$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa File: 070bdab9-7162-422b-9f8a-f8d4ae428be1.roa (raw, json) Hash identifier: I1bTItJhVWC1mj/LnuJlYQVNQLmJxj9BwiaZ1DUS4v8= Subject key identifier: 8B:E1:97:43:91:07:5E:28:78:8D:0E:E0:EF:27:7D:BA:EB:35:46:DE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 34CC1882C0D3D7E775E15F180F74529D8E3082CF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa Signing time: Fri 07 Aug 2026 00:01:05 +0000 ROA not before: Fri 07 Aug 2026 00:01:05 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2a:8000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:cc:18:82:c0:d3:d7:e7:75:e1:5f:18:0f:74:52:9d:8e:30:82:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 7 00:01:05 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=9e8f55750b3c35a0b0fa314add1b6fb3f75b72b6b947fbaeac23f136f11e3bdb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:31:c9:14:2f:96:78:5e:47:1f:f8:75:f7:90: 16:f3:0a:f8:9e:d5:82:ba:52:21:f8:e0:9b:d1:6a: 2f:f8:6d:22:95:a1:d0:63:30:30:5c:6e:3f:f1:ee: 61:03:a7:50:9b:54:bc:cd:64:42:41:ad:4a:24:f5: 16:ed:87:f9:d2:28:de:0e:ee:a5:23:4d:ca:93:48: bf:f7:75:16:74:b2:07:b1:04:d0:4d:68:15:bf:4a: 34:fa:f2:ef:d4:60:eb:85:d0:4c:04:c5:68:ff:bd: 5c:bc:83:06:7a:e5:6a:04:12:53:d7:b7:2d:bb:1d: 00:e2:8d:00:8d:ac:53:bd:58:3c:69:1d:dc:77:67: 12:52:f6:2b:ba:6d:73:53:60:d2:6f:51:8e:4b:90: 7b:9e:e2:a1:6c:9b:ee:9f:8b:78:95:f1:bd:4b:94: 6b:b2:dc:72:dd:c2:94:ab:ed:89:13:b8:80:fb:cf: 3c:84:15:32:98:dc:e9:d5:1d:7b:3e:95:fb:df:be: 77:cd:1b:13:83:72:58:37:65:91:64:39:4f:5d:96: 15:a2:ea:df:3e:0f:7a:39:59:03:eb:16:8f:78:11: 0c:1c:34:be:c4:03:01:94:de:42:9c:82:c1:c0:53: 2f:a2:d8:29:d1:fd:41:96:73:7a:41:b5:6e:82:ed: 79:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E1:97:43:91:07:5E:28:78:8D:0E:E0:EF:27:7D:BA:EB:35:46:DE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2a:8000::/37 Signature Algorithm: sha256WithRSAEncryption c6:76:54:cb:73:89:b9:0d:74:6d:5a:cd:97:61:56:99:a9:28: d3:ed:c6:bf:79:4a:5d:60:a0:96:0f:8a:5e:27:c7:9e:e7:88: 0e:f1:f8:2b:fa:cd:9d:0d:29:bf:09:ab:af:92:e0:47:b7:5f: 0b:de:70:a9:9c:cb:17:64:7e:b1:69:aa:30:e9:ba:48:71:ae: d7:ae:6e:f2:00:07:ac:07:14:6e:48:e1:e4:83:14:b9:bb:eb: fe:ff:8f:dd:26:82:1c:8c:dc:d8:e1:42:14:75:d5:25:46:ee: 5f:7f:ee:dc:cf:96:00:c3:ca:f3:a5:92:0f:82:29:16:13:4a: 85:ae:37:b1:74:f2:74:e7:a5:37:fe:89:c4:c6:62:03:d8:20: b7:82:39:ff:ba:5c:82:a6:24:62:96:4b:1d:20:e9:3a:df:fa: 3e:20:c1:de:7a:a4:f5:41:d3:0d:c6:6f:8f:7f:f1:e5:d3:3a: b7:fc:9d:62:0d:a3:e9:e9:ac:b1:2c:7d:73:80:07:ed:32:5a: 75:c5:44:7b:9d:d7:a5:02:f0:7d:ca:d7:71:1e:f9:22:a7:09: 2d:2e:e4:b6:ed:cb:51:2b:2c:eb:36:0a:d5:49:02:1d:13:8f: b2:39:62:46:19:a2:80:b0:03:f1:6d:9f:32:ad:86:e9:15:c2: 42:b6:85:96 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNMwYgsDT1+d14V8YD3RSnY4wgs8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwNzAwMDEwNVoX DTI2MTEwNTIzNTk1OVowejFJMEcGA1UEBRNAOWU4ZjU1NzUwYjNjMzVhMGIwZmEz MTRhZGQxYjZmYjNmNzViNzJiNmI5NDdmYmFlYWMyM2YxMzZmMTFlM2JkYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljHJFC+WeF5HH/h195AW8wr4ntWC ulIh+OCb0Wov+G0ilaHQYzAwXG4/8e5hA6dQm1S8zWRCQa1KJPUW7Yf50ijeDu6l I03Kk0i/93UWdLIHsQTQTWgVv0o0+vLv1GDrhdBMBMVo/71cvIMGeuVqBBJT17ct ux0A4o0AjaxTvVg8aR3cd2cSUvYrum1zU2DSb1GOS5B7nuKhbJvun4t4lfG9S5Rr stxy3cKUq+2JE7iA+888hBUymNzp1R17PpX73753zRsTg3JYN2WRZDlPXZYVourf Pg96OVkD6xaPeBEMHDS+xAMBlN5CnILBwFMvotgp0f1BlnN6QbVugu159QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIvhl0ORB14oeI0O4O8nfbrrNUbeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3MGJkYWI5LTcxNjItNDIyYi05ZjhhLWY4ZDRhZTQyOGJlMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYDJAbaKoAwDQYJKoZIhvcNAQELBQADggEBAMZ2VMtzibkNdG1azZdh VpmpKNPtxr95Sl1goJYPil4nx57niA7x+Cv6zZ0NKb8Jq6+S4Ee3XwvecKmcyxdk frFpqjDpukhxrteubvIAB6wHFG5I4eSDFLm76/7/j90mghyM3NjhQhR11SVG7l9/ 7tzPlgDDyvOlkg+CKRYTSoWuN7F08nTnpTf+icTGYgPYILeCOf+6XIKmJGKWSx0g 6Trf+j4gwd56pPVB0w3Gb49/8eXTOrf8nWINo+nprLEsfXOAB+0yWnXFRHud16UC 8H3K13Ee+SKnCS0u5Lbty1ErLOs2CtVJAh0Tj7I5YkYZooCwA/FtnzKthukVwkK2 hZY= -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:01 2026 by rpki-client