$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d316ef2-56e4-4581-990e-015883180353.roa File: 5d316ef2-56e4-4581-990e-015883180353.roa (raw, json) Hash identifier: 9l9GpgJtXzPKgET01t8G+02b/rtPgDcLOSyRjj/vGtM= Subject key identifier: 69:3B:0C:90:E9:60:1F:AD:E0:42:A1:9C:94:56:9A:C8:53:20:48:67 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C7406B2B800258434FAD485BD7CF92F3ED6A2CF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d316ef2-56e4-4581-990e-015883180353.roa Signing time: Fri 09 Oct 2026 00:07:34 +0000 ROA not before: Fri 09 Oct 2026 00:07:34 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:74:06:b2:b8:00:25:84:34:fa:d4:85:bd:7c:f9:2f:3e:d6:a2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:07:34 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=9dbb5d88e098234c05459faf62745238e4b3e60f40815819563e22a1dc7f70c3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:88:11:59:2e:49:08:5d:1b:8d:15:d6:36: b2:59:45:cf:f4:ce:5c:ec:85:c3:9b:21:58:1a:fe: d8:17:a1:0b:8a:92:07:d0:44:dc:29:92:1e:94:0a: 7a:34:10:41:cd:5d:b0:40:d3:cc:fd:83:d4:47:09: 47:fa:a4:38:20:3f:54:29:97:36:2f:21:c3:8c:3e: 2e:a8:d5:9a:a3:85:cf:fc:59:45:1d:fc:61:58:54: 0f:7d:9b:da:84:f9:51:43:54:48:bf:96:a4:5c:4b: 9f:de:75:d4:d8:30:22:3c:59:53:d2:4e:07:96:f1: 26:98:10:4d:86:b3:e8:e5:b8:f6:e6:c2:88:18:25: 26:b9:4c:06:d2:16:bc:da:56:e9:9e:19:59:94:b9: 56:4a:ec:3d:a1:fb:c6:33:73:fc:10:a1:89:5a:42: b5:99:38:4e:00:e1:51:89:3e:ce:2c:be:bd:81:d6: cd:df:6d:2e:fd:e0:34:70:62:75:68:a6:99:2c:49: 7c:79:43:46:dc:86:62:b9:b7:f7:30:39:d3:c6:dc: dd:2b:d1:96:60:94:ac:a3:62:ca:f0:49:0b:3d:75: 9e:37:cb:56:02:6e:59:21:2c:d1:73:4f:0a:a7:5a: 4e:44:44:27:02:e0:9c:aa:38:6a:43:63:27:cf:70: ea:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3B:0C:90:E9:60:1F:AD:E0:42:A1:9C:94:56:9A:C8:53:20:48:67 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d316ef2-56e4-4581-990e-015883180353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:4000::/40 Signature Algorithm: sha256WithRSAEncryption c6:e6:6b:65:ba:e1:90:89:26:ed:59:c5:f7:7b:51:a0:61:0b: 7b:ec:33:84:74:93:88:0f:02:c3:ca:e3:5a:98:47:13:6d:d0: 2e:77:50:d2:c4:7a:84:e6:71:84:80:f5:56:f9:e3:d4:e4:a2: 3d:a2:f3:19:58:ee:93:3a:0d:d8:49:46:c1:5b:6e:30:9d:5b: 50:55:f4:1f:e0:f9:f3:11:40:36:85:62:e3:b9:e3:2f:5f:8b: 27:fd:b2:f1:7e:3c:4d:b0:f9:f6:b5:6b:9f:7e:4c:09:1a:70: f7:e9:2a:4e:be:a8:fd:ac:8b:2a:c8:31:66:3f:33:82:60:37: 06:f3:58:bf:26:25:c0:cd:80:70:68:32:23:37:fd:52:97:53: 74:cc:07:fd:65:e0:e7:95:42:cf:3c:7e:5a:03:6b:90:74:70: b8:ce:50:20:13:46:18:ce:96:15:41:ae:b9:3d:e0:23:a1:7b: 6c:2e:ad:d8:85:fa:1b:64:34:72:62:76:6b:7e:1b:03:25:e0: b1:61:1d:12:c6:a8:e6:39:29:bb:66:8b:34:a3:16:5c:7f:82: 1f:0f:ae:9b:19:f9:0a:85:21:e4:b1:d6:21:d9:c1:97:41:09: be:0d:ae:30:b4:5b:3f:bf:c9:27:b0:08:c0:7b:b4:4c:dc:77: ff:14:2a:3e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPHQGsrgAJYQ0+tSFvXz5Lz7Wos8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMDczNFoX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAOWRiYjVkODhlMDk4MjM0YzA1NDU5 ZmFmNjI3NDUyMzhlNGIzZTYwZjQwODE1ODE5NTYzZTIyYTFkYzdmNzBjMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlleIEVkuSQhdG40V1jayWUXP9M5c 7IXDmyFYGv7YF6ELipIH0ETcKZIelAp6NBBBzV2wQNPM/YPURwlH+qQ4ID9UKZc2 LyHDjD4uqNWao4XP/FlFHfxhWFQPfZvahPlRQ1RIv5akXEuf3nXU2DAiPFlT0k4H lvEmmBBNhrPo5bj25sKIGCUmuUwG0ha82lbpnhlZlLlWSuw9ofvGM3P8EKGJWkK1 mThOAOFRiT7OLL69gdbN320u/eA0cGJ1aKaZLEl8eUNG3IZiubf3MDnTxtzdK9GW YJSso2LK8EkLPXWeN8tWAm5ZISzRc08Kp1pOREQnAuCcqjhqQ2Mnz3DqfQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGk7DJDpYB+t4EKhnJRWmshTIEhnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVkMzE2ZWYyLTU2ZTQtNDU4MS05OTBlLTAxNTg4MzE4MDM1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba80AwDQYJKoZIhvcNAQELBQADggEBAMbma2W64ZCJJu1Zxfd7 UaBhC3vsM4R0k4gPAsPK41qYRxNt0C53UNLEeoTmcYSA9Vb549Tkoj2i8xlY7pM6 DdhJRsFbbjCdW1BV9B/g+fMRQDaFYuO54y9fiyf9svF+PE2w+fa1a59+TAkacPfp Kk6+qP2siyrIMWY/M4JgNwbzWL8mJcDNgHBoMiM3/VKXU3TMB/1l4OeVQs88floD a5B0cLjOUCATRhjOlhVBrrk94COhe2wurdiF+htkNHJidmt+GwMl4LFhHRLGqOY5 KbtmizSjFlx/gh8PrpsZ+QqFIeSx1iHZwZdBCb4NrjC0Wz+/ySewCMB7tEzcd/8U Kj4= -----END CERTIFICATE-----Generated at Sun Oct 11 18:57:43 2026 by rpki-client