$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d59bb6ef-9c23-451d-a6c5-3b5b7f6fffeb.roa File: d59bb6ef-9c23-451d-a6c5-3b5b7f6fffeb.roa (raw, json) Hash identifier: t8Ya2rxeQHWrMXPvLUpWR7GKLkjMJH977tQ2Z3NYR0o= Subject key identifier: 91:AD:71:6A:A9:B9:0F:57:AE:3D:36:6C:F6:40:B6:94:5F:9B:38:B4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1F169AADCE79622D6398C1E62C85C9703D8EC094 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d59bb6ef-9c23-451d-a6c5-3b5b7f6fffeb.roa Signing time: Thu 08 Oct 2026 17:13:52 +0000 ROA not before: Thu 08 Oct 2026 17:13:52 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae3:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 00:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:16:9a:ad:ce:79:62:2d:63:98:c1:e6:2c:85:c9:70:3d:8e:c0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 8 17:13:52 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=a03a8a844a22a9434fb6cd4187354734217e9ead9ed8b196707c5a5d2e0cbbab, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c9:e2:ae:dd:c4:43:13:b8:db:3b:10:42:a5: 07:86:01:e6:52:65:43:41:4c:80:12:6f:5c:aa:88: 5f:a5:9b:c0:ab:bc:9c:c2:84:b8:86:4d:18:e3:22: 81:25:62:01:ed:f6:8a:d6:34:cd:f8:b4:73:81:65: 13:31:f0:77:c7:33:da:c1:04:c9:88:6e:0a:f2:55: 3b:3d:ab:f7:af:f8:2c:a9:a0:72:6e:5d:2d:f7:a8: 83:79:6a:48:60:40:a0:0b:eb:0b:24:b9:3a:5f:d1: d9:ff:60:cb:7d:c1:4e:32:59:21:ed:1d:05:32:c2: 31:12:81:5c:52:d0:7d:e9:37:ec:c8:cb:2f:43:b5: 03:b8:9e:7b:a0:69:8d:29:1a:33:67:d3:7c:54:f2: c4:10:42:42:5d:36:6f:b5:70:a6:8e:7c:cd:ae:62: 0f:d6:58:80:cc:53:a7:a7:7d:f9:d5:13:3c:a2:e9: a8:7e:6d:fc:e9:71:56:39:fc:e6:d2:80:c9:43:35: 4b:38:a2:31:76:8e:9e:63:7d:57:61:ff:b9:ce:c0: d3:bb:e7:f7:f7:a1:87:98:ee:82:01:26:f9:c4:0b: 67:9d:78:73:34:06:a4:6e:d1:d2:f3:ff:da:8d:a6: 86:0c:20:19:51:12:51:de:11:64:94:ca:7c:a9:24: cc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AD:71:6A:A9:B9:0F:57:AE:3D:36:6C:F6:40:B6:94:5F:9B:38:B4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d59bb6ef-9c23-451d-a6c5-3b5b7f6fffeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae3:4000::/40 Signature Algorithm: sha256WithRSAEncryption c7:c9:a5:bd:b8:ea:cd:9c:ba:68:a5:04:78:85:76:47:7b:3f: c7:f0:81:6a:e2:63:68:af:20:2c:35:16:05:8e:b5:f7:85:01: 2f:d6:a1:db:5a:4f:42:44:8e:ce:34:d9:35:af:3c:f4:a7:4c: 69:ca:2c:e3:b8:25:ba:11:84:4d:fe:36:aa:34:01:fe:f2:1b: 55:4b:12:c0:a9:e2:93:db:97:dd:64:66:07:dc:68:1d:7a:ef: 3f:ec:b1:84:fc:21:f1:43:bf:a3:a0:e3:64:99:3c:d4:62:17: 7f:84:d6:4b:49:44:35:0f:a0:e0:4e:1a:80:f0:e2:61:7e:83: 74:4b:a3:07:85:47:fb:0c:ec:8d:7b:c5:53:92:26:c1:11:a5: ca:26:9f:cf:e7:0e:19:4b:5b:5e:8b:4c:db:2f:98:64:27:3a: 34:00:07:4d:9d:b1:a0:1a:41:5e:cb:00:0e:61:c7:81:bb:ba: 92:37:df:78:a8:89:4c:fa:41:41:15:ca:bf:bc:df:63:b2:3b: f6:6e:15:01:f7:90:86:36:d7:84:e9:2c:a2:2e:17:e2:29:bd: a4:ed:a0:95:6a:dd:f5:0b:a3:57:c7:01:44:1b:dc:49:db:cd: bb:49:09:57:fc:b3:7f:04:ef:47:fb:03:c9:b7:28:1f:1d:eb: ee:23:9c:c8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHxaarc55Yi1jmMHmLIXJcD2OwJQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwODE3MTM1MloX DTI3MDEwNjIzNTk1OVowejFJMEcGA1UEBRNAYTAzYThhODQ0YTIyYTk0MzRmYjZj ZDQxODczNTQ3MzQyMTdlOWVhZDllZDhiMTk2NzA3YzVhNWQyZTBjYmJhYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6snirt3EQxO42zsQQqUHhgHmUmVD QUyAEm9cqohfpZvAq7ycwoS4hk0Y4yKBJWIB7faK1jTN+LRzgWUTMfB3xzPawQTJ iG4K8lU7Pav3r/gsqaBybl0t96iDeWpIYECgC+sLJLk6X9HZ/2DLfcFOMlkh7R0F MsIxEoFcUtB96TfsyMsvQ7UDuJ57oGmNKRozZ9N8VPLEEEJCXTZvtXCmjnzNrmIP 1liAzFOnp3351RM8oumofm386XFWOfzm0oDJQzVLOKIxdo6eY31XYf+5zsDTu+f3 96GHmO6CASb5xAtnnXhzNAakbtHS8//ajaaGDCAZURJR3hFklMp8qSTM8wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJGtcWqpuQ9Xrj02bPZAtpRfmzi0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q1OWJiNmVmLTljMjMtNDUxZC1hNmM1LTNiNWI3ZjZmZmZlYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba40AwDQYJKoZIhvcNAQELBQADggEBAMfJpb246s2cumilBHiF dkd7P8fwgWriY2ivICw1FgWOtfeFAS/WodtaT0JEjs402TWvPPSnTGnKLOO4JboR hE3+Nqo0Af7yG1VLEsCp4pPbl91kZgfcaB167z/ssYT8IfFDv6Og42SZPNRiF3+E 1ktJRDUPoOBOGoDw4mF+g3RLoweFR/sM7I17xVOSJsERpcomn8/nDhlLW16LTNsv mGQnOjQAB02dsaAaQV7LAA5hx4G7upI333ioiUz6QUEVyr+832OyO/ZuFQH3kIY2 14TpLKIuF+IpvaTtoJVq3fULo1fHAUQb3EnbzbtJCVf8s38E70f7A8m3KB8d6+4j nMg= -----END CERTIFICATE-----Generated at Tue Oct 13 16:14:47 2026 by rpki-client