$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0facf2ae-3106-460e-a146-51351e2740eb.roa File: 0facf2ae-3106-460e-a146-51351e2740eb.roa (raw, json) Hash identifier: la+B6Auw3sTirZTnHDk/PM5DDGtZvi6+Ztc6UAYblhg= Subject key identifier: 95:CF:88:2A:D8:50:E6:1E:CF:29:7F:4D:72:2B:02:61:EF:C0:C1:F4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0183053BD7FA97EED15DB0BE91834EF6A3BAF5EA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0facf2ae-3106-460e-a146-51351e2740eb.roa Signing time: Mon 24 Aug 2026 00:00:05 +0000 ROA not before: Mon 24 Aug 2026 00:00:05 +0000 ROA not after: Sun 22 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:c800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:83:05:3b:d7:fa:97:ee:d1:5d:b0:be:91:83:4e:f6:a3:ba:f5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 24 00:00:05 2026 GMT Not After : Nov 22 23:59:59 2026 GMT Subject: serialNumber=0d2884e2f695eb8318dd7c8472e0c973db7f582de15567097918a8cda2c499ff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:8f:35:83:e7:cf:cc:2f:8e:e0:1a:e0:f0: 6f:75:33:b3:45:48:f6:4d:4d:18:3d:05:88:20:53: 12:09:bf:3c:42:f6:4a:8c:bf:60:b9:ab:66:e8:bb: 4b:b3:6f:dd:82:bb:a8:22:2e:1b:2b:e5:e0:fc:bd: 93:71:77:6f:03:9e:df:cf:16:25:ef:fe:1a:9f:13: 17:d4:6b:9a:c3:71:68:18:38:21:35:ec:4f:40:5c: fc:a4:5d:34:97:4d:37:66:93:36:e8:f8:da:99:e5: 48:d4:78:1a:eb:95:e0:2f:61:dd:fb:17:b7:d8:75: 8d:63:c7:fb:f9:34:c3:89:fe:00:53:89:1c:e3:a1: 79:f6:1f:36:c0:6c:0d:f7:4a:60:22:33:fe:9c:a2: f6:f2:40:7f:98:7a:1b:7f:b8:3b:50:ab:33:16:d1: 2b:3d:15:14:c2:44:d8:71:69:a7:78:ea:49:af:10: 24:62:22:e1:f9:06:b5:c6:98:ee:fe:32:a1:52:d6: 5d:2b:4b:2d:48:e6:12:e9:ab:de:4a:d2:b4:7b:66: 32:77:ba:30:c5:aa:70:8f:db:6d:95:35:17:0d:2e: 2b:48:74:5b:14:d9:06:2f:ee:89:4f:6c:79:ab:0a: a4:59:a1:81:74:07:51:89:b3:fe:97:5a:f4:67:75: bb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CF:88:2A:D8:50:E6:1E:CF:29:7F:4D:72:2B:02:61:EF:C0:C1:F4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0facf2ae-3106-460e-a146-51351e2740eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:c800::/48 Signature Algorithm: sha256WithRSAEncryption b4:94:7e:8a:30:46:84:56:65:39:71:66:c7:55:5e:48:55:a5: 48:d3:bb:6e:26:09:47:b7:74:6a:ea:02:ad:b2:96:0d:c4:66: ba:2a:15:49:a8:01:0b:f0:a2:a1:ae:d5:c3:d1:5e:38:b8:da: cd:49:ee:2a:62:a3:68:e5:a8:bc:b0:3e:ee:e6:52:a7:18:5a: 28:d2:18:2c:93:d8:19:50:74:23:48:43:63:6e:b8:86:5b:4a: bd:32:61:e8:3b:32:4b:28:c5:f4:8c:19:20:1f:b4:e7:bf:67: d9:6c:6d:9e:49:f9:08:4b:48:ed:f2:0a:89:92:7f:a7:ff:7e: 72:aa:d8:28:22:5f:f0:94:55:72:cd:36:82:4a:81:04:d5:4d: 9a:d2:0e:96:a2:bc:80:5d:91:9e:3b:07:b7:2e:04:d6:38:86: fc:81:1b:97:c4:fb:19:7c:79:7c:cb:98:ed:f5:f2:65:01:06: 2e:b2:1b:00:7e:8b:83:f0:d2:35:c6:fb:e9:b8:65:41:4f:ea: 98:65:2c:3a:d8:c4:90:45:32:fc:b8:97:91:15:51:ef:32:a5: 3e:1a:18:33:04:fa:2a:0b:f4:73:c8:46:24:24:9e:26:5a:1a: f0:39:b7:33:ff:dc:4b:66:e4:77:68:46:9e:22:62:87:bd:27: af:e0:92:5e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAYMFO9f6l+7RXbC+kYNO9qO69eowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgyNDAwMDAwNVoX DTI2MTEyMjIzNTk1OVowejFJMEcGA1UEBRNAMGQyODg0ZTJmNjk1ZWI4MzE4ZGQ3 Yzg0NzJlMGM5NzNkYjdmNTgyZGUxNTU2NzA5NzkxOGE4Y2RhMmM0OTlmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcGPNYPnz8wvjuAa4PBvdTOzRUj2 TU0YPQWIIFMSCb88QvZKjL9guatm6LtLs2/dgruoIi4bK+Xg/L2TcXdvA57fzxYl 7/4anxMX1Guaw3FoGDghNexPQFz8pF00l003ZpM26PjameVI1Hga65XgL2Hd+xe3 2HWNY8f7+TTDif4AU4kc46F59h82wGwN90pgIjP+nKL28kB/mHobf7g7UKszFtEr PRUUwkTYcWmneOpJrxAkYiLh+Qa1xpju/jKhUtZdK0stSOYS6aveStK0e2Yyd7ow xapwj9ttlTUXDS4rSHRbFNkGL+6JT2x5qwqkWaGBdAdRibP+l1r0Z3W7VwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJXPiCrYUOYezyl/TXIrAmHvwMH0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmYWNmMmFlLTMxMDYtNDYwZS1hMTQ2LTUxMzUxZTI3NDBlYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9sgAMA0GCSqGSIb3DQEBCwUAA4IBAQC0lH6KMEaEVmU5cWbH VV5IVaVI07tuJglHt3Rq6gKtspYNxGa6KhVJqAEL8KKhrtXD0V44uNrNSe4qYqNo 5ai8sD7u5lKnGFoo0hgsk9gZUHQjSENjbriGW0q9MmHoOzJLKMX0jBkgH7Tnv2fZ bG2eSfkIS0jt8gqJkn+n/35yqtgoIl/wlFVyzTaCSoEE1U2a0g6WoryAXZGeOwe3 LgTWOIb8gRuXxPsZfHl8y5jt9fJlAQYushsAfouD8NI1xvvpuGVBT+qYZSw62MSQ RTL8uJeRFVHvMqU+GhgzBPoqC/RzyEYkJJ4mWhrwObcz/9xLZuR3aEaeImKHvSev 4JJe -----END CERTIFICATE-----Generated at Wed Aug 26 08:04:38 2026 by rpki-client