$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03cd7736-a6da-4943-bb7c-dc740cfb292c.roa File: 03cd7736-a6da-4943-bb7c-dc740cfb292c.roa (raw, json) Hash identifier: pYd+7zlAw2EjMP7+DPqdWvGhI2wsUM+bkab8vTM2oeo= Subject key identifier: 33:AC:41:B9:67:90:37:D8:60:21:18:46:F7:20:A4:D2:FB:90:63:16 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1F3F73D3757F99110AB72DC73F827C9A88F5D7D7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03cd7736-a6da-4943-bb7c-dc740cfb292c.roa Signing time: Fri 31 Jul 2026 00:00:47 +0000 ROA not before: Fri 31 Jul 2026 00:00:47 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:3f:73:d3:75:7f:99:11:0a:b7:2d:c7:3f:82:7c:9a:88:f5:d7:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:00:47 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=31bcf642461ab76d6be9d2882a34f43651fb732c848d2624a2336a349cf182ae, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d8:b7:d5:eb:f3:4d:c9:22:5e:05:ca:03:68: ca:64:7c:5a:7a:73:8c:dd:d4:03:5c:b1:b8:45:57: 92:ee:58:4a:3d:c4:e0:e6:94:49:82:31:04:c7:29: 4f:87:df:94:23:bb:49:3d:11:6c:a6:93:b6:cf:10: 81:e0:d7:8a:ba:2e:bb:0d:eb:c7:cd:8f:84:1e:48: b5:f9:31:fc:7e:81:81:8c:e6:4e:50:5b:23:a9:51: ec:3f:90:59:f7:b6:de:ca:68:c7:84:d9:8e:91:0d: 4d:1f:aa:b3:83:c1:0d:0c:78:bf:8c:81:09:c3:17: 1d:e7:30:4f:e7:e6:86:ac:c5:89:7b:f2:f0:b0:28: cf:f4:b2:bb:e3:d2:d0:c2:42:b2:3f:d2:a8:57:24: 33:78:52:1f:36:c1:c2:17:77:67:15:52:cb:df:79: 7e:28:a3:26:55:98:8c:5b:8b:ea:20:32:98:b9:04: f5:ad:2e:4c:d4:d3:bb:29:e1:29:84:34:7c:28:7e: 44:c8:dd:6a:b2:41:4d:c0:d5:e2:79:51:6d:16:a1: 82:c9:00:8c:7b:b2:0a:e5:23:4a:7d:fd:f3:bb:5d: f7:3b:96:b4:a9:a5:ec:06:66:fa:2f:58:62:b8:b6: 71:2b:b4:fa:1a:0f:2f:99:0f:30:70:e3:f6:1b:5e: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AC:41:B9:67:90:37:D8:60:21:18:46:F7:20:A4:D2:FB:90:63:16 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03cd7736-a6da-4943-bb7c-dc740cfb292c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:6000::/48 Signature Algorithm: sha256WithRSAEncryption b3:98:2b:bd:7f:c3:0c:69:20:5e:c9:cc:d7:14:03:42:a9:fe: 07:39:75:e0:03:a8:a0:a5:3c:cf:76:2d:34:87:87:90:29:dd: cc:ab:31:b4:6b:5b:bf:f7:bc:cd:21:8f:40:fb:67:46:03:e6: 4f:29:1e:cb:39:70:68:65:51:86:e1:64:05:0f:59:45:33:0e: f5:47:1d:40:63:21:eb:02:c2:1b:95:61:04:f4:15:4d:71:57: a9:ef:92:68:5f:41:34:13:07:15:51:07:52:f6:87:46:2a:41: 1b:53:57:66:be:41:86:14:a9:27:02:b8:74:f7:61:46:0f:0b: cc:9d:21:c0:ba:ac:10:dd:27:99:8b:5c:7d:53:37:52:ab:b6: ef:ba:ee:a6:cb:3f:45:b9:6f:b5:2b:39:ca:48:c1:7a:a8:14: fc:17:e9:b0:38:c7:6a:35:a3:48:33:20:21:2b:26:5e:00:69: f9:29:5a:3a:b8:5b:b0:dd:a4:78:fe:9c:8f:d4:30:1a:63:01: fd:59:6d:ba:ec:44:14:8f:4d:85:3a:b3:88:14:fc:1a:1d:f2: c1:20:be:ee:60:b1:de:74:0c:b0:3a:80:94:2d:04:61:55:dd: 65:b7:8e:b4:94:2b:d4:a1:71:c7:8d:cd:ac:d6:b8:08:18:24: 9a:84:d0:2c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHz9z03V/mREKty3HP4J8moj119cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMDA0N1oX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNAMzFiY2Y2NDI0NjFhYjc2ZDZiZTlk Mjg4MmEzNGY0MzY1MWZiNzMyYzg0OGQyNjI0YTIzMzZhMzQ5Y2YxODJhZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9i31evzTckiXgXKA2jKZHxaenOM 3dQDXLG4RVeS7lhKPcTg5pRJgjEExylPh9+UI7tJPRFsppO2zxCB4NeKui67DevH zY+EHki1+TH8foGBjOZOUFsjqVHsP5BZ97beymjHhNmOkQ1NH6qzg8ENDHi/jIEJ wxcd5zBP5+aGrMWJe/LwsCjP9LK749LQwkKyP9KoVyQzeFIfNsHCF3dnFVLL33l+ KKMmVZiMW4vqIDKYuQT1rS5M1NO7KeEphDR8KH5EyN1qskFNwNXieVFtFqGCyQCM e7IK5SNKff3zu133O5a0qaXsBmb6L1hiuLZxK7T6Gg8vmQ8wcOP2G15cbwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDOsQblnkDfYYCEYRvcgpNL7kGMWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzY2Q3NzM2LWE2ZGEtNDk0My1iYjdjLWRjNzQwY2ZiMjkyYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7GAAMA0GCSqGSIb3DQEBCwUAA4IBAQCzmCu9f8MMaSBeyczX FANCqf4HOXXgA6igpTzPdi00h4eQKd3MqzG0a1u/97zNIY9A+2dGA+ZPKR7LOXBo ZVGG4WQFD1lFMw71Rx1AYyHrAsIblWEE9BVNcVep75JoX0E0EwcVUQdS9odGKkEb U1dmvkGGFKknArh092FGDwvMnSHAuqwQ3SeZi1x9UzdSq7bvuu6myz9FuW+1KznK SMF6qBT8F+mwOMdqNaNIMyAhKyZeAGn5KVo6uFuw3aR4/pyP1DAaYwH9WW267EQU j02FOrOIFPwaHfLBIL7uYLHedAywOoCULQRhVd1lt460lCvUoXHHjc2s1rgIGCSa hNAs -----END CERTIFICATE-----Generated at Wed Aug 26 06:24:44 2026 by rpki-client