$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17ae18fe-9d0a-4abf-a634-7c34efc9ac29.roa File: 17ae18fe-9d0a-4abf-a634-7c34efc9ac29.roa (raw, json) Hash identifier: x2nOkWngPE2MvSgE4WsJ3RS7Ao7HKntt1+2oaOQM8sE= Subject key identifier: F8:62:6E:FB:62:45:74:A9:F9:D4:12:07:18:BC:EC:63:B3:4D:EC:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 44E086CDD7A36D9C453BF297E8A2AD412FE2E57B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17ae18fe-9d0a-4abf-a634-7c34efc9ac29.roa Signing time: Fri 31 Jul 2026 00:10:03 +0000 ROA not before: Fri 31 Jul 2026 00:10:03 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e0:86:cd:d7:a3:6d:9c:45:3b:f2:97:e8:a2:ad:41:2f:e2:e5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:10:03 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=ecaa1742b352ad532dad51e30af6f40326bfd3c12a224a8c13b12aa7e8adf041, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b1:ed:1c:ed:8f:5d:8a:84:c2:8a:47:cd:7d: 48:62:59:c1:3b:af:32:ce:f1:aa:9e:ac:50:9b:8f: 80:d2:9d:82:ed:68:00:cd:b7:ca:12:30:db:49:32: 74:b6:74:ad:ca:df:64:dc:67:a8:dc:3b:d4:1c:6d: ef:91:f4:fa:69:5b:ce:fe:c7:92:46:a2:e4:8a:72: 54:60:6a:dd:06:1a:e7:1f:f4:e3:94:98:d2:d0:59: c9:5c:44:9b:3b:0f:20:a6:aa:09:49:64:71:c9:34: 52:ad:ff:85:f1:1e:11:c0:33:0d:0f:2b:55:f3:14: 2c:bf:7b:b9:a6:ef:ea:cc:ce:02:b0:30:2e:6c:62: 5f:9d:4b:07:04:07:82:0f:b4:45:c6:b7:f4:66:61: 45:ea:6f:89:a5:99:4d:e4:46:fa:99:e3:71:96:a9: e3:33:f9:d7:23:a4:b6:0a:e8:b2:0d:d7:3b:db:ab: 72:9f:e3:c4:00:84:5b:33:9b:2e:d7:1e:a2:e3:5d: 9d:1d:f7:f0:da:2a:af:2d:78:62:a9:81:d0:7e:2b: 26:3e:34:bd:3a:49:18:7e:c8:dd:68:8c:3d:73:34: 7f:14:39:59:5d:f3:34:10:7a:05:e5:03:38:ef:f4: 39:97:74:4a:9e:eb:4c:b3:a1:29:c3:ef:30:c3:d6: 96:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:62:6E:FB:62:45:74:A9:F9:D4:12:07:18:BC:EC:63:B3:4D:EC:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17ae18fe-9d0a-4abf-a634-7c34efc9ac29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:8000::/48 Signature Algorithm: sha256WithRSAEncryption b0:02:a4:63:4d:a2:5e:5c:2b:7f:60:cc:65:2d:2a:45:f8:7c: f7:19:ad:a2:1a:69:e0:6a:9f:da:0a:24:40:40:11:e3:50:fe: 0d:6d:26:44:44:23:05:c0:af:03:38:a3:02:17:6e:57:23:9e: da:9d:3b:a2:6f:e4:f0:ca:bd:cc:49:ef:58:f4:3b:4a:6a:aa: 4f:60:a2:3f:71:e5:3a:db:eb:2f:fb:34:41:8f:ac:a8:76:e9: c3:8b:ef:bd:bf:47:d6:68:74:bc:1b:1b:23:3d:4e:16:e8:c8: fc:30:cf:d7:f1:65:b1:06:c3:f1:06:cd:8a:77:c7:fd:cd:6d: 6a:c8:44:71:14:ff:6a:82:4d:c1:a6:34:c1:d1:6b:39:22:f2: b9:cc:2b:73:a8:71:01:c0:10:ae:6e:c5:dd:1e:65:ae:ed:6a: 8d:45:bc:bd:d7:a6:29:d7:2d:19:9c:ac:b9:52:84:1d:e9:a3: f8:69:09:59:61:01:20:93:1c:28:7f:04:ba:85:5c:e7:a9:c7: c8:cd:01:4f:78:fe:0d:9a:29:35:06:d2:2e:aa:fb:f9:87:ae: 4f:de:ba:63:30:83:88:d1:2b:93:f1:da:a4:09:48:ca:0a:fa: 31:0b:e3:96:a6:9d:87:64:d8:9a:7e:f1:a8:f2:7e:a0:e7:dc: 1f:20:99:da -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUROCGzdejbZxFO/KX6KKtQS/i5XswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMTAwM1oX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNAZWNhYTE3NDJiMzUyYWQ1MzJkYWQ1 MWUzMGFmNmY0MDMyNmJmZDNjMTJhMjI0YThjMTNiMTJhYTdlOGFkZjA0MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrHtHO2PXYqEwopHzX1IYlnBO68y zvGqnqxQm4+A0p2C7WgAzbfKEjDbSTJ0tnStyt9k3Geo3DvUHG3vkfT6aVvO/seS RqLkinJUYGrdBhrnH/TjlJjS0FnJXESbOw8gpqoJSWRxyTRSrf+F8R4RwDMNDytV 8xQsv3u5pu/qzM4CsDAubGJfnUsHBAeCD7RFxrf0ZmFF6m+JpZlN5Eb6meNxlqnj M/nXI6S2CuiyDdc726tyn+PEAIRbM5su1x6i412dHffw2iqvLXhiqYHQfismPjS9 OkkYfsjdaIw9czR/FDlZXfM0EHoF5QM47/Q5l3RKnutMs6Epw+8ww9aW0QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPhibvtiRXSp+dQSBxi87GOzTewUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE3YWUxOGZlLTlkMGEtNGFiZi1hNjM0LTdjMzRlZmM5YWMyOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7IAAMA0GCSqGSIb3DQEBCwUAA4IBAQCwAqRjTaJeXCt/YMxl LSpF+Hz3Ga2iGmngap/aCiRAQBHjUP4NbSZERCMFwK8DOKMCF25XI57anTuib+Tw yr3MSe9Y9DtKaqpPYKI/ceU62+sv+zRBj6yodunDi++9v0fWaHS8GxsjPU4W6Mj8 MM/X8WWxBsPxBs2Kd8f9zW1qyERxFP9qgk3BpjTB0Ws5IvK5zCtzqHEBwBCubsXd HmWu7WqNRby916Yp1y0ZnKy5UoQd6aP4aQlZYQEgkxwofwS6hVznqcfIzQFPeP4N mik1BtIuqvv5h65P3rpjMIOI0SuT8dqkCUjKCvoxC+OWpp2HZNiafvGo8n6g59wf IJna -----END CERTIFICATE-----Generated at Wed Aug 26 04:40:47 2026 by rpki-client