$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/33dd31e0-7039-4ff8-aafe-97f7b95b07d0.roa File: 33dd31e0-7039-4ff8-aafe-97f7b95b07d0.roa (raw, json) Hash identifier: YBMrj2lfKeK1j4u3vNNUje6NdESOsFAVVFuGHvQLHAw= Subject key identifier: 89:69:03:27:AE:FA:23:6E:EC:7B:1F:12:6A:B6:CB:BD:20:62:E6:67 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 0B6DBC1C953472CBC09E91311BFAC1CF32B14E0E Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/33dd31e0-7039-4ff8-aafe-97f7b95b07d0.roa Signing time: Fri 23 Oct 2026 00:02:53 +0000 ROA not before: Fri 23 Oct 2026 00:02:53 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80ff:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 00:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:6d:bc:1c:95:34:72:cb:c0:9e:91:31:1b:fa:c1:cf:32:b1:4e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 23 00:02:53 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=03b8352461d215124b6fac948f4b2ef78fc5404fb096fb538c4e1151425e2cc5, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:95:56:3a:72:a2:c8:f2:4b:46:ec:da:12:40: b7:c3:9f:46:4d:9c:dc:e1:03:00:a4:ff:81:8a:77: 39:66:0c:82:07:15:0b:f6:b1:30:ac:89:b9:47:e4: bc:eb:e1:fa:b4:3c:b3:be:1e:9a:9e:a8:24:12:a5: cb:cf:86:8b:83:c3:d5:51:a1:bc:97:b8:13:1a:0c: b8:c2:e9:75:e1:48:16:9d:0f:0a:11:d1:67:ed:2c: fc:f8:17:b9:94:70:8f:6c:54:5b:3e:db:b1:a6:7e: 36:07:c8:9c:8a:e3:97:13:04:b9:2c:52:23:52:b1: fb:4f:70:d6:03:9c:2b:28:ee:c9:fa:f2:42:c0:17: 64:5c:e4:d4:46:a7:40:cb:d9:79:b0:22:1b:41:24: 30:33:48:c9:e2:1e:43:a1:9f:97:15:d6:f8:9f:54: f9:ea:74:99:c8:f3:7b:63:71:74:4b:53:bb:ee:9d: 0a:7f:a4:79:ec:31:fa:c5:77:f6:e9:76:45:a4:0a: 72:ad:95:4e:49:20:25:be:9c:15:f1:49:7a:b6:e7: e7:32:a5:79:95:29:8a:6c:19:d2:16:62:5f:3c:26: 29:f7:14:1a:f7:97:d5:cd:af:06:0f:30:fb:5e:8a: 27:ce:a5:b0:74:eb:68:cd:d0:f4:60:87:b3:21:cd: bd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:69:03:27:AE:FA:23:6E:EC:7B:1F:12:6A:B6:CB:BD:20:62:E6:67 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/33dd31e0-7039-4ff8-aafe-97f7b95b07d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80ff:4080::/48 Signature Algorithm: sha256WithRSAEncryption 58:e0:5f:7b:ff:3c:9a:c0:a9:55:64:cb:4c:ad:c7:13:0b:83: 32:15:74:d6:fe:a2:da:b2:5e:92:8d:55:76:34:df:48:57:aa: 03:37:82:af:3d:82:91:4e:5a:89:8d:54:4f:ad:f5:06:fc:43: 7d:36:a6:fb:00:14:54:6d:5d:59:de:0f:04:01:c3:fc:da:67: 83:98:6f:a1:c1:ee:bc:61:d6:49:c4:a8:e1:ba:fe:fa:2a:f5: 68:1a:32:54:c4:08:89:e4:da:82:e5:2e:e0:68:89:77:ce:9b: c0:0b:4b:44:43:cf:c6:1f:34:08:41:32:4f:b8:e8:4f:af:61: fd:db:95:57:0e:52:48:01:09:67:96:03:db:c3:c1:0c:f1:ea: bd:55:c1:ac:08:a7:9a:91:30:56:76:8a:5e:24:83:b0:06:cd: 55:f0:43:5e:0c:df:bb:72:db:b0:47:59:4c:65:f3:fb:6d:dd: 99:ca:44:da:29:e6:c6:b0:f5:f8:ff:9b:0e:ca:b6:d6:c9:21: dd:be:c7:6b:55:62:25:d7:79:aa:93:72:5f:65:df:29:94:85: d6:bf:72:5f:eb:a5:23:6d:7e:85:42:fb:0a:12:bb:54:05:80: 4c:ea:30:b7:6d:13:4e:90:b5:7f:40:60:d6:30:d4:89:37:03: 21:73:49:b2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUC228HJU0csvAnpExG/rBzzKxTg4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMzAwMDI1M1oX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAMDNiODM1MjQ2MWQyMTUxMjRiNmZh Yzk0OGY0YjJlZjc4ZmM1NDA0ZmIwOTZmYjUzOGM0ZTExNTE0MjVlMmNjNTEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZVWOnKiyPJLRuzaEkC3w59GTZzc 4QMApP+Binc5ZgyCBxUL9rEwrIm5R+S86+H6tDyzvh6anqgkEqXLz4aLg8PVUaG8 l7gTGgy4wul14UgWnQ8KEdFn7Sz8+Be5lHCPbFRbPtuxpn42B8iciuOXEwS5LFIj UrH7T3DWA5wrKO7J+vJCwBdkXOTURqdAy9l5sCIbQSQwM0jJ4h5DoZ+XFdb4n1T5 6nSZyPN7Y3F0S1O77p0Kf6R57DH6xXf26XZFpApyrZVOSSAlvpwV8Ul6tufnMqV5 lSmKbBnSFmJfPCYp9xQa95fVza8GDzD7XoonzqWwdOtozdD0YIezIc29VQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIlpAyeu+iNu7HsfEmq2y70gYuZnMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzMzZGQzMWUwLTcwMzktNGZmOC1hYWZlLTk3ZjdiOTViMDdkMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJA+A/0CAMA0GCSqGSIb3DQEBCwUAA4IBAQBY4F97/zyawKlVZMtM rccTC4MyFXTW/qLasl6SjVV2NN9IV6oDN4KvPYKRTlqJjVRPrfUG/EN9Nqb7ABRU bV1Z3g8EAcP82meDmG+hwe68YdZJxKjhuv76KvVoGjJUxAiJ5NqC5S7gaIl3zpvA C0tEQ8/GHzQIQTJPuOhPr2H925VXDlJIAQlnlgPbw8EM8eq9VcGsCKeakTBWdope JIOwBs1V8ENeDN+7ctuwR1lMZfP7bd2ZykTaKebGsPX4/5sOyrbWySHdvsdrVWIl 13mqk3JfZd8plIXWv3Jf66UjbX6FQvsKErtUBYBM6jC3bRNOkLV/QGDWMNSJNwMh c0my -----END CERTIFICATE-----Generated at Wed Nov 11 11:50:53 2026 by rpki-client