$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a198eb49-1497-483a-ae8b-bfc84a056462.roa File: a198eb49-1497-483a-ae8b-bfc84a056462.roa (raw, json) Hash identifier: /1cVqXr1r/gFT9DJDBZXyA5sDBkW1lrPJdK/oj23GOA= Subject key identifier: 17:9C:0F:D5:72:70:41:F7:98:AD:05:1B:BA:B0:57:68:F4:59:7F:07 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1CFBB2458071C5B130D5CBFE7323812EFC7041B4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a198eb49-1497-483a-ae8b-bfc84a056462.roa Signing time: Tue 13 Oct 2026 00:09:03 +0000 ROA not before: Tue 13 Oct 2026 00:09:03 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 00:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fb:b2:45:80:71:c5:b1:30:d5:cb:fe:73:23:81:2e:fc:70:41:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 13 00:09:03 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=aac818f3995bbb2581ed99981085ad72adb5b2e534022c1048a158d885afb89c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a1:2b:64:48:6b:cc:f5:66:b2:99:3d:5a:53: d0:0f:0a:54:5f:0b:bd:52:18:21:9e:aa:09:12:82: 99:61:1f:cd:e3:e5:e3:e7:b6:74:59:32:eb:5c:23: 33:2b:39:6b:e4:fb:f5:b8:b6:54:d9:90:03:62:08: 67:50:9a:f9:95:9d:e2:a5:6c:86:e7:bf:70:6b:40: ff:94:f6:38:4f:e1:3d:70:96:c4:d1:69:dd:12:13: 1e:69:0d:3f:16:6b:90:8a:3f:68:79:a5:9c:23:24: 87:15:0d:18:8c:20:c1:a0:05:d7:27:bc:c3:7a:3d: 02:c0:37:da:fb:ff:58:4e:26:f6:fd:83:e5:dc:52: 8c:d6:3a:47:23:de:02:3c:a9:9b:14:e9:4d:fb:ea: 14:4e:68:88:12:77:0c:d5:84:59:ce:c0:29:f4:86: 14:41:51:45:aa:c2:36:b6:09:7d:03:f0:30:2c:21: 50:b9:44:16:16:bd:89:48:94:c0:fc:65:4d:dd:ba: d5:41:93:dc:c9:11:f0:67:7b:01:b6:6d:5e:a5:05: cb:65:d2:96:34:ee:50:60:47:53:be:81:9c:13:eb: 02:f4:30:67:43:ff:10:3f:38:86:4a:96:93:cc:aa: 96:d2:6e:ce:a5:6a:36:8b:0e:42:5c:ad:b9:9e:65: 13:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9C:0F:D5:72:70:41:F7:98:AD:05:1B:BA:B0:57:68:F4:59:7F:07 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a198eb49-1497-483a-ae8b-bfc84a056462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:c800::/40 Signature Algorithm: sha256WithRSAEncryption c9:8e:15:45:18:a1:b5:66:f0:a6:ef:61:a0:fe:79:e6:63:be: dd:8f:87:92:2a:7d:51:80:73:b4:36:6d:48:32:f4:43:08:02: f8:23:0c:77:47:c0:10:a4:ce:07:9b:04:53:97:8c:ba:01:af: 7d:e0:cb:00:8e:66:7e:43:45:b0:97:ff:19:09:8d:48:a9:e1: 3c:31:62:a4:f7:5a:8f:7e:a8:bd:e7:08:7c:34:fd:40:7e:6d: 2a:78:a2:fd:ba:8a:3f:b4:4a:d2:71:05:7e:3b:24:54:d6:67: 5e:49:4f:93:fd:27:a1:9f:67:02:67:c8:f5:bc:05:4f:cc:0c: be:aa:c7:b0:00:bb:d4:e1:1d:bc:59:d6:98:b9:1b:4d:68:37: 1e:33:ba:b2:ba:89:9e:7f:85:e4:dc:97:3a:ce:36:20:8f:77: 81:06:78:db:a3:f3:cf:6c:0b:fe:68:9f:8d:50:5c:8a:ac:9b: db:2f:d0:e8:b1:61:df:01:fc:f0:47:96:9d:91:42:73:d7:0c: 06:21:10:f8:57:d1:d6:2e:81:86:96:e2:d8:59:2e:49:95:94: fa:3b:a9:33:d4:3a:37:31:e7:e6:76:21:06:8c:94:0e:65:16: c4:d6:cb:19:10:c9:44:a2:7c:a5:fe:c5:78:be:b5:78:03:0b: aa:8b:07:2b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHPuyRYBxxbEw1cv+cyOBLvxwQbQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxMzAwMDkwM1oX DTI3MDExMTIzNTk1OVowejFJMEcGA1UEBRNAYWFjODE4ZjM5OTViYmIyNTgxZWQ5 OTk4MTA4NWFkNzJhZGI1YjJlNTM0MDIyYzEwNDhhMTU4ZDg4NWFmYjg5YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqErZEhrzPVmspk9WlPQDwpUXwu9 UhghnqoJEoKZYR/N4+Xj57Z0WTLrXCMzKzlr5Pv1uLZU2ZADYghnUJr5lZ3ipWyG 579wa0D/lPY4T+E9cJbE0WndEhMeaQ0/FmuQij9oeaWcIySHFQ0YjCDBoAXXJ7zD ej0CwDfa+/9YTib2/YPl3FKM1jpHI94CPKmbFOlN++oUTmiIEncM1YRZzsAp9IYU QVFFqsI2tgl9A/AwLCFQuUQWFr2JSJTA/GVN3brVQZPcyRHwZ3sBtm1epQXLZdKW NO5QYEdTvoGcE+sC9DBnQ/8QPziGSpaTzKqW0m7OpWo2iw5CXK25nmUTDQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBecD9VycEH3mK0FG7qwV2j0WX8HMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ExOThlYjQ5LTE0OTctNDgzYS1hZThiLWJmYzg0YTA1NjQ2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYMgwDQYJKoZIhvcNAQELBQADggEBAMmOFUUYobVm8KbvYaD+ eeZjvt2Ph5IqfVGAc7Q2bUgy9EMIAvgjDHdHwBCkzgebBFOXjLoBr33gywCOZn5D RbCX/xkJjUip4TwxYqT3Wo9+qL3nCHw0/UB+bSp4ov26ij+0StJxBX47JFTWZ15J T5P9J6GfZwJnyPW8BU/MDL6qx7AAu9ThHbxZ1pi5G01oNx4zurK6iZ5/heTclzrO NiCPd4EGeNuj889sC/5on41QXIqsm9sv0OixYd8B/PBHlp2RQnPXDAYhEPhX0dYu gYaW4thZLkmVlPo7qTPUOjcx5+Z2IQaMlA5lFsTWyxkQyUSifKX+xXi+tXgDC6qL Bys= -----END CERTIFICATE-----Generated at Tue Oct 13 12:46:24 2026 by rpki-client