$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/06700f4a-2e1e-4dab-b312-1d7e8dc4b5c2.roa File: 06700f4a-2e1e-4dab-b312-1d7e8dc4b5c2.roa (raw, json) Hash identifier: KlNV+QVONudMlYIVJjv0zN4X41kWpxB7Pl0LDJ0ceHY= Subject key identifier: A0:A0:16:63:A9:91:20:76:9C:C6:A4:05:F9:6C:AE:44:8B:73:3A:A5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62AAEE9C079083FE38D5B76AEEFE3082CFD74B3D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/06700f4a-2e1e-4dab-b312-1d7e8dc4b5c2.roa Signing time: Fri 09 Oct 2026 00:07:03 +0000 ROA not before: Fri 09 Oct 2026 00:07:03 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:8080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:aa:ee:9c:07:90:83:fe:38:d5:b7:6a:ee:fe:30:82:cf:d7:4b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:07:03 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=c52557e1e024ae253954a99739fc5dc067e1d9ef62baa9875d751a88979f858c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:05:48:a7:90:22:23:f1:9b:df:3c:7a:22:f3: 3c:13:66:21:fd:82:40:e0:4d:41:c6:2e:14:77:95: f7:e9:ca:9e:1d:91:ac:37:39:3a:37:8f:3f:d3:9c: d8:81:be:25:b0:0e:be:fe:a5:1b:4b:d2:0f:16:32: 71:3f:8e:30:40:f5:e9:19:b5:e3:30:8f:29:06:49: 15:42:e5:ad:02:5f:9c:d4:0b:36:38:cd:b6:6e:6f: d7:97:de:e3:a2:31:76:7e:54:81:4e:3e:d1:38:93: 3d:3e:1e:ba:90:9b:77:a7:22:cf:36:2b:71:e4:17: c4:55:74:07:e5:31:e8:be:3b:77:e3:96:68:ed:ab: 09:c3:bb:4c:42:d9:b6:93:7b:0c:82:2b:ea:5b:a2: bc:b8:7c:07:9d:4c:ad:87:c2:7e:81:f3:f7:32:c6: c9:61:45:3f:c3:d0:61:bd:4f:64:fd:73:98:b4:35: 54:c3:b0:1b:73:01:fd:a5:a3:ca:09:a1:e6:bd:b5: a1:1d:78:90:3a:9c:39:f4:fd:1a:35:b3:91:ec:70: 7f:a0:c3:c0:01:e6:61:cd:9f:af:26:bc:40:78:9b: 8d:a2:62:53:97:14:db:6e:0a:be:1b:94:82:1c:1c: cf:e0:76:78:69:6c:65:a1:67:1d:39:19:82:28:50: b0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A0:16:63:A9:91:20:76:9C:C6:A4:05:F9:6C:AE:44:8B:73:3A:A5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/06700f4a-2e1e-4dab-b312-1d7e8dc4b5c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:8080::/46 Signature Algorithm: sha256WithRSAEncryption 4d:c6:bc:b7:c5:13:dd:a0:94:b8:ce:ab:8d:8d:94:54:ee:85: 02:59:2c:ab:98:a3:b2:3d:2e:a1:3b:8e:df:fb:b1:13:e3:4f: 57:45:c5:2d:38:85:e2:1c:f7:ea:46:f6:e3:d5:af:8c:b3:e1: e9:d3:07:9a:4f:bb:24:3b:87:48:55:e2:b0:ee:44:12:35:73: f7:b7:91:18:a3:98:48:01:e5:2b:e6:7d:68:13:60:0a:03:3d: 19:1c:b9:d3:fc:ca:d8:dc:1f:3d:14:ab:de:e6:38:6e:4e:c3: 18:ec:49:26:f3:98:76:d3:d9:76:87:38:0b:e2:4c:bb:15:23: 96:a4:50:90:48:4d:9d:e1:30:fd:a9:8c:2b:9b:90:0f:e8:40: 1a:07:70:16:23:96:fe:58:a7:7d:ea:03:6b:c1:a4:04:79:85: 39:f0:83:12:e1:98:3b:44:2d:50:f7:45:3b:50:00:63:2e:14: b4:ed:fe:d4:a0:86:47:53:8e:ab:8d:0b:ce:e6:01:c9:40:df: 7f:07:9f:56:cd:c8:66:b7:4b:b8:fc:d2:f3:ad:d6:d5:b4:e5: 4b:8d:c3:a7:06:98:81:b5:40:c0:85:d4:79:10:dc:6f:17:cb: e4:14:f1:0c:af:10:c5:1d:27:41:be:a3:8f:97:e8:e6:0b:a3: 88:7a:70:05 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYqrunAeQg/441bdq7v4wgs/XSz0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMDcwM1oX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAYzUyNTU3ZTFlMDI0YWUyNTM5NTRh OTk3MzlmYzVkYzA2N2UxZDllZjYyYmFhOTg3NWQ3NTFhODg5NzlmODU4YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogVIp5AiI/Gb3zx6IvM8E2Yh/YJA 4E1Bxi4Ud5X36cqeHZGsNzk6N48/05zYgb4lsA6+/qUbS9IPFjJxP44wQPXpGbXj MI8pBkkVQuWtAl+c1As2OM22bm/Xl97jojF2flSBTj7ROJM9Ph66kJt3pyLPNitx 5BfEVXQH5THovjt345Zo7asJw7tMQtm2k3sMgivqW6K8uHwHnUyth8J+gfP3MsbJ YUU/w9BhvU9k/XOYtDVUw7AbcwH9paPKCaHmvbWhHXiQOpw59P0aNbOR7HB/oMPA AeZhzZ+vJrxAeJuNomJTlxTbbgq+G5SCHBzP4HZ4aWxloWcdORmCKFCw0QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKCgFmOpkSB2nMakBflsrkSLczqlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA2NzAwZjRhLTJlMWUtNGRhYi1iMzEyLTFkN2U4ZGM0YjVjMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba84CAMA0GCSqGSIb3DQEBCwUAA4IBAQBNxry3xRPdoJS4zquN jZRU7oUCWSyrmKOyPS6hO47f+7ET409XRcUtOIXiHPfqRvbj1a+Ms+Hp0weaT7sk O4dIVeKw7kQSNXP3t5EYo5hIAeUr5n1oE2AKAz0ZHLnT/MrY3B89FKve5jhuTsMY 7Ekm85h209l2hzgL4ky7FSOWpFCQSE2d4TD9qYwrm5AP6EAaB3AWI5b+WKd96gNr waQEeYU58IMS4Zg7RC1Q90U7UABjLhS07f7UoIZHU46rjQvO5gHJQN9/B59Wzchm t0u4/NLzrdbVtOVLjcOnBpiBtUDAhdR5ENxvF8vkFPEMrxDFHSdBvqOPl+jmC6OI enAF -----END CERTIFICATE-----Generated at Sun Oct 11 23:10:12 2026 by rpki-client