$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7105aadf-8449-4060-98c4-d4b349ff7892.roa File: 7105aadf-8449-4060-98c4-d4b349ff7892.roa (raw, json) Hash identifier: qfgdl4Uciv/VV6QECU6h/Y9IX0fMkgVCW9ddJEFGK5c= Subject key identifier: 31:1B:5A:26:A7:3D:C8:EA:45:E9:D5:5B:EF:39:9F:82:9C:CC:F2:80 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 04853AEE2B3A8D676DB9AA8CDDF88E01DBA80748 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7105aadf-8449-4060-98c4-d4b349ff7892.roa Signing time: Sun 11 Oct 2026 00:07:37 +0000 ROA not before: Sun 11 Oct 2026 00:07:37 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:85:3a:ee:2b:3a:8d:67:6d:b9:aa:8c:dd:f8:8e:01:db:a8:07:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 11 00:07:37 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=e2390cf930ae759d2773b16878775fe4908f5ad7c562aad6d024913efefce735, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:79:b3:05:e3:2d:0d:b4:13:40:c3:32:53: 53:ce:bd:5d:64:d3:35:2c:ca:a8:25:64:66:11:d6: 2e:86:c4:91:1c:57:f9:28:36:ec:74:63:e2:eb:5f: 8a:cc:3e:53:84:0b:07:ae:a7:de:fd:39:c1:74:22: 58:d8:86:e5:c0:20:e5:47:7c:b4:c9:16:cd:61:e3: 02:40:3c:ca:b6:b7:f0:18:7d:23:e0:ee:d5:a0:7e: 70:9f:a8:20:ac:f3:f6:40:73:4b:81:5d:33:54:7f: 9a:6a:80:a7:e3:46:49:36:10:35:28:11:8d:ec:c8: d0:ac:1f:8a:77:d2:2a:a6:6a:1a:81:3d:f2:0a:2d: fc:d3:61:9c:2a:72:fc:b4:ff:64:8c:03:12:86:0e: 80:bc:04:85:3a:61:b1:9a:15:9a:21:83:4b:60:82: 4e:e4:74:b7:27:08:9e:f7:ff:2e:56:6a:35:dc:d5: c3:a6:7c:64:fd:2a:f7:33:ea:29:f2:01:c8:46:21: 4f:27:e3:23:a2:3e:b8:21:6c:f5:f0:33:7f:13:bf: 12:ca:82:ac:06:ae:23:89:50:23:11:48:d8:17:00: f8:da:9e:72:5c:80:55:17:70:4c:71:9f:43:29:10: af:4a:00:ce:41:50:ce:1e:04:a5:5c:65:4e:a3:02: 9d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1B:5A:26:A7:3D:C8:EA:45:E9:D5:5B:EF:39:9F:82:9C:CC:F2:80 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7105aadf-8449-4060-98c4-d4b349ff7892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:b000::/40 Signature Algorithm: sha256WithRSAEncryption c9:5d:2b:a6:e0:0d:c4:9d:a2:ff:bf:e9:2c:65:c0:19:95:6e: ba:66:77:97:cc:9e:32:5f:a0:74:06:93:b6:ab:58:15:3e:c7: aa:10:35:57:81:44:02:eb:e5:a6:5c:9f:5a:f4:5c:09:97:2c: 9d:61:09:f9:14:f1:e7:92:03:43:fc:d6:15:4b:f6:70:ee:18: ae:c0:1f:85:05:44:6a:0c:91:60:ed:24:be:0a:0b:a2:8e:25: 4a:e1:43:2c:eb:43:0f:35:3a:cf:ba:df:2e:21:d4:56:c5:17: a1:f0:b0:32:cd:9c:40:32:86:63:3c:14:e4:54:6a:45:93:4c: bc:8d:d8:0a:c8:90:dd:fa:08:04:1b:98:69:1f:3c:13:45:56: 20:c8:3b:09:72:7d:0f:00:10:09:56:e2:85:13:7e:e6:a5:0c: 13:37:db:b3:9e:40:89:77:9c:02:a2:bf:d1:30:b5:0e:f8:d2: 48:c3:f0:97:71:dd:35:a3:09:f9:b5:f4:1b:80:5f:d2:04:af: 8e:13:8e:7b:9a:50:71:c8:f1:68:ac:dc:93:7f:e8:e9:82:f0: 6d:43:f5:ea:9c:b6:fe:56:cb:e5:5d:48:44:76:19:70:26:63: b4:e8:c2:a6:5a:91:dc:3b:a2:45:d6:58:78:a1:ad:f2:f6:00: c5:f4:75:66 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBIU67is6jWdtuaqM3fiOAduoB0gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxMTAwMDczN1oX DTI3MDEwOTIzNTk1OVowejFJMEcGA1UEBRNAZTIzOTBjZjkzMGFlNzU5ZDI3NzNi MTY4Nzg3NzVmZTQ5MDhmNWFkN2M1NjJhYWQ2ZDAyNDkxM2VmZWZjZTczNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6B5swXjLQ20E0DDMlNTzr1dZNM1 LMqoJWRmEdYuhsSRHFf5KDbsdGPi61+KzD5ThAsHrqfe/TnBdCJY2IblwCDlR3y0 yRbNYeMCQDzKtrfwGH0j4O7VoH5wn6ggrPP2QHNLgV0zVH+aaoCn40ZJNhA1KBGN 7MjQrB+Kd9IqpmoagT3yCi3802GcKnL8tP9kjAMShg6AvASFOmGxmhWaIYNLYIJO 5HS3Jwie9/8uVmo13NXDpnxk/Sr3M+op8gHIRiFPJ+Mjoj64IWz18DN/E78SyoKs Bq4jiVAjEUjYFwD42p5yXIBVF3BMcZ9DKRCvSgDOQVDOHgSlXGVOowKdZQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDEbWianPcjqRenVW+85n4KczPKAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcxMDVhYWRmLTg0NDktNDA2MC05OGM0LWQ0YjM0OWZmNzg5Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9bAwDQYJKoZIhvcNAQELBQADggEBAMldK6bgDcSdov+/6Sxl wBmVbrpmd5fMnjJfoHQGk7arWBU+x6oQNVeBRALr5aZcn1r0XAmXLJ1hCfkU8eeS A0P81hVL9nDuGK7AH4UFRGoMkWDtJL4KC6KOJUrhQyzrQw81Os+63y4h1FbFF6Hw sDLNnEAyhmM8FORUakWTTLyN2ArIkN36CAQbmGkfPBNFViDIOwlyfQ8AEAlW4oUT fualDBM327OeQIl3nAKiv9EwtQ740kjD8Jdx3TWjCfm19BuAX9IEr44TjnuaUHHI 8Wis3JN/6OmC8G1D9eqctv5Wy+VdSER2GXAmY7TowqZakdw7okXWWHihrfL2AMX0 dWY= -----END CERTIFICATE-----Generated at Mon Oct 12 00:48:54 2026 by rpki-client