$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/feddcef0-1c49-4db6-b667-d3a813db2a74.roa File: feddcef0-1c49-4db6-b667-d3a813db2a74.roa (raw, json) Hash identifier: 9tdO7KuaAY44xRD46bcGCRTgCTRyMNmn/8MpUwBiWlk= Subject key identifier: 5B:3A:EC:CE:97:60:63:57:0B:1A:E4:0D:EB:59:73:FC:29:04:78:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 423797B6BE0E08780D1F592FB6F874A9327D89C2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/feddcef0-1c49-4db6-b667-d3a813db2a74.roa Signing time: Tue 20 Oct 2026 00:10:31 +0000 ROA not before: Tue 20 Oct 2026 00:10:31 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 00:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:37:97:b6:be:0e:08:78:0d:1f:59:2f:b6:f8:74:a9:32:7d:89:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:10:31 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=d9bf86c0e1602b01bcd812f96255b137521d92d46ae41737c32d061afc23ae5e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:4d:44:25:03:bd:93:f0:78:da:24:00:f8: 2f:e7:72:60:05:6c:19:eb:67:78:35:63:ff:58:6e: 26:70:c3:b2:c0:d1:ac:93:b0:c1:fc:37:58:64:3b: f1:d3:e8:19:c1:54:0e:c9:40:12:3e:a1:a3:24:d9: e4:2e:97:d4:90:ec:28:ed:ac:e1:08:b7:4e:40:a8: 93:4a:c5:e6:b6:9d:10:27:2f:37:b1:55:8d:33:3f: 52:a1:33:70:71:10:87:1d:24:bb:2e:7a:14:1c:45: 40:db:9d:2d:c0:43:6a:64:f6:38:99:8c:f9:fa:6d: 1e:9e:38:08:58:55:41:df:00:7d:a5:2e:56:f0:3c: 82:f0:b0:4a:4e:64:3b:84:f7:22:44:d3:3c:41:63: 3f:61:7b:8e:1c:76:79:27:66:8b:2b:4d:56:9f:67: f2:13:ab:7d:46:f4:73:82:db:61:52:0f:40:80:6c: e1:34:5c:94:9f:bc:58:b0:18:c9:27:25:88:91:18: 8e:c0:4b:86:7d:2f:c8:9a:b4:df:1d:30:a3:5c:5e: 98:08:fb:fe:f0:88:c0:8a:c6:01:32:4d:41:9b:c9: 4f:a9:dc:1e:46:03:f0:ee:65:a1:34:1e:5e:24:ca: 62:73:cd:83:88:94:70:60:58:66:32:45:83:89:36: ca:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3A:EC:CE:97:60:63:57:0B:1A:E4:0D:EB:59:73:FC:29:04:78:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/feddcef0-1c49-4db6-b667-d3a813db2a74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:1000::/40 Signature Algorithm: sha256WithRSAEncryption 26:ce:3a:c7:05:17:32:e7:89:8a:52:3d:83:3e:26:ed:d4:af: bb:8f:02:a2:59:49:38:9b:09:4c:72:3b:88:1b:f3:ec:b0:9e: d1:5c:2c:fe:1b:b6:e3:ad:c4:91:be:79:4d:15:20:0f:93:3f: eb:e7:e7:2b:f2:51:9a:b6:e7:86:d5:fd:17:e6:b9:f0:f7:84: 20:b8:15:59:a7:1a:f2:a7:b2:25:26:e8:36:df:e2:b8:22:46: 01:19:2d:9e:60:77:85:9c:78:e0:e9:54:3d:5a:c9:6f:3a:45: 39:48:e7:39:dc:f6:70:e3:9f:e5:62:62:06:2c:df:89:e3:47: e2:a8:28:95:ba:47:66:a1:8e:c4:9a:b5:b7:db:76:b6:cd:36: 36:a4:71:db:00:70:06:3d:d5:01:dc:34:7e:e8:82:27:7e:64: 3b:47:0e:b5:3d:28:ba:a5:3d:ad:75:c8:8d:62:07:3c:1d:d3: 2e:29:0f:a3:93:13:23:d7:36:dd:73:2a:ae:49:32:77:4d:58: 07:f4:0d:08:36:79:4f:44:dd:d7:9f:24:35:fc:3a:3b:80:a7: 61:05:a3:6d:07:70:2d:79:3d:34:07:eb:40:9c:cf:70:59:41: be:39:ad:26:11:41:6a:b4:2d:f7:51:09:54:da:8f:26:45:bb: aa:37:50:81 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQjeXtr4OCHgNH1kvtvh0qTJ9icIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMTAzMVoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAZDliZjg2YzBlMTYwMmIwMWJjZDgx MmY5NjI1NWIxMzc1MjFkOTJkNDZhZTQxNzM3YzMyZDA2MWFmYzIzYWU1ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy5NRCUDvZPweNokAPgv53JgBWwZ 62d4NWP/WG4mcMOywNGsk7DB/DdYZDvx0+gZwVQOyUASPqGjJNnkLpfUkOwo7azh CLdOQKiTSsXmtp0QJy83sVWNMz9SoTNwcRCHHSS7LnoUHEVA250twENqZPY4mYz5 +m0enjgIWFVB3wB9pS5W8DyC8LBKTmQ7hPciRNM8QWM/YXuOHHZ5J2aLK01Wn2fy E6t9RvRzgtthUg9AgGzhNFyUn7xYsBjJJyWIkRiOwEuGfS/ImrTfHTCjXF6YCPv+ 8IjAisYBMk1Bm8lPqdweRgPw7mWhNB5eJMpic82DiJRwYFhmMkWDiTbKOwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFs67M6XYGNXCxrkDetZc/wpBHggMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZlZGRjZWYwLTFjNDktNGRiNi1iNjY3LWQzYTgxM2RiMmE3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaBAwDQYJKoZIhvcNAQELBQADggEBACbOOscFFzLniYpSPYM+ Ju3Ur7uPAqJZSTibCUxyO4gb8+ywntFcLP4btuOtxJG+eU0VIA+TP+vn5yvyUZq2 54bV/RfmufD3hCC4FVmnGvKnsiUm6Dbf4rgiRgEZLZ5gd4WceODpVD1ayW86RTlI 5znc9nDjn+ViYgYs34njR+KoKJW6R2ahjsSatbfbdrbNNjakcdsAcAY91QHcNH7o gid+ZDtHDrU9KLqlPa11yI1iBzwd0y4pD6OTEyPXNt1zKq5JMndNWAf0DQg2eU9E 3defJDX8OjuAp2EFo20HcC15PTQH60Ccz3BZQb45rSYRQWq0LfdRCVTajyZFu6o3 UIE= -----END CERTIFICATE-----Generated at Tue Oct 27 22:25:02 2026 by rpki-client