$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/18380aa7-2186-4203-a5bc-3e944eecd5f9.roa File: 18380aa7-2186-4203-a5bc-3e944eecd5f9.roa (raw, json) Hash identifier: vaw+Z4SN1BVfBO3yN/1qxk13V1IhQ0zALi4/llZAlso= Subject key identifier: 05:24:4D:89:4A:72:DA:B3:05:74:47:A3:D7:00:59:6C:EA:9D:4D:B3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 727F2862C5F08DE863E80A3DB380CF89B6699889 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/18380aa7-2186-4203-a5bc-3e944eecd5f9.roa Signing time: Fri 09 Oct 2026 00:20:22 +0000 ROA not before: Fri 09 Oct 2026 00:20:22 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7f:28:62:c5:f0:8d:e8:63:e8:0a:3d:b3:80:cf:89:b6:69:98:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:20:22 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=04df44daca291aa7f453a369c05a6de6831af9bf94fc267f492fe54efcd007fd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:59:f6:8e:41:6a:da:07:d0:a4:01:14:ad:d5: 41:5d:7b:ee:cf:a6:fb:02:7c:56:87:c6:6a:74:5d: 6f:b2:31:41:2b:d7:08:73:72:4d:25:ed:20:09:0d: f4:0e:d1:1f:15:85:26:1e:c6:4d:51:1d:23:98:3b: 50:ac:f2:d0:f4:a0:8a:c7:2e:e2:22:b6:79:59:4f: 3d:67:e6:61:c7:da:05:62:ba:81:2e:42:46:86:83: 47:51:55:b1:31:64:3f:fe:76:6e:82:81:56:08:cc: 3c:5c:c4:e7:03:63:c1:e8:ad:b1:cf:91:34:db:a5: 39:0e:c6:bf:77:59:5f:c8:48:83:69:c2:c0:22:ed: 70:99:26:9e:df:23:96:1a:ca:c3:88:21:19:82:50: ed:c6:92:3a:59:1e:3d:73:10:fd:40:01:07:10:23: d4:3b:7f:07:67:db:32:c3:61:34:08:d3:b9:13:ec: ba:5c:f5:0c:73:f7:9d:68:97:f4:6d:6a:ca:8f:4a: f8:af:b0:34:f0:0c:03:a9:b4:f7:cd:58:6d:c3:6f: cf:7e:e8:a3:ed:df:e2:7d:e4:17:aa:14:83:ae:8f: af:97:12:d2:c1:b1:25:88:80:2d:8a:7b:56:ca:d2: 4a:f3:6c:41:3c:10:82:6e:f6:64:da:bb:a4:1c:78: 28:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:24:4D:89:4A:72:DA:B3:05:74:47:A3:D7:00:59:6C:EA:9D:4D:B3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/18380aa7-2186-4203-a5bc-3e944eecd5f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 22:e9:71:76:68:2d:15:a1:7f:9b:16:c6:19:ad:1e:e0:53:1b: 01:97:95:bb:19:d0:ca:9f:94:28:a7:70:ba:98:a1:91:47:a0: d9:c8:3e:c6:66:05:d7:6f:1d:3a:46:4f:4c:64:93:43:cd:3b: b7:bf:89:d4:9b:d7:eb:20:60:2c:ef:48:4f:a5:7d:6a:b4:33: 5a:31:5c:36:cf:31:c6:22:18:f6:17:55:4e:85:cf:58:89:f8: a6:f7:6a:ba:72:2b:77:33:fe:63:50:cc:76:1d:a0:aa:a7:37: 11:bf:6e:3d:77:35:3d:71:12:48:86:da:85:37:be:ac:da:ea: 36:0b:7b:76:29:bf:1a:45:f2:ba:9c:52:78:f7:24:51:7b:0b: 37:f6:4b:6a:03:4e:b8:e1:df:91:22:83:b1:4e:eb:97:e9:05: 28:c1:40:64:a8:75:7c:4e:bb:82:07:cd:f6:11:43:19:96:26: 3e:78:58:9b:d6:cb:33:98:ac:1e:eb:de:cf:c1:84:fa:5d:66: 58:60:94:57:e7:05:d1:af:19:bb:89:41:f3:a0:95:24:f9:cf: 80:a0:0b:23:00:28:e4:71:67:3c:a1:a6:7f:fe:3f:c6:85:44: f5:e2:90:d8:0e:a6:df:9a:8e:3c:9f:36:1a:9a:5f:9e:4a:08: fa:48:45:3a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcn8oYsXwjehj6Ao9s4DPibZpmIkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMjAyMloX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAMDRkZjQ0ZGFjYTI5MWFhN2Y0NTNh MzY5YzA1YTZkZTY4MzFhZjliZjk0ZmMyNjdmNDkyZmU1NGVmY2QwMDdmZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Vn2jkFq2gfQpAEUrdVBXXvuz6b7 AnxWh8ZqdF1vsjFBK9cIc3JNJe0gCQ30DtEfFYUmHsZNUR0jmDtQrPLQ9KCKxy7i IrZ5WU89Z+Zhx9oFYrqBLkJGhoNHUVWxMWQ//nZugoFWCMw8XMTnA2PB6K2xz5E0 26U5Dsa/d1lfyEiDacLAIu1wmSae3yOWGsrDiCEZglDtxpI6WR49cxD9QAEHECPU O38HZ9syw2E0CNO5E+y6XPUMc/edaJf0bWrKj0r4r7A08AwDqbT3zVhtw2/Pfuij 7d/ifeQXqhSDro+vlxLSwbEliIAtintWytJK82xBPBCCbvZk2rukHHgowQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAUkTYlKctqzBXRHo9cAWWzqnU2zMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE4MzgwYWE3LTIxODYtNDIwMy1hNWJjLTNlOTQ0ZWVjZDVmOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6iDAMA0GCSqGSIb3DQEBCwUAA4IBAQAi6XF2aC0VoX+bFsYZ rR7gUxsBl5W7GdDKn5Qop3C6mKGRR6DZyD7GZgXXbx06Rk9MZJNDzTu3v4nUm9fr IGAs70hPpX1qtDNaMVw2zzHGIhj2F1VOhc9Yifim92q6cit3M/5jUMx2HaCqpzcR v249dzU9cRJIhtqFN76s2uo2C3t2Kb8aRfK6nFJ49yRRews39ktqA0644d+RIoOx TuuX6QUowUBkqHV8TruCB832EUMZliY+eFib1sszmKwe697PwYT6XWZYYJRX5wXR rxm7iUHzoJUk+c+AoAsjACjkcWc8oaZ//j/GhUT14pDYDqbfmo48nzYaml+eSgj6 SEU6 -----END CERTIFICATE-----Generated at Mon Oct 12 00:48:30 2026 by rpki-client