$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa File: 0f3544c3-90af-45ac-b6c1-f680a3230f34.roa (raw, json) Hash identifier: JRKng3tlJ1LOmiEdBM4iN6nt/jz6LHjBJVNdk0R3Pgc= Subject key identifier: 29:20:23:6F:34:82:F4:E3:5C:12:AB:03:24:AE:CF:50:2B:21:3F:41 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1C4519462BF3B8EC57DF8F14E34E33B28AF19A01 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa Signing time: Thu 30 Jul 2026 00:01:13 +0000 ROA not before: Thu 30 Jul 2026 00:01:13 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:45:19:46:2b:f3:b8:ec:57:df:8f:14:e3:4e:33:b2:8a:f1:9a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:01:13 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=833082317c67ce1bb56a0975afdf7a838189f41a25fcc73b08501aba5fbb1939, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a3:0b:24:c1:25:a4:16:9f:6f:2f:25:57:30: 62:12:1e:c1:d5:53:30:af:b3:8b:e3:fd:05:37:cb: 24:3f:d2:1c:61:a6:89:4c:19:d3:40:6b:58:c5:82: ec:b6:57:52:4c:5f:04:3f:4a:39:24:eb:70:a8:aa: 0d:7c:24:49:25:db:eb:47:ec:6f:cc:3a:18:78:3d: c1:ac:d3:93:f4:02:62:3a:61:14:9c:1e:5a:58:29: 67:ef:d6:21:cd:28:9f:30:e1:6d:9f:ee:7c:bb:59: 40:40:93:90:b6:06:8d:53:7a:80:5b:86:c5:28:f4: d1:8e:14:0f:0b:c4:fe:d9:cf:87:bc:74:42:60:54: ac:3e:8a:53:96:34:5b:c2:02:43:ea:74:95:6f:d2: 23:9b:d7:4f:53:a2:d7:79:26:67:7b:57:7b:2e:0a: 31:bf:13:85:08:01:d0:d5:8c:9e:7c:96:9e:76:5b: 41:6c:d5:b0:5f:09:45:ca:88:43:3e:0d:57:c1:b7: d6:55:76:85:30:c5:d7:8e:7a:f6:cd:a9:6c:15:f5: cf:0c:09:b0:0f:9c:57:76:73:2f:5e:5b:f1:fd:ba: 7d:c8:bc:58:01:95:b4:ac:c8:4a:45:00:b4:f6:4d: 12:b6:74:5b:de:16:4c:83:cd:3c:01:67:5c:7f:6e: 24:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:20:23:6F:34:82:F4:E3:5C:12:AB:03:24:AE:CF:50:2B:21:3F:41 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:b040::/48 Signature Algorithm: sha256WithRSAEncryption 8e:b9:e6:8e:12:9e:8e:18:f1:4f:0c:71:33:b7:1f:54:78:5e: fe:49:64:3d:d3:dc:e0:35:cc:55:76:b3:b8:d1:38:34:13:82: 34:a2:93:47:55:00:da:8d:b6:38:6c:e5:42:c4:6c:fd:cb:89: 4e:03:ec:b5:22:b4:9b:10:21:11:2b:92:87:67:dd:c8:e2:db: 4f:f9:9c:40:cf:b9:5c:7f:4c:75:b7:d0:5c:99:a2:63:20:15: be:96:44:23:70:72:d8:0b:f2:f4:cb:c1:e7:f3:8c:0c:77:ec: 4f:11:f4:9f:90:a3:12:94:c6:f9:01:bf:17:08:39:7d:64:f2: e3:dd:af:bc:ae:05:ef:57:50:ff:53:68:2f:c6:2f:08:48:ed: b9:9d:9f:08:ab:57:59:50:32:1b:3d:5d:0b:ce:61:ef:b6:99: 69:b3:f8:12:4c:3b:4f:f8:2c:38:65:ce:73:53:22:f2:26:c3: 9f:0f:fb:58:41:96:87:ca:d0:92:d2:8b:42:fb:6b:41:d7:70: 9f:a3:ff:e9:f8:5a:0f:87:c4:f3:71:35:9a:e3:52:f9:9b:5b: f7:92:52:db:fd:88:e2:6a:7b:2a:a4:1f:82:d6:5c:14:52:77: 90:de:75:73:49:76:fd:73:e4:5a:ba:0c:3f:c8:86:c6:2c:14: d2:4c:7f:8d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHEUZRivzuOxX348U404zsorxmgEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMDExM1oX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAODMzMDgyMzE3YzY3Y2UxYmI1NmEw OTc1YWZkZjdhODM4MTg5ZjQxYTI1ZmNjNzNiMDg1MDFhYmE1ZmJiMTkzOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaMLJMElpBafby8lVzBiEh7B1VMw r7OL4/0FN8skP9IcYaaJTBnTQGtYxYLstldSTF8EP0o5JOtwqKoNfCRJJdvrR+xv zDoYeD3BrNOT9AJiOmEUnB5aWCln79YhzSifMOFtn+58u1lAQJOQtgaNU3qAW4bF KPTRjhQPC8T+2c+HvHRCYFSsPopTljRbwgJD6nSVb9Ijm9dPU6LXeSZne1d7Lgox vxOFCAHQ1YyefJaedltBbNWwXwlFyohDPg1XwbfWVXaFMMXXjnr2zalsFfXPDAmw D5xXdnMvXlvx/bp9yLxYAZW0rMhKRQC09k0StnRb3hZMg808AWdcf24k8QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCkgI280gvTjXBKrAySuz1ArIT9BMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmMzU0NGMzLTkwYWYtNDVhYy1iNmMxLWY2ODBhMzIzMGYzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaALBAMA0GCSqGSIb3DQEBCwUAA4IBAQCOueaOEp6OGPFPDHEz tx9UeF7+SWQ909zgNcxVdrO40Tg0E4I0opNHVQDajbY4bOVCxGz9y4lOA+y1IrSb ECERK5KHZ93I4ttP+ZxAz7lcf0x1t9BcmaJjIBW+lkQjcHLYC/L0y8Hn84wMd+xP EfSfkKMSlMb5Ab8XCDl9ZPLj3a+8rgXvV1D/U2gvxi8ISO25nZ8Iq1dZUDIbPV0L zmHvtplps/gSTDtP+Cw4Zc5zUyLyJsOfD/tYQZaHytCS0otC+2tB13Cfo//p+FoP h8TzcTWa41L5m1v3klLb/YjiansqpB+C1lwUUneQ3nVzSXb9c+Raugw/yIbGLBTS TH+N -----END CERTIFICATE-----Generated at Wed Aug 26 12:17:29 2026 by rpki-client