$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/05bbbc0b-36fc-4ef2-bea1-e2c46167fbb2.roa File: 05bbbc0b-36fc-4ef2-bea1-e2c46167fbb2.roa (raw, json) Hash identifier: QuUQ0SKhPtZuB+42VXIvek6CqoQxaTxwmLFaMulQ2Qs= Subject key identifier: B5:01:3B:6A:05:5F:FD:DD:18:B7:D5:5D:4B:5B:8B:3B:F5:03:14:55 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7740B4CE84C4ED98D6EF85A16ADBFD4C704D984C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/05bbbc0b-36fc-4ef2-bea1-e2c46167fbb2.roa Signing time: Wed 19 Aug 2026 00:20:17 +0000 ROA not before: Wed 19 Aug 2026 00:20:17 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:40:b4:ce:84:c4:ed:98:d6:ef:85:a1:6a:db:fd:4c:70:4d:98:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:20:17 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=4eec0a83c979214f3a072ade6ac735eeec3054f23cd10aecff5819652fd0374e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d2:85:2f:eb:a7:75:8f:5e:83:45:08:f9:62: 7d:a3:8f:d6:0e:5a:7f:e6:63:dd:b2:fd:84:b5:74: 04:8b:eb:51:8d:c1:a1:e2:89:a7:53:f6:eb:7a:45: aa:92:d0:ab:65:ac:73:45:de:e7:de:dc:30:08:ae: 17:d9:a6:03:c8:6e:21:7c:ec:ee:24:d2:b6:90:ef: 07:07:54:e9:a2:78:51:a1:3e:c2:0c:b6:8c:24:c2: 60:a8:16:9a:d6:1f:f0:1c:34:16:f3:68:f9:53:e0: a5:18:f8:38:63:3b:7d:f7:c9:a7:9c:dc:fc:bf:d0: 77:51:a2:a4:87:39:aa:c3:2a:50:b5:07:9f:64:a4: 1f:df:c8:cd:d9:21:64:b1:14:71:10:f3:51:ca:c6: dc:87:73:6f:2e:62:cd:57:46:c8:0d:c8:d0:8e:10: e6:ac:d9:75:ae:92:18:6d:bc:b9:77:e9:6e:7b:88: f4:9a:0c:ab:fc:64:a7:ae:4e:7f:a5:fb:53:7b:b1: d0:fe:23:d5:ee:f8:45:b2:ab:ca:26:6d:09:a3:7e: 7b:1b:68:2a:91:44:80:02:53:ac:0f:55:ff:f9:66: 04:2f:da:4f:4e:c0:4b:90:9b:23:e2:c0:54:8c:1c: bf:b9:d1:e9:c7:87:46:79:a7:63:58:7e:e8:08:61: 97:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:01:3B:6A:05:5F:FD:DD:18:B7:D5:5D:4B:5B:8B:3B:F5:03:14:55 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/05bbbc0b-36fc-4ef2-bea1-e2c46167fbb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:2080::/48 Signature Algorithm: sha256WithRSAEncryption 63:37:4e:55:e7:c3:68:65:17:49:28:56:44:3c:c2:7f:9f:51: 24:3b:65:31:34:d5:41:be:a7:d6:86:b2:b9:19:62:3f:dd:59: 24:d4:9f:9d:93:e3:8c:94:87:d8:3c:03:ac:5b:0a:52:32:14: 99:4e:dc:35:79:f8:fe:72:87:c5:80:83:c9:7b:c0:4a:87:44: c2:c8:cb:0d:44:d2:f7:50:b8:5f:4c:c5:5c:05:ab:03:2a:1d: d5:54:86:54:2c:8c:f0:82:2b:cb:c7:a0:a5:e8:25:49:ec:a2: a0:d2:1b:5e:12:09:82:51:39:22:4a:37:95:c8:d5:72:7e:ba: a7:27:4c:3d:e1:9a:74:33:2b:71:0f:d1:2b:ea:2d:c5:8f:b8: f4:7d:e5:e8:b9:78:cf:90:1c:fa:eb:6d:0e:3d:89:4d:04:ff: 0b:2e:3b:7e:b4:4c:69:0b:dd:1b:c8:71:95:79:7f:1c:de:41: bb:b0:20:b5:b0:e6:9c:eb:81:90:e0:15:54:8a:2a:88:d1:b1: 92:e3:28:b0:1c:ab:de:ea:72:aa:3b:42:b9:b4:38:f8:bc:f7: 49:75:21:72:f5:50:0c:4c:33:5e:fd:f2:d4:bc:b7:c9:9f:c3: 0d:25:01:54:df:ab:34:3b:97:e9:47:38:8e:53:22:20:fa:cc: 8e:29:71:8b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUd0C0zoTE7ZjW74Whatv9THBNmEwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMjAxN1oX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNANGVlYzBhODNjOTc5MjE0ZjNhMDcy YWRlNmFjNzM1ZWVlYzMwNTRmMjNjZDEwYWVjZmY1ODE5NjUyZmQwMzc0ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdKFL+undY9eg0UI+WJ9o4/WDlp/ 5mPdsv2EtXQEi+tRjcGh4omnU/brekWqktCrZaxzRd7n3twwCK4X2aYDyG4hfOzu JNK2kO8HB1TponhRoT7CDLaMJMJgqBaa1h/wHDQW82j5U+ClGPg4Yzt998mnnNz8 v9B3UaKkhzmqwypQtQefZKQf38jN2SFksRRxEPNRysbch3NvLmLNV0bIDcjQjhDm rNl1rpIYbby5d+lue4j0mgyr/GSnrk5/pftTe7HQ/iPV7vhFsqvKJm0Jo357G2gq kUSAAlOsD1X/+WYEL9pPTsBLkJsj4sBUjBy/udHpx4dGeadjWH7oCGGXIQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLUBO2oFX/3dGLfVXUtbizv1AxRVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA1YmJiYzBiLTM2ZmMtNGVmMi1iZWExLWUyYzQ2MTY3ZmJiMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauiCAMA0GCSqGSIb3DQEBCwUAA4IBAQBjN05V58NoZRdJKFZE PMJ/n1EkO2UxNNVBvqfWhrK5GWI/3Vkk1J+dk+OMlIfYPAOsWwpSMhSZTtw1efj+ cofFgIPJe8BKh0TCyMsNRNL3ULhfTMVcBasDKh3VVIZULIzwgivLx6Cl6CVJ7KKg 0hteEgmCUTkiSjeVyNVyfrqnJ0w94Zp0MytxD9Er6i3Fj7j0feXouXjPkBz6620O PYlNBP8LLjt+tExpC90byHGVeX8c3kG7sCC1sOac64GQ4BVUiiqI0bGS4yiwHKve 6nKqO0K5tDj4vPdJdSFy9VAMTDNe/fLUvLfJn8MNJQFU36s0O5fpRziOUyIg+syO KXGL -----END CERTIFICATE-----Generated at Wed Aug 26 17:40:34 2026 by rpki-client