$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23781dbd-24b4-4813-8de5-02c4d3e40236.roa File: 23781dbd-24b4-4813-8de5-02c4d3e40236.roa (raw, json) Hash identifier: 1gmbWdkktq1oMUD6wXnRrrrhr8QsSbms1kJAVa+vRVU= Subject key identifier: 4C:2B:1E:52:48:A6:60:F4:0C:FB:A5:0E:33:A1:4E:3B:56:F4:92:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 68169F74FC2738E51BC7434CACE683C133B9D197 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23781dbd-24b4-4813-8de5-02c4d3e40236.roa Signing time: Fri 07 Aug 2026 00:00:09 +0000 ROA not before: Fri 07 Aug 2026 00:00:09 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:16:9f:74:fc:27:38:e5:1b:c7:43:4c:ac:e6:83:c1:33:b9:d1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 7 00:00:09 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=29f9cc131249e594e760a1d23989dcb9b066b5ba113baf551b765b3aba75d84e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:59:22:33:31:22:4b:64:28:01:5d:4f:af: 79:ca:0e:ec:c8:97:b4:4f:4b:f9:a2:f6:d4:37:36: 5c:63:7a:68:79:2d:80:96:10:8f:6f:1c:ed:03:dc: ce:40:dc:77:1b:e5:e3:42:49:ea:90:22:f2:22:35: 0d:42:0a:03:71:6a:27:34:e6:1a:6a:d1:99:d3:07: 19:ad:b6:21:58:8c:cf:2c:31:c1:87:a0:db:6a:fd: c9:b2:fd:3e:2f:e1:57:b5:cb:ae:29:82:ba:e3:1e: 79:28:ed:bc:42:4a:ec:91:be:51:17:21:87:2a:d7: 03:15:f7:18:9f:7f:8e:45:a1:1b:c1:66:da:4a:48: ee:c4:3c:02:bb:98:14:46:1b:9d:57:8f:df:18:42: 51:43:20:40:99:d0:b2:6d:71:ea:3a:10:38:1e:9a: 7b:5c:af:88:e4:dd:4b:45:9e:6e:8f:62:04:85:98: 25:17:24:c1:82:fe:81:52:7f:9e:2b:a1:cd:63:d6: 91:dc:9e:ad:1d:61:f2:e6:d2:30:10:de:49:03:04: 25:69:5e:72:a1:46:41:02:80:72:6d:ec:8d:92:cf: 0b:15:a8:8d:1d:70:88:50:2d:da:90:4d:c3:06:2b: f2:a6:a4:84:4e:99:cd:e6:45:9f:24:98:89:b6:a0: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2B:1E:52:48:A6:60:F4:0C:FB:A5:0E:33:A1:4E:3B:56:F4:92:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23781dbd-24b4-4813-8de5-02c4d3e40236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:a000::/40 Signature Algorithm: sha256WithRSAEncryption 50:1b:ac:35:ba:9c:69:8b:4e:3e:29:3f:5b:3c:67:81:0c:5f: 7b:dd:ce:f1:3f:70:b8:78:9f:77:bd:7e:c0:56:41:f0:f8:d5: cc:3b:29:1f:68:e1:f8:44:24:66:2f:f1:c7:d2:72:42:cb:88: 1b:99:26:e2:a6:c0:0d:fd:a5:b8:f2:4c:0d:17:94:6a:36:8b: ea:a8:bd:3a:90:ae:ec:09:64:eb:ec:3e:5e:0a:17:be:91:c2: 9d:0e:05:9b:f4:ff:6d:70:5e:c5:26:9f:fc:60:2f:fb:a1:13: 7c:ca:3d:ab:97:61:2c:de:44:a5:74:ee:2b:05:71:52:27:60: b6:2e:1c:90:eb:d3:e0:4d:41:18:3d:d5:a8:47:14:e7:4d:97: e9:44:d0:1d:ff:d6:83:3e:17:f8:18:9d:96:aa:2b:14:6e:2d: ad:09:65:f7:35:fe:4f:fb:eb:91:39:d9:f5:9f:5b:75:7d:09: 76:7f:17:a4:20:a5:b7:98:77:a2:24:46:4a:20:df:5d:2d:47: 8b:25:a5:4b:07:8c:78:a7:2b:e3:9a:36:4d:54:75:84:62:43: 21:43:ad:85:aa:e7:d4:42:11:b1:f8:6e:28:a7:c2:f0:01:1a: d5:5a:1d:e9:95:9a:c8:56:dc:50:69:62:2a:64:b7:ce:9a:cf: 0e:e3:98:26 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaBafdPwnOOUbx0NMrOaDwTO50ZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwNzAwMDAwOVoX DTI2MTEwNTIzNTk1OVowejFJMEcGA1UEBRNAMjlmOWNjMTMxMjQ5ZTU5NGU3NjBh MWQyMzk4OWRjYjliMDY2YjViYTExM2JhZjU1MWI3NjViM2FiYTc1ZDg0ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOtZIjMxIktkKAFdT695yg7syJe0 T0v5ovbUNzZcY3poeS2AlhCPbxztA9zOQNx3G+XjQknqkCLyIjUNQgoDcWonNOYa atGZ0wcZrbYhWIzPLDHBh6Dbav3Jsv0+L+FXtcuuKYK64x55KO28Qkrskb5RFyGH KtcDFfcYn3+ORaEbwWbaSkjuxDwCu5gURhudV4/fGEJRQyBAmdCybXHqOhA4Hpp7 XK+I5N1LRZ5uj2IEhZglFyTBgv6BUn+eK6HNY9aR3J6tHWHy5tIwEN5JAwQlaV5y oUZBAoBybeyNks8LFaiNHXCIUC3akE3DBivypqSETpnN5kWfJJiJtqApLwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEwrHlJIpmD0DPulDjOhTjtW9JLgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzNzgxZGJkLTI0YjQtNDgxMy04ZGU1LTAyYzRkM2U0MDIzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba76AwDQYJKoZIhvcNAQELBQADggEBAFAbrDW6nGmLTj4pP1s8 Z4EMX3vdzvE/cLh4n3e9fsBWQfD41cw7KR9o4fhEJGYv8cfSckLLiBuZJuKmwA39 pbjyTA0XlGo2i+qovTqQruwJZOvsPl4KF76Rwp0OBZv0/21wXsUmn/xgL/uhE3zK PauXYSzeRKV07isFcVInYLYuHJDr0+BNQRg91ahHFOdNl+lE0B3/1oM+F/gYnZaq KxRuLa0JZfc1/k/765E52fWfW3V9CXZ/F6QgpbeYd6IkRkog310tR4slpUsHjHin K+OaNk1UdYRiQyFDrYWq59RCEbH4biinwvABGtVaHemVmshW3FBpYipkt86azw7j mCY= -----END CERTIFICATE-----Generated at Wed Aug 26 08:04:39 2026 by rpki-client