$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1553bdf1-1e9c-4fe6-a809-daf4616a9184.roa File: 1553bdf1-1e9c-4fe6-a809-daf4616a9184.roa (raw, json) Hash identifier: 40W90y56XJRmTvXaHcgVCxxSrVL7P5qv44bdgXFk6Ro= Subject key identifier: 01:01:75:8E:2D:F4:A7:5A:8F:99:F3:91:A4:77:00:D3:96:D5:DE:3D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 647F35D7AA68FEF498BA21CF00E458F7A0FE9AC1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1553bdf1-1e9c-4fe6-a809-daf4616a9184.roa Signing time: Thu 08 Oct 2026 00:05:04 +0000 ROA not before: Thu 08 Oct 2026 00:05:04 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7f:35:d7:aa:68:fe:f4:98:ba:21:cf:00:e4:58:f7:a0:fe:9a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 8 00:05:04 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=d296b4b75f9ca79a3ec431d925fbd94ce9ebe784909c788248defe1998e16ac4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:63:5b:c2:34:f9:14:99:e4:9f:77:1c:f7: 90:44:17:5f:d1:07:4b:2e:83:3a:3e:1b:ee:15:15: fc:ca:52:ba:09:b7:fb:43:a1:8c:50:4b:ee:a4:84: a0:15:81:6a:35:d9:13:0e:6b:20:98:0a:d6:25:2f: 9b:0e:18:6f:72:3f:8e:96:c3:22:65:46:be:f1:b4: 7c:83:c8:6d:74:06:f6:d0:ae:c3:c0:77:e5:c6:8f: 6f:6e:61:4d:ba:a5:67:32:33:89:61:66:d2:7d:a9: 75:97:52:97:df:56:6a:d3:9d:36:8b:51:87:6c:75: 00:67:a0:8b:ee:59:68:d7:3c:1d:7e:f6:27:b8:2d: 96:a0:ba:83:4b:e1:d7:fa:c5:70:71:48:6c:76:0e: a6:d3:22:cb:28:ff:c7:d8:07:7c:bd:ed:8c:6e:5a: 84:22:6d:dc:b4:61:76:3c:f7:8d:02:01:5c:8e:df: fc:82:91:d0:6b:d6:bb:f1:94:1c:68:0d:a9:35:6d: df:3d:c3:ea:de:77:22:90:5b:0e:21:cb:46:9e:3d: 49:09:7d:d4:da:83:41:d8:04:b4:c5:67:7a:2f:6e: fc:89:23:9e:4c:88:de:a9:be:f0:a9:3e:f5:de:50: 93:32:2c:4f:c7:3b:7f:57:fe:4d:7f:6a:79:1d:a3: 4a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:01:75:8E:2D:F4:A7:5A:8F:99:F3:91:A4:77:00:D3:96:D5:DE:3D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1553bdf1-1e9c-4fe6-a809-daf4616a9184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:c000::/40 Signature Algorithm: sha256WithRSAEncryption 40:49:5e:52:84:37:a0:da:ea:a3:a8:fc:ee:d2:25:54:49:fe: a7:c3:e5:8f:c9:35:98:26:8d:1b:53:02:43:81:4d:6a:20:33: f5:9e:34:60:13:f4:ea:45:28:6b:26:03:b7:57:a8:50:2f:b9: 37:99:c2:58:f9:e7:bb:79:ed:6b:70:5e:9c:8f:b9:32:73:4c: 8a:b9:b8:b0:88:ea:38:48:8a:92:22:d7:1c:0e:4f:e3:91:49: 6c:6a:5d:45:41:91:ab:3c:27:04:cd:74:30:7c:d2:8d:cb:6c: 8f:66:73:ac:15:ec:07:3d:52:ca:a2:7a:b5:79:53:d7:b0:e0: fb:d6:1c:65:b5:91:d1:7f:7d:67:5c:e0:7c:a9:79:14:91:e8: fa:e8:86:2d:76:fc:b7:5b:f2:25:dc:18:b5:53:dd:72:08:8b: 91:25:51:22:63:65:1c:96:54:67:ec:55:e4:11:26:ef:c7:cf: eb:d6:c3:34:c7:45:6c:12:6e:9d:5a:83:af:c9:d8:6f:cf:44: e3:bc:7b:96:a9:3d:ff:bd:9f:63:81:c5:49:78:7c:be:ca:dd: e2:b5:ab:72:ee:82:e1:89:91:83:88:26:89:2c:bf:f8:3e:6d: 5b:24:5b:a8:ae:64:b7:09:c3:dc:4c:d7:40:df:3c:f1:85:3b: 4c:03:d9:72 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZH8116po/vSYuiHPAORY96D+msEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwODAwMDUwNFoX DTI3MDEwNjIzNTk1OVowejFJMEcGA1UEBRNAZDI5NmI0Yjc1ZjljYTc5YTNlYzQz MWQ5MjVmYmQ5NGNlOWViZTc4NDkwOWM3ODgyNDhkZWZlMTk5OGUxNmFjNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiNjW8I0+RSZ5J93HPeQRBdf0QdL LoM6PhvuFRX8ylK6Cbf7Q6GMUEvupISgFYFqNdkTDmsgmArWJS+bDhhvcj+OlsMi ZUa+8bR8g8htdAb20K7DwHflxo9vbmFNuqVnMjOJYWbSfal1l1KX31Zq0502i1GH bHUAZ6CL7llo1zwdfvYnuC2WoLqDS+HX+sVwcUhsdg6m0yLLKP/H2Ad8ve2MblqE Im3ctGF2PPeNAgFcjt/8gpHQa9a78ZQcaA2pNW3fPcPq3ncikFsOIctGnj1JCX3U 2oNB2AS0xWd6L278iSOeTIjeqb7wqT713lCTMixPxzt/V/5Nf2p5HaNKfQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAEBdY4t9Kdaj5nzkaR3ANOW1d49MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE1NTNiZGYxLTFlOWMtNGZlNi1hODA5LWRhZjQ2MTZhOTE4NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMsAwDQYJKoZIhvcNAQELBQADggEBAEBJXlKEN6Da6qOo/O7S JVRJ/qfD5Y/JNZgmjRtTAkOBTWogM/WeNGAT9OpFKGsmA7dXqFAvuTeZwlj557t5 7WtwXpyPuTJzTIq5uLCI6jhIipIi1xwOT+ORSWxqXUVBkas8JwTNdDB80o3LbI9m c6wV7Ac9UsqierV5U9ew4PvWHGW1kdF/fWdc4HypeRSR6Prohi12/Ldb8iXcGLVT 3XIIi5ElUSJjZRyWVGfsVeQRJu/Hz+vWwzTHRWwSbp1ag6/J2G/PROO8e5apPf+9 n2OBxUl4fL7K3eK1q3LuguGJkYOIJoksv/g+bVskW6iuZLcJw9xM10DfPPGFO0wD 2XI= -----END CERTIFICATE-----Generated at Sun Oct 11 22:17:53 2026 by rpki-client