$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8149b6a0-3ee3-4471-b149-1e810ca39506.roa File: 8149b6a0-3ee3-4471-b149-1e810ca39506.roa (raw, json) Hash identifier: n6OHvIT7hHfc77y3HkpF6YQnzGZxsu0oHOY9vk41Ueo= Subject key identifier: AC:2D:85:B3:F0:D2:16:6F:57:73:AB:E9:E0:8E:D2:29:A8:FF:66:EE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 61E09E97D414317037BEF2A8421AED214F37B046 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8149b6a0-3ee3-4471-b149-1e810ca39506.roa Signing time: Sun 04 Oct 2026 00:00:10 +0000 ROA not before: Sun 04 Oct 2026 00:00:10 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:a080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e0:9e:97:d4:14:31:70:37:be:f2:a8:42:1a:ed:21:4f:37:b0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:00:10 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=b4d5bd2dbcdd4b8d1f880666c9d7d2f3af98508528a5f11d4b7706e0e4693ed8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:69:e9:4f:9f:ae:b6:28:99:43:cd:fd:18: c2:d5:70:1a:ae:a0:f3:92:c0:b2:14:6a:e3:c2:eb: 12:e0:39:b9:95:74:07:08:ef:72:ee:ca:cc:bc:e5: d7:f5:87:60:5b:f1:15:44:b6:b2:2f:0b:25:6d:e0: 28:98:f2:f1:55:bd:05:86:1d:63:5e:14:99:1b:cd: 5e:d6:b9:bf:e3:e7:bd:7f:fd:26:74:e9:9d:e2:bd: 86:66:b0:08:6b:30:4c:8d:b3:ea:15:7a:41:ba:45: f3:71:c5:73:b8:44:ba:d8:5b:31:ec:8c:e2:f2:03: 99:54:59:95:ea:b1:0a:e3:6e:e9:8b:e2:3e:5e:ab: ab:e6:6e:37:92:dd:b4:4d:b9:df:cc:7d:3d:fc:50: 4e:66:7e:80:43:91:a8:c0:45:1c:a1:0e:06:5e:f6: 41:e6:5d:c9:6a:11:4c:8e:16:37:b4:d5:90:57:97: 22:17:1c:47:fd:a0:88:f2:45:66:96:a1:c9:7a:7d: c7:53:80:ac:9f:de:54:c7:05:1d:c9:f8:6f:ae:d8: bf:d8:2e:32:72:0b:cb:38:c8:7d:1c:07:b4:c9:32: c3:3d:bb:cc:5f:33:b8:8a:60:4a:9c:1c:f9:46:6e: 7a:ca:b9:78:1e:4f:38:af:d7:32:bc:31:ce:e7:14: 67:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2D:85:B3:F0:D2:16:6F:57:73:AB:E9:E0:8E:D2:29:A8:FF:66:EE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8149b6a0-3ee3-4471-b149-1e810ca39506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:a080::/46 Signature Algorithm: sha256WithRSAEncryption 39:64:43:33:3f:4d:14:d8:00:03:fb:3d:5a:77:6c:fd:30:04: a1:7c:9a:58:49:a5:af:a9:a2:61:8c:72:bf:d0:1b:f4:6c:3a: 3e:51:f9:14:a3:aa:18:9d:bf:1c:7d:dd:49:ba:c9:28:5d:5a: 38:1c:18:81:10:46:bd:91:05:50:76:05:18:5f:cc:38:7f:5e: 62:22:de:0e:2c:81:66:24:b9:e9:99:aa:7e:72:47:4c:3d:42: a4:43:57:d4:98:d3:7e:fb:8b:cb:a1:e5:5e:81:29:6e:87:bc: 67:45:2a:51:cd:3d:6b:84:2e:13:db:db:44:88:ec:88:9a:ad: 28:2e:15:8a:5c:e6:90:59:d7:d2:c6:0e:56:88:38:5d:59:e1: 9f:ac:39:a1:d5:f3:39:03:e5:21:47:cf:9a:04:d7:72:7a:69: d6:67:9e:46:72:96:c8:3d:5f:16:fb:fe:f1:f7:43:ba:c3:10: 46:ea:f9:33:0e:3e:ce:50:9e:9e:ab:01:ce:5e:0e:81:2e:61: 18:75:e9:3b:33:89:ea:56:9b:45:78:b1:1e:19:07:3a:80:34: 32:14:f8:71:ea:89:47:a8:da:83:c6:86:d2:cd:22:48:3a:7e: 13:56:12:d7:dc:1b:b2:27:4f:1d:c0:c4:53:16:1c:47:b0:40: ec:34:e9:b1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYeCel9QUMXA3vvKoQhrtIU83sEYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwNDAwMDAxMFoX DTI3MDEwMjIzNTk1OVowejFJMEcGA1UEBRNAYjRkNWJkMmRiY2RkNGI4ZDFmODgw NjY2YzlkN2QyZjNhZjk4NTA4NTI4YTVmMTFkNGI3NzA2ZTBlNDY5M2VkODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGlp6U+frrYomUPN/RjC1XAarqDz ksCyFGrjwusS4Dm5lXQHCO9y7srMvOXX9YdgW/EVRLayLwslbeAomPLxVb0Fhh1j XhSZG81e1rm/4+e9f/0mdOmd4r2GZrAIazBMjbPqFXpBukXzccVzuES62Fsx7Izi 8gOZVFmV6rEK427pi+I+Xqur5m43kt20TbnfzH09/FBOZn6AQ5GowEUcoQ4GXvZB 5l3JahFMjhY3tNWQV5ciFxxH/aCI8kVmlqHJen3HU4Csn95UxwUdyfhvrti/2C4y cgvLOMh9HAe0yTLDPbvMXzO4imBKnBz5Rm56yrl4Hk84r9cyvDHO5xRnFQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKwthbPw0hZvV3Or6eCO0imo/2buMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgxNDliNmEwLTNlZTMtNDQ3MS1iMTQ5LTFlODEwY2EzOTUwNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaKCAMA0GCSqGSIb3DQEBCwUAA4IBAQA5ZEMzP00U2AAD+z1a d2z9MAShfJpYSaWvqaJhjHK/0Bv0bDo+UfkUo6oYnb8cfd1JuskoXVo4HBiBEEa9 kQVQdgUYX8w4f15iIt4OLIFmJLnpmap+ckdMPUKkQ1fUmNN++4vLoeVegSluh7xn RSpRzT1rhC4T29tEiOyImq0oLhWKXOaQWdfSxg5WiDhdWeGfrDmh1fM5A+UhR8+a BNdyemnWZ55GcpbIPV8W+/7x90O6wxBG6vkzDj7OUJ6eqwHOXg6BLmEYdek7M4nq VptFeLEeGQc6gDQyFPhx6olHqNqDxobSzSJIOn4TVhLX3BuyJ08dwMRTFhxHsEDs NOmx -----END CERTIFICATE-----Generated at Sun Oct 11 18:57:27 2026 by rpki-client