
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46bb148e-b1fe-4d40-9bbe-51d7ced3806f.roa
File: 46bb148e-b1fe-4d40-9bbe-51d7ced3806f.roa (raw, json)
Hash identifier: LJvChArS9URTkKDFfxBR91oyU96HQ8RWQVhyRQ5QZuc=
Subject key identifier: A8:94:ED:39:E3:26:E5:86:5F:86:40:8F:ED:A7:E2:F6:46:86:97:DC
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 071E956BAD7BB307212D587751577E0A81C04684
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46bb148e-b1fe-4d40-9bbe-51d7ced3806f.roa
Signing time: Fri 09 Oct 2026 00:06:47 +0000
ROA not before: Fri 09 Oct 2026 00:06:47 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf3:90c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 00:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:1e:95:6b:ad:7b:b3:07:21:2d:58:77:51:57:7e:0a:81:c0:46:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Oct 9 00:06:47 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=da985c610c58a8af4121757860cfc970292fe08a22464637335a537305085b6e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:11:2f:f5:86:6c:d8:7c:1a:ad:39:e1:57:
5c:fd:95:66:ba:a8:b4:5d:5f:5e:5c:a7:eb:f1:68:
c8:b9:96:1d:46:ea:14:f1:2e:18:51:1e:7e:ea:7f:
f5:60:d5:da:97:e1:e7:ad:0d:e8:42:ba:b7:6b:83:
04:d1:1b:95:5d:f3:13:25:44:cb:c6:a7:2c:7b:e5:
33:4d:29:e7:1b:1b:65:48:9b:cc:86:28:b2:7b:1f:
be:93:5a:85:8a:af:f0:fc:81:f9:b1:fc:d0:a0:55:
02:cc:7b:84:ca:51:a7:1f:b1:d7:bb:f4:23:65:a3:
a7:3d:06:8c:fa:f6:63:f3:68:88:11:1c:58:ff:9c:
23:63:4c:b9:2c:7f:f4:9c:d6:85:48:8f:10:ce:a5:
c1:c2:7c:6a:7e:4b:17:d0:d8:d2:04:b1:3e:9d:31:
0e:ac:92:34:88:59:ca:30:aa:ac:6d:b3:46:6e:26:
4c:49:57:9d:d7:fb:76:1a:fa:2d:dd:be:ee:c5:f2:
de:60:ba:83:a0:79:df:74:9e:d3:31:b1:98:bf:97:
ae:ea:10:8b:33:f4:47:cb:02:d5:e0:9f:cb:31:f5:
d5:82:22:d8:87:0a:0c:51:fb:ef:b0:6e:ca:43:f4:
67:f5:86:c2:ed:42:ab:ae:1d:ca:01:72:6a:38:c3:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:94:ED:39:E3:26:E5:86:5F:86:40:8F:ED:A7:E2:F6:46:86:97:DC
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46bb148e-b1fe-4d40-9bbe-51d7ced3806f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf3:90c0::/46
Signature Algorithm: sha256WithRSAEncryption
b3:55:30:57:6e:78:16:0d:8a:40:a6:51:12:d0:8f:62:90:1d:
c6:ad:e9:7c:88:65:d4:b3:e5:03:68:ce:7c:14:a6:d9:3f:0b:
29:fd:09:f2:5b:9b:7c:2f:7a:3d:bd:a0:ef:8c:e4:8a:81:4e:
9f:44:fe:47:b7:d3:5d:64:55:04:86:db:35:81:5b:2e:2f:b9:
a2:92:28:ed:27:ce:ca:ac:b3:d2:3a:20:42:4e:69:f6:21:3c:
58:91:90:c3:19:e6:db:f0:84:c7:cc:5b:7b:c4:0a:5a:04:b7:
9e:92:7a:b6:22:f0:a5:f7:c6:8b:a2:90:4b:bf:fe:17:2c:da:
75:68:cf:98:92:5b:28:a5:e4:22:f5:f6:0d:3d:37:23:c1:32:
5d:0c:7b:45:95:d9:28:7f:be:60:45:74:54:23:53:a1:2c:99:
18:42:e2:7b:2c:e3:99:7b:cb:29:40:69:40:6c:ad:64:20:b8:
f5:18:7e:d0:61:6e:be:87:68:c5:56:e2:8f:a5:7e:1a:9e:46:
f7:00:6b:c9:b5:d2:88:02:65:12:1f:dc:16:ca:26:dd:a8:ab:
66:b3:0a:f6:33:7c:d8:54:83:83:6b:91:c2:58:d3:5e:29:d6:
24:77:1c:06:dd:1e:8e:f1:85:3e:9f:16:54:91:15:37:89:e0:
95:37:02:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:24:11 2026 by rpki-client