$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/579d6f27-1e78-4bde-a4bb-c859a61c0908.roa File: 579d6f27-1e78-4bde-a4bb-c859a61c0908.roa (raw, json) Hash identifier: JUiFh29kN2WMueyiOYrWGR4SCUKBo/icmuxHzVj9Eu4= Subject key identifier: F1:93:C4:A3:38:F6:0D:EF:C3:90:61:74:1F:F1:D4:CE:7E:32:F0:27 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1F65AA532A2993ABCEC38C11BDB01DC5CC9F621A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/579d6f27-1e78-4bde-a4bb-c859a61c0908.roa Signing time: Fri 09 Oct 2026 00:20:06 +0000 ROA not before: Fri 09 Oct 2026 00:20:06 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:c8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:65:aa:53:2a:29:93:ab:ce:c3:8c:11:bd:b0:1d:c5:cc:9f:62:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:20:06 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=c7917b61f3028c47da0e318f74fdaa01da28cb7b98e2ed814234d6500bd95bb5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:84:5b:0f:b2:d0:73:01:2e:77:ee:5d:8b:17: ca:77:9d:16:2b:b5:1a:f4:7f:00:ad:a5:35:f3:db: 32:e4:55:e7:40:54:9d:16:d8:05:2c:e8:56:3d:72: 0f:57:d7:fe:c0:a9:09:17:ae:ae:8e:e3:11:c2:93: a0:3d:ea:72:86:5e:78:3b:c1:74:47:ae:b5:ce:81: fe:cc:da:c9:2d:8b:3e:06:b1:d1:19:0e:f0:39:0c: 6b:cc:95:c7:c7:c2:ee:3f:2b:c3:06:48:e3:94:66: 76:3f:90:28:7c:cf:38:c4:5c:df:28:7a:a2:f3:b5: cd:66:d5:a3:69:16:49:40:89:1a:ba:86:7c:3c:6f: f1:9e:06:c4:10:a3:2e:9a:d0:8a:4d:26:b9:bf:81: 1c:bb:7e:24:d1:bb:ce:3d:c3:79:4f:54:b5:34:6d: cd:54:09:ce:76:3d:7f:bb:73:f2:7b:bb:9f:9f:6a: 6d:bf:3f:d6:61:21:39:7c:ce:75:ef:59:b4:7e:4f: 2e:3f:09:f8:4a:d1:06:f0:86:36:a8:ee:1d:b0:21: 6a:48:d2:8e:2b:11:a0:29:7b:7f:95:f3:f2:0d:80: bd:fc:ae:d7:50:00:c3:a2:ab:46:89:a9:5b:3a:30: 6c:7f:e2:10:45:f7:76:e2:d3:3a:57:c3:f9:62:87: 19:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:93:C4:A3:38:F6:0D:EF:C3:90:61:74:1F:F1:D4:CE:7E:32:F0:27 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/579d6f27-1e78-4bde-a4bb-c859a61c0908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:c8c0::/48 Signature Algorithm: sha256WithRSAEncryption 01:99:64:73:a3:cd:60:37:1e:30:7d:5d:21:1f:0d:aa:18:f8: d9:3b:d6:0a:39:08:0b:5d:7a:c7:4a:21:45:25:53:fd:fd:33: 37:f2:08:d4:f3:b3:8c:9f:7f:3a:4c:75:7d:b7:6a:af:f1:dd: 34:7e:df:86:34:87:1f:6e:af:d9:c3:11:64:e4:86:ae:9e:2e: 12:a1:50:58:08:e9:6f:52:d0:7d:52:29:ac:58:50:d1:7b:da: e5:4c:be:28:a3:7a:8f:8c:2d:1b:37:fc:4d:fc:d0:be:14:0d: f4:57:c4:71:0f:27:80:a6:af:c4:89:85:74:cf:46:50:79:7d: 08:43:1e:f3:7f:37:38:3f:8e:4f:e8:7c:78:52:1d:15:c9:3a: 24:01:67:e5:0a:26:7f:85:5a:5a:c1:6e:20:7f:34:7a:df:86: 29:5d:cf:cd:1d:0f:15:c5:fe:be:0f:5e:1e:d3:65:c0:1d:75: 0b:23:5d:66:0b:78:eb:9a:31:d0:47:41:d5:61:3c:a6:69:63: 29:35:8f:fc:3f:d4:7c:ca:89:31:07:c8:99:a2:ba:52:c3:89: d1:b2:c4:21:2a:82:c8:6f:9b:38:0f:5e:00:1c:57:ca:68:6e: 2f:52:a0:25:a6:26:b7:29:4c:ce:40:1f:69:2d:95:61:54:df: 35:e4:14:37 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUH2WqUyopk6vOw4wRvbAdxcyfYhowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMjAwNloX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAYzc5MTdiNjFmMzAyOGM0N2RhMGUz MThmNzRmZGFhMDFkYTI4Y2I3Yjk4ZTJlZDgxNDIzNGQ2NTAwYmQ5NWJiNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4RbD7LQcwEud+5dixfKd50WK7Ua 9H8AraU189sy5FXnQFSdFtgFLOhWPXIPV9f+wKkJF66ujuMRwpOgPepyhl54O8F0 R661zoH+zNrJLYs+BrHRGQ7wOQxrzJXHx8LuPyvDBkjjlGZ2P5AofM84xFzfKHqi 87XNZtWjaRZJQIkauoZ8PG/xngbEEKMumtCKTSa5v4Ecu34k0bvOPcN5T1S1NG3N VAnOdj1/u3Pye7ufn2ptvz/WYSE5fM5171m0fk8uPwn4StEG8IY2qO4dsCFqSNKO KxGgKXt/lfPyDYC9/K7XUADDoqtGialbOjBsf+IQRfd24tM6V8P5YocZAwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPGTxKM49g3vw5BhdB/x1M5+MvAnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU3OWQ2ZjI3LTFlNzgtNGJkZS1hNGJiLWM4NTlhNjFjMDkwOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6sjAMA0GCSqGSIb3DQEBCwUAA4IBAQABmWRzo81gNx4wfV0h Hw2qGPjZO9YKOQgLXXrHSiFFJVP9/TM38gjU87OMn386THV9t2qv8d00ft+GNIcf bq/ZwxFk5Iauni4SoVBYCOlvUtB9UimsWFDRe9rlTL4oo3qPjC0bN/xN/NC+FA30 V8RxDyeApq/EiYV0z0ZQeX0IQx7zfzc4P45P6Hx4Uh0VyTokAWflCiZ/hVpawW4g fzR634YpXc/NHQ8Vxf6+D14e02XAHXULI11mC3jrmjHQR0HVYTymaWMpNY/8P9R8 yokxB8iZorpSw4nRssQhKoLIb5s4D14AHFfKaG4vUqAlpia3KUzOQB9pLZVhVN81 5BQ3 -----END CERTIFICATE-----Generated at Sun Oct 11 23:12:14 2026 by rpki-client