$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa File: bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa (raw, json) Hash identifier: 38xyoHrfYnFXG+HoA+PXKjqd424uE5QYa0AGfZdC4CA= Subject key identifier: F1:D3:D5:1A:0B:2A:63:E9:AD:88:3A:32:35:AD:C6:80:DC:5B:AA:4D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 28EA870B9F2EB86A75103E15CD3644EE42A2A443 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa Signing time: Fri 09 Oct 2026 00:10:34 +0000 ROA not before: Fri 09 Oct 2026 00:10:34 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ea:87:0b:9f:2e:b8:6a:75:10:3e:15:cd:36:44:ee:42:a2:a4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:10:34 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=d9cf739b6084c40393841b1496d6537a37f9a84371da034dd1c801182c830653, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:29:a3:7c:88:b1:9e:a7:f4:16:0f:7d:45:22: cd:ab:20:cc:00:6e:67:a8:08:34:58:ae:7d:ff:09: bf:5b:9f:26:e3:68:72:cc:32:6a:2f:df:c7:4d:a0: 3c:04:2f:2f:dc:48:cc:7e:4c:8c:21:64:24:4c:f9: 45:33:44:66:42:ea:76:1d:11:99:72:4d:b7:98:12: 82:d1:fc:58:48:a2:1d:b5:cd:f3:cc:b7:fc:bd:42: 08:4d:cf:63:ec:00:e1:3a:f2:4b:07:74:6f:26:c9: 87:b2:03:36:d2:62:31:d4:65:ca:e9:29:0b:ba:a0: 84:63:2b:1a:6b:bb:5d:5f:42:67:93:c2:d0:56:70: 82:df:16:13:6a:9e:2b:f1:e7:d9:fc:81:31:20:39: 98:fd:ad:9a:ef:18:b6:cd:9b:4b:ff:b4:bb:cc:ba: c4:4d:d4:ad:55:a2:32:82:e1:a7:5b:53:63:4f:d3: 92:2e:61:b8:e8:20:15:a1:a2:84:d6:85:51:4f:d2: 89:ee:fa:d9:ec:af:43:29:29:ad:3d:f6:06:52:b4: f7:23:da:c8:a9:79:ab:34:c0:7c:e4:cf:dc:4b:92: a3:ca:52:d5:20:b3:5f:d7:9e:ce:12:83:98:54:68: 76:80:09:79:72:64:60:4f:ac:44:7a:ef:c3:d1:5f: a5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D3:D5:1A:0B:2A:63:E9:AD:88:3A:32:35:AD:C6:80:DC:5B:AA:4D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:c800::/40 Signature Algorithm: sha256WithRSAEncryption c3:b2:d4:75:f6:de:38:78:1d:d3:37:9f:67:ed:5e:23:2c:91: d4:d0:90:fc:d1:b2:5c:96:13:ce:c4:bb:b1:bd:87:81:16:33: 3f:07:78:2c:39:fd:42:a5:8a:a8:d8:11:8c:a6:ea:d0:a7:ad: cd:81:90:a9:69:64:7c:e2:72:77:5a:37:fb:c6:17:0c:67:cc: 35:b3:15:46:55:a2:63:83:d5:5f:71:9b:a7:3f:ce:4f:db:60: 56:cb:a5:43:83:ed:a2:70:2d:06:f5:cf:aa:64:b0:de:a2:29: e2:78:b6:09:82:fd:79:91:c2:28:fa:ee:96:87:43:8a:61:af: c6:02:f0:00:54:a2:69:34:86:78:cb:12:df:47:4a:2a:6d:a7: 4d:02:06:b1:1a:b3:b6:17:e3:64:1c:01:58:ab:cf:fa:e9:84: a7:44:01:8e:38:58:47:27:9d:66:ab:d2:45:2e:88:2e:b4:48: c3:80:b0:1b:9c:39:e4:67:50:1e:78:cd:28:b2:d5:ac:03:d6: 2d:a3:32:03:5c:07:81:5b:43:03:77:09:03:f1:ad:4a:c3:45: 5e:24:56:f4:aa:9b:f5:c3:7a:13:96:a9:13:26:42:c2:bf:a1: 8b:2d:d7:48:a0:ff:d6:6c:60:84:25:db:1e:d7:54:e9:84:51: fd:64:42:5d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKOqHC58uuGp1ED4VzTZE7kKipEMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMTAzNFoX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAZDljZjczOWI2MDg0YzQwMzkzODQx YjE0OTZkNjUzN2EzN2Y5YTg0MzcxZGEwMzRkZDFjODAxMTgyYzgzMDY1MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+imjfIixnqf0Fg99RSLNqyDMAG5n qAg0WK59/wm/W58m42hyzDJqL9/HTaA8BC8v3EjMfkyMIWQkTPlFM0RmQup2HRGZ ck23mBKC0fxYSKIdtc3zzLf8vUIITc9j7ADhOvJLB3RvJsmHsgM20mIx1GXK6SkL uqCEYysaa7tdX0Jnk8LQVnCC3xYTap4r8efZ/IExIDmY/a2a7xi2zZtL/7S7zLrE TdStVaIyguGnW1NjT9OSLmG46CAVoaKE1oVRT9KJ7vrZ7K9DKSmtPfYGUrT3I9rI qXmrNMB85M/cS5KjylLVILNf157OEoOYVGh2gAl5cmRgT6xEeu/D0V+l7wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPHT1RoLKmPprYg6MjWtxoDcW6pNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmN2RmY2Y4LWJhMGMtNDdlOS04ZGRiLTZhNmQ4ZWM3MDQxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoMgwDQYJKoZIhvcNAQELBQADggEBAMOy1HX23jh4HdM3n2ft XiMskdTQkPzRslyWE87Eu7G9h4EWMz8HeCw5/UKliqjYEYym6tCnrc2BkKlpZHzi cndaN/vGFwxnzDWzFUZVomOD1V9xm6c/zk/bYFbLpUOD7aJwLQb1z6pksN6iKeJ4 tgmC/XmRwij67paHQ4phr8YC8ABUomk0hnjLEt9HSiptp00CBrEas7YX42QcAVir z/rphKdEAY44WEcnnWar0kUuiC60SMOAsBucOeRnUB54zSiy1awD1i2jMgNcB4Fb QwN3CQPxrUrDRV4kVvSqm/XDehOWqRMmQsK/oYst10ig/9ZsYIQl2x7XVOmEUf1k Ql0= -----END CERTIFICATE-----Generated at Sun Oct 11 18:54:46 2026 by rpki-client