$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55de4d3c-c262-44e2-9b4b-4db6bedc8c6b.roa File: 55de4d3c-c262-44e2-9b4b-4db6bedc8c6b.roa (raw, json) Hash identifier: MWE/Z9uMBTKUpTM4GBbW3VyTDmYXIRILOVDILkdUOgE= Subject key identifier: 05:31:33:6A:82:2E:82:A6:9C:43:BD:AE:5E:DD:70:DA:41:23:A5:5C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 568C2DB024CCA34C43EEC68B1E595342D4B8D4D7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55de4d3c-c262-44e2-9b4b-4db6bedc8c6b.roa Signing time: Tue 20 Oct 2026 00:09:04 +0000 ROA not before: Tue 20 Oct 2026 00:09:04 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 00:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8c:2d:b0:24:cc:a3:4c:43:ee:c6:8b:1e:59:53:42:d4:b8:d4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:09:04 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=aecf918fddf49ffa733d6d80e24f21aeab49e1eb35f518e1c8e6689ffa8ed5cf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:40:53:6d:8a:3b:d2:0f:bd:3a:df:42:f1: 32:e3:00:97:f4:2e:9b:4d:a3:ce:7d:6f:44:d7:f5: 80:c7:a0:fc:de:77:9d:02:ac:83:ab:d4:15:a6:a7: 09:92:cd:1b:c5:8b:8c:60:d4:a2:55:11:e0:7f:aa: 79:bb:76:3f:fd:e4:fe:94:66:81:f0:05:8d:01:21: f1:2d:84:ae:84:96:e0:2f:eb:27:09:89:e6:3b:7c: 64:d2:27:64:f6:2d:43:cc:a3:79:1b:df:68:55:e0: 59:bb:8c:6d:77:73:04:e5:00:b9:ba:35:13:f2:e8: 87:f8:d0:4c:62:16:78:81:a3:2b:11:f7:d1:f1:1c: f1:fb:d8:27:85:f3:d3:b2:68:ac:42:d9:c6:d0:1b: ee:5e:5b:6c:09:3f:09:91:67:03:7c:10:5e:8f:eb: 31:a2:c4:3e:22:4d:48:16:c4:f2:1e:dc:c0:10:a9: 20:9e:3c:65:76:d0:a7:83:a9:18:16:ea:0b:6d:69: db:36:73:2d:15:b8:63:86:8a:33:ac:f8:e0:43:06: c0:bd:84:8c:48:58:de:c6:fd:65:cb:6f:e6:e5:82: 46:54:8f:ad:50:a0:a4:39:36:12:f5:f5:b2:1e:12: 38:44:ff:c0:7b:0b:4f:75:4c:2b:ea:7a:e4:b1:47: 89:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:31:33:6A:82:2E:82:A6:9C:43:BD:AE:5E:DD:70:DA:41:23:A5:5C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55de4d3c-c262-44e2-9b4b-4db6bedc8c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:800::/40 Signature Algorithm: sha256WithRSAEncryption 60:a6:5e:99:56:69:d4:e3:71:13:1f:23:48:ba:c8:9c:56:20: 66:c5:1f:51:04:b2:cc:fa:c5:2b:96:fe:12:dc:01:2d:fa:24: 00:19:1d:71:92:ec:34:b6:f3:98:fc:8f:92:27:e8:b8:5b:26: cc:54:95:3a:93:f0:24:9e:0b:81:aa:ab:3b:ba:02:48:d4:26: 06:76:3d:ff:40:81:67:95:da:4a:96:27:ae:73:19:07:01:f8: d8:e9:2f:f7:6f:e2:fa:54:9d:cd:d1:52:57:16:e5:ef:10:38: e6:19:df:8c:25:c5:f4:61:3a:47:06:0d:f0:64:19:fe:58:6b: c5:db:3d:4a:0f:40:b3:d9:43:cd:9f:dc:5e:94:5d:ac:2d:5d: f3:4b:a9:a7:2a:d0:13:b9:6c:85:0e:3f:fa:ec:48:82:39:59: 90:c6:f6:18:49:66:b1:1c:0f:9f:9d:ac:59:f1:88:44:b1:ab: c6:9a:de:52:d6:5a:0f:2d:ab:48:ec:04:0c:52:8a:57:e6:6a: 66:8a:39:d4:96:90:2e:4c:fe:91:f7:03:cb:66:3e:2a:da:1c: 4a:b6:0f:65:e2:8a:8e:9b:dc:98:9f:ae:14:3f:f3:90:91:e5: 9c:b6:2d:6d:25:71:71:41:33:c7:30:eb:db:4e:40:21:d3:9a: 06:b1:ca:38 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVowtsCTMo0xD7saLHllTQtS41NcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMDkwNFoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAYWVjZjkxOGZkZGY0OWZmYTczM2Q2 ZDgwZTI0ZjIxYWVhYjQ5ZTFlYjM1ZjUxOGUxYzhlNjY4OWZmYThlZDVjZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt9AU22KO9IPvTrfQvEy4wCX9C6b TaPOfW9E1/WAx6D83nedAqyDq9QVpqcJks0bxYuMYNSiVRHgf6p5u3Y//eT+lGaB 8AWNASHxLYSuhJbgL+snCYnmO3xk0idk9i1DzKN5G99oVeBZu4xtd3ME5QC5ujUT 8uiH+NBMYhZ4gaMrEffR8Rzx+9gnhfPTsmisQtnG0BvuXltsCT8JkWcDfBBej+sx osQ+Ik1IFsTyHtzAEKkgnjxldtCng6kYFuoLbWnbNnMtFbhjhoozrPjgQwbAvYSM SFjexv1ly2/m5YJGVI+tUKCkOTYS9fWyHhI4RP/AewtPdUwr6nrksUeJXQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAUxM2qCLoKmnEO9rl7dcNpBI6VcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU1ZGU0ZDNjLWMyNjItNDRlMi05YjRiLTRkYjZiZWRjOGM2Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaAgwDQYJKoZIhvcNAQELBQADggEBAGCmXplWadTjcRMfI0i6 yJxWIGbFH1EEssz6xSuW/hLcAS36JAAZHXGS7DS285j8j5In6LhbJsxUlTqT8CSe C4Gqqzu6AkjUJgZ2Pf9AgWeV2kqWJ65zGQcB+NjpL/dv4vpUnc3RUlcW5e8QOOYZ 34wlxfRhOkcGDfBkGf5Ya8XbPUoPQLPZQ82f3F6UXawtXfNLqacq0BO5bIUOP/rs SII5WZDG9hhJZrEcD5+drFnxiESxq8aa3lLWWg8tq0jsBAxSilfmamaKOdSWkC5M /pH3A8tmPiraHEq2D2Xiio6b3JifrhQ/85CR5Zy2LW0lcXFBM8cw69tOQCHTmgax yjg= -----END CERTIFICATE-----Generated at Sat Oct 31 22:47:40 2026 by rpki-client