$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f49edff2-b901-48af-872b-a91e228adb05.roa File: f49edff2-b901-48af-872b-a91e228adb05.roa (raw, json) Hash identifier: BT/RpCVmNgW0YNK7/wbSDWSfw/V8cSdPqJCOFVO7trU= Subject key identifier: 55:6E:65:CC:FB:1D:01:1E:09:9C:90:E9:DB:68:80:12:09:F9:4C:2C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2272425223C0E7697BFD8ACB1A09BEC3A4810269 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f49edff2-b901-48af-872b-a91e228adb05.roa Signing time: Fri 09 Oct 2026 00:07:22 +0000 ROA not before: Fri 09 Oct 2026 00:07:22 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:9040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:72:42:52:23:c0:e7:69:7b:fd:8a:cb:1a:09:be:c3:a4:81:02:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:07:22 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=c34e35886566ad6f080b8d56858ec853dc16d5eb006c0f050349913187d20363, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:94:c9:a4:a0:28:4b:d4:cf:d3:a3:07:ea:52: 2a:bc:9a:ce:1c:b8:52:2c:9b:77:99:10:f5:38:31: 36:68:67:1d:4a:52:d2:b4:45:58:52:ed:e5:0c:de: 11:d6:08:65:98:c2:1c:fe:33:bf:6b:37:0e:32:35: 4b:99:6b:80:74:e0:f3:6c:b1:ef:f1:a7:15:76:a6: 1d:0a:31:db:de:2d:dc:a7:35:3a:d6:c2:fe:cd:43: 95:22:9e:a1:35:8c:29:ca:e5:48:7c:d0:81:ff:94: 0b:8c:7c:d6:94:f6:05:a6:a7:f6:87:68:13:10:d5: 5a:a3:6c:47:d5:57:67:92:52:b9:b3:f9:52:cc:9f: 3f:90:85:5f:b8:30:24:80:b4:54:2d:a2:24:2c:14: ac:4c:f1:ba:f7:e5:8b:76:94:2c:2b:13:f7:9f:72: 5c:2e:df:06:bf:69:30:33:2d:92:6f:b1:2c:2d:f8: 27:17:ee:d8:b4:0b:5e:48:0a:6e:f6:ad:65:5a:c2: c6:94:60:91:e6:0d:7a:49:43:8d:02:d6:14:97:d6: 5e:ce:45:21:0d:df:c4:76:50:69:91:3f:32:af:9e: 1b:1c:90:3f:8b:e3:27:6d:f1:8d:60:3b:d5:a5:77: 01:aa:98:07:c4:d5:e1:a0:91:f0:83:25:1d:02:57: 61:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6E:65:CC:FB:1D:01:1E:09:9C:90:E9:DB:68:80:12:09:F9:4C:2C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f49edff2-b901-48af-872b-a91e228adb05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:9040::/46 Signature Algorithm: sha256WithRSAEncryption 77:b0:56:4a:3e:a5:ae:19:f3:ee:b3:6f:1d:2d:f0:e4:2a:1b: fd:99:0c:a5:8d:0e:1c:9e:17:f2:0f:17:6b:d9:ad:74:fa:f3: ed:92:10:fd:cb:1a:23:ba:b7:1c:7c:7f:94:20:3d:65:37:9f: a3:26:f4:35:0f:f8:74:0d:ee:39:33:b2:54:ca:55:20:7b:f0: ba:5d:c5:e5:ff:64:30:9c:4a:06:92:b8:34:a0:64:a0:2e:9a: 10:81:04:5d:30:77:15:e8:60:15:91:f7:16:49:6a:5c:e9:7d: 32:b7:c6:fb:6a:42:99:8a:b4:c8:4c:bc:ae:c2:46:3d:a8:71: 59:1f:5a:a9:b7:46:5e:a9:2e:ad:3c:a7:d0:d7:bb:26:e2:48: 51:cd:f6:b5:b8:69:26:3a:f8:06:a1:8b:f1:d9:81:68:d5:18: 3e:e2:b1:42:31:7d:4b:eb:92:1b:d0:9b:a7:bf:00:c3:73:f3: 09:9f:a4:94:86:41:ee:eb:ea:ca:fc:2b:1c:5b:16:64:fd:16: aa:ab:19:62:6b:c9:02:2a:19:5c:f0:85:73:f3:e5:11:45:ad: 3a:40:ee:ed:41:c6:ae:7d:de:c9:74:70:d5:6d:6a:a3:80:cf: ba:66:2a:a4:0c:76:1b:a3:42:e0:17:39:99:85:94:14:7d:54: 48:55:98:b4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUInJCUiPA52l7/YrLGgm+w6SBAmkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMDcyMloX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAYzM0ZTM1ODg2NTY2YWQ2ZjA4MGI4 ZDU2ODU4ZWM4NTNkYzE2ZDVlYjAwNmMwZjA1MDM0OTkxMzE4N2QyMDM2MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJTJpKAoS9TP06MH6lIqvJrOHLhS LJt3mRD1ODE2aGcdSlLStEVYUu3lDN4R1ghlmMIc/jO/azcOMjVLmWuAdODzbLHv 8acVdqYdCjHb3i3cpzU61sL+zUOVIp6hNYwpyuVIfNCB/5QLjHzWlPYFpqf2h2gT ENVao2xH1VdnklK5s/lSzJ8/kIVfuDAkgLRULaIkLBSsTPG69+WLdpQsKxP3n3Jc Lt8Gv2kwMy2Sb7EsLfgnF+7YtAteSApu9q1lWsLGlGCR5g16SUONAtYUl9ZezkUh Dd/EdlBpkT8yr54bHJA/i+MnbfGNYDvVpXcBqpgHxNXhoJHwgyUdAldhFQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFVuZcz7HQEeCZyQ6dtogBIJ+UwsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y0OWVkZmYyLWI5MDEtNDhhZi04NzJiLWE5MWUyMjhhZGIwNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba85BAMA0GCSqGSIb3DQEBCwUAA4IBAQB3sFZKPqWuGfPus28d LfDkKhv9mQyljQ4cnhfyDxdr2a10+vPtkhD9yxojurccfH+UID1lN5+jJvQ1D/h0 De45M7JUylUge/C6XcXl/2QwnEoGkrg0oGSgLpoQgQRdMHcV6GAVkfcWSWpc6X0y t8b7akKZirTITLyuwkY9qHFZH1qpt0ZeqS6tPKfQ17sm4khRzfa1uGkmOvgGoYvx 2YFo1Rg+4rFCMX1L65Ib0JunvwDDc/MJn6SUhkHu6+rK/CscWxZk/Raqqxlia8kC Khlc8IVz8+URRa06QO7tQcaufd7JdHDVbWqjgM+6ZiqkDHYbo0LgFzmZhZQUfVRI VZi0 -----END CERTIFICATE-----Generated at Mon Oct 12 00:48:35 2026 by rpki-client