$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0bdcc7b0-021b-40da-9332-82434be37f74.roa File: 0bdcc7b0-021b-40da-9332-82434be37f74.roa (raw, json) Hash identifier: d5ha+vh2gqqSfjQO0Jrsc8n33aSoiNKArXJNGtgcBKs= Subject key identifier: 23:15:76:E3:99:5B:15:5C:9C:C5:91:58:51:1C:E7:78:14:21:E7:15 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 135E90583F227DD6D52F203B827F0F141401FE6F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0bdcc7b0-021b-40da-9332-82434be37f74.roa Signing time: Thu 30 Jul 2026 00:10:10 +0000 ROA not before: Thu 30 Jul 2026 00:10:10 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5e:90:58:3f:22:7d:d6:d5:2f:20:3b:82:7f:0f:14:14:01:fe:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:10:10 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=44e8cc9f5bbf2894f6bdb8b388602416ed5554b33ae275ae18d61a31e421f48d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:e5:24:5e:2f:d5:5e:dd:b1:7d:1b:a2:d7: ba:fc:6d:91:18:97:7c:eb:67:ab:d5:7c:7b:50:27: c8:ee:6f:7d:43:6a:e4:df:15:59:fd:9d:47:7b:14: 31:50:68:41:4f:3e:48:15:8d:46:41:77:d0:30:ed: 65:3d:51:ca:03:37:5e:3b:88:fe:b7:2b:d3:76:89: f8:e3:57:90:6f:63:57:00:09:ac:66:52:ba:a9:cf: 54:b8:32:a1:e0:27:6b:cf:e6:e0:78:62:b4:4d:a3: 13:1a:1a:6a:f8:39:7c:27:3c:99:c1:da:b9:92:d7: 8d:56:10:a7:94:5d:95:aa:09:6b:7b:f5:db:32:50: 2c:04:6c:0d:8f:6f:cd:f7:d1:c9:d8:74:5d:24:6e: c0:4c:69:44:2d:1e:fd:a7:d9:c3:08:2b:07:ca:c9: 92:5f:1b:64:84:ac:67:d2:c9:86:31:8a:87:1b:2f: 90:0b:0d:e5:5a:ef:d4:fe:6a:cc:a4:4f:3b:f7:77: 5a:c0:5a:69:bc:01:d0:7a:82:4a:b7:f4:60:f4:51: 19:9b:bd:73:4f:45:8d:c4:17:39:70:43:d2:5e:c2: 8c:1b:2a:3d:ca:30:95:f6:2b:89:7a:4e:4d:be:d1: 89:09:be:90:1a:65:26:f5:9f:44:2f:7d:9d:7b:b2: 56:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:15:76:E3:99:5B:15:5C:9C:C5:91:58:51:1C:E7:78:14:21:E7:15 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0bdcc7b0-021b-40da-9332-82434be37f74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:4040::/48 Signature Algorithm: sha256WithRSAEncryption 98:e7:d9:07:55:97:09:5d:47:25:ab:ca:ab:e4:4a:55:d2:15: 8e:23:b6:be:8a:77:d2:50:47:b9:ca:42:52:d4:df:7c:f2:4a: 83:22:ff:74:06:48:cc:f6:5a:59:a6:02:e3:1d:47:c9:16:2b: 81:78:4e:84:8a:36:4c:9a:e7:95:6a:a4:11:2e:5d:23:8e:e5: 02:0b:95:74:a7:ac:f1:47:ce:9a:a7:92:af:26:13:61:b8:ec: a1:24:74:35:3d:ed:49:e4:99:05:1d:69:9a:ad:51:bf:90:2c: ca:05:5a:95:9e:63:f2:20:6d:09:45:5b:54:85:ef:2c:b3:eb: 79:10:11:4e:10:95:41:f4:bc:24:1e:8f:e4:04:a6:30:79:99: 23:22:27:2d:bf:66:b6:20:6e:f6:30:99:74:da:55:85:01:bc: a0:b1:b2:f9:35:57:44:47:e2:09:45:e3:f5:9a:b6:78:95:5b: b9:3e:1b:68:d4:df:44:36:98:93:4f:4c:da:fa:47:40:37:e3: f2:ec:a2:d4:04:54:87:4b:fc:89:cd:5c:57:68:2d:43:c4:38: 51:dc:3f:32:da:03:f5:9e:38:69:dd:f5:2c:66:3f:8f:84:40: 91:86:e4:46:03:db:ce:01:cf:1d:88:bd:49:87:ba:1e:a8:28: 9f:10:f3:0f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUE16QWD8ifdbVLyA7gn8PFBQB/m8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMTAxMFoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNANDRlOGNjOWY1YmJmMjg5NGY2YmRi OGIzODg2MDI0MTZlZDU1NTRiMzNhZTI3NWFlMThkNjFhMzFlNDIxZjQ4ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4XlJF4v1V7dsX0bote6/G2RGJd8 62er1Xx7UCfI7m99Q2rk3xVZ/Z1HexQxUGhBTz5IFY1GQXfQMO1lPVHKAzdeO4j+ tyvTdon441eQb2NXAAmsZlK6qc9UuDKh4Cdrz+bgeGK0TaMTGhpq+Dl8JzyZwdq5 kteNVhCnlF2Vqglre/XbMlAsBGwNj2/N99HJ2HRdJG7ATGlELR79p9nDCCsHysmS XxtkhKxn0smGMYqHGy+QCw3lWu/U/mrMpE8793dawFppvAHQeoJKt/Rg9FEZm71z T0WNxBc5cEPSXsKMGyo9yjCV9iuJek5NvtGJCb6QGmUm9Z9EL32de7JWTQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCMVduOZWxVcnMWRWFEc53gUIecVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBiZGNjN2IwLTAyMWItNDBkYS05MzMyLTgyNDM0YmUzN2Y3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAEBAMA0GCSqGSIb3DQEBCwUAA4IBAQCY59kHVZcJXUclq8qr 5EpV0hWOI7a+infSUEe5ykJS1N988kqDIv90BkjM9lpZpgLjHUfJFiuBeE6EijZM mueVaqQRLl0jjuUCC5V0p6zxR86ap5KvJhNhuOyhJHQ1Pe1J5JkFHWmarVG/kCzK BVqVnmPyIG0JRVtUhe8ss+t5EBFOEJVB9LwkHo/kBKYweZkjIictv2a2IG72MJl0 2lWFAbygsbL5NVdER+IJReP1mrZ4lVu5Phto1N9ENpiTT0za+kdAN+Py7KLUBFSH S/yJzVxXaC1DxDhR3D8y2gP1njhp3fUsZj+PhECRhuRGA9vOAc8diL1Jh7oeqCif EPMP -----END CERTIFICATE-----Generated at Wed Aug 26 08:01:50 2026 by rpki-client