$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/060d5ddf-5387-4099-9b2f-7fc4885d6365.roa File: 060d5ddf-5387-4099-9b2f-7fc4885d6365.roa (raw, json) Hash identifier: IlldyElhjR8RczUpkgGxl5ioNFmENtFYBkJnOczSvX0= Subject key identifier: E9:E7:2D:62:95:7B:BA:E7:B9:EC:E0:A1:E1:34:2F:6F:B9:1E:39:A2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1553FEDFFCD9B2948E2A866EC36624FAE162F7B1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/060d5ddf-5387-4099-9b2f-7fc4885d6365.roa Signing time: Mon 10 Aug 2026 00:00:49 +0000 ROA not before: Mon 10 Aug 2026 00:00:49 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:2880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:53:fe:df:fc:d9:b2:94:8e:2a:86:6e:c3:66:24:fa:e1:62:f7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:00:49 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=a56c948598b0614925534e786144c21aec1e4218bbaed89343de22c97997b4e6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:52:87:75:fc:b4:03:1f:5f:ad:41:b6:be: f3:29:ae:55:33:78:47:27:d0:0c:4d:a8:bc:03:71: 8d:51:c9:c5:8f:36:0c:14:d4:f7:e8:ed:3f:d3:64: 92:51:86:d5:a0:5c:10:23:ce:00:0d:d3:73:44:17: e5:ad:8f:65:5e:0f:9f:fa:2b:e6:24:9e:46:7f:e7: 3d:da:af:a4:ef:11:14:95:0e:ad:40:f7:e5:63:c2: 17:6d:98:e3:75:98:d7:21:2f:cc:14:79:b8:98:95: c6:83:05:27:fa:1e:cf:12:b0:e0:26:c9:20:73:05: 6e:74:a4:ca:44:ab:cc:de:80:01:2d:bd:0a:93:89: ad:c4:60:9a:28:cb:57:25:df:b2:56:b3:58:82:d1: e3:b5:62:0b:fc:6a:74:3f:d5:7a:87:43:af:66:ba: 84:fe:b6:9e:8f:5e:8c:f0:ef:76:f8:a6:e2:a6:f4: 64:bf:e7:68:cd:cc:c9:8c:73:b3:ee:05:ad:e3:87: 7e:b0:72:b1:2c:62:5c:5d:80:70:09:18:ba:a3:f0: 25:9a:a3:3b:62:e8:c1:80:28:e4:cf:fd:4c:0e:a1: 05:83:91:48:2f:24:a9:28:c6:df:43:9c:d9:b4:6c: f4:33:4d:e0:e6:2a:b9:4d:87:5c:45:67:fe:18:62: d4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E7:2D:62:95:7B:BA:E7:B9:EC:E0:A1:E1:34:2F:6F:B9:1E:39:A2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/060d5ddf-5387-4099-9b2f-7fc4885d6365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:2880::/48 Signature Algorithm: sha256WithRSAEncryption c0:15:eb:96:87:1b:5c:63:fd:33:ed:a4:25:53:f9:0c:1a:5f: b3:a8:e1:3e:88:de:01:53:7a:c4:7a:cd:9c:88:fc:9b:e1:0d: 11:23:25:7e:7c:ac:8e:e9:f7:b2:bd:a6:40:6d:35:f2:40:1e: d3:6d:33:6f:7c:a6:7d:c7:e0:ba:1a:5e:fd:b9:e7:0b:f0:52: 9a:89:23:77:69:6c:b2:0f:15:bd:72:37:ce:f3:b8:60:b7:f3: 42:c4:bd:7a:11:cd:f9:6a:97:cf:9c:1f:97:7a:97:29:e7:0b: 83:a0:03:63:66:15:e7:4a:8f:0f:ff:3e:83:00:34:7e:ac:49: 58:e7:44:76:cd:dd:ce:eb:8b:fc:ed:02:39:20:39:53:73:33: 31:25:d0:7c:c5:28:51:bf:bf:26:60:f2:ca:bd:33:0e:e2:33: c3:59:b9:a6:c2:03:b5:13:7d:99:96:67:5d:16:d4:e7:e1:f4: 29:16:d4:06:7e:bf:a7:e4:ca:0a:19:cc:d4:b7:35:ad:24:e4: 5f:6a:59:04:6a:da:bc:7c:d4:5d:77:b0:51:8e:08:e2:80:03: 0f:21:c0:b0:ac:eb:4b:9a:85:d8:dc:2c:f3:82:28:5c:7c:3d: 8d:de:6f:dd:f7:10:61:04:15:da:86:1c:b8:ec:f0:dc:b8:ba: 77:f9:0c:3f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFVP+3/zZspSOKoZuw2Yk+uFi97EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMDA0OVoX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAYTU2Yzk0ODU5OGIwNjE0OTI1NTM0 ZTc4NjE0NGMyMWFlYzFlNDIxOGJiYWVkODkzNDNkZTIyYzk3OTk3YjRlNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth5Sh3X8tAMfX61Btr7zKa5VM3hH J9AMTai8A3GNUcnFjzYMFNT36O0/02SSUYbVoFwQI84ADdNzRBflrY9lXg+f+ivm JJ5Gf+c92q+k7xEUlQ6tQPflY8IXbZjjdZjXIS/MFHm4mJXGgwUn+h7PErDgJskg cwVudKTKRKvM3oABLb0Kk4mtxGCaKMtXJd+yVrNYgtHjtWIL/Gp0P9V6h0OvZrqE /raej16M8O92+KbipvRkv+dozczJjHOz7gWt44d+sHKxLGJcXYBwCRi6o/AlmqM7 YujBgCjkz/1MDqEFg5FILySpKMbfQ5zZtGz0M03g5iq5TYdcRWf+GGLUzQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOnnLWKVe7rnuezgoeE0L2+5HjmiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA2MGQ1ZGRmLTUzODctNDA5OS05YjJmLTdmYzQ4ODVkNjM2NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6CiAMA0GCSqGSIb3DQEBCwUAA4IBAQDAFeuWhxtcY/0z7aQl U/kMGl+zqOE+iN4BU3rEes2ciPyb4Q0RIyV+fKyO6feyvaZAbTXyQB7TbTNvfKZ9 x+C6Gl79uecL8FKaiSN3aWyyDxW9cjfO87hgt/NCxL16Ec35apfPnB+Xepcp5wuD oANjZhXnSo8P/z6DADR+rElY50R2zd3O64v87QI5IDlTczMxJdB8xShRv78mYPLK vTMO4jPDWbmmwgO1E32ZlmddFtTn4fQpFtQGfr+n5MoKGczUtzWtJORfalkEatq8 fNRdd7BRjgjigAMPIcCwrOtLmoXY3CzzgihcfD2N3m/d9xBhBBXahhy47PDcuLp3 +Qw/ -----END CERTIFICATE-----Generated at Wed Aug 26 08:04:44 2026 by rpki-client