$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbd95092-218d-4c92-9454-23492ab8afc1.roa File: fbd95092-218d-4c92-9454-23492ab8afc1.roa (raw, json) Hash identifier: JA6yXzcx8rhAZqyw7KRBRMQ4MJG2ZrXdmnUyvwKOkts= Subject key identifier: 1E:C2:52:F4:B2:69:7C:82:38:9F:79:3D:74:30:DF:B9:66:B9:0A:C4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0B63B00CE39A5912C2B3F40D13AC18DE2B6F1874 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbd95092-218d-4c92-9454-23492ab8afc1.roa Signing time: Thu 08 Oct 2026 17:13:43 +0000 ROA not before: Thu 08 Oct 2026 17:13:43 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae1:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 00:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:63:b0:0c:e3:9a:59:12:c2:b3:f4:0d:13:ac:18:de:2b:6f:18:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 8 17:13:43 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=63da349e35cfbcb6e1b6c10690afc3b9f809a1d9f2d8bdc235032950214786a5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:16:45:2f:f6:75:fa:36:05:48:69:47:da: 91:60:17:8c:d3:30:71:8c:0c:73:5a:6f:6a:0c:ab: 17:ae:0c:24:1c:9a:4f:54:b6:b4:77:3c:7a:a1:ad: e7:62:90:f8:55:6e:42:4f:98:95:55:ba:96:2c:f0: 7e:62:d5:70:96:25:e7:c8:b4:81:3e:19:e3:8a:ec: cf:b3:49:24:3c:e1:37:01:6e:a8:8d:d9:b8:05:72: 16:55:ab:03:cc:36:98:3d:3f:3f:e2:08:f9:b0:3d: cc:5d:6b:f1:71:47:33:89:26:49:77:2e:05:34:6a: 5a:3c:33:f7:35:e6:2c:ca:90:56:c5:0b:76:ed:06: 11:7f:db:ed:d8:23:27:e9:cf:17:3c:ab:2f:fc:67: 9a:d7:2d:e9:39:3e:7c:cd:cb:27:63:36:df:3e:82: e1:f4:aa:87:65:98:99:22:81:c0:19:5a:78:56:c7: cf:e9:cb:7d:7b:30:18:4b:b6:0f:f2:97:96:3b:d5: 6e:f9:d6:e9:ea:46:be:15:68:fe:27:45:3a:dc:a3: c2:7c:25:57:0f:5a:6c:5d:ae:4b:88:fb:da:6a:e1: 45:f6:9f:3d:3c:eb:9f:c4:d6:69:94:5f:40:20:09: 3a:5c:e7:ca:fb:46:f5:c6:a9:5a:f5:4f:cf:50:53: 0b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C2:52:F4:B2:69:7C:82:38:9F:79:3D:74:30:DF:B9:66:B9:0A:C4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbd95092-218d-4c92-9454-23492ab8afc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae1:1000::/40 Signature Algorithm: sha256WithRSAEncryption 7d:80:37:eb:3e:9a:ad:20:3b:fd:bc:4a:3f:ed:4e:e7:67:9d: d2:44:4d:4c:99:73:62:e0:b5:0b:61:41:dd:81:9c:1a:96:38: 29:45:82:ae:a7:f1:89:e8:7f:35:20:04:7c:5a:59:41:c5:e6: a3:b7:11:3c:a0:a2:a3:f4:17:10:6f:28:49:91:fd:f7:e9:12: f1:7e:e8:e9:b8:5b:77:f0:85:fa:00:99:a4:7d:11:f2:1d:12: 5e:64:19:9d:76:d5:0f:cb:d0:af:a6:e0:e3:15:24:00:94:d8: c4:89:7f:57:91:03:9d:04:f9:ca:8f:5a:94:ef:68:2b:93:d7: de:83:c1:0f:37:64:d9:21:91:14:b8:36:d9:3b:54:39:c4:e5: dd:6e:46:a2:c3:f9:b6:c1:4b:44:f2:0b:2c:f7:01:62:f8:13: 09:f9:aa:9d:7f:39:ea:5d:a2:f2:39:03:6f:ba:f0:89:6a:3b: 75:35:37:72:fa:a5:2d:6c:d3:1d:eb:57:16:64:94:ed:e5:d9: e4:fb:ce:39:82:24:8d:7d:76:5e:ee:fa:7f:3a:02:e2:f2:76: 7e:0d:e7:96:ea:87:7b:1e:de:d4:3c:2e:10:3d:d9:5a:fe:e0: d6:36:e1:54:86:74:f2:cd:91:4b:0b:b4:71:65:17:a8:a6:24: 5c:70:31:c8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUC2OwDOOaWRLCs/QNE6wY3itvGHQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwODE3MTM0M1oX DTI3MDEwNjIzNTk1OVowejFJMEcGA1UEBRNANjNkYTM0OWUzNWNmYmNiNmUxYjZj MTA2OTBhZmMzYjlmODA5YTFkOWYyZDhiZGMyMzUwMzI5NTAyMTQ3ODZhNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcoWRS/2dfo2BUhpR9qRYBeM0zBx jAxzWm9qDKsXrgwkHJpPVLa0dzx6oa3nYpD4VW5CT5iVVbqWLPB+YtVwliXnyLSB PhnjiuzPs0kkPOE3AW6ojdm4BXIWVasDzDaYPT8/4gj5sD3MXWvxcUcziSZJdy4F NGpaPDP3NeYsypBWxQt27QYRf9vt2CMn6c8XPKsv/Gea1y3pOT58zcsnYzbfPoLh 9KqHZZiZIoHAGVp4VsfP6ct9ezAYS7YP8peWO9Vu+dbp6ka+FWj+J0U63KPCfCVX D1psXa5LiPvaauFF9p89POufxNZplF9AIAk6XOfK+0b1xqla9U/PUFMLxwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB7CUvSyaXyCOJ95PXQw37lmuQrEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZiZDk1MDkyLTIxOGQtNGM5Mi05NDU0LTIzNDkyYWI4YWZjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4RAwDQYJKoZIhvcNAQELBQADggEBAH2AN+s+mq0gO/28Sj/t TudnndJETUyZc2LgtQthQd2BnBqWOClFgq6n8YnofzUgBHxaWUHF5qO3ETygoqP0 FxBvKEmR/ffpEvF+6Om4W3fwhfoAmaR9EfIdEl5kGZ121Q/L0K+m4OMVJACU2MSJ f1eRA50E+cqPWpTvaCuT196DwQ83ZNkhkRS4Ntk7VDnE5d1uRqLD+bbBS0TyCyz3 AWL4Ewn5qp1/OepdovI5A2+68IlqO3U1N3L6pS1s0x3rVxZklO3l2eT7zjmCJI19 dl7u+n86AuLydn4N55bqh3se3tQ8LhA92Vr+4NY24VSGdPLNkUsLtHFlF6imJFxw Mcg= -----END CERTIFICATE-----Generated at Mon Oct 12 07:07:26 2026 by rpki-client