$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b834337f-a753-44b7-be9e-389ab2d2acad.roa File: b834337f-a753-44b7-be9e-389ab2d2acad.roa (raw, json) Hash identifier: MG8fdrHULNJOobYJUFq/qTYi55Meu6yYVK0ppLHynKU= Subject key identifier: 49:01:04:9A:5A:F0:B6:4E:AE:3E:2F:39:ED:B7:CC:28:A7:C9:1F:18 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 92D95A2D9A370910DB2057F35118D8954716BD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b834337f-a753-44b7-be9e-389ab2d2acad.roa Signing time: Fri 09 Oct 2026 00:07:33 +0000 ROA not before: Fri 09 Oct 2026 00:07:33 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92:d9:5a:2d:9a:37:09:10:db:20:57:f3:51:18:d8:95:47:16:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:07:33 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=45bf6dd6f0e3ba26644f1eb4867eb3901f7928c81c4354902cddb6ceb9ca8934, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a6:ff:0b:c4:3e:ab:d8:c9:45:38:34:3d:b0: ae:b1:6d:10:04:35:88:e0:42:7d:f7:3f:fe:87:1e: 04:cd:5a:80:8e:bf:0f:34:19:b7:6e:7b:ed:c4:3e: 55:80:d0:05:d4:7c:fc:c0:1e:e8:6d:b6:87:83:61: 4c:6d:26:64:76:98:6d:db:aa:8c:30:41:32:38:27: 51:2e:9d:f1:a6:a9:00:dc:aa:67:49:ca:cd:29:8c: 93:fb:34:85:da:8d:9e:a4:98:a6:51:39:e7:8a:d3: 9c:bc:db:55:c7:fc:a6:52:83:65:a9:d7:b2:12:e0: 72:cc:64:e9:2a:ff:ba:c8:27:c0:b0:47:cf:fd:27: 57:d8:ee:71:ee:ec:a1:2d:c0:8d:f4:cb:cb:30:37: c1:4e:96:90:bf:2d:f1:1b:20:4f:20:0c:9c:79:6a: 51:f1:bf:9b:08:eb:e8:5b:b0:e9:3d:a7:25:f4:76: d1:c3:45:11:f0:8c:25:fb:ea:c6:0d:b1:05:0f:14: b1:dc:9c:27:c7:fc:02:13:83:46:5b:ec:ad:e1:07: a4:80:ac:73:32:ba:76:52:c6:63:ef:5a:60:cb:0b: fd:2f:07:7c:b5:f2:f8:1b:6f:22:6f:df:69:b0:1f: 6c:1a:11:2a:63:12:4f:04:0c:50:54:8f:3c:ed:67: 6c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:01:04:9A:5A:F0:B6:4E:AE:3E:2F:39:ED:B7:CC:28:A7:C9:1F:18 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b834337f-a753-44b7-be9e-389ab2d2acad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:a000::/40 Signature Algorithm: sha256WithRSAEncryption 5b:47:1f:8f:d7:e8:8e:a4:23:fc:07:d3:58:ec:34:ff:36:8b: c8:78:29:77:f3:ec:25:41:5d:9e:25:89:80:13:72:8f:e8:5f: c1:46:12:e4:8c:df:49:75:b4:5c:76:b0:71:58:bd:c6:65:f7: 0c:87:5d:02:1a:48:f1:95:b1:81:58:48:93:1a:84:cc:8f:70: 04:e5:3e:ee:9a:26:3c:69:21:5d:1c:46:7c:a9:2d:d9:d6:04: 29:3e:51:9d:6c:e9:56:36:de:03:f9:b1:86:75:b0:43:9b:70: d4:64:02:e5:43:9a:7f:99:54:84:9f:65:bc:f9:ab:43:e0:98: 57:b5:17:0d:2c:84:ee:b3:e3:6a:b0:98:8b:f4:d8:69:bb:7a: 2c:65:1a:3d:21:07:a9:fd:da:9f:16:ed:99:35:da:a8:6b:6e: b7:0d:b5:b0:e8:90:aa:0c:ae:1d:c7:dc:ce:3c:31:04:64:22: 28:3b:fc:10:3c:f4:f7:89:a9:ad:34:5f:3b:b4:1b:a0:30:bb: f7:9e:c7:ab:b6:1c:26:cc:a4:3e:d4:76:6f:93:26:d4:67:34: 05:7e:36:89:85:3e:50:17:50:5e:13:ec:31:4b:c8:13:ed:65: 85:6f:a4:7b:e5:bb:5c:e3:50:ae:ed:69:48:83:60:39:70:f2: f2:24:09:63 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAJLZWi2aNwkQ2yBX81EY2JVHFr0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMDczM1oX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNANDViZjZkZDZmMGUzYmEyNjY0NGYx ZWI0ODY3ZWIzOTAxZjc5MjhjODFjNDM1NDkwMmNkZGI2Y2ViOWNhODkzNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqb/C8Q+q9jJRTg0PbCusW0QBDWI 4EJ99z/+hx4EzVqAjr8PNBm3bnvtxD5VgNAF1Hz8wB7obbaHg2FMbSZkdpht26qM MEEyOCdRLp3xpqkA3KpnScrNKYyT+zSF2o2epJimUTnnitOcvNtVx/ymUoNlqdey EuByzGTpKv+6yCfAsEfP/SdX2O5x7uyhLcCN9MvLMDfBTpaQvy3xGyBPIAyceWpR 8b+bCOvoW7DpPacl9HbRw0UR8Iwl++rGDbEFDxSx3Jwnx/wCE4NGW+yt4QekgKxz Mrp2UsZj71pgywv9Lwd8tfL4G28ib99psB9sGhEqYxJPBAxQVI887Wds9wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEkBBJpa8LZOrj4vOe23zCinyR8YMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I4MzQzMzdmLWE3NTMtNDRiNy1iZTllLTM4OWFiMmQyYWNhZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba86AwDQYJKoZIhvcNAQELBQADggEBAFtHH4/X6I6kI/wH01js NP82i8h4KXfz7CVBXZ4liYATco/oX8FGEuSM30l1tFx2sHFYvcZl9wyHXQIaSPGV sYFYSJMahMyPcATlPu6aJjxpIV0cRnypLdnWBCk+UZ1s6VY23gP5sYZ1sEObcNRk AuVDmn+ZVISfZbz5q0PgmFe1Fw0shO6z42qwmIv02Gm7eixlGj0hB6n92p8W7Zk1 2qhrbrcNtbDokKoMrh3H3M48MQRkIig7/BA89PeJqa00Xzu0G6Awu/eex6u2HCbM pD7Udm+TJtRnNAV+NomFPlAXUF4T7DFLyBPtZYVvpHvlu1zjUK7taUiDYDlw8vIk CWM= -----END CERTIFICATE-----Generated at Sun Oct 11 18:55:10 2026 by rpki-client