$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfd0398f-9f8a-423b-81aa-122fc571f9ea.roa File: dfd0398f-9f8a-423b-81aa-122fc571f9ea.roa (raw, json) Hash identifier: ny+ZAq+QeLyU1y1QXshSgSGFOekbSS8S93MA9uTbOo4= Subject key identifier: B5:35:DB:E6:AE:74:7C:7F:03:65:3F:96:A8:30:78:D1:13:4D:BB:49 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 68CFAA5D27DCEE36CF6D8C2C6DE108A938683981 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfd0398f-9f8a-423b-81aa-122fc571f9ea.roa Signing time: Tue 06 Oct 2026 00:01:26 +0000 ROA not before: Tue 06 Oct 2026 00:01:26 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 00:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:cf:aa:5d:27:dc:ee:36:cf:6d:8c:2c:6d:e1:08:a9:38:68:39:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 6 00:01:26 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=945fc7d43034ab8f787b247f1204966c30aae687d8ef6f42c91e14f273137d62, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ea:72:a1:3f:61:ae:b7:5b:b5:e2:5a:83:1c: 76:63:c7:95:4a:7c:50:8a:8a:d6:04:f8:66:d9:82: d9:4c:66:06:4e:58:a4:aa:0f:20:78:59:1d:6f:c7: 48:84:7c:24:4d:bb:7a:52:95:6f:59:09:3a:46:fe: 65:75:bc:91:0b:de:1a:68:92:94:78:d7:f3:b0:df: 0b:bd:f5:73:79:32:92:c2:45:ad:9d:bf:39:42:11: 32:30:2d:a8:82:00:95:00:1c:7a:d6:4f:1e:6d:1a: c5:0f:48:3a:89:26:2d:30:9b:be:84:f7:5b:03:60: 74:6c:1e:30:08:0f:09:c1:11:aa:71:c6:f3:7f:b4: 6b:63:1f:85:df:2d:fa:95:58:b9:d9:91:b1:87:b0: 90:d7:1f:fc:6a:ee:c9:a4:78:5a:92:5b:41:80:53: 2c:72:f2:c9:72:07:62:06:da:d8:01:ba:05:3f:ec: 5d:7a:d1:c9:37:09:e6:c7:b9:36:47:d9:4a:e4:8e: e2:47:18:60:65:f2:6c:22:96:8b:b4:54:1f:ab:2e: 03:13:83:ad:55:84:dd:07:8d:1b:d7:a7:b7:6c:20: 7e:5a:e3:94:33:1d:ac:e5:98:43:37:74:9e:c3:19: 71:ec:b7:34:2b:3c:67:a6:d3:d1:d1:22:92:f8:5c: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:35:DB:E6:AE:74:7C:7F:03:65:3F:96:A8:30:78:D1:13:4D:BB:49 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfd0398f-9f8a-423b-81aa-122fc571f9ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da30::/32 Signature Algorithm: sha256WithRSAEncryption 6a:59:f2:12:58:5e:82:20:33:da:51:6c:83:8f:53:e4:bf:70: d3:b6:1c:cc:0b:2f:f4:22:eb:6f:f6:b6:52:be:6e:c5:5c:33: cf:5e:b8:92:1b:05:d7:a8:c2:b7:b3:46:67:b7:a4:a4:dd:9a: 5d:2b:46:ab:68:81:6c:3b:44:a3:51:74:a7:cf:0e:64:7a:37: f9:da:bd:f0:c9:f6:d6:74:c2:6e:f0:a7:bc:57:93:23:88:4e: db:e3:51:3f:2a:10:43:d5:12:69:f9:79:e3:49:45:5f:68:b7: 7e:b4:dc:93:0d:22:7c:2b:96:54:9b:fc:cf:02:a5:b8:a9:3e: 1c:c1:11:58:e5:31:84:a8:ab:00:a6:05:67:f2:66:2e:a0:5d: 06:ad:3c:37:2a:a5:32:50:6c:1d:56:72:3d:05:9a:01:ba:5d: 54:2d:e6:d5:95:a4:af:36:ae:3b:1a:e6:0d:93:33:bb:b0:e1: ee:0a:e6:a9:c3:b3:b5:10:3a:64:c6:f2:38:2d:9d:cf:ce:f1: 12:5e:20:67:b7:36:ce:a8:41:3c:81:7a:af:1e:63:6f:3b:f4: 32:38:e2:6a:99:dc:c8:47:a5:f1:d0:f2:a1:55:30:a0:c5:7f: f9:8f:e9:2a:b5:8c:cf:64:3f:b3:fd:7c:20:bf:7b:c7:1a:60: e9:7a:b1:7d -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUaM+qXSfc7jbPbYwsbeEIqThoOYEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwNjAwMDEyNloX DTI3MDEwNDIzNTk1OVowejFJMEcGA1UEBRNAOTQ1ZmM3ZDQzMDM0YWI4Zjc4N2Iy NDdmMTIwNDk2NmMzMGFhZTY4N2Q4ZWY2ZjQyYzkxZTE0ZjI3MzEzN2Q2MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OpyoT9hrrdbteJagxx2Y8eVSnxQ iorWBPhm2YLZTGYGTlikqg8geFkdb8dIhHwkTbt6UpVvWQk6Rv5ldbyRC94aaJKU eNfzsN8LvfVzeTKSwkWtnb85QhEyMC2oggCVABx61k8ebRrFD0g6iSYtMJu+hPdb A2B0bB4wCA8JwRGqccbzf7RrYx+F3y36lVi52ZGxh7CQ1x/8au7JpHhakltBgFMs cvLJcgdiBtrYAboFP+xdetHJNwnmx7k2R9lK5I7iRxhgZfJsIpaLtFQfqy4DE4Ot VYTdB40b16e3bCB+WuOUMx2s5ZhDN3Sewxlx7Lc0KzxnptPR0SKS+FyWfwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFLU12+audHx/A2U/lqgweNETTbtJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmZDAzOThmLTlmOGEtNDIzYi04MWFhLTEyMmZjNTcxZjllYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaMDANBgkqhkiG9w0BAQsFAAOCAQEAalnyElhegiAz2lFsg49T 5L9w07YczAsv9CLrb/a2Ur5uxVwzz164khsF16jCt7NGZ7ekpN2aXStGq2iBbDtE o1F0p88OZHo3+dq98Mn21nTCbvCnvFeTI4hO2+NRPyoQQ9USafl540lFX2i3frTc kw0ifCuWVJv8zwKluKk+HMERWOUxhKirAKYFZ/JmLqBdBq08NyqlMlBsHVZyPQWa AbpdVC3m1ZWkrzauOxrmDZMzu7Dh7grmqcOztRA6ZMbyOC2dz87xEl4gZ7c2zqhB PIF6rx5jbzv0MjjiapncyEel8dDyoVUwoMV/+Y/pKrWMz2Q/s/18IL97xxpg6Xqx fQ== -----END CERTIFICATE-----Generated at Tue Oct 6 19:49:32 2026 by rpki-client