$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ee735e4-1591-4b3e-a6f4-475a8ae30369.roa File: 7ee735e4-1591-4b3e-a6f4-475a8ae30369.roa (raw, json) Hash identifier: hTpO3/YgAOPg0G6lVLwvC/V6iK67lIqyDwpa5Gn5MXY= Subject key identifier: 83:F2:CF:21:B9:A7:EB:46:9F:63:90:B0:34:81:02:66:AC:C3:A5:9D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 17D2BD430F11FE9F89F494A29190CB5C2D4B6CC9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ee735e4-1591-4b3e-a6f4-475a8ae30369.roa Signing time: Thu 08 Oct 2026 17:13:55 +0000 ROA not before: Thu 08 Oct 2026 17:13:55 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae3:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 00:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d2:bd:43:0f:11:fe:9f:89:f4:94:a2:91:90:cb:5c:2d:4b:6c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 8 17:13:55 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=8e2b4e62ca6a46a8944dd4c75bfe48eac3bc9c82b71543c3068817f5af29be73, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:ce:fb:f9:2c:ae:04:bc:3f:c4:44:1d:ec: 59:dd:86:e3:7b:e3:c6:e8:e7:52:98:8c:d4:25:39: 51:f8:17:53:2c:53:53:19:b2:47:86:84:a8:ad:8f: c3:ca:8a:5a:dc:5b:6b:49:91:ae:47:3c:87:b7:75: fa:dd:10:b5:fb:32:34:2c:8e:a8:48:6b:8f:99:a8: 74:4f:fd:60:b9:d2:cb:86:e7:21:84:a2:81:74:2e: c6:92:41:e5:c4:2b:e9:6b:8f:63:8f:f8:1e:e3:90: 90:e3:b2:ed:0f:7c:c2:8d:63:e5:c4:ec:50:4a:cf: d9:78:c2:aa:dd:b3:91:36:5f:04:3a:e0:da:d6:52: eb:2a:1f:71:2a:ab:af:17:ec:d7:84:52:1d:29:98: 6e:0e:2b:02:09:71:c7:3c:b6:02:7d:6d:82:d8:e8: 65:1f:61:f7:5e:8d:dd:46:cf:82:77:f2:ec:24:3b: 97:dc:b4:5b:4e:d5:b5:4a:03:4f:8b:8e:9b:85:e7: 3e:85:8d:13:72:52:f9:e6:6e:ed:6c:f0:89:03:9a: a5:9c:99:8e:b0:c1:51:06:4b:bd:13:4c:80:4f:87: 06:87:54:04:af:ad:f7:9d:79:0a:fc:aa:0e:a8:42: 7c:1f:83:dd:05:5a:38:9d:e4:f0:9f:3e:e6:2a:81: 6e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F2:CF:21:B9:A7:EB:46:9F:63:90:B0:34:81:02:66:AC:C3:A5:9D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ee735e4-1591-4b3e-a6f4-475a8ae30369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae3:9000::/40 Signature Algorithm: sha256WithRSAEncryption 3c:27:70:e9:d5:ef:49:70:0c:12:53:21:eb:75:89:ce:3f:7b: 66:6b:22:6f:cb:c4:7e:a2:89:f4:4b:31:cc:b0:52:30:64:0c: ea:f2:cd:5c:77:0f:50:64:2c:56:b9:95:b5:af:6e:01:b3:d9: 58:ae:6f:2a:3b:e7:e0:96:2b:02:7c:a9:0a:4d:54:3f:cc:33: e9:41:59:2a:79:23:8d:06:5f:c4:3c:4a:41:51:44:79:30:52: 13:e8:38:8a:da:4d:92:4d:ec:20:be:d2:9d:ed:83:c3:5c:ed: b6:c2:a1:d7:fa:1e:e2:d1:94:f8:f4:86:6b:39:e5:d8:30:31: 9f:c4:84:4b:3d:6b:13:bc:de:08:5b:6f:a0:0b:1b:21:cc:57: 7d:4b:31:48:1c:ff:83:ec:c2:1e:62:70:ef:cf:5f:e1:89:72: a8:e4:3d:bb:99:26:0c:66:63:6f:97:82:bd:1e:69:63:a9:a5: b9:d3:f2:6d:c3:aa:68:3b:7a:5f:4f:e3:e2:b3:58:55:2c:5b: 67:9d:bd:cb:61:1b:fd:de:7c:b8:4e:10:37:dd:21:52:5a:48: f2:e6:b6:de:c6:2c:ba:a0:6f:ef:2e:ed:e4:92:a6:55:ea:cc: be:e2:d3:40:18:f1:1f:48:02:1c:6b:5f:e3:c1:4e:70:21:3f: 78:b1:ee:0c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUF9K9Qw8R/p+J9JSikZDLXC1LbMkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwODE3MTM1NVoX DTI3MDEwNjIzNTk1OVowejFJMEcGA1UEBRNAOGUyYjRlNjJjYTZhNDZhODk0NGRk NGM3NWJmZTQ4ZWFjM2JjOWM4MmI3MTU0M2MzMDY4ODE3ZjVhZjI5YmU3MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsALO+/ksrgS8P8REHexZ3Ybje+PG 6OdSmIzUJTlR+BdTLFNTGbJHhoSorY/Dyopa3FtrSZGuRzyHt3X63RC1+zI0LI6o SGuPmah0T/1gudLLhuchhKKBdC7GkkHlxCvpa49jj/ge45CQ47LtD3zCjWPlxOxQ Ss/ZeMKq3bORNl8EOuDa1lLrKh9xKquvF+zXhFIdKZhuDisCCXHHPLYCfW2C2Ohl H2H3Xo3dRs+Cd/LsJDuX3LRbTtW1SgNPi46bhec+hY0TclL55m7tbPCJA5qlnJmO sMFRBku9E0yAT4cGh1QEr633nXkK/KoOqEJ8H4PdBVo4neTwnz7mKoFuBQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIPyzyG5p+tGn2OQsDSBAmasw6WdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdlZTczNWU0LTE1OTEtNGIzZS1hNmY0LTQ3NWE4YWUzMDM2OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba45AwDQYJKoZIhvcNAQELBQADggEBADwncOnV70lwDBJTIet1 ic4/e2ZrIm/LxH6iifRLMcywUjBkDOryzVx3D1BkLFa5lbWvbgGz2Viubyo75+CW KwJ8qQpNVD/MM+lBWSp5I40GX8Q8SkFRRHkwUhPoOIraTZJN7CC+0p3tg8Nc7bbC odf6HuLRlPj0hms55dgwMZ/EhEs9axO83ghbb6ALGyHMV31LMUgc/4Pswh5icO/P X+GJcqjkPbuZJgxmY2+Xgr0eaWOppbnT8m3Dqmg7el9P4+KzWFUsW2edvcthG/3e fLhOEDfdIVJaSPLmtt7GLLqgb+8u7eSSplXqzL7i00AY8R9IAhxrX+PBTnAhP3ix 7gw= -----END CERTIFICATE-----Generated at Tue Oct 13 02:40:55 2026 by rpki-client