$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/137d9d03-dc05-4253-8892-907b39d3007b.roa File: 137d9d03-dc05-4253-8892-907b39d3007b.roa (raw, json) Hash identifier: fj2makVxKK+dw9dvbj8zedZFLLk0PotOD6Oxv6WZPkA= Subject key identifier: B8:13:70:CE:E8:3A:96:29:12:83:76:F9:D2:27:BB:A4:31:FE:12:72 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5D9611DA0C305A473DC09A3C46FC9FC1F52C5599 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/137d9d03-dc05-4253-8892-907b39d3007b.roa Signing time: Mon 10 Aug 2026 00:00:26 +0000 ROA not before: Mon 10 Aug 2026 00:00:26 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae0:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:96:11:da:0c:30:5a:47:3d:c0:9a:3c:46:fc:9f:c1:f5:2c:55:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:00:26 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=c06fa9bce5a960fa64b4575b823e0292d624d9281249d654592d0e33d1f5a2c2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:56:97:f6:2d:46:2b:0b:30:9a:f0:0f:a8: b3:4a:c3:06:5c:6b:68:9e:f7:0d:f2:6d:e7:0b:02: 15:89:a6:b9:60:6a:6b:10:45:64:cc:8f:c3:5d:d1: 06:64:df:29:0d:77:d6:38:6b:f8:ea:c3:f1:eb:6b: c4:28:90:7f:85:e7:5c:70:67:49:b1:20:c8:09:9d: 57:be:9a:ba:4a:f6:b6:eb:0f:0f:f7:4c:9b:2f:0b: 80:f5:db:a8:51:4c:2f:15:b6:4a:da:40:83:8a:69: f1:65:c2:82:a8:b3:81:fc:1c:cc:87:f2:7d:04:16: 0f:93:c6:71:b0:07:84:58:b4:95:38:68:a9:c2:8b: b3:c5:c9:d7:95:da:12:86:d5:76:2a:56:77:a6:cb: 21:e9:48:09:d5:e7:29:22:f7:9b:2a:ef:b6:9b:f4: 92:26:33:d7:41:61:42:dd:27:f5:de:93:13:9b:9f: 25:d3:90:07:07:4a:0f:c3:7d:a4:a8:dc:de:d8:e4: d4:71:f7:a2:8a:b8:c7:51:a5:42:10:26:5e:b7:96: ee:99:e4:3a:db:2a:70:5a:a1:71:19:ca:4e:ae:9f: d0:6e:37:07:1f:27:e8:cb:41:8f:60:41:31:61:43: 47:15:33:57:fc:dc:6b:74:2e:f9:c6:7b:97:71:70: 34:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:13:70:CE:E8:3A:96:29:12:83:76:F9:D2:27:BB:A4:31:FE:12:72 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/137d9d03-dc05-4253-8892-907b39d3007b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae0:c800::/40 Signature Algorithm: sha256WithRSAEncryption 84:29:d8:3e:dd:90:64:0c:3e:44:58:2e:e5:90:aa:59:36:01: f3:06:1a:e4:e9:db:c6:ca:22:ba:ed:a7:2f:2e:c2:0d:69:59: 9f:c1:6d:d7:df:03:ac:04:54:13:32:c8:9b:9d:85:64:fc:95: dd:bd:9b:b3:2a:25:d2:67:3e:8a:47:1c:a8:29:31:d5:06:ce: 7c:ae:75:14:92:d3:05:61:dd:ac:f0:a9:01:19:41:b9:c6:31: f1:00:be:8a:6d:f0:05:37:ec:dc:a4:aa:d9:96:e4:6b:90:f3: dd:e2:ef:d8:fd:fe:e5:dd:66:24:b2:f0:ae:b1:51:58:16:7b: 7f:3f:4a:be:7e:9a:de:d1:bb:30:ef:53:98:9f:52:21:06:26: 78:92:67:37:0e:ed:03:3c:f9:d8:e9:d1:1d:76:dd:8f:3c:ea: e0:7a:b2:8b:cb:72:89:f1:0e:aa:b3:65:4b:db:c3:f4:21:69: 60:07:5d:29:38:6f:0e:35:bc:1f:39:f8:31:d1:0e:cc:23:0b: a3:fa:33:38:69:4b:4e:ce:b2:5d:71:d1:64:31:8b:a2:97:2f: 2b:7d:f1:9e:13:b2:6b:98:29:85:0c:a9:bb:cf:b4:64:d0:fa: f2:88:3d:22:ca:c0:7d:3c:3e:14:be:b1:66:09:fc:13:42:9b: d5:04:5c:df -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXZYR2gwwWkc9wJo8RvyfwfUsVZkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMDAyNloX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAYzA2ZmE5YmNlNWE5NjBmYTY0YjQ1 NzViODIzZTAyOTJkNjI0ZDkyODEyNDlkNjU0NTkyZDBlMzNkMWY1YTJjMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ9Wl/YtRisLMJrwD6izSsMGXGto nvcN8m3nCwIViaa5YGprEEVkzI/DXdEGZN8pDXfWOGv46sPx62vEKJB/hedccGdJ sSDICZ1Xvpq6Sva26w8P90ybLwuA9duoUUwvFbZK2kCDimnxZcKCqLOB/BzMh/J9 BBYPk8ZxsAeEWLSVOGipwouzxcnXldoShtV2KlZ3pssh6UgJ1ecpIvebKu+2m/SS JjPXQWFC3Sf13pMTm58l05AHB0oPw32kqNze2OTUcfeiirjHUaVCECZet5bumeQ6 2ypwWqFxGcpOrp/QbjcHHyfoy0GPYEExYUNHFTNX/NxrdC75xnuXcXA0PQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLgTcM7oOpYpEoN2+dInu6Qx/hJyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEzN2Q5ZDAzLWRjMDUtNDI1My04ODkyLTkwN2IzOWQzMDA3Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4MgwDQYJKoZIhvcNAQELBQADggEBAIQp2D7dkGQMPkRYLuWQ qlk2AfMGGuTp28bKIrrtpy8uwg1pWZ/BbdffA6wEVBMyyJudhWT8ld29m7MqJdJn PopHHKgpMdUGznyudRSS0wVh3azwqQEZQbnGMfEAvopt8AU37NykqtmW5GuQ893i 79j9/uXdZiSy8K6xUVgWe38/Sr5+mt7RuzDvU5ifUiEGJniSZzcO7QM8+djp0R12 3Y886uB6sovLconxDqqzZUvbw/QhaWAHXSk4bw41vB85+DHRDswjC6P6MzhpS07O sl1x0WQxi6KXLyt98Z4TsmuYKYUMqbvPtGTQ+vKIPSLKwH08PhS+sWYJ/BNCm9UE XN8= -----END CERTIFICATE-----Generated at Wed Aug 26 00:38:48 2026 by rpki-client