$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/97330d15-5f25-48f4-ae5d-b99db6527f53.roa File: 97330d15-5f25-48f4-ae5d-b99db6527f53.roa (raw, json) Hash identifier: MVVW8xW+AxGSERH+ONCbwOUdo6Rz2h0eieEdy6G4rVc= Subject key identifier: 24:AE:D3:6C:16:07:E7:03:7A:54:A6:E2:A1:0E:00:41:D8:05:47:DE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1AB5C76464AF5F6EFAABB6EA82A952676ED33FED Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/97330d15-5f25-48f4-ae5d-b99db6527f53.roa Signing time: Fri 09 Oct 2026 00:06:50 +0000 ROA not before: Fri 09 Oct 2026 00:06:50 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 00:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b5:c7:64:64:af:5f:6e:fa:ab:b6:ea:82:a9:52:67:6e:d3:3f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:06:50 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=ca8eb55f1dfe2ae102538aabc370d6c652bb68139d2d625e611916385fc6c300, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:35:7d:a1:61:b8:b6:fc:72:b8:b2:dd:6a: 0b:50:79:95:26:b3:0f:2d:a1:7c:dd:c2:62:7d:a7: f9:82:75:95:1d:3d:9c:9c:78:13:be:78:f5:74:4d: c4:61:bd:45:ea:81:09:38:56:31:19:d0:8a:bd:e1: a0:28:ce:98:1d:c8:4b:b6:17:56:8d:46:26:c9:c9: b5:5d:00:56:c4:f5:ee:da:13:03:a3:ad:f6:bb:70: 9d:ad:c8:35:fd:8f:cf:48:51:2a:b1:25:ca:4a:6b: 4a:7b:47:23:45:c1:03:e8:cd:fd:c8:14:12:11:a4: ad:4b:da:d4:0b:92:44:0b:03:9d:a6:42:0a:e7:f6: a7:73:07:76:71:de:58:f8:86:b5:2e:46:4d:0f:d6: d5:b7:cb:3c:14:4b:a6:7c:c9:0e:e1:08:f4:89:a1: 27:88:85:f0:f2:bb:bf:6a:78:86:59:75:c8:43:ba: 46:78:20:d3:8e:e2:b8:3c:e4:99:28:eb:32:6d:16: 8a:a7:8b:ef:48:42:14:66:99:ec:77:3f:39:94:37: fc:16:f2:e6:10:ae:78:e8:c1:81:e9:79:5f:ed:5f: 0c:49:2f:0e:c6:5c:14:0d:9c:ac:c0:e9:a9:95:9b: d9:ff:36:90:30:ba:d3:7c:f7:45:a9:a7:40:9a:02: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AE:D3:6C:16:07:E7:03:7A:54:A6:E2:A1:0E:00:41:D8:05:47:DE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/97330d15-5f25-48f4-ae5d-b99db6527f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:b080::/48 Signature Algorithm: sha256WithRSAEncryption 26:43:45:95:74:c9:99:03:05:63:b6:eb:3a:e0:4b:06:ca:7e: 78:02:29:aa:84:52:1d:d6:c2:5a:bc:2c:f2:b8:4f:9d:c9:01: 3e:2e:f7:8c:16:3d:20:02:39:00:2f:b5:9d:1c:a3:3d:57:9b: 9f:bf:d2:9d:ca:cd:76:36:c0:17:29:46:fa:fe:10:58:97:83: ce:73:e1:b8:6f:22:5d:89:aa:f2:f1:1d:b5:a0:0f:c5:59:16: fc:f1:af:f0:79:ea:56:b9:41:02:64:ad:fa:f2:16:9f:1d:43: 94:ef:89:4f:e9:20:81:42:8a:1a:9e:64:10:d3:31:7b:ae:1a: 51:7e:eb:6c:2b:0d:e5:7e:ac:77:91:2c:bc:10:a6:64:63:87: 86:d1:06:00:84:a1:8b:b0:d4:47:7a:eb:b8:4d:86:3f:47:63: 21:03:c9:38:02:21:1a:cf:c8:ba:02:b9:83:79:fe:07:cf:8b: 88:80:c2:48:ad:20:d1:da:c4:6c:a1:c5:ce:68:2f:56:72:82: 65:e4:88:bc:56:f2:a5:a2:c9:b8:98:de:44:3b:4c:2a:2f:8e: 37:4b:08:41:f8:cf:9f:98:4d:b4:98:a4:0d:4f:f2:fe:ff:d9: b3:4f:30:a9:63:c3:8a:24:fb:ae:b5:8d:c7:0f:dc:88:d3:6c: 4a:bf:ff:6e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGrXHZGSvX276q7bqgqlSZ27TP+0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMDY1MFoX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAY2E4ZWI1NWYxZGZlMmFlMTAyNTM4 YWFiYzM3MGQ2YzY1MmJiNjgxMzlkMmQ2MjVlNjExOTE2Mzg1ZmM2YzMwMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfQ1faFhuLb8criy3WoLUHmVJrMP LaF83cJifaf5gnWVHT2cnHgTvnj1dE3EYb1F6oEJOFYxGdCKveGgKM6YHchLthdW jUYmycm1XQBWxPXu2hMDo632u3Cdrcg1/Y/PSFEqsSXKSmtKe0cjRcED6M39yBQS EaStS9rUC5JECwOdpkIK5/ancwd2cd5Y+Ia1LkZND9bVt8s8FEumfMkO4Qj0iaEn iIXw8ru/aniGWXXIQ7pGeCDTjuK4POSZKOsybRaKp4vvSEIUZpnsdz85lDf8FvLm EK546MGB6Xlf7V8MSS8OxlwUDZyswOmplZvZ/zaQMLrTfPdFqadAmgIpIQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCSu02wWB+cDelSm4qEOAEHYBUfeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk3MzMwZDE1LTVmMjUtNDhmNC1hZTVkLWI5OWRiNjUyN2Y1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6rCAMA0GCSqGSIb3DQEBCwUAA4IBAQAmQ0WVdMmZAwVjtus6 4EsGyn54AimqhFId1sJavCzyuE+dyQE+LveMFj0gAjkAL7WdHKM9V5ufv9Kdys12 NsAXKUb6/hBYl4POc+G4byJdiary8R21oA/FWRb88a/weepWuUECZK368hafHUOU 74lP6SCBQooanmQQ0zF7rhpRfutsKw3lfqx3kSy8EKZkY4eG0QYAhKGLsNRHeuu4 TYY/R2MhA8k4AiEaz8i6ArmDef4Hz4uIgMJIrSDR2sRsocXOaC9WcoJl5Ii8VvKl osm4mN5EO0wqL443SwhB+M+fmE20mKQNT/L+/9mzTzCpY8OKJPuutY3HD9yI02xK v/9u -----END CERTIFICATE-----Generated at Tue Oct 13 12:46:12 2026 by rpki-client