$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa File: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (raw, json) Hash identifier: c3ibl3WQRyfORjyV2jtV99MlRLv/+v4zO7ir01Gms8M= Subject key identifier: 26:C8:AB:37:34:4A:5C:D3:28:E3:E5:E2:B8:C0:14:2B:E8:C0:0A:4C Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 2533CA739C4C47E361406028C15C2426A3E56FB9 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa Signing time: Fri 23 Oct 2026 00:02:51 +0000 ROA not before: Fri 23 Oct 2026 00:02:51 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:33:ca:73:9c:4c:47:e3:61:40:60:28:c1:5c:24:26:a3:e5:6f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 23 00:02:51 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=170f53fbe41c3aa306295a5f4269bce82cbc51c334dd8026837b40e7a963852a, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:33:44:ca:3b:5e:32:94:c3:e9:4c:69:8c:d9: 6e:f0:7f:f0:95:51:fe:24:40:cd:26:0b:a7:4f:c2: 57:85:44:9a:f6:c7:a6:10:8f:9d:de:d7:c1:df:02: 10:75:ee:00:40:c9:60:88:ad:0c:3a:b3:8a:79:24: 65:55:a3:0f:22:38:82:b9:a1:09:25:ce:f8:ac:00: 12:70:fc:27:8f:49:50:f2:80:9a:9b:fa:cb:07:b3: 71:0d:76:fe:d5:8c:60:c4:29:18:15:30:05:bb:6c: eb:fd:b8:d0:89:94:63:78:6d:4a:b6:b1:66:f4:2c: ce:fa:d1:67:04:20:7a:19:c4:78:93:e6:0b:d9:f4: 2f:16:41:14:07:83:20:bf:da:79:49:06:c1:42:a3: cb:43:61:5d:cb:f4:ed:36:b2:9e:a7:c8:d1:5c:89: 1b:db:3e:d5:22:74:a5:3a:77:57:48:d6:c2:b1:dc: 77:e5:a0:48:e3:3e:6b:4d:ce:e0:4a:00:ca:aa:8d: 65:13:0b:85:98:32:58:d3:61:ff:d3:9a:26:85:ef: 7a:ed:54:fb:9e:8a:8e:8c:51:85:22:b0:29:a2:2a: a2:3c:11:0b:3d:ba:8a:a6:63:20:00:2b:7b:1b:72: 6f:22:2e:7e:da:36:2f:42:71:d8:fd:67:ea:fb:35: 53:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C8:AB:37:34:4A:5C:D3:28:E3:E5:E2:B8:C0:14:2B:E8:C0:0A:4C X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6700::/48 Signature Algorithm: sha256WithRSAEncryption 3f:2d:20:d0:4a:bd:09:c2:4c:fc:80:1e:95:68:58:65:17:c5: 3e:f6:25:81:41:91:c1:b8:8e:9d:72:b4:ce:bd:6c:a9:85:5e: e8:f0:66:df:e6:7d:2a:24:7e:57:26:ee:55:af:e2:d3:8e:e4: 58:9a:ee:06:b2:e2:a8:64:8e:59:4c:f7:ad:7c:f2:7e:0a:f0: 25:78:44:d2:05:14:b6:dc:8c:6a:d5:a4:8b:e3:08:41:74:41: f2:03:b9:79:a6:55:a0:69:79:a0:28:6d:8f:49:73:62:12:4a: e1:e8:d5:2a:2c:3a:d2:02:fc:58:3f:79:e5:40:30:d1:a6:36: 87:dc:a7:98:a8:b9:d8:09:1a:7f:68:e7:6b:34:92:54:dc:21: 72:c9:0e:39:66:a4:bf:a2:2c:cd:15:51:f2:11:02:c8:9d:e9: 3a:d3:94:d8:ae:84:e5:a1:dd:50:f2:ac:6e:2e:21:4e:14:8e: d3:d5:07:0e:06:fd:ee:d2:8d:a9:6b:5f:ff:1c:39:58:28:77: 31:b3:ba:ce:1f:b0:87:fd:b7:12:69:6a:53:36:ef:d5:31:52: 6c:83:07:a5:e7:7c:2e:eb:9e:a9:2f:60:17:1d:90:71:b3:fd: df:d1:e7:b8:a9:d4:4a:ab:10:ca:ae:e0:d5:a2:f3:5f:35:db: 39:89:37:64 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJTPKc5xMR+NhQGAowVwkJqPlb7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTAyMzAwMDI1MVoX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAMTcwZjUzZmJlNDFjM2FhMzA2Mjk1 YTVmNDI2OWJjZTgyY2JjNTFjMzM0ZGQ4MDI2ODM3YjQwZTdhOTYzODUyYTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizNEyjteMpTD6UxpjNlu8H/wlVH+ JEDNJgunT8JXhUSa9semEI+d3tfB3wIQde4AQMlgiK0MOrOKeSRlVaMPIjiCuaEJ Jc74rAAScPwnj0lQ8oCam/rLB7NxDXb+1YxgxCkYFTAFu2zr/bjQiZRjeG1KtrFm 9CzO+tFnBCB6GcR4k+YL2fQvFkEUB4Mgv9p5SQbBQqPLQ2Fdy/TtNrKep8jRXIkb 2z7VInSlOndXSNbCsdx35aBI4z5rTc7gSgDKqo1lEwuFmDJY02H/05omhe967VT7 noqOjFGFIrApoiqiPBELPbqKpmMgACt7G3JvIi5+2jYvQnHY/Wfq+zVT5wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCbIqzc0SlzTKOPl4rjAFCvowApMMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 L2MxNTY0NjU5LWYzYWEtNDAyMS1hN2E1LThmNGIxYzJjNDk2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJABnAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQA/LSDQSr0Jwkz8gB6V aFhlF8U+9iWBQZHBuI6dcrTOvWyphV7o8Gbf5n0qJH5XJu5Vr+LTjuRYmu4GsuKo ZI5ZTPetfPJ+CvAleETSBRS23Ixq1aSL4whBdEHyA7l5plWgaXmgKG2PSXNiEkrh 6NUqLDrSAvxYP3nlQDDRpjaH3KeYqLnYCRp/aOdrNJJU3CFyyQ45ZqS/oizNFVHy EQLInek605TYroTlod1Q8qxuLiFOFI7T1QcOBv3u0o2pa1//HDlYKHcxs7rOH7CH /bcSaWpTNu/VMVJsgwel53wu656pL2AXHZBxs/3f0ee4qdRKqxDKruDVovNfNds5 iTdk -----END CERTIFICATE-----Generated at Sat Oct 24 12:19:18 2026 by rpki-client