$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/12ab5f73-e3e2-44b7-b44f-d4cb6369941a.roa File: 12ab5f73-e3e2-44b7-b44f-d4cb6369941a.roa (raw, json) Hash identifier: 1ta24gphPCWTvXDQFYRO5wBamOcKFd0zc4cqI2AEDpc= Subject key identifier: C5:3F:D1:E6:E7:8F:F9:6C:93:2D:DA:00:0F:D2:C4:7A:05:18:89:05 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 02574F2DF4C87272450A51DB8CF9D40DD91B1D27 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/12ab5f73-e3e2-44b7-b44f-d4cb6369941a.roa Signing time: Wed 19 Aug 2026 00:10:40 +0000 ROA not before: Wed 19 Aug 2026 00:10:40 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:57:4f:2d:f4:c8:72:72:45:0a:51:db:8c:f9:d4:0d:d9:1b:1d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:10:40 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=c85fab0721839e8748033315c53bec8d868ea0560742e5ef35f5f75d3d139d24, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bf:75:09:5b:40:18:c0:07:07:66:91:e9:9c: 2c:f6:b0:24:1c:d7:4b:28:a5:5b:b3:cc:ec:d4:fe: bb:b6:1f:5e:83:46:a4:6f:f2:85:ef:e3:33:e8:17: c3:03:7e:1c:ee:39:f1:7d:3e:a7:60:f6:43:3a:fd: 36:d0:92:c3:7b:f4:49:1b:80:89:d2:46:24:c2:38: 13:e0:2e:d5:f2:c0:99:80:1d:01:f1:58:75:e9:7f: 4e:d5:d0:9e:85:a4:6a:77:81:c9:8b:30:3d:18:e4: 39:1c:91:63:c5:17:70:fe:a5:35:50:1e:a4:32:75: 5d:e8:10:ee:c1:a6:eb:83:49:b7:5a:23:8b:7a:4c: b0:05:0b:cb:01:14:be:00:7a:90:9e:8f:4d:c5:1b: 47:dc:e3:e4:03:6a:a8:a9:d3:3e:49:89:c9:f4:55: c5:a9:5d:90:e5:fd:8a:03:89:e2:c4:f0:a4:f3:64: a2:d0:42:cb:a7:20:f6:d3:2a:a5:12:a6:9b:2e:26: 4e:ee:ac:3b:d3:7c:94:8e:b1:17:5b:7f:19:31:b0: 40:25:02:81:70:ae:8d:d9:22:5e:a9:de:91:82:08: 87:16:16:fe:41:3e:14:a1:36:c5:6e:2d:12:7d:41: 67:b2:82:e5:64:67:56:fd:43:f8:aa:a5:91:44:1b: 30:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3F:D1:E6:E7:8F:F9:6C:93:2D:DA:00:0F:D2:C4:7A:05:18:89:05 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/12ab5f73-e3e2-44b7-b44f-d4cb6369941a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:28c0::/48 Signature Algorithm: sha256WithRSAEncryption 6d:40:eb:73:0a:fa:c3:a3:20:18:91:48:ec:85:d4:55:53:46: 7b:75:08:99:2d:9d:12:66:ea:98:37:53:4b:de:a5:46:4e:9b: bf:68:b3:e7:d5:c5:33:da:42:7a:cd:2b:07:ed:1b:e8:ed:e2: 4b:e0:bf:52:1d:03:e9:1d:bf:fe:0e:2f:0e:1d:ef:fb:56:86: 96:b1:8d:c6:a2:e0:03:e3:28:5d:d5:61:67:4b:0e:a4:9f:31: 3b:ba:9c:d1:5d:72:44:1f:59:df:68:23:59:b0:08:40:f2:8a: 10:d3:d3:96:55:75:2e:3e:90:e3:75:cf:7c:66:d5:e3:d7:93: ea:b9:c8:47:ee:29:80:7d:e6:ef:36:5a:4f:5b:0c:7d:57:d1: 9e:5e:eb:3f:c1:65:43:4a:70:55:6d:3b:85:eb:29:6f:8c:64: ff:75:5e:3e:ae:be:55:ec:84:36:f6:43:17:8f:84:d6:5b:87: ce:21:52:3c:bc:d3:41:38:b0:f6:bf:4d:34:a8:dc:16:07:49: 48:ef:2a:11:41:23:df:91:72:bf:e9:9a:84:35:4d:d1:3b:e4: 0f:0f:21:b6:fe:e5:a6:da:b5:52:26:94:d1:31:cd:bb:7b:1e: de:07:27:eb:3c:9e:98:e6:22:cb:c3:2d:91:a1:5d:fe:02:d5: f7:28:44:42 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAldPLfTIcnJFClHbjPnUDdkbHScwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMTA0MFoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAYzg1ZmFiMDcyMTgzOWU4NzQ4MDMz MzE1YzUzYmVjOGQ4NjhlYTA1NjA3NDJlNWVmMzVmNWY3NWQzZDEzOWQyNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb91CVtAGMAHB2aR6Zws9rAkHNdL KKVbs8zs1P67th9eg0akb/KF7+Mz6BfDA34c7jnxfT6nYPZDOv020JLDe/RJG4CJ 0kYkwjgT4C7V8sCZgB0B8Vh16X9O1dCehaRqd4HJizA9GOQ5HJFjxRdw/qU1UB6k MnVd6BDuwabrg0m3WiOLekywBQvLARS+AHqQno9NxRtH3OPkA2qoqdM+SYnJ9FXF qV2Q5f2KA4nixPCk82Si0ELLpyD20yqlEqabLiZO7qw703yUjrEXW38ZMbBAJQKB cK6N2SJeqd6RggiHFhb+QT4UoTbFbi0SfUFnsoLlZGdW/UP4qqWRRBswRwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMU/0ebnj/lsky3aAA/SxHoFGIkFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEyYWI1ZjczLWUzZTItNDRiNy1iNDRmLWQ0Y2I2MzY5OTQxYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6SjAMA0GCSqGSIb3DQEBCwUAA4IBAQBtQOtzCvrDoyAYkUjs hdRVU0Z7dQiZLZ0SZuqYN1NL3qVGTpu/aLPn1cUz2kJ6zSsH7Rvo7eJL4L9SHQPp Hb/+Di8OHe/7VoaWsY3GouAD4yhd1WFnSw6knzE7upzRXXJEH1nfaCNZsAhA8ooQ 09OWVXUuPpDjdc98ZtXj15PquchH7imAfebvNlpPWwx9V9GeXus/wWVDSnBVbTuF 6ylvjGT/dV4+rr5V7IQ29kMXj4TWW4fOIVI8vNNBOLD2v000qNwWB0lI7yoRQSPf kXK/6ZqENU3RO+QPDyG2/uWm2rVSJpTRMc27ex7eByfrPJ6Y5iLLwy2RoV3+AtX3 KERC -----END CERTIFICATE-----Generated at Wed Aug 26 17:34:35 2026 by rpki-client