:3f:99:23:86:df:42:9e:cf:f3: 2a:36:c5:9c:ef:d6:de:d0:9c:f7:50:48:88:97:e9:2b:78:2b: 0c:1c:be:dd:56:33:22:85:72:7f:ef:b4:8c:67:fe:07:21:6b: 78:4d:66:4d:10:58:b5:bb:01:fd:49:17:60:a6:74:75:a0:63: af:1b:2c:f0:d7:da:ee:ec:69:fe:35:ee:ba:60:43:99:a9:7c: 18:b9:70:2b:e3:67:58:c8:6b:93:e4:95:aa:5c:53:91:6c:a8: 6b:f1:cb:df:0c:c7:f4:e2:40:92:58:e2:04:b0:85:c2:e4:6f: da:b0:f4:c8:18:91:60:14:f6:d1:0a:dd:b0:43:3f:6f:10:c3: 8e:65:01:56:97:f0:13:d4:c8:a2:28:d4:9a:47:89:cd:1e:33: 3f:71:1b:65:07:6b:b0:de:fc:f2:c0:b9:ca:ac:64:b1:9c:43: 2d:65:c0:9c:7b:21:5b:8c:86:f7:21:52:0b:f5:3b:88:c6:17: 76:5f:39:66:e9:be:4f:d5:fb:e2:5c:3b:2d:88:ff:67:34:c4: 1a:d6:db:d5:66:26:09:45:22:d5:eb:30:49:cf:ec:19:16:73: e9:47:e3:60:7f:17:99:8b:b7:fa:83:ed:f8:0a:04:3a:58:17: a6:80:1e:6c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMXiKx+1My9GAwwvlQKGeXQBH5T8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMzAwMDMwM1oX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAOTc5ZDgzMzQwOGRiOGFiZjRiNTk0 YTE5NzhjZjBmNjNmMzMxMzI1MjJkNzg4ODM2OTRmYjhkYTljZGU5NjAxYjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQAC52AaeswkjwkNhVjR3aaZBxUx 9lzhqU0h9f+t7Nf1CArrLaWwkWWJPs6xmeyo67zVbEqulp8prd7fti3KHZ35zw+V rAKmuCx70L4GZhOus5yzzTPKJC4Te2h7JrF8+sn3Ld0GOuPVnorqqBkDSZlaLjp7 MIFYxHOpuDlZPtYz1WLfSsbRWqos4cXaWYa7nrfkT73e5ytjMOGXduRrDc9aI1Yi Ey60NdNBhvLtRbvpM+TJUexNLKopXaAKPt6wQF+TrLW13xL4DEJDjB0VRh0rgdaT 3SbssobC3TRIT2B3yaKD12eXK18ibpjEK51y4ntNAD3y8Fm4zRljmllOhwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLDUMHXYrin1YRh1F9KDaw/4O3l6MB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzI5ZmU0NDU0LWY3YTgtNDJmZC04YzM1LTc3YTZkNmY4ZTYwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AGAwwDQYJKoZIhvcNAQELBQADggEBAIpKQX0Ra50B7T+ZI4bf Qp7P8yo2xZzv1t7QnPdQSIiX6St4Kwwcvt1WMyKFcn/vtIxn/gcha3hNZk0QWLW7 Af1JF2CmdHWgY68bLPDX2u7saf417rpgQ5mpfBi5cCvjZ1jIa5PklapcU5FsqGvx y98Mx/TiQJJY4gSwhcLkb9qw9MgYkWAU9tEK3bBDP28Qw45lAVaX8BPUyKIo1JpH ic0eMz9xG2UHa7De/PLAucqsZLGcQy1lwJx7IVuMhvchUgv1O4jGF3ZfOWbpvk/V ++JcOy2I/2c0xBrW29VmJglFItXrMEnP7BkWc+lH42B/F5mLt/qD7fgKBDpYF6aA Hmw= -----END CERTIFICATE-----Generated at Wed Nov 11 14:11:20 2026 by rpki-client