$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683670-b448-4b46-8e10-aa3682be179f.roa File: 10683670-b448-4b46-8e10-aa3682be179f.roa (raw, json) Hash identifier: Q13aGZpPprDNRMPo9KyiXzn7Lso1PNsdVywS9rZPBlI= Subject key identifier: 0A:E4:07:A4:01:F3:95:F2:0B:FD:BE:A7:39:75:FD:EE:B3:21:7A:54 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 498A3E2F4B9904676C88833C6242154522ABEFCF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683670-b448-4b46-8e10-aa3682be179f.roa Signing time: Thu 30 Jul 2026 00:11:02 +0000 ROA not before: Thu 30 Jul 2026 00:11:02 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:8a:3e:2f:4b:99:04:67:6c:88:83:3c:62:42:15:45:22:ab:ef:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:11:02 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=2be028d5f8f7b5e003c7ace95248d91ae13d369e17e6b46505019e1fa66abba4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:68:de:7c:ad:77:21:75:38:3c:94:74:84: 69:bc:e2:88:4c:d4:fd:c8:3f:3d:e4:2d:a7:0d:6a: a4:8f:75:1c:7c:c1:46:a2:2c:30:85:c7:43:fa:b0: eb:7e:18:f3:75:d8:96:36:66:69:8e:b6:ae:8d:90: e0:e0:58:b8:36:55:f0:05:9a:e1:d8:6e:b2:cc:2d: 09:08:1d:db:6b:3d:92:3e:db:38:fd:63:62:67:94: ab:d7:2b:45:62:48:60:cb:f7:e3:ae:90:a6:7a:68: 61:31:04:2a:34:10:87:a8:af:34:9d:9e:5f:e9:c2: 64:9e:4b:2e:cf:41:03:c7:e3:0d:36:73:98:77:71: 9b:73:60:45:92:12:44:b7:98:fb:36:c2:7b:78:e3: 47:25:93:5d:d7:3e:8c:67:8d:4c:f1:59:86:04:62: f4:a0:24:1b:87:d3:d8:14:39:12:f5:8d:ec:85:9b: 97:f9:0e:69:12:b1:07:7e:39:0a:81:9f:23:21:07: d9:fc:db:50:35:1f:e3:a5:c3:c6:da:6f:09:ba:e2: 4c:24:22:3c:aa:7b:72:06:3b:c2:38:d8:d6:4b:62: 78:98:c9:53:9b:3c:88:c1:93:6e:cf:4e:c2:ff:f7: 1c:6f:0f:7f:12:cf:47:76:d9:5d:f4:f6:61:aa:22: 8b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E4:07:A4:01:F3:95:F2:0B:FD:BE:A7:39:75:FD:EE:B3:21:7A:54 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683670-b448-4b46-8e10-aa3682be179f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:840::/48 Signature Algorithm: sha256WithRSAEncryption bc:49:59:0c:5b:ce:23:9c:c8:d4:0e:68:8d:21:ac:10:c6:b2: 22:34:27:d2:d1:a0:6d:5a:04:fd:86:e5:e3:e2:fc:0d:a3:10: d3:01:8f:ee:7a:56:e2:f7:59:ea:19:23:2b:90:91:3f:81:e3: 72:f6:72:fb:57:e8:a5:be:4c:86:64:13:ee:14:98:9a:5a:81: fa:ae:80:29:c8:2d:7e:a6:ac:d5:ac:fa:cc:fb:23:51:63:41: 72:15:d2:e4:de:b8:6b:b0:12:c7:23:3f:88:9f:8a:6d:cc:98: 05:01:10:e3:96:3b:03:64:d5:eb:39:2b:b2:f0:ac:ee:04:11: aa:de:79:21:5c:47:13:ec:a2:b8:72:d9:33:b9:0a:97:14:1e: 66:d7:7a:fe:24:7c:17:8c:5c:c5:fa:96:d6:3a:14:ae:67:81: 7a:8d:89:f9:ae:23:9a:37:40:1d:b3:94:5d:d0:74:ac:cc:b8: 13:ad:b0:50:d9:a5:f9:1b:b8:2b:8d:55:ec:1e:a5:72:8b:3a: 02:d4:ac:40:94:d6:cf:87:1b:28:0e:a3:04:cc:43:ac:0e:84: d4:1c:11:b3:d7:e4:78:41:de:55:55:a8:d8:c7:d3:3a:d7:2e: 49:22:cd:2f:ad:3e:d8:7a:e8:ae:17:a6:72:9c:3f:5a:1b:c4: a3:47:58:45 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSYo+L0uZBGdsiIM8YkIVRSKr788wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMTEwMloX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAMmJlMDI4ZDVmOGY3YjVlMDAzYzdh Y2U5NTI0OGQ5MWFlMTNkMzY5ZTE3ZTZiNDY1MDUwMTllMWZhNjZhYmJhNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb1o3nytdyF1ODyUdIRpvOKITNT9 yD895C2nDWqkj3UcfMFGoiwwhcdD+rDrfhjzddiWNmZpjraujZDg4Fi4NlXwBZrh 2G6yzC0JCB3baz2SPts4/WNiZ5Sr1ytFYkhgy/fjrpCmemhhMQQqNBCHqK80nZ5f 6cJknksuz0EDx+MNNnOYd3Gbc2BFkhJEt5j7NsJ7eONHJZNd1z6MZ41M8VmGBGL0 oCQbh9PYFDkS9Y3shZuX+Q5pErEHfjkKgZ8jIQfZ/NtQNR/jpcPG2m8JuuJMJCI8 qntyBjvCONjWS2J4mMlTmzyIwZNuz07C//ccbw9/Es9Hdtld9PZhqiKLlQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFArkB6QB85XyC/2+pzl1/e6zIXpUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEwNjgzNjcwLWI0NDgtNGI0Ni04ZTEwLWFhMzY4MmJlMTc5Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAAhAMA0GCSqGSIb3DQEBCwUAA4IBAQC8SVkMW84jnMjUDmiN IawQxrIiNCfS0aBtWgT9huXj4vwNoxDTAY/uelbi91nqGSMrkJE/geNy9nL7V+il vkyGZBPuFJiaWoH6roApyC1+pqzVrPrM+yNRY0FyFdLk3rhrsBLHIz+In4ptzJgF ARDjljsDZNXrOSuy8KzuBBGq3nkhXEcT7KK4ctkzuQqXFB5m13r+JHwXjFzF+pbW OhSuZ4F6jYn5riOaN0Ads5Rd0HSszLgTrbBQ2aX5G7grjVXsHqVyizoC1KxAlNbP hxsoDqMEzEOsDoTUHBGz1+R4Qd5VVajYx9M61y5JIs0vrT7YeuiuF6ZynD9aG8Sj R1hF -----END CERTIFICATE-----Generated at Wed Aug 26 00:37:40 2026 by rpki-client