$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03ad2b77-3143-43df-9d1e-acbaa4d2d2e8.roa File: 03ad2b77-3143-43df-9d1e-acbaa4d2d2e8.roa (raw, json) Hash identifier: tu8rQwsJrfWjKCd8CCnrQqhRINmBztInfrd2EOZzeOo= Subject key identifier: 4F:62:5C:30:2B:45:27:78:21:A2:BD:B5:83:EF:B8:2A:04:DE:D0:97 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1F93D8E88B0AC4770AAF800D18858AA041288901 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03ad2b77-3143-43df-9d1e-acbaa4d2d2e8.roa Signing time: Sat 08 Aug 2026 00:00:05 +0000 ROA not before: Sat 08 Aug 2026 00:00:05 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:8800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:93:d8:e8:8b:0a:c4:77:0a:af:80:0d:18:85:8a:a0:41:28:89:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 8 00:00:05 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=dd01d66768069a05b359e16c5e1fbb37591b18ee73a2851ec614f9e37c9c7a99, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:25:48:e3:91:f0:c2:46:15:24:85:2d:94:63: bf:b1:5d:b6:b9:de:8e:2a:ea:50:71:b4:64:25:e8: 03:7c:4e:b9:8b:21:cb:2c:f6:37:bd:82:46:73:97: fc:bf:cb:df:a6:5a:55:9d:69:96:cd:3c:9c:89:3c: 7b:37:a1:b8:92:ee:ca:03:79:62:91:67:5a:5c:c7: b4:46:74:30:30:71:58:c7:ea:5b:e2:6d:38:3a:7b: f4:b2:ae:d9:61:b1:d7:47:1c:fb:32:71:f3:1f:4c: bc:df:8c:f8:dc:ba:22:75:d0:42:0c:44:d8:d9:72: 30:33:d0:1d:ac:d9:93:21:34:ea:2f:6e:8c:e8:b1: 6a:87:f5:c8:cc:1d:f8:95:cd:ce:7b:23:28:2a:11: 8f:b3:4c:3b:00:fa:2e:8b:55:49:ff:3a:50:ee:a1: ce:ca:ce:2b:33:06:7b:3f:e5:97:f7:98:63:d7:62: aa:2e:7a:cf:d2:d5:ed:a3:a8:00:e2:58:3b:dd:67: 0e:62:75:06:77:25:af:b4:e0:6b:7a:77:38:bc:a9: c9:1c:8e:9e:66:be:81:db:90:40:b8:32:39:41:d5: b1:87:37:4e:95:c2:b7:fc:86:2c:4b:15:c0:d7:0f: 01:5b:26:ae:aa:c3:86:d4:3e:c7:0a:56:14:7c:3d: 53:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:62:5C:30:2B:45:27:78:21:A2:BD:B5:83:EF:B8:2A:04:DE:D0:97 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03ad2b77-3143-43df-9d1e-acbaa4d2d2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:8800::/48 Signature Algorithm: sha256WithRSAEncryption 83:03:80:f2:d3:4b:30:85:f2:9a:99:b3:97:e6:3a:b9:7c:c0: 97:14:3d:bb:b2:0d:dc:f6:01:3f:20:d8:b0:20:98:3b:52:96: bc:0b:ca:a7:2a:47:a2:64:bd:70:5c:7f:1b:3d:b8:17:20:da: 5b:9f:df:b2:73:e6:3d:b8:d6:e1:96:36:c6:0f:12:82:92:a8: bb:f0:48:b2:28:f9:df:4b:d1:5b:b8:c1:76:c1:f0:b7:53:84: 5a:8a:f8:28:17:68:f8:88:bc:8d:dd:d5:f7:ee:7d:01:78:91: 1e:15:67:0e:44:cb:f2:5e:6f:78:da:fd:89:d6:65:7d:21:db: a3:75:04:86:78:94:f8:1d:cb:63:cb:5f:36:f8:11:a7:48:63: 10:28:c4:66:d5:6d:4f:11:aa:df:08:fa:69:25:fa:d3:61:fe: 38:d1:e3:36:dd:ea:5b:e1:b1:28:fc:64:01:a1:51:38:49:2d: bb:e3:2c:0d:71:3e:fc:40:b2:8d:26:62:06:78:8b:4c:c4:7d: 54:66:41:6d:ba:9f:26:73:10:76:1c:4a:af:22:41:7a:f5:09: 39:a8:4f:02:18:cd:5e:1e:14:fe:09:99:a6:d5:96:d7:f5:fd: 0b:69:b0:10:81:79:5a:69:24:76:3b:11:30:a7:56:c7:f5:06: 91:21:6e:31 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUH5PY6IsKxHcKr4ANGIWKoEEoiQEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwODAwMDAwNVoX DTI2MTEwNjIzNTk1OVowejFJMEcGA1UEBRNAZGQwMWQ2Njc2ODA2OWEwNWIzNTll MTZjNWUxZmJiMzc1OTFiMThlZTczYTI4NTFlYzYxNGY5ZTM3YzljN2E5OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SVI45HwwkYVJIUtlGO/sV22ud6O KupQcbRkJegDfE65iyHLLPY3vYJGc5f8v8vfplpVnWmWzTyciTx7N6G4ku7KA3li kWdaXMe0RnQwMHFYx+pb4m04Onv0sq7ZYbHXRxz7MnHzH0y834z43LoiddBCDETY 2XIwM9AdrNmTITTqL26M6LFqh/XIzB34lc3OeyMoKhGPs0w7APoui1VJ/zpQ7qHO ys4rMwZ7P+WX95hj12KqLnrP0tXto6gA4lg73WcOYnUGdyWvtOBrenc4vKnJHI6e Zr6B25BAuDI5QdWxhzdOlcK3/IYsSxXA1w8BWyauqsOG1D7HClYUfD1TNwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE9iXDArRSd4IaK9tYPvuCoE3tCXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzYWQyYjc3LTMxNDMtNDNkZi05ZDFlLWFjYmFhNGQyZDJlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7IgAMA0GCSqGSIb3DQEBCwUAA4IBAQCDA4Dy00swhfKambOX 5jq5fMCXFD27sg3c9gE/INiwIJg7Upa8C8qnKkeiZL1wXH8bPbgXINpbn9+yc+Y9 uNbhljbGDxKCkqi78EiyKPnfS9FbuMF2wfC3U4RaivgoF2j4iLyN3dX37n0BeJEe FWcORMvyXm942v2J1mV9IdujdQSGeJT4Hctjy182+BGnSGMQKMRm1W1PEarfCPpp JfrTYf440eM23epb4bEo/GQBoVE4SS274ywNcT78QLKNJmIGeItMxH1UZkFtup8m cxB2HEqvIkF69Qk5qE8CGM1eHhT+CZmm1ZbX9f0LabAQgXlaaSR2OxEwp1bH9QaR IW4x -----END CERTIFICATE-----Generated at Wed Aug 26 17:34:36 2026 by rpki-client