$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1e662b58-509e-40b1-ad70-5d83c0290d98.roa File: 1e662b58-509e-40b1-ad70-5d83c0290d98.roa (raw, json) Hash identifier: F1UDU1EnhTvgtohirqGv713+cLhUvYRh7LShMpP2jQk= Subject key identifier: 61:07:84:93:3E:1D:AD:57:BE:53:46:C3:62:D3:A0:CD:50:47:54:41 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 168E89F3E7CDD3B058702AED4225AE562ADD0429 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1e662b58-509e-40b1-ad70-5d83c0290d98.roa Signing time: Mon 03 Aug 2026 00:00:10 +0000 ROA not before: Mon 03 Aug 2026 00:00:10 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafa:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Sep 2026 00:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:8e:89:f3:e7:cd:d3:b0:58:70:2a:ed:42:25:ae:56:2a:dd:04:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 3 00:00:10 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=82cb9081bacc6c5e2108c1fd24478f37699adabae64612c54e70607a1a58847a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:8d:b7:4e:29:37:e4:e3:68:1c:73:a9:af: d0:f6:d7:1b:4d:e8:b1:99:1e:4a:ec:01:08:e3:dc: b8:b1:a4:28:86:d8:86:5d:6f:94:fc:e6:ad:c2:7a: 75:8a:89:08:cc:64:d8:be:78:94:84:ab:dd:57:c3: 1e:79:0a:76:ad:8b:0b:ca:b5:e5:a7:81:bd:ee:23: 0d:72:d8:8f:ac:c7:ef:06:d0:da:28:57:cb:55:bb: a9:72:10:a7:1c:d6:e1:b6:80:f1:23:05:65:91:06: 10:fa:e3:f5:14:3c:c9:ff:f2:83:74:02:2a:a9:60: a8:d7:0a:db:f9:9c:39:bd:94:aa:0f:2a:10:02:15: e8:73:3d:82:d3:13:42:1c:e4:b4:ab:1b:66:0e:b1: 1c:37:ed:4f:44:55:b2:d4:ca:37:bb:d8:86:27:d7: 11:02:1e:05:af:56:80:c8:82:7b:60:a3:86:4a:5a: 42:77:8e:e8:6f:2c:ed:e9:e9:25:00:56:8d:44:48: d5:0a:21:59:85:05:ba:63:24:11:2d:2a:ae:db:4e: 9c:eb:95:61:9b:d9:1f:12:33:ce:2d:4e:22:b8:49: fa:d9:f6:d4:39:fe:86:f9:16:ac:bc:c9:47:e4:66: 52:50:a0:25:af:dc:b6:e6:ec:ba:31:3a:42:49:66: 1c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:07:84:93:3E:1D:AD:57:BE:53:46:C3:62:D3:A0:CD:50:47:54:41 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1e662b58-509e-40b1-ad70-5d83c0290d98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafa:6000::/40 Signature Algorithm: sha256WithRSAEncryption a9:6a:42:6a:43:4e:2c:44:81:04:de:2e:46:93:fc:72:0a:f9: 85:19:88:05:0e:bf:61:d8:ea:85:4d:14:b6:48:74:38:7d:48: a9:24:9e:7d:15:19:e6:88:e3:47:9a:b0:09:27:46:cd:c0:53: 1c:4f:83:1e:56:e6:eb:ed:44:17:b7:8e:86:43:74:7b:ca:38: 6b:58:6d:37:f5:80:fe:a3:c0:62:0f:6e:6d:eb:4e:0c:17:93: 17:9a:b0:e2:eb:f1:b9:40:13:50:41:b3:f7:dd:22:4e:d8:29: f0:5a:92:eb:6e:25:e9:3d:b4:55:97:e8:62:b7:9f:1b:0d:7a: 28:f6:02:2d:54:24:f9:76:91:fe:7a:52:43:15:a5:05:32:90: 5c:a0:b1:7e:49:80:9e:d6:3b:0e:a6:a3:35:ad:50:de:15:78: aa:22:83:31:1d:86:5c:ec:cb:0b:a8:2b:f6:7a:6e:01:20:bd: 74:7d:d8:91:67:0c:5c:ba:f0:2f:82:a2:aa:b5:4f:a6:f9:53: c1:ce:1b:c6:fb:05:b7:6c:5a:e1:11:cb:e7:af:4c:bb:02:c0: 86:1f:6a:2c:8d:d2:7e:78:74:f5:fd:95:f6:33:b3:00:28:4f: 21:ad:15:1e:47:77:56:98:3a:c8:a1:0b:56:53:cb:db:5e:f4: 43:fe:45:33 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFo6J8+fN07BYcCrtQiWuVirdBCkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMzAwMDAxMFoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAODJjYjkwODFiYWNjNmM1ZTIxMDhj MWZkMjQ0NzhmMzc2OTlhZGFiYWU2NDYxMmM1NGU3MDYwN2ExYTU4ODQ3YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnciNt04pN+TjaBxzqa/Q9tcbTeix mR5K7AEI49y4saQohtiGXW+U/Oatwnp1iokIzGTYvniUhKvdV8MeeQp2rYsLyrXl p4G97iMNctiPrMfvBtDaKFfLVbupchCnHNbhtoDxIwVlkQYQ+uP1FDzJ//KDdAIq qWCo1wrb+Zw5vZSqDyoQAhXocz2C0xNCHOS0qxtmDrEcN+1PRFWy1Mo3u9iGJ9cR Ah4Fr1aAyIJ7YKOGSlpCd47obyzt6eklAFaNREjVCiFZhQW6YyQRLSqu206c65Vh m9kfEjPOLU4iuEn62fbUOf6G+RasvMlH5GZSUKAlr9y25uy6MTpCSWYcLwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGEHhJM+Ha1XvlNGw2LToM1QR1RBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFlNjYyYjU4LTUwOWUtNDBiMS1hZDcwLTVkODNjMDI5MGQ5OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+mAwDQYJKoZIhvcNAQELBQADggEBAKlqQmpDTixEgQTeLkaT /HIK+YUZiAUOv2HY6oVNFLZIdDh9SKkknn0VGeaI40easAknRs3AUxxPgx5W5uvt RBe3joZDdHvKOGtYbTf1gP6jwGIPbm3rTgwXkxeasOLr8blAE1BBs/fdIk7YKfBa kutuJek9tFWX6GK3nxsNeij2Ai1UJPl2kf56UkMVpQUykFygsX5JgJ7WOw6mozWt UN4VeKoigzEdhlzsywuoK/Z6bgEgvXR92JFnDFy68C+Coqq1T6b5U8HOG8b7Bbds WuERy+evTLsCwIYfaiyN0n54dPX9lfYzswAoTyGtFR5Hd1aYOsihC1ZTy9te9EP+ RTM= -----END CERTIFICATE-----Generated at Thu Sep 10 04:29:36 2026 by rpki-client