$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/5663bf34-10ed-4309-a236-7466afd6f02f.roa File: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (raw, json) Hash identifier: 3wN3pxcjzw7syiUxAt83nomcr89rOgXxIJI+jjtEZLw= Subject key identifier: A8:06:ED:21:20:73:7D:2F:16:0F:E8:7D:5D:43:B1:C1:F9:18:A7:10 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 2AAF4B481C2CA5AF75A4F8ED7BC872370DD53860 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/5663bf34-10ed-4309-a236-7466afd6f02f.roa Signing time: Sun 04 Oct 2026 00:00:09 +0000 ROA not before: Sun 04 Oct 2026 00:00:09 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 00:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:af:4b:48:1c:2c:a5:af:75:a4:f8:ed:7b:c8:72:37:0d:d5:38:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Oct 4 00:00:09 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=8ea2688cafa8a9d3b471e1adff88f633d9f4db736318b24845b7bafb7ca1d7ac, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3a:c1:38:35:87:57:5a:39:9c:bf:0a:f8:1c: 23:bf:97:cb:fe:3b:d3:a9:4a:ef:63:f8:87:19:94: c6:8f:18:31:4a:13:e2:81:96:10:3d:ea:34:a1:fa: 2d:34:c2:d5:b7:8d:c1:dc:ea:6d:8c:1e:60:9f:65: d7:0b:31:40:ca:96:f1:fe:52:39:ad:d5:dd:36:31: 6e:26:6e:5d:d8:88:1c:82:91:67:24:4f:f6:0a:75: 7f:40:dd:d6:41:06:68:b6:54:44:b3:d1:c5:23:91: 09:aa:54:8e:d3:e1:d9:f3:27:0a:21:ea:4b:06:a7: 0a:28:e5:0d:b3:c0:cc:83:87:57:8d:48:08:24:0b: 21:69:2b:4c:e4:bb:fe:8a:11:77:10:47:ac:30:c3: 2c:00:d6:35:3e:38:4a:2a:08:74:cb:3f:4e:d8:ea: 53:ff:27:a0:c8:82:2a:f8:a2:2c:25:f9:06:26:fe: 2b:8d:97:01:26:c8:57:14:d3:0c:16:28:13:1c:00: df:9d:4b:a3:1b:e1:7c:a5:93:3c:00:b8:9f:e5:04: e8:56:e6:30:a5:4f:d4:b6:eb:c7:66:4c:a6:94:56: 26:b0:8c:c1:a1:0a:5d:dc:d0:48:f3:66:a8:f0:e0: 33:51:4a:7d:11:12:a0:5e:16:13:91:7d:7f:59:6f: d7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:06:ED:21:20:73:7D:2F:16:0F:E8:7D:5D:43:B1:C1:F9:18:A7:10 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/5663bf34-10ed-4309-a236-7466afd6f02f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:ff00::/48 Signature Algorithm: sha256WithRSAEncryption 71:48:70:fe:32:bf:b5:72:4a:d1:de:68:6d:dd:cf:97:c3:93: db:19:43:d4:05:91:b8:e2:52:2d:ed:8a:90:df:c8:96:f7:e4: a1:1c:68:1c:6a:9b:94:0f:77:be:80:bb:6c:9f:25:eb:a6:aa: 46:f7:59:66:e4:d6:d7:4e:31:47:79:2a:55:15:81:44:51:33: 8d:7f:2b:8e:16:00:b2:69:dc:0d:66:e2:ca:2a:5b:6c:71:01: 6b:5a:f5:a7:49:7b:dd:47:93:55:c1:80:13:f6:b4:89:d7:b6: dc:42:18:6c:59:fe:b7:d6:8b:4e:b4:ef:8c:83:a5:8a:a8:07: c4:e2:a1:ca:d8:d2:29:f8:ef:b3:5d:0f:e9:5e:13:55:4d:ee: fc:a5:33:a4:c0:11:cb:9b:12:b1:3b:68:a9:eb:b0:00:25:88: 4d:ef:2b:b5:05:d7:bd:2d:f3:6d:cb:a5:03:4a:85:90:f8:47: 53:45:7b:70:a6:d9:c7:ad:9a:b5:c6:ff:94:76:c4:34:74:51: 60:e8:2d:56:83:e2:cb:23:d1:3f:6c:51:19:91:ea:02:a8:18: bb:31:13:88:64:c6:7d:e3:a5:d0:69:0c:0f:27:f3:15:de:cf: a2:e0:47:87:56:ca:f0:20:20:ab:6e:29:5c:23:f6:34:22:82: be:e8:13:9c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKq9LSBwspa91pPjte8hyNw3VOGAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MTAwNDAwMDAwOVoX DTI3MDEwMjIzNTk1OVowejFJMEcGA1UEBRNAOGVhMjY4OGNhZmE4YTlkM2I0NzFl MWFkZmY4OGY2MzNkOWY0ZGI3MzYzMThiMjQ4NDViN2JhZmI3Y2ExZDdhYzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjrBODWHV1o5nL8K+Bwjv5fL/jvT qUrvY/iHGZTGjxgxShPigZYQPeo0ofotNMLVt43B3OptjB5gn2XXCzFAypbx/lI5 rdXdNjFuJm5d2IgcgpFnJE/2CnV/QN3WQQZotlREs9HFI5EJqlSO0+HZ8ycKIepL BqcKKOUNs8DMg4dXjUgIJAshaStM5Lv+ihF3EEesMMMsANY1PjhKKgh0yz9O2OpT /yegyIIq+KIsJfkGJv4rjZcBJshXFNMMFigTHADfnUujG+F8pZM8ALif5QToVuYw pU/UtuvHZkymlFYmsIzBoQpd3NBI82ao8OAzUUp9ERKgXhYTkX1/WW/XawIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKgG7SEgc30vFg/ofV1DscH5GKcQMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzU2NjNiZjM0LTEwZWQtNDMwOS1hMjM2LTc0NjZhZmQ2ZjAyZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzAP8AMA0GCSqGSIb3DQEBCwUAA4IBAQBxSHD+Mr+1ckrR3mht 3c+Xw5PbGUPUBZG44lIt7YqQ38iW9+ShHGgcapuUD3e+gLtsnyXrpqpG91lm5NbX TjFHeSpVFYFEUTONfyuOFgCyadwNZuLKKltscQFrWvWnSXvdR5NVwYAT9rSJ17bc QhhsWf631otOtO+Mg6WKqAfE4qHK2NIp+O+zXQ/pXhNVTe78pTOkwBHLmxKxO2ip 67AAJYhN7yu1Bde9LfNty6UDSoWQ+EdTRXtwptnHrZq1xv+UdsQ0dFFg6C1Wg+LL I9E/bFEZkeoCqBi7MROIZMZ946XQaQwPJ/MV3s+i4EeHVsrwICCrbilcI/Y0IoK+ 6BOc -----END CERTIFICATE-----Generated at Tue Oct 13 04:55:19 2026 by rpki-client