$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/906d1094-02f1-42d9-b22e-24f2ee4caa70.roa File: 906d1094-02f1-42d9-b22e-24f2ee4caa70.roa (raw, json) Hash identifier: PSarhS5jv+WxpBavnvKK3GfOl22GeKYB3LkVqIGPzI0= Subject key identifier: DA:19:18:63:D8:B0:6C:55:F6:A8:FD:E2:55:6D:EC:DC:1C:F7:F3:31 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 04CFF1F8F3BE61D595ACB5F1623796E75A5E2745 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/906d1094-02f1-42d9-b22e-24f2ee4caa70.roa Signing time: Tue 20 Oct 2026 00:31:00 +0000 ROA not before: Tue 20 Oct 2026 00:31:00 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 00:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:cf:f1:f8:f3:be:61:d5:95:ac:b5:f1:62:37:96:e7:5a:5e:27:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:31:00 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=163505d9b702bdc4f0fdd352d2b744883824056ea5286a8887dacf2e8324f720, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:80:74:25:e7:be:d6:a1:4d:27:20:1c:35: ea:f8:bb:b4:32:eb:d9:57:ba:06:2c:8e:b0:80:4c: 8f:1e:7c:0b:55:b9:dd:db:3b:85:b3:45:74:71:05: 14:6b:64:f9:ed:6f:f4:fa:c3:09:5a:58:5a:b8:43: 82:98:b4:77:70:3a:6a:1f:5d:ad:41:62:a3:b3:23: f7:07:09:47:a4:c8:83:3b:97:67:86:e8:c2:8e:2d: cf:75:74:9b:48:1a:47:73:22:fa:a0:c4:36:69:92: 14:b6:7d:92:48:03:cf:8d:d6:fd:61:00:04:05:99: fd:d6:b0:4a:91:45:f4:78:f4:36:fc:94:62:b9:ec: b7:0b:12:2f:de:50:e2:d9:a0:2c:92:84:93:3f:4d: 28:0b:cf:33:13:1d:b4:1b:2a:1c:96:e0:65:00:2c: 7f:71:4d:09:e5:24:b2:7b:7f:17:5e:f0:1b:d9:3e: 77:37:33:a3:df:a2:16:23:d0:fa:32:04:e9:72:00: ea:c8:4e:3a:18:34:2f:f4:cd:56:74:22:dc:aa:82: 76:e3:22:79:15:b7:f9:c5:66:0a:27:f6:ff:b0:39: 64:f9:7f:04:e7:d7:99:68:0c:6e:4b:ed:7a:dc:b2: 1c:6e:fd:7f:ac:f6:77:1e:e9:ee:eb:93:72:f4:d8: 0e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:19:18:63:D8:B0:6C:55:F6:A8:FD:E2:55:6D:EC:DC:1C:F7:F3:31 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/906d1094-02f1-42d9-b22e-24f2ee4caa70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:1000::/40 Signature Algorithm: sha256WithRSAEncryption 4e:b2:09:79:e2:af:62:7a:13:1b:fd:d1:9a:d0:4a:1f:65:77: 65:7d:2b:12:54:4a:87:05:a8:46:a2:da:e4:46:a2:29:4b:0e: a9:de:cd:91:d8:94:22:5c:aa:b1:65:e8:0e:99:87:3c:ef:72: 94:4b:3f:28:25:69:b4:a7:d0:46:b5:75:1f:d1:bc:e8:f0:a5: 01:df:64:a2:aa:7e:0e:83:cc:ba:cb:80:2b:db:3a:fe:38:2e: 26:0c:31:b3:d0:d9:b7:9b:5d:4b:5d:30:17:1f:e1:3d:4b:5f: 18:2c:20:0e:35:8d:be:12:9e:6b:96:35:98:2e:65:00:ee:80: df:a3:23:aa:4e:3d:35:72:f4:12:44:fd:d7:aa:6a:ed:d5:15: 32:8e:e1:b4:d8:8a:4f:ee:69:99:9c:5c:84:16:b6:71:72:1b: cd:ed:ec:46:df:11:77:db:70:80:2f:03:40:71:c3:63:08:e8: 65:66:e7:29:2e:07:ba:9d:26:df:b2:f3:bc:ed:69:a1:e9:71: e2:07:7f:27:e9:19:e7:74:0a:83:9d:d5:ce:4b:29:6d:4e:ae: f2:0f:74:cb:76:5c:3c:c7:26:37:6b:1c:a3:3c:26:ed:4a:c4: 4c:d3:f2:ad:22:79:4e:7a:c6:2c:d8:41:12:d9:b7:53:26:66: 14:f7:2a:90 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBM/x+PO+YdWVrLXxYjeW51peJ0UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMzEwMFoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAMTYzNTA1ZDliNzAyYmRjNGYwZmRk MzUyZDJiNzQ0ODgzODI0MDU2ZWE1Mjg2YTg4ODdkYWNmMmU4MzI0ZjcyMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlGAdCXnvtahTScgHDXq+Lu0MuvZ V7oGLI6wgEyPHnwLVbnd2zuFs0V0cQUUa2T57W/0+sMJWlhauEOCmLR3cDpqH12t QWKjsyP3BwlHpMiDO5dnhujCji3PdXSbSBpHcyL6oMQ2aZIUtn2SSAPPjdb9YQAE BZn91rBKkUX0ePQ2/JRiuey3CxIv3lDi2aAskoSTP00oC88zEx20GyocluBlACx/ cU0J5SSye38XXvAb2T53NzOj36IWI9D6MgTpcgDqyE46GDQv9M1WdCLcqoJ24yJ5 Fbf5xWYKJ/b/sDlk+X8E59eZaAxuS+163LIcbv1/rPZ3Hunu65Ny9NgOvwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNoZGGPYsGxV9qj94lVt7Nwc9/MxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkwNmQxMDk0LTAyZjEtNDJkOS1iMjJlLTI0ZjJlZTRjYWE3MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOBAwDQYJKoZIhvcNAQELBQADggEBAE6yCXnir2J6Exv90ZrQ Sh9ld2V9KxJUSocFqEai2uRGoilLDqnezZHYlCJcqrFl6A6ZhzzvcpRLPyglabSn 0Ea1dR/RvOjwpQHfZKKqfg6DzLrLgCvbOv44LiYMMbPQ2bebXUtdMBcf4T1LXxgs IA41jb4SnmuWNZguZQDugN+jI6pOPTVy9BJE/deqau3VFTKO4bTYik/uaZmcXIQW tnFyG83t7EbfEXfbcIAvA0Bxw2MI6GVm5ykuB7qdJt+y87ztaaHpceIHfyfpGed0 CoOd1c5LKW1OrvIPdMt2XDzHJjdrHKM8Ju1KxEzT8q0ieU56xizYQRLZt1MmZhT3 KpA= -----END CERTIFICATE-----Generated at Sat Oct 31 05:39:14 2026 by rpki-client