$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02a51e54-6bb5-43e7-94d0-a8e95771f2a3.roa File: 02a51e54-6bb5-43e7-94d0-a8e95771f2a3.roa (raw, json) Hash identifier: QkZRKes04jMa3yHCgVHGEPnJArI/ENg5hIK1SjiDLAM= Subject key identifier: FA:34:E8:2D:73:86:7A:C0:AF:6E:C1:8D:D7:18:2C:91:DE:9F:BD:02 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3EEA6B9C82021E43ACBE426BF2458AE0DEF07B70 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02a51e54-6bb5-43e7-94d0-a8e95771f2a3.roa Signing time: Sat 01 Aug 2026 00:10:07 +0000 ROA not before: Sat 01 Aug 2026 00:10:07 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 00:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ea:6b:9c:82:02:1e:43:ac:be:42:6b:f2:45:8a:e0:de:f0:7b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:10:07 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=840a049be5526d3591b74d9a890db68b0026ffb398b14b67c56436f340733c82, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:72:24:26:50:ed:e2:1b:83:a2:27:b0:43: 26:bd:89:da:59:7b:23:59:6d:99:05:6c:1a:07:8e: 9c:9b:c3:a3:38:7a:24:d0:5d:59:1d:56:42:e5:85: f7:1d:9d:23:83:24:ed:81:55:31:de:de:45:b8:8b: 53:95:a4:6e:4d:32:89:6e:62:0a:a4:d7:f2:c8:3d: 63:77:55:e8:1a:42:eb:7c:2f:f4:71:72:84:27:c7: 1b:d4:46:2a:14:6a:45:b2:f8:72:1a:f0:7f:8f:b0: 51:1e:75:69:ff:ff:3b:14:89:8b:fa:f4:69:fe:34: 00:29:12:be:ce:82:01:04:de:b2:5b:01:df:d5:73: af:56:dd:f6:6c:e3:1b:ce:0d:81:a9:2e:b8:3e:b9: b8:1c:01:46:bf:be:49:69:ed:40:62:1a:70:c5:29: 83:c7:87:ad:5d:7c:74:48:6c:ea:75:a9:2d:36:a7: be:9a:2a:71:6b:dc:b5:6a:a1:56:ee:6d:7d:94:bd: c2:aa:d1:21:c2:4d:9c:96:0f:fe:57:ed:3f:70:f0: 65:10:c9:63:3b:0f:cb:f4:56:52:02:d1:4b:2b:e2: 42:23:a4:8d:5a:65:b9:dd:e5:51:f6:19:b2:cc:15: 55:e8:03:ed:cd:97:3b:6c:8c:c9:9a:71:ce:12:f6: 70:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:34:E8:2D:73:86:7A:C0:AF:6E:C1:8D:D7:18:2C:91:DE:9F:BD:02 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02a51e54-6bb5-43e7-94d0-a8e95771f2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:2000::/40 Signature Algorithm: sha256WithRSAEncryption 4e:71:e8:a3:99:bc:6a:9f:06:70:2d:d3:65:56:75:e7:d9:1d: fd:ec:43:14:4c:a2:34:67:c8:95:0b:57:35:55:5a:03:9d:d9: 9c:91:9e:fa:d3:ba:28:82:1f:ee:d7:8a:65:3c:c2:7b:32:60: c2:b1:79:f0:10:3f:32:d8:90:b2:55:05:81:df:6a:69:b0:94: 73:b8:33:4c:6e:bd:af:ad:7e:fd:e4:59:48:34:21:75:a0:36: 42:43:03:c0:5f:b1:fa:62:f6:0b:ef:0c:4e:b0:18:0b:46:3b: 79:99:ee:2e:92:02:6e:87:a1:c6:b4:ef:48:9a:8c:8a:70:2e: 7b:78:ce:be:2e:8c:44:c8:75:3d:30:b7:5f:92:a5:99:7a:bf: be:e5:27:c3:6a:0e:37:63:b4:76:b3:91:1e:4d:4e:f4:e3:1e: 03:5e:6d:a9:5d:1b:54:e1:25:38:1e:e1:99:78:e7:3b:f4:3c: 18:80:10:8a:8c:5f:eb:68:4d:3f:5f:f3:3f:19:4e:75:a7:09: f6:6a:96:27:27:37:73:28:bd:17:ca:ff:56:be:98:b5:17:72: 28:6c:ba:df:b3:d0:86:be:95:a4:c5:ab:7a:28:b1:b4:9a:96: 2c:ab:eb:36:59:44:1b:bc:63:65:39:81:6f:6c:34:19:4b:e6: 89:0b:79:34 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPuprnIICHkOsvkJr8kWK4N7we3AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMTAwN1oX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAODQwYTA0OWJlNTUyNmQzNTkxYjc0 ZDlhODkwZGI2OGIwMDI2ZmZiMzk4YjE0YjY3YzU2NDM2ZjM0MDczM2M4MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviFyJCZQ7eIbg6InsEMmvYnaWXsj WW2ZBWwaB46cm8OjOHok0F1ZHVZC5YX3HZ0jgyTtgVUx3t5FuItTlaRuTTKJbmIK pNfyyD1jd1XoGkLrfC/0cXKEJ8cb1EYqFGpFsvhyGvB/j7BRHnVp//87FImL+vRp /jQAKRK+zoIBBN6yWwHf1XOvVt32bOMbzg2BqS64Prm4HAFGv75Jae1AYhpwxSmD x4etXXx0SGzqdaktNqe+mipxa9y1aqFW7m19lL3CqtEhwk2clg/+V+0/cPBlEMlj Ow/L9FZSAtFLK+JCI6SNWmW53eVR9hmyzBVV6APtzZc7bIzJmnHOEvZwAQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPo06C1zhnrAr27BjdcYLJHen70CMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAyYTUxZTU0LTZiYjUtNDNlNy05NGQwLWE4ZTk1NzcxZjJhMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8SAwDQYJKoZIhvcNAQELBQADggEBAE5x6KOZvGqfBnAt02VW defZHf3sQxRMojRnyJULVzVVWgOd2ZyRnvrTuiiCH+7XimU8wnsyYMKxefAQPzLY kLJVBYHfammwlHO4M0xuva+tfv3kWUg0IXWgNkJDA8Bfsfpi9gvvDE6wGAtGO3mZ 7i6SAm6Hoca070iajIpwLnt4zr4ujETIdT0wt1+SpZl6v77lJ8NqDjdjtHazkR5N TvTjHgNebaldG1ThJTge4Zl45zv0PBiAEIqMX+toTT9f8z8ZTnWnCfZqlicnN3Mo vRfK/1a+mLUXcihsut+z0Ia+laTFq3oosbSaliyr6zZZRBu8Y2U5gW9sNBlL5okL eTQ= -----END CERTIFICATE-----Generated at Fri Aug 28 23:48:26 2026 by rpki-client