$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ed2d804-f183-4b91-be91-d523e20d1e02.roa File: 1ed2d804-f183-4b91-be91-d523e20d1e02.roa (raw, json) Hash identifier: 0aelY6dSEaC2ikThNKwLY8/m3cVqy2s3jbNILT5X39w= Subject key identifier: 65:E0:9D:EC:08:0D:19:42:95:C2:B5:A8:D8:B3:9C:48:4F:95:41:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73EB170D98938839306E4D943572A52974E3C692 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ed2d804-f183-4b91-be91-d523e20d1e02.roa Signing time: Mon 10 Aug 2026 00:11:05 +0000 ROA not before: Mon 10 Aug 2026 00:11:05 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:2020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:eb:17:0d:98:93:88:39:30:6e:4d:94:35:72:a5:29:74:e3:c6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:11:05 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=ba07c5e3c9bb6bc9ea38c9028b8fba779dea43f9ac3f34af8f97170c7d6ede83, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:c3:5d:8f:b0:72:5f:09:1a:50:ca:cb:1e: 5e:b9:e6:74:9c:8f:71:3b:c9:08:f1:eb:1a:0a:cf: 62:48:c4:74:e4:1c:f8:63:44:c3:c3:42:b0:7d:19: 99:4a:e0:e3:2c:72:97:1e:cf:6a:fb:44:84:b9:c5: 7a:c4:32:9c:f5:3b:4f:a2:04:26:da:70:59:34:d7: 1a:ee:70:23:ef:3d:24:68:a3:9b:90:30:7d:ed:d4: df:87:ea:93:e9:79:08:d9:a3:1e:52:18:36:c7:e0: 51:b9:b5:54:79:50:28:29:89:33:2e:1d:c8:62:b9: bb:4b:89:c1:c3:9e:d2:ed:99:37:df:59:75:e4:b7: 38:1b:c2:f7:79:f0:f8:d3:56:0a:d4:dc:88:9f:1a: ce:e7:da:1e:4a:28:cd:bc:21:c2:32:e4:3a:f0:dd: f7:64:4a:6c:ec:ef:c3:dd:3f:1e:df:b2:48:cc:78: 58:96:53:5a:80:79:f3:72:0a:42:c0:7c:1b:cb:b4: fa:c8:d9:4e:68:7b:59:6b:59:20:04:37:0c:5a:29: 3c:f8:7c:04:8e:03:15:0a:6e:41:fb:fc:7c:1b:11: 3e:ad:80:01:71:8a:4f:59:d2:6b:fb:1e:cf:d4:4b: 98:fc:02:b7:ab:30:00:60:8d:82:a8:f5:bc:f9:c3: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E0:9D:EC:08:0D:19:42:95:C2:B5:A8:D8:B3:9C:48:4F:95:41:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ed2d804-f183-4b91-be91-d523e20d1e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:2020::/48 Signature Algorithm: sha256WithRSAEncryption 65:50:4d:48:4d:8a:b4:48:e2:e8:81:3e:66:c6:d7:92:4a:b6: b7:48:41:01:11:ef:04:de:a5:2d:2a:c5:1a:cc:68:02:1b:d7: cf:3b:a0:54:91:b3:9e:04:d5:c6:0a:f2:77:98:8b:77:c6:76: 5c:e3:07:93:6b:6f:f2:eb:63:25:ce:a3:ec:78:1f:f2:64:c0: a3:a5:e4:c9:6d:cf:76:12:f8:2f:05:ee:9e:44:be:36:ce:ba: 0a:e6:4c:72:4d:0c:9c:7f:47:1d:f2:fd:d6:16:d4:03:49:41: e9:fc:f5:ac:48:54:2d:77:40:32:8f:67:bb:29:12:5a:b7:1d: 96:94:f0:82:92:ee:1c:52:13:65:5f:60:41:57:b3:33:c9:a7: 7a:6c:93:92:86:5e:7d:a4:6d:79:4b:b6:a7:02:f6:24:6d:00: 01:c8:d8:ad:fc:09:c4:b9:8b:4d:72:37:8e:c1:d6:e7:68:ed: 70:2f:d4:5f:ba:32:85:68:e5:b7:47:d7:21:3b:0a:b3:bf:89: d1:8b:1b:37:ec:57:75:cb:b8:f6:7d:24:cd:f4:20:49:4a:74: a8:ff:4d:82:65:86:d1:b7:89:a5:24:34:60:41:ea:97:b2:94: 44:29:b7:34:7c:0f:b8:6c:8f:4d:22:40:53:81:f5:02:f0:81: 7c:2a:90:93 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUc+sXDZiTiDkwbk2UNXKlKXTjxpIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMTEwNVoX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAYmEwN2M1ZTNjOWJiNmJjOWVhMzhj OTAyOGI4ZmJhNzc5ZGVhNDNmOWFjM2YzNGFmOGY5NzE3MGM3ZDZlZGU4MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXrDXY+wcl8JGlDKyx5eueZ0nI9x O8kI8esaCs9iSMR05Bz4Y0TDw0KwfRmZSuDjLHKXHs9q+0SEucV6xDKc9TtPogQm 2nBZNNca7nAj7z0kaKObkDB97dTfh+qT6XkI2aMeUhg2x+BRubVUeVAoKYkzLh3I Yrm7S4nBw57S7Zk331l15Lc4G8L3efD401YK1NyInxrO59oeSijNvCHCMuQ68N33 ZEps7O/D3T8e37JIzHhYllNagHnzcgpCwHwby7T6yNlOaHtZa1kgBDcMWik8+HwE jgMVCm5B+/x8GxE+rYABcYpPWdJr+x7P1EuY/AK3qzAAYI2CqPW8+cPprwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGXgnewIDRlClcK1qNiznEhPlUHgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFlZDJkODA0LWYxODMtNGI5MS1iZTkxLWQ1MjNlMjBkMWUwMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6CAgMA0GCSqGSIb3DQEBCwUAA4IBAQBlUE1ITYq0SOLogT5m xteSSra3SEEBEe8E3qUtKsUazGgCG9fPO6BUkbOeBNXGCvJ3mIt3xnZc4weTa2/y 62MlzqPseB/yZMCjpeTJbc92EvgvBe6eRL42zroK5kxyTQycf0cd8v3WFtQDSUHp /PWsSFQtd0Ayj2e7KRJatx2WlPCCku4cUhNlX2BBV7Mzyad6bJOShl59pG15S7an AvYkbQAByNit/AnEuYtNcjeOwdbnaO1wL9RfujKFaOW3R9chOwqzv4nRixs37Fd1 y7j2fSTN9CBJSnSo/02CZYbRt4mlJDRgQeqXspREKbc0fA+4bI9NIkBTgfUC8IF8 KpCT -----END CERTIFICATE-----Generated at Wed Aug 26 00:39:05 2026 by rpki-client