$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63796e15-51d3-4118-a715-d6687d437bb2.roa File: 63796e15-51d3-4118-a715-d6687d437bb2.roa (raw, json) Hash identifier: Av1b6NRwNTPkfotM2mAJKdmod0BsXx0twRILBS2Io58= Subject key identifier: 60:83:54:EA:B1:06:87:89:C2:18:EE:BA:5F:CA:64:41:98:B1:9C:90 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 120503428059DA9CFDB5108FCF80ABB0807ECF79 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63796e15-51d3-4118-a715-d6687d437bb2.roa Signing time: Fri 09 Oct 2026 00:07:16 +0000 ROA not before: Fri 09 Oct 2026 00:07:16 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:05:03:42:80:59:da:9c:fd:b5:10:8f:cf:80:ab:b0:80:7e:cf:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:07:16 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=d8845d3c059eda345e30ef7d526f8452de8ba72c5d0ab149301d6ebdb7b53167, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8d:a2:49:a7:c2:92:08:50:8f:a5:cc:31:16: 58:95:69:99:c7:7a:f5:34:28:3f:4f:cf:84:60:de: 84:34:c3:ca:a3:53:70:e2:21:a1:75:e5:0f:34:6b: 84:d0:28:e1:3f:7e:fa:5e:87:97:24:c0:c8:af:70: 23:43:b6:70:77:d8:67:55:ed:d1:16:e3:7a:26:74: 35:6b:15:bb:f9:6e:e0:09:17:73:ff:2b:99:f9:9e: 78:80:f1:4b:43:25:b7:f2:4c:4a:98:10:f7:b0:1d: cc:46:73:31:d4:32:df:08:af:0a:8c:56:ea:fa:ef: bd:c7:38:29:d6:03:5f:ea:61:99:94:43:54:72:8f: 08:fb:6f:3b:b1:fb:c3:8e:b1:1b:0f:dd:5a:01:c0: 21:2e:4b:2e:49:d0:c8:ea:28:7d:4e:7e:09:5f:90: e1:b1:35:cd:1b:3f:13:d6:e0:5d:21:ef:35:a4:49: e1:d3:4b:ec:d0:46:48:de:f0:78:03:de:1d:24:9b: 72:f4:c8:d1:58:43:c6:38:d1:88:0f:16:09:e0:e9: 2e:07:1f:b5:3c:2e:6c:82:5b:e4:5c:e1:cc:91:6a: 76:06:5f:97:4b:03:f9:08:68:61:1b:d8:f4:0b:6c: 83:b1:f2:71:81:02:9e:f7:e8:da:a9:45:ea:c7:10: b7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:83:54:EA:B1:06:87:89:C2:18:EE:BA:5F:CA:64:41:98:B1:9C:90 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63796e15-51d3-4118-a715-d6687d437bb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:c800::/40 Signature Algorithm: sha256WithRSAEncryption 73:5c:e7:b9:1f:84:a9:bc:5b:41:f5:1a:d6:68:ed:ad:ec:42: 23:96:1a:9d:7e:59:3a:a5:03:3e:37:81:e1:52:48:2a:5a:44: 8d:4f:db:fd:86:b6:9f:c8:20:71:e5:d0:78:f0:f0:95:c9:b1: 65:de:7c:a8:7a:2d:f5:81:bc:01:c0:47:b0:fb:83:df:70:5c: bb:5b:0f:0c:2e:5b:bb:c3:46:dd:12:d4:4a:17:fd:d1:5b:fa: 8c:c1:b9:11:77:6e:d2:02:3c:26:e2:0a:6a:43:1c:9b:23:21: 87:9b:53:92:79:0f:31:bd:b0:1c:d4:4f:0a:25:a5:b1:b3:28: ba:92:c6:8d:b2:3d:4e:df:6a:4d:b7:70:81:e2:61:e6:e7:44: 17:3e:62:02:2e:27:dc:b9:2c:76:f2:db:d0:a6:af:ca:2d:c2: 29:f7:1d:c3:8c:a9:0f:f0:ef:f0:49:54:c1:e5:e9:d0:13:64: 01:a8:c6:dd:2a:04:36:c3:ec:29:e9:cf:a2:18:df:e0:9c:d6: c4:87:7e:86:ba:40:d3:6a:f1:e1:81:e8:aa:b6:a2:ac:4c:51: 77:03:11:86:07:72:6c:b3:43:52:5f:4e:3c:f0:14:56:fe:ef: 82:a2:d9:d5:32:30:1f:a4:00:07:4a:39:e9:7b:30:f7:d2:23: e1:95:ad:15 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEgUDQoBZ2pz9tRCPz4CrsIB+z3kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMDcxNloX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAZDg4NDVkM2MwNTllZGEzNDVlMzBl ZjdkNTI2Zjg0NTJkZThiYTcyYzVkMGFiMTQ5MzAxZDZlYmRiN2I1MzE2NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI2iSafCkghQj6XMMRZYlWmZx3r1 NCg/T8+EYN6ENMPKo1Nw4iGhdeUPNGuE0CjhP376XoeXJMDIr3AjQ7Zwd9hnVe3R FuN6JnQ1axW7+W7gCRdz/yuZ+Z54gPFLQyW38kxKmBD3sB3MRnMx1DLfCK8KjFbq +u+9xzgp1gNf6mGZlENUco8I+287sfvDjrEbD91aAcAhLksuSdDI6ih9Tn4JX5Dh sTXNGz8T1uBdIe81pEnh00vs0EZI3vB4A94dJJty9MjRWEPGONGIDxYJ4OkuBx+1 PC5sglvkXOHMkWp2Bl+XSwP5CGhhG9j0C2yDsfJxgQKe9+jaqUXqxxC3zQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGCDVOqxBoeJwhjuul/KZEGYsZyQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYzNzk2ZTE1LTUxZDMtNDExOC1hNzE1LWQ2Njg3ZDQzN2JiMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba88gwDQYJKoZIhvcNAQELBQADggEBAHNc57kfhKm8W0H1GtZo 7a3sQiOWGp1+WTqlAz43geFSSCpaRI1P2/2Gtp/IIHHl0Hjw8JXJsWXefKh6LfWB vAHAR7D7g99wXLtbDwwuW7vDRt0S1EoX/dFb+ozBuRF3btICPCbiCmpDHJsjIYeb U5J5DzG9sBzUTwolpbGzKLqSxo2yPU7fak23cIHiYebnRBc+YgIuJ9y5LHby29Cm r8otwin3HcOMqQ/w7/BJVMHl6dATZAGoxt0qBDbD7Cnpz6IY3+Cc1sSHfoa6QNNq 8eGB6Kq2oqxMUXcDEYYHcmyzQ1JfTjzwFFb+74Ki2dUyMB+kAAdKOel7MPfSI+GV rRU= -----END CERTIFICATE-----Generated at Sun Oct 11 22:19:09 2026 by rpki-client