$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/840aebb6-12e0-4e77-81a7-19fc1a31a97b.roa File: 840aebb6-12e0-4e77-81a7-19fc1a31a97b.roa (raw, json) Hash identifier: vVcIMPZrE45aScpxQKI3yL0HmrBnp3MCkiYD690qQD4= Subject key identifier: F0:A4:D0:33:AD:B1:1E:A4:C9:A3:46:C5:0B:45:63:84:1C:FA:1D:E1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2C2DEDC5062957EF534856675528986AAF9CABB1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/840aebb6-12e0-4e77-81a7-19fc1a31a97b.roa Signing time: Thu 08 Oct 2026 17:13:50 +0000 ROA not before: Thu 08 Oct 2026 17:13:50 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae1:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 00:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:2d:ed:c5:06:29:57:ef:53:48:56:67:55:28:98:6a:af:9c:ab:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 8 17:13:50 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=7d5e7cdcfe90c19916c6e5f0967a55ae864495459f10261f570f074f305f70d8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c3:5f:9f:76:64:bc:a3:22:7c:66:af:d2:ce: 9c:27:ac:12:12:0b:28:7c:27:8a:75:6e:64:6a:3a: 78:e7:cb:3d:59:78:d7:d2:69:d5:dd:8d:ac:96:42: 52:97:7c:e5:13:50:b4:3e:37:99:15:6a:40:70:a4: 5b:29:aa:47:72:4b:e6:2c:a3:15:97:31:56:39:67: 64:e2:1c:ce:d6:e8:74:2e:14:fe:49:38:e3:9d:6d: ca:33:78:d1:14:04:50:d6:e4:03:e2:f5:7a:99:9c: 94:5c:4f:aa:25:3e:2d:2e:3b:11:49:3a:e4:f2:5e: 3c:4b:4c:ec:76:a7:9b:4a:8e:2b:cd:d5:4d:d9:a0: 9b:be:13:2d:bf:0a:8a:a4:5e:3b:4d:c8:48:1b:15: 7e:47:1b:3b:b5:2f:63:79:9e:55:83:bc:28:3e:d3: 3d:26:c1:9d:fb:14:32:0b:d1:ba:0f:5f:b3:5e:83: 42:d2:bd:70:ec:68:93:e5:5f:c3:2e:9c:57:92:ae: 00:4b:b7:bf:0f:40:a6:bc:a8:96:59:c2:cb:b0:54: e6:46:c2:4f:f5:d8:d4:2e:5e:a3:fb:bb:e0:e4:4e: 2b:60:f5:bf:c3:19:83:0f:35:c6:64:a2:b4:fa:bb: 51:06:ba:41:99:92:b3:4d:17:19:fd:df:90:e5:4a: 2a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A4:D0:33:AD:B1:1E:A4:C9:A3:46:C5:0B:45:63:84:1C:FA:1D:E1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/840aebb6-12e0-4e77-81a7-19fc1a31a97b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae1:e000::/40 Signature Algorithm: sha256WithRSAEncryption 6f:83:6f:d6:29:f9:9a:5b:e8:7f:21:a1:a3:19:bf:51:7f:7b: f8:c0:e5:64:ad:0b:89:cc:29:e9:10:dd:c1:ed:34:32:e2:1b: 18:18:12:a5:c3:64:1b:6a:96:6b:88:10:18:5a:9f:08:fd:9b: de:ed:39:54:e1:2b:bc:3b:c3:95:9f:11:b2:82:7d:8e:3d:90: 57:b7:29:56:26:73:d8:06:d8:2c:b6:20:79:50:42:df:da:a6: 95:59:39:f0:8c:04:35:80:d9:cf:6d:d8:ae:51:76:17:ff:f1: 13:da:44:7f:d2:a0:3f:84:21:95:7f:fc:7a:43:5e:9a:36:61: cf:6b:d3:d7:be:c7:dc:14:6d:7b:be:43:d8:c7:01:ae:2b:c7: 0f:a7:86:f3:fa:19:22:23:bd:20:2e:73:80:bf:da:07:56:8b: 2d:c1:28:a0:4d:59:b2:63:57:e7:2e:cf:6e:12:af:bf:84:71: ce:01:ef:cf:c7:c1:ab:52:0e:b7:6f:2f:7a:9e:3e:88:0a:69: ab:7c:42:5e:0a:51:8c:82:9c:39:d8:a3:8a:84:41:45:b4:27: c2:bf:a1:0a:a8:b8:60:a7:25:f5:da:f7:d3:e3:60:8f:6a:60: e9:2a:ef:31:c5:fa:41:4c:64:fa:d4:73:4d:a7:ff:55:96:b3: 60:11:10:da -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULC3txQYpV+9TSFZnVSiYaq+cq7EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwODE3MTM1MFoX DTI3MDEwNjIzNTk1OVowejFJMEcGA1UEBRNAN2Q1ZTdjZGNmZTkwYzE5OTE2YzZl NWYwOTY3YTU1YWU4NjQ0OTU0NTlmMTAyNjFmNTcwZjA3NGYzMDVmNzBkODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Nfn3ZkvKMifGav0s6cJ6wSEgso fCeKdW5kajp458s9WXjX0mnV3Y2slkJSl3zlE1C0PjeZFWpAcKRbKapHckvmLKMV lzFWOWdk4hzO1uh0LhT+STjjnW3KM3jRFARQ1uQD4vV6mZyUXE+qJT4tLjsRSTrk 8l48S0zsdqebSo4rzdVN2aCbvhMtvwqKpF47TchIGxV+Rxs7tS9jeZ5Vg7woPtM9 JsGd+xQyC9G6D1+zXoNC0r1w7GiT5V/DLpxXkq4AS7e/D0CmvKiWWcLLsFTmRsJP 9djULl6j+7vg5E4rYPW/wxmDDzXGZKK0+rtRBrpBmZKzTRcZ/d+Q5Uoq/wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPCk0DOtsR6kyaNGxQtFY4Qc+h3hMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg0MGFlYmI2LTEyZTAtNGU3Ny04MWE3LTE5ZmMxYTMxYTk3Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4eAwDQYJKoZIhvcNAQELBQADggEBAG+Db9Yp+Zpb6H8hoaMZ v1F/e/jA5WStC4nMKekQ3cHtNDLiGxgYEqXDZBtqlmuIEBhanwj9m97tOVThK7w7 w5WfEbKCfY49kFe3KVYmc9gG2Cy2IHlQQt/appVZOfCMBDWA2c9t2K5Rdhf/8RPa RH/SoD+EIZV//HpDXpo2Yc9r09e+x9wUbXu+Q9jHAa4rxw+nhvP6GSIjvSAuc4C/ 2gdWiy3BKKBNWbJjV+cuz24Sr7+Ecc4B78/HwatSDrdvL3qePogKaat8Ql4KUYyC nDnYo4qEQUW0J8K/oQqouGCnJfXa99PjYI9qYOkq7zHF+kFMZPrUc02n/1WWs2AR ENo= -----END CERTIFICATE-----Generated at Tue Oct 13 06:12:09 2026 by rpki-client