$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b105a261-7baa-401b-b853-65b2635b3f6d.roa File: b105a261-7baa-401b-b853-65b2635b3f6d.roa (raw, json) Hash identifier: +oHvb4gE4ggCNb/dRjFNROQ6A5GodjYKa5savRhdMv8= Subject key identifier: 78:AE:30:B9:6C:B7:59:DE:14:C2:7A:7F:BD:40:48:CE:8C:A3:77:DA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 15A7BD8A01DDC44ECA288B77DC34FA067A9A5BE9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b105a261-7baa-401b-b853-65b2635b3f6d.roa Signing time: Mon 05 Oct 2026 00:00:10 +0000 ROA not before: Mon 05 Oct 2026 00:00:10 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da24:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:a7:bd:8a:01:dd:c4:4e:ca:28:8b:77:dc:34:fa:06:7a:9a:5b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 5 00:00:10 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=1e10f6e7024673c87659d85dcb07b4553bbaa481d3aeacc1b83490c47a774491, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:59:fe:23:9a:01:4e:79:93:4a:2a:a1:73:3b: f8:55:5c:99:85:ed:6a:62:fa:a6:77:32:b4:47:71: 7a:ae:5e:da:92:c8:f0:cb:9b:21:dc:05:11:0d:e6: 37:bd:11:d6:65:a0:68:2f:af:e7:5a:97:3b:77:a6: dc:b9:eb:07:b2:70:d4:f2:71:ea:34:d0:a9:3e:5c: f9:be:02:8b:68:6f:7f:19:30:35:5b:24:a4:3c:5c: 5e:3a:b6:79:38:8a:66:ba:d1:e8:14:b8:83:00:ed: 3e:50:37:8d:9e:30:e6:02:f9:62:65:db:85:33:bf: 50:27:03:55:5a:a8:1a:68:c0:b1:38:30:82:d6:63: 3c:cf:87:bf:45:34:7b:fe:b0:67:cf:0f:4a:9f:e3: f1:43:75:e7:5f:6f:e5:2c:28:1f:cb:86:e3:64:f1: cf:e6:d4:c5:34:9b:93:94:be:df:ba:a6:1b:b7:af: 28:ea:bd:9f:1a:65:81:3c:f0:f9:20:7b:55:4b:ee: ac:cc:96:c4:00:08:29:54:db:ba:6d:b3:c0:58:63: 48:ea:55:f1:ed:9f:ce:09:b6:f7:5b:bc:e0:10:3c: 43:9d:b5:3f:09:e8:09:e2:67:07:dc:4d:d0:6e:15: ff:1c:55:e2:c2:1b:27:26:d8:d1:09:7d:91:75:e3: 83:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AE:30:B9:6C:B7:59:DE:14:C2:7A:7F:BD:40:48:CE:8C:A3:77:DA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b105a261-7baa-401b-b853-65b2635b3f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da24:8000::/36 Signature Algorithm: sha256WithRSAEncryption 43:af:0a:87:c1:43:0f:5e:0f:8f:06:ab:85:9e:2c:15:69:ff: ea:49:90:4e:25:55:e3:1f:5d:e4:9c:3d:4f:ba:09:49:1c:71: 14:49:91:40:0c:09:10:9e:b4:a6:d2:65:53:c6:65:15:91:40: e1:7a:04:e5:f2:7d:dc:f0:7a:ba:34:f4:3f:5e:43:bc:f3:76: c9:27:95:cb:70:a0:e9:cc:2d:15:06:18:a6:b7:3e:4a:9e:40: ac:ac:88:5a:bb:40:81:e0:03:bb:41:00:79:0f:5e:9b:fd:7c: 39:a7:75:74:73:8c:3d:0b:cc:8d:43:8e:62:d7:ca:f6:1f:be: 01:f6:a6:35:54:62:97:c6:4b:ab:9d:04:12:82:ac:3d:dd:d6: ac:b9:d8:d6:63:5d:d6:8a:cc:4d:45:8f:f2:b9:98:95:28:b1: 60:8c:e3:18:9e:93:e3:db:6f:d9:66:56:8a:88:81:e4:41:1f: 90:f1:a6:5c:5c:31:97:ff:3b:7c:d5:e3:69:13:27:a1:2f:b3: 4f:6c:ea:75:b9:ab:59:0f:03:f5:f1:ce:db:8b:91:df:45:5d: d7:30:1b:65:c3:f1:a6:26:e9:86:79:5f:0b:af:d8:51:f6:64: f5:0f:c5:75:db:c4:ad:2f:37:b8:77:51:40:4e:9d:8a:fc:c4: e0:8a:e9:24 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFae9igHdxE7KKIt33DT6BnqaW+kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwNTAwMDAxMFoX DTI3MDEwMzIzNTk1OVowejFJMEcGA1UEBRNAMWUxMGY2ZTcwMjQ2NzNjODc2NTlk ODVkY2IwN2I0NTUzYmJhYTQ4MWQzYWVhY2MxYjgzNDkwYzQ3YTc3NDQ5MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1n+I5oBTnmTSiqhczv4VVyZhe1q YvqmdzK0R3F6rl7aksjwy5sh3AURDeY3vRHWZaBoL6/nWpc7d6bcuesHsnDU8nHq NNCpPlz5vgKLaG9/GTA1WySkPFxeOrZ5OIpmutHoFLiDAO0+UDeNnjDmAvliZduF M79QJwNVWqgaaMCxODCC1mM8z4e/RTR7/rBnzw9Kn+PxQ3XnX2/lLCgfy4bjZPHP 5tTFNJuTlL7fuqYbt68o6r2fGmWBPPD5IHtVS+6szJbEAAgpVNu6bbPAWGNI6lXx 7Z/OCbb3W7zgEDxDnbU/CegJ4mcH3E3QbhX/HFXiwhsnJtjRCX2RdeODRQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHiuMLlst1neFMJ6f71ASM6Mo3faMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IxMDVhMjYxLTdiYWEtNDAxYi1iODUzLTY1YjI2MzViM2Y2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaJIAwDQYJKoZIhvcNAQELBQADggEBAEOvCofBQw9eD48Gq4We LBVp/+pJkE4lVeMfXeScPU+6CUkccRRJkUAMCRCetKbSZVPGZRWRQOF6BOXyfdzw ero09D9eQ7zzdsknlctwoOnMLRUGGKa3PkqeQKysiFq7QIHgA7tBAHkPXpv9fDmn dXRzjD0LzI1DjmLXyvYfvgH2pjVUYpfGS6udBBKCrD3d1qy52NZjXdaKzE1Fj/K5 mJUosWCM4xiek+Pbb9lmVoqIgeRBH5DxplxcMZf/O3zV42kTJ6Evs09s6nW5q1kP A/XxztuLkd9FXdcwG2XD8aYm6YZ5Xwuv2FH2ZPUPxXXbxK0vN7h3UUBOnYr8xOCK 6SQ= -----END CERTIFICATE-----Generated at Sun Oct 11 22:16:00 2026 by rpki-client