$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ff3d168-754a-40d4-ad25-8b3a7db40970.roa File: 9ff3d168-754a-40d4-ad25-8b3a7db40970.roa (raw, json) Hash identifier: jTh35eY52oMFbQZ9w7I2LaWqDqenmC690KmH6lCk/Xo= Subject key identifier: 44:7A:71:41:37:E9:D6:E1:10:13:AF:5E:90:2E:92:C2:A1:37:1F:E8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5D26279540D25B508B650E52AF23254192ABED73 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ff3d168-754a-40d4-ad25-8b3a7db40970.roa Signing time: Fri 09 Oct 2026 00:06:49 +0000 ROA not before: Fri 09 Oct 2026 00:06:49 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:26:27:95:40:d2:5b:50:8b:65:0e:52:af:23:25:41:92:ab:ed:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:06:49 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=5b910e4f831983b8615158bec399c3fbc9263933780bccc765f252866911b55b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:64:fb:8b:52:38:43:ae:30:b1:2c:23:e8:95: b6:4f:09:a9:06:67:60:6d:d7:9f:a6:ba:1e:0a:b8: 3a:dd:54:dc:15:8c:fe:8b:10:6f:6d:f6:49:48:d1: 96:11:91:72:4a:fe:87:a6:86:cf:6f:8b:8b:be:bf: 8b:1b:02:45:21:86:89:47:fb:5a:47:31:8e:f7:b3: 25:86:6c:1c:e6:ea:f5:a2:dc:54:bf:16:43:ae:e1: 9d:c6:d4:73:f7:8e:0e:bc:0e:cd:2b:e2:0c:53:9a: 93:bd:10:51:07:1c:6d:63:7d:c7:71:4a:a8:6f:75: 4d:28:e5:a6:27:ea:f7:00:52:af:99:00:91:5f:77: 82:9f:86:e7:d9:0c:99:46:c5:d1:fe:83:6b:91:08: 33:b1:8c:6a:f2:89:9a:f1:f7:d6:10:39:ed:50:49: 6e:4b:ea:c6:47:5f:e0:3f:a0:33:c1:99:a0:27:1b: 45:66:d1:68:72:92:df:69:78:a9:ca:40:e3:f0:51: 16:86:8e:8e:ce:47:90:49:a1:7f:4b:d6:43:73:1b: 11:fb:22:b0:88:12:5f:7f:e5:56:f4:23:50:08:09: 9c:b2:cf:4d:d5:56:af:b1:e2:0f:28:af:3c:8e:70: fc:52:0c:af:77:56:d3:5f:1f:42:3a:59:9a:a0:82: a2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7A:71:41:37:E9:D6:E1:10:13:AF:5E:90:2E:92:C2:A1:37:1F:E8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ff3d168-754a-40d4-ad25-8b3a7db40970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:7000::/40 Signature Algorithm: sha256WithRSAEncryption 8c:01:fa:8f:1b:65:49:cf:fe:49:33:e0:1d:05:d8:ca:c6:d6: 5d:b6:05:cf:52:31:82:d1:2e:28:fc:4f:75:c7:72:85:81:b5: 0d:73:32:16:7f:ab:cd:73:01:d0:8d:9b:52:a0:0d:9d:cf:d7: 78:6a:dd:cd:55:25:4f:38:9f:ce:0a:e2:f2:34:68:cf:10:e6: c5:36:75:86:27:af:18:60:ec:86:ee:40:5d:57:0d:af:ea:eb: ab:d4:ae:63:c3:e4:12:3a:cc:83:73:d4:18:06:77:0b:a2:77: 01:48:dc:68:8b:74:ff:13:27:24:ff:0b:a0:e8:72:fe:8d:b8: c9:a7:b3:ac:09:e0:18:2f:a4:65:bb:cc:66:3a:0a:3e:b8:47: 7c:ab:bc:ae:dd:91:1a:5d:79:b8:78:54:d9:0b:6c:1c:00:e1: f3:1b:d7:90:db:9d:d7:0d:51:5c:a6:85:a3:a2:f0:92:99:68: 73:16:09:60:0a:a5:a2:e5:ac:43:d2:76:b2:6d:8e:ad:b7:c8: b6:e7:7b:40:ee:39:48:f6:61:92:cd:88:f3:72:be:40:3f:82: 5e:f9:f5:90:cc:8e:7d:f5:a5:b8:52:50:41:3e:53:b3:5a:07: d5:96:23:f5:a5:6c:f7:3a:43:6d:8c:14:f5:c5:23:f3:3e:f4: 98:55:08:e8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXSYnlUDSW1CLZQ5SryMlQZKr7XMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMDY0OVoX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNANWI5MTBlNGY4MzE5ODNiODYxNTE1 OGJlYzM5OWMzZmJjOTI2MzkzMzc4MGJjY2M3NjVmMjUyODY2OTExYjU1YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2T7i1I4Q64wsSwj6JW2TwmpBmdg bdefproeCrg63VTcFYz+ixBvbfZJSNGWEZFySv6HpobPb4uLvr+LGwJFIYaJR/ta RzGO97Mlhmwc5ur1otxUvxZDruGdxtRz944OvA7NK+IMU5qTvRBRBxxtY33HcUqo b3VNKOWmJ+r3AFKvmQCRX3eCn4bn2QyZRsXR/oNrkQgzsYxq8oma8ffWEDntUElu S+rGR1/gP6AzwZmgJxtFZtFocpLfaXipykDj8FEWho6OzkeQSaF/S9ZDcxsR+yKw iBJff+VW9CNQCAmcss9N1VavseIPKK88jnD8Ugyvd1bTXx9COlmaoIKiGQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFER6cUE36dbhEBOvXpAuksKhNx/oMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmZjNkMTY4LTc1NGEtNDBkNC1hZDI1LThiM2E3ZGI0MDk3MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauHAwDQYJKoZIhvcNAQELBQADggEBAIwB+o8bZUnP/kkz4B0F 2MrG1l22Bc9SMYLRLij8T3XHcoWBtQ1zMhZ/q81zAdCNm1KgDZ3P13hq3c1VJU84 n84K4vI0aM8Q5sU2dYYnrxhg7IbuQF1XDa/q66vUrmPD5BI6zINz1BgGdwuidwFI 3GiLdP8TJyT/C6Docv6NuMmns6wJ4BgvpGW7zGY6Cj64R3yrvK7dkRpdebh4VNkL bBwA4fMb15DbndcNUVymhaOi8JKZaHMWCWAKpaLlrEPSdrJtjq23yLbne0DuOUj2 YZLNiPNyvkA/gl759ZDMjn31pbhSUEE+U7NaB9WWI/WlbPc6Q22MFPXFI/M+9JhV COg= -----END CERTIFICATE-----Generated at Sun Oct 11 18:55:06 2026 by rpki-client