$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa File: bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa (raw, json) Hash identifier: Tao93XUghhhtl9HWowKtqbF+69Sgdt5KF1w700pMOFM= Subject key identifier: 72:AC:67:C9:9C:60:FF:3D:0E:14:66:BD:F0:C7:8B:5A:F9:9E:6D:EA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 180D907EAFE379BA59DC712A078F5352B75EB2E4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa Signing time: Thu 22 Oct 2026 00:07:24 +0000 ROA not before: Thu 22 Oct 2026 00:07:24 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da13::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 00:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:0d:90:7e:af:e3:79:ba:59:dc:71:2a:07:8f:53:52:b7:5e:b2:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 22 00:07:24 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=b3e4d6fd87a665df1fdf068aaeeb5dc5c281e521714dda7ecca3e0efa0c21cfa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:3d:5f:ad:74:17:8b:02:1b:c6:54:bc:37: 6a:e1:2e:f1:c3:cb:d3:24:c2:ef:f2:08:be:c4:45: 3f:db:43:e5:a8:f3:43:ee:3b:e8:19:0f:20:97:ec: 07:c9:72:50:9b:45:80:09:c8:be:e4:d2:33:5f:0f: 82:db:b6:16:85:84:48:b1:79:83:e8:e2:5a:df:68: f5:6f:59:1c:ca:b1:4d:ab:0d:d0:fb:30:e8:91:e7: ec:e5:81:80:77:19:1c:8c:93:d6:0e:b1:d6:a4:af: 7a:39:48:3d:28:f1:5e:20:dc:e0:af:c5:bb:55:26: 3b:7d:aa:d8:6a:1d:bc:06:37:16:aa:73:f6:69:af: 8c:b5:7f:34:55:fd:9f:43:82:44:47:e8:98:93:c8: 67:57:5e:fa:67:92:90:95:1a:1b:06:e8:30:49:61: 72:d5:29:d4:d5:ff:d0:e6:55:c6:44:6a:82:2e:f3: 2b:47:bb:2a:53:c9:5d:c6:c5:ac:f5:a2:a3:61:07: 8b:4d:87:ef:8c:77:6f:15:f8:ae:a3:80:79:6e:18: a4:4b:bc:32:5a:59:24:0d:70:4d:30:55:6b:12:c4: 1e:dc:aa:dd:73:b5:2a:b1:ee:5e:40:ed:ba:f5:6b: 70:d8:8a:1d:ba:78:a1:0d:00:77:10:59:85:1a:54: c3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AC:67:C9:9C:60:FF:3D:0E:14:66:BD:F0:C7:8B:5A:F9:9E:6D:EA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da13::/36 Signature Algorithm: sha256WithRSAEncryption b8:ff:8b:71:82:e5:2f:cb:b3:04:14:c1:04:3f:af:b4:cf:6f: 00:01:0b:9c:3c:73:77:9f:b8:bc:cd:49:85:05:db:fe:28:f6: 38:02:07:0f:5e:1e:50:fa:a2:a6:dd:28:ed:29:ff:e4:63:25: c6:dd:0e:5a:d0:d8:3d:1d:8f:40:f9:6e:a0:04:1a:c0:14:ca: 2a:88:ba:d8:ad:37:49:51:85:67:27:4c:21:50:a2:c4:05:5c: b5:78:08:f3:96:70:04:a3:75:32:88:9d:6a:4e:36:b8:82:c0: 52:47:d8:ce:fc:85:5d:52:93:be:1c:de:39:88:14:01:41:a8: 8a:5f:f4:ff:16:f3:dd:4d:a8:80:d3:c7:c4:6f:15:36:ff:e3: 14:05:3c:0f:3e:75:09:ff:7f:1b:5b:67:cd:50:8f:2a:da:06: 66:83:77:bc:f8:a8:0c:1a:2c:9d:a3:99:7a:00:76:78:d2:a5: 7f:cd:82:8c:a3:63:51:b3:66:ab:8f:31:cc:1a:85:69:4d:e1: 4d:0a:4a:62:1a:dd:f0:55:a1:bf:e3:03:25:0b:9f:32:8a:04: be:ed:c4:68:8a:a2:07:7f:5e:6c:cd:7c:fe:f1:a1:df:17:5a: ab:c0:4d:b1:56:89:bb:9d:35:a7:dc:05:ff:49:49:cd:94:2b: 80:c0:61:30 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGA2Qfq/jebpZ3HEqB49TUrdesuQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMjAwMDcyNFoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAYjNlNGQ2ZmQ4N2E2NjVkZjFmZGYw NjhhYWVlYjVkYzVjMjgxZTUyMTcxNGRkYTdlY2NhM2UwZWZhMGMyMWNmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyo9X610F4sCG8ZUvDdq4S7xw8vT JMLv8gi+xEU/20PlqPND7jvoGQ8gl+wHyXJQm0WACci+5NIzXw+C27YWhYRIsXmD 6OJa32j1b1kcyrFNqw3Q+zDokefs5YGAdxkcjJPWDrHWpK96OUg9KPFeINzgr8W7 VSY7farYah28BjcWqnP2aa+MtX80Vf2fQ4JER+iYk8hnV176Z5KQlRobBugwSWFy 1SnU1f/Q5lXGRGqCLvMrR7sqU8ldxsWs9aKjYQeLTYfvjHdvFfiuo4B5bhikS7wy WlkkDXBNMFVrEsQe3Krdc7Uqse5eQO269Wtw2IodunihDQB3EFmFGlTDMQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHKsZ8mcYP89DhRmvfDHi1r5nm3qMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmODEzMWU4LTNiMDctNGI1ZS05NDdkLWQ2ZWU0YzJlN2I1YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaEwAwDQYJKoZIhvcNAQELBQADggEBALj/i3GC5S/LswQUwQQ/ r7TPbwABC5w8c3efuLzNSYUF2/4o9jgCBw9eHlD6oqbdKO0p/+RjJcbdDlrQ2D0d j0D5bqAEGsAUyiqIutitN0lRhWcnTCFQosQFXLV4CPOWcASjdTKInWpONriCwFJH 2M78hV1Sk74c3jmIFAFBqIpf9P8W891NqIDTx8RvFTb/4xQFPA8+dQn/fxtbZ81Q jyraBmaDd7z4qAwaLJ2jmXoAdnjSpX/NgoyjY1GzZquPMcwahWlN4U0KSmIa3fBV ob/jAyULnzKKBL7txGiKogd/XmzNfP7xod8XWqvATbFWibudNafcBf9JSc2UK4DA YTA= -----END CERTIFICATE-----Generated at Sat Oct 31 05:14:58 2026 by rpki-client