$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/498f6dc3-db03-415e-b534-d74ca6f01901.roa File: 498f6dc3-db03-415e-b534-d74ca6f01901.roa (raw, json) Hash identifier: 6sNQwfGfv6IUtIZgMSIxczOddTHp3G255bf2u727CiQ= Subject key identifier: F0:58:C2:71:B6:BF:30:48:04:8B:39:22:CB:BD:41:F8:35:B8:B3:BD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 850B39D0C8064EED0641FE9FD8F9F0F5D6FCC3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/498f6dc3-db03-415e-b534-d74ca6f01901.roa Signing time: Thu 08 Oct 2026 00:05:05 +0000 ROA not before: Thu 08 Oct 2026 00:05:05 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85:0b:39:d0:c8:06:4e:ed:06:41:fe:9f:d8:f9:f0:f5:d6:fc:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 8 00:05:05 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=4322379f98ed1a23860ccfb269c7e80f269600b7503a21c96fca517add886808, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a4:f1:c7:b6:cd:75:67:70:47:48:0f:ca:d0: 30:28:fd:44:b6:04:c4:f6:2c:4a:97:93:79:66:27: 1f:ce:8f:b1:c1:a0:16:28:c3:ea:89:8a:4a:03:d7: a9:95:aa:5a:30:ed:6a:8b:fd:c7:da:75:82:eb:2f: 27:2b:1b:89:f1:c0:f9:59:d5:94:2f:dd:d4:e6:c3: bf:29:c6:3f:b0:10:c2:c1:6d:b8:61:2f:74:c1:86: 29:92:0c:a1:85:c7:32:0b:e5:be:c6:c5:b1:53:a4: cc:a6:0d:21:fc:39:1d:c2:56:64:55:ed:1c:0b:e6: b4:c9:4c:d4:3a:e9:27:67:c0:b9:ad:d5:54:ac:1c: 45:97:74:11:40:00:76:a9:b5:3a:f9:e1:c7:12:fd: e0:ab:23:54:39:88:2e:eb:9b:bd:c8:2e:af:20:88: 2e:4b:b4:3f:04:7c:9b:a6:19:a9:5f:ad:95:25:ec: 2e:a5:7f:59:c0:3b:01:bc:eb:fd:ea:5e:94:87:6b: 81:4a:12:4e:f2:1b:6a:7d:56:07:92:4c:8a:35:57: 56:77:cc:d2:99:48:52:b7:59:4a:c2:40:a0:b2:68: 34:ae:0f:e0:af:c0:ef:9a:3d:cd:e2:c8:ce:29:6c: aa:3a:15:75:1b:2f:86:52:e4:0e:28:f9:00:e3:38: 51:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:58:C2:71:B6:BF:30:48:04:8B:39:22:CB:BD:41:F8:35:B8:B3:BD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/498f6dc3-db03-415e-b534-d74ca6f01901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:2000::/40 Signature Algorithm: sha256WithRSAEncryption b4:aa:6f:4d:9b:b9:64:d9:f4:49:b1:fa:cd:95:1b:b6:30:be: a1:14:6f:90:01:75:94:ef:cd:29:ac:d2:29:59:97:85:e4:b9: d4:66:3b:cc:30:ef:5f:75:02:7b:38:48:96:85:76:2f:7a:65: c6:a6:df:5c:f4:b9:f1:5c:ab:c7:a5:82:e3:2d:de:c0:23:44: 28:4e:8a:36:ac:e5:3b:64:12:38:77:e4:73:91:6b:26:f4:16: 25:f9:be:50:9c:f4:41:3f:b6:84:fc:c3:1e:4d:28:b1:91:bc: 18:cc:8b:fc:66:fa:03:2e:22:95:79:27:d5:7d:84:61:90:42: 87:20:a2:fb:47:f0:dc:7f:ce:f8:8e:33:10:d9:90:85:ac:91: c4:d9:20:4f:ca:24:2f:bf:41:55:bc:a2:f0:1d:dd:4c:24:9d: 2e:a9:60:36:5a:01:3e:c0:88:3d:8c:e0:7c:f7:42:5a:a7:db: cd:34:91:7c:6f:24:60:5a:03:09:65:20:57:fb:90:b3:fd:d2: 09:1f:c4:5c:8b:ff:40:cc:df:84:eb:21:55:51:4e:2e:f5:ac: d2:74:2f:62:31:74:40:32:6b:1d:ab:52:22:f0:47:8e:54:80: f5:34:6b:2e:43:24:75:9b:b3:d3:39:a3:f7:8a:2b:f3:03:7b: 71:b1:cf:39 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAIULOdDIBk7tBkH+n9j58PXW/MMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwODAwMDUwNVoX DTI3MDEwNjIzNTk1OVowejFJMEcGA1UEBRNANDMyMjM3OWY5OGVkMWEyMzg2MGNj ZmIyNjljN2U4MGYyNjk2MDBiNzUwM2EyMWM5NmZjYTUxN2FkZDg4NjgwODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aTxx7bNdWdwR0gPytAwKP1EtgTE 9ixKl5N5Zicfzo+xwaAWKMPqiYpKA9eplapaMO1qi/3H2nWC6y8nKxuJ8cD5WdWU L93U5sO/KcY/sBDCwW24YS90wYYpkgyhhccyC+W+xsWxU6TMpg0h/DkdwlZkVe0c C+a0yUzUOuknZ8C5rdVUrBxFl3QRQAB2qbU6+eHHEv3gqyNUOYgu65u9yC6vIIgu S7Q/BHybphmpX62VJewupX9ZwDsBvOv96l6Uh2uBShJO8htqfVYHkkyKNVdWd8zS mUhSt1lKwkCgsmg0rg/gr8Dvmj3N4sjOKWyqOhV1Gy+GUuQOKPkA4zhRUQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPBYwnG2vzBIBIs5Isu9Qfg1uLO9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ5OGY2ZGMzLWRiMDMtNDE1ZS1iNTM0LWQ3NGNhNmYwMTkwMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMiAwDQYJKoZIhvcNAQELBQADggEBALSqb02buWTZ9Emx+s2V G7YwvqEUb5ABdZTvzSms0ilZl4XkudRmO8ww7191Ans4SJaFdi96Zcam31z0ufFc q8elguMt3sAjRChOijas5TtkEjh35HORayb0FiX5vlCc9EE/toT8wx5NKLGRvBjM i/xm+gMuIpV5J9V9hGGQQocgovtH8Nx/zviOMxDZkIWskcTZIE/KJC+/QVW8ovAd 3UwknS6pYDZaAT7AiD2M4Hz3Qlqn2800kXxvJGBaAwllIFf7kLP90gkfxFyL/0DM 34TrIVVRTi71rNJ0L2IxdEAyax2rUiLwR45UgPU0ay5DJHWbs9M5o/eKK/MDe3Gx zzk= -----END CERTIFICATE-----Generated at Sun Oct 11 18:54:41 2026 by rpki-client