$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1bb62661-17e5-4de5-a1f3-6ba7324a366a.roa File: 1bb62661-17e5-4de5-a1f3-6ba7324a366a.roa (raw, json) Hash identifier: cvOOhtxkGf1GaJoXamjVydeLF2anFZT2PwCGnjDss54= Subject key identifier: 3F:29:61:7D:5E:61:10:03:E8:5E:D1:25:F8:EE:F1:13:EE:4E:16:A0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 283D9CAE979E1F48C4E3C15116596B16DC7463EB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1bb62661-17e5-4de5-a1f3-6ba7324a366a.roa Signing time: Wed 19 Aug 2026 00:11:06 +0000 ROA not before: Wed 19 Aug 2026 00:11:06 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:3d:9c:ae:97:9e:1f:48:c4:e3:c1:51:16:59:6b:16:dc:74:63:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:11:06 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=723eb9be89a219ce1b9ba06104cf19c2da8f36982aecded3286853ae3563dac7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:af:b5:c7:a3:6a:01:93:f3:1f:61:01:d3: 36:65:08:d0:db:f8:9b:bc:19:23:b5:0a:07:2a:90: ee:f1:4c:0f:d6:47:7b:28:8d:ec:14:ed:e4:2d:7f: 8a:12:f2:b2:fb:00:39:05:43:34:ab:91:13:eb:2b: f5:14:45:99:0a:30:37:5a:d0:2a:f3:a0:0b:4a:dd: cf:7b:be:04:9a:58:db:83:43:39:a0:81:76:f8:43: 8f:fb:c9:1f:e5:67:9d:38:3a:ea:8f:9d:fe:fd:09: 64:ed:bc:f9:d7:a9:3a:d1:e7:4c:bc:df:e2:3f:d6: 1b:b1:f1:41:da:ed:5e:5a:f5:7d:25:5c:88:b6:79: d3:12:79:42:ef:2b:62:49:71:e2:9a:f3:77:86:b1: 9b:15:87:b3:2a:08:f4:a0:fc:fd:5b:9a:c5:58:38: 7d:f7:e3:76:a8:43:89:f5:6b:bc:77:2c:6d:e0:a2: 2a:64:74:d9:94:6f:c9:1b:6a:ef:4f:de:87:ec:5a: 3b:c1:77:be:84:12:de:c9:8c:44:26:c5:0b:e9:7e: 42:8f:1e:d9:da:c2:c2:12:c7:ae:2f:8a:c0:78:38: 93:a7:15:b1:5d:7d:4a:c6:35:2f:78:49:ff:79:48: 6c:5e:4e:d5:41:ea:21:4e:f2:31:29:42:62:e2:9b: fa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:29:61:7D:5E:61:10:03:E8:5E:D1:25:F8:EE:F1:13:EE:4E:16:A0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1bb62661-17e5-4de5-a1f3-6ba7324a366a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption a4:08:c4:d6:cd:8c:62:18:ee:8c:05:2e:e8:7f:12:ba:16:95: 6e:0e:2a:42:4b:07:d9:d9:01:03:7e:7d:35:ec:30:f2:34:b4: 0e:0f:36:6f:d9:f5:07:3c:53:eb:fb:c8:33:20:f0:8a:a9:6b: ce:b7:24:23:f9:7e:bf:ff:25:77:8a:7a:85:74:22:ef:f6:60: 74:63:19:93:ea:b6:64:de:bd:27:22:bd:d0:bd:3c:a8:a0:4a: 8e:37:f7:04:f7:ad:12:1c:06:8a:df:35:99:48:22:7f:db:31: b5:3e:25:5e:25:d7:9f:79:95:eb:38:87:89:95:b8:46:4f:88: 5b:b3:2f:d4:7f:a3:3d:55:4f:68:bd:dd:f7:5a:44:8f:3a:c3: 3c:39:02:bb:7a:a1:51:82:df:43:66:1e:07:1b:b6:77:19:f6: 98:a5:70:70:1e:84:ee:63:d6:8b:ff:66:e5:c9:3f:b8:2a:cb: 71:9c:72:3e:ec:a6:df:ba:ce:22:1c:76:24:8a:b1:d3:d5:f9: a7:99:7a:b7:a8:19:ba:3c:4c:d2:1e:f8:ba:16:a3:b9:c2:89: 52:fa:11:37:c1:23:c1:b0:db:4e:9f:13:3a:50:0c:8e:70:8b: 26:bc:22:00:7b:a5:58:55:1e:e7:64:e6:14:69:ca:5c:12:17: c8:14:c1:85 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKD2crpeeH0jE48FRFllrFtx0Y+swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMTEwNloX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNANzIzZWI5YmU4OWEyMTljZTFiOWJh MDYxMDRjZjE5YzJkYThmMzY5ODJhZWNkZWQzMjg2ODUzYWUzNTYzZGFjNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY2vtcejagGT8x9hAdM2ZQjQ2/ib vBkjtQoHKpDu8UwP1kd7KI3sFO3kLX+KEvKy+wA5BUM0q5ET6yv1FEWZCjA3WtAq 86ALSt3Pe74Emljbg0M5oIF2+EOP+8kf5WedODrqj53+/Qlk7bz516k60edMvN/i P9YbsfFB2u1eWvV9JVyItnnTEnlC7ytiSXHimvN3hrGbFYezKgj0oPz9W5rFWDh9 9+N2qEOJ9Wu8dyxt4KIqZHTZlG/JG2rvT96H7Fo7wXe+hBLeyYxEJsUL6X5Cjx7Z 2sLCEseuL4rAeDiTpxWxXX1KxjUveEn/eUhsXk7VQeohTvIxKUJi4pv62wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFD8pYX1eYRAD6F7RJfju8RPuThagMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFiYjYyNjYxLTE3ZTUtNGRlNS1hMWYzLTZiYTczMjRhMzY2YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauuDAMA0GCSqGSIb3DQEBCwUAA4IBAQCkCMTWzYxiGO6MBS7o fxK6FpVuDipCSwfZ2QEDfn017DDyNLQODzZv2fUHPFPr+8gzIPCKqWvOtyQj+X6/ /yV3inqFdCLv9mB0YxmT6rZk3r0nIr3QvTyooEqON/cE960SHAaK3zWZSCJ/2zG1 PiVeJdefeZXrOIeJlbhGT4hbsy/Uf6M9VU9ovd33WkSPOsM8OQK7eqFRgt9DZh4H G7Z3GfaYpXBwHoTuY9aL/2blyT+4KstxnHI+7Kbfus4iHHYkirHT1fmnmXq3qBm6 PEzSHvi6FqO5wolS+hE3wSPBsNtOnxM6UAyOcIsmvCIAe6VYVR7nZOYUacpcEhfI FMGF -----END CERTIFICATE-----Generated at Wed Aug 26 08:06:24 2026 by rpki-client