$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8322159e-0198-4b52-b8d1-6bbc4fa019e1.roa File: 8322159e-0198-4b52-b8d1-6bbc4fa019e1.roa (raw, json) Hash identifier: tljpJGB5HeqiLOThfWBLb5XTrtCPSDwMXLvmcr2ZK5w= Subject key identifier: 13:58:26:FC:87:36:0C:8B:02:C5:85:9F:77:EF:67:4D:E2:21:E4:48 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 18070B5C13763F5610F35234FE230767CB62DCA4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8322159e-0198-4b52-b8d1-6bbc4fa019e1.roa Signing time: Fri 09 Oct 2026 00:07:37 +0000 ROA not before: Fri 09 Oct 2026 00:07:37 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:07:0b:5c:13:76:3f:56:10:f3:52:34:fe:23:07:67:cb:62:dc:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:07:37 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=7b7d012155cd138c2883afd722c334fee4c0b661dbe091f9b7b125b3628d177c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:50:8d:71:b1:e4:b2:05:bb:b4:6c:ca:e0: de:28:5f:37:6a:e9:ac:5e:d0:bf:70:bf:bc:f6:87: a6:1e:70:55:7b:85:5e:69:f3:89:90:49:7b:77:e2: b5:16:b4:e7:0a:b8:d8:39:01:93:aa:23:5f:10:fb: f2:04:d6:10:dc:66:92:4e:d4:2c:8a:21:77:69:21: 26:47:07:e3:e4:f2:1f:f0:5c:56:0b:2a:86:e4:d4: bf:53:0f:1c:a2:bb:77:d2:47:07:83:96:79:0a:bd: f5:f5:86:a0:f1:31:f7:09:5b:f9:7d:1e:1a:c8:8b: 7f:ce:47:9f:ab:72:c9:e7:5d:df:b8:e6:7e:24:fc: 79:49:03:e6:0c:ad:78:24:2b:16:1e:a3:44:b8:51: 77:6d:5b:ca:c2:d7:6c:2b:c8:fe:62:e2:e8:7d:34: 89:c6:06:3e:af:1b:1f:de:3b:27:95:db:ef:52:e4: 06:c1:3a:02:51:2b:2e:34:4f:99:cd:96:1f:f8:f8: 33:f2:b2:30:5d:80:65:12:2c:11:aa:04:41:18:ba: 57:92:30:14:d8:53:ea:b7:ea:40:47:16:8a:be:f7: 10:09:8e:fe:ce:5a:12:dc:90:a2:fd:09:00:3a:6e: a0:39:f9:83:16:86:80:73:ee:c8:f5:19:64:c9:10: ea:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:58:26:FC:87:36:0C:8B:02:C5:85:9F:77:EF:67:4D:E2:21:E4:48 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8322159e-0198-4b52-b8d1-6bbc4fa019e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:6000::/40 Signature Algorithm: sha256WithRSAEncryption 42:ac:b0:16:5b:da:38:c0:c3:ec:8c:e5:a7:d5:76:68:57:92: ef:f8:2a:ee:d3:e4:b2:8b:f1:12:87:5c:26:99:fe:81:90:aa: ed:71:fb:ee:18:2c:83:cf:8b:a9:e2:82:dd:db:c9:00:db:2d: b5:fc:bf:5d:39:38:4a:79:35:89:70:1f:a5:99:73:d5:4e:95: 46:ae:85:b9:56:96:76:ea:fc:2f:56:12:7b:c1:74:2d:81:35: 0e:56:c9:2d:49:94:87:54:c0:73:b1:da:5d:7f:ad:02:83:c2: 02:7a:17:e5:7c:66:fb:47:9c:12:57:94:0c:4c:c4:1a:c9:7f: 47:65:23:ed:1c:8c:e5:74:07:b5:de:c3:14:6d:fb:ad:f6:83: 9d:16:41:d9:93:f6:99:65:5e:56:5f:59:b5:7f:06:d0:4d:fb: 89:34:15:77:a7:28:94:37:00:5a:c4:37:e4:83:26:e1:3f:79: 0a:21:8b:c8:54:1b:a0:3f:13:87:3b:3b:28:e6:4b:21:93:33: 50:c9:db:7d:9d:10:a8:b3:53:aa:f9:f8:bb:52:5e:a8:8d:e2: 70:93:e6:36:4c:88:5d:29:47:b9:9a:80:a8:08:c4:da:57:04: fc:6d:5b:f6:3d:36:0c:52:6a:f7:2a:ae:c0:c9:18:78:61:4a: ba:45:af:e2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGAcLXBN2P1YQ81I0/iMHZ8ti3KQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMDczN1oX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAN2I3ZDAxMjE1NWNkMTM4YzI4ODNh ZmQ3MjJjMzM0ZmVlNGMwYjY2MWRiZTA5MWY5YjdiMTI1YjM2MjhkMTc3YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XBQjXGx5LIFu7RsyuDeKF83aums XtC/cL+89oemHnBVe4VeafOJkEl7d+K1FrTnCrjYOQGTqiNfEPvyBNYQ3GaSTtQs iiF3aSEmRwfj5PIf8FxWCyqG5NS/Uw8cort30kcHg5Z5Cr319Yag8TH3CVv5fR4a yIt/zkefq3LJ513fuOZ+JPx5SQPmDK14JCsWHqNEuFF3bVvKwtdsK8j+YuLofTSJ xgY+rxsf3jsnldvvUuQGwToCUSsuNE+ZzZYf+Pgz8rIwXYBlEiwRqgRBGLpXkjAU 2FPqt+pARxaKvvcQCY7+zloS3JCi/QkAOm6gOfmDFoaAc+7I9RlkyRDquQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBNYJvyHNgyLAsWFn3fvZ03iIeRIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzMjIxNTllLTAxOTgtNGI1Mi1iOGQxLTZiYmM0ZmEwMTllMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba82AwDQYJKoZIhvcNAQELBQADggEBAEKssBZb2jjAw+yM5afV dmhXku/4Ku7T5LKL8RKHXCaZ/oGQqu1x++4YLIPPi6nigt3byQDbLbX8v105OEp5 NYlwH6WZc9VOlUauhblWlnbq/C9WEnvBdC2BNQ5WyS1JlIdUwHOx2l1/rQKDwgJ6 F+V8ZvtHnBJXlAxMxBrJf0dlI+0cjOV0B7XewxRt+632g50WQdmT9pllXlZfWbV/ BtBN+4k0FXenKJQ3AFrEN+SDJuE/eQohi8hUG6A/E4c7OyjmSyGTM1DJ232dEKiz U6r5+LtSXqiN4nCT5jZMiF0pR7magKgIxNpXBPxtW/Y9NgxSavcqrsDJGHhhSrpF r+I= -----END CERTIFICATE-----Generated at Sun Oct 11 22:16:35 2026 by rpki-client