$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/266d96b0-d687-4442-ba06-b5d8fd944b82.roa File: 266d96b0-d687-4442-ba06-b5d8fd944b82.roa (raw, json) Hash identifier: 3Udf5M7sM8tbfl+goK3+hlSYT7NJqZcSP9dHaM6y4I0= Subject key identifier: 45:92:0B:BF:8D:87:54:CA:CA:25:71:C2:6F:8A:E3:BC:66:A6:18:C0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5FA49FDD343D803F49AECB7A2B243718F4D87FBD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/266d96b0-d687-4442-ba06-b5d8fd944b82.roa Signing time: Mon 10 Aug 2026 00:00:29 +0000 ROA not before: Mon 10 Aug 2026 00:00:29 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a4:9f:dd:34:3d:80:3f:49:ae:cb:7a:2b:24:37:18:f4:d8:7f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:00:29 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=9bd8b5317b80774ec576c96e184cf671a573a28fd8cdff5150db4073233ee5c3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:10:d4:45:5a:62:51:25:ee:e0:81:56:c8:e0: d2:e0:9c:d4:07:5e:9d:69:57:76:29:84:08:4d:04: b5:fb:4e:96:0a:1c:c3:68:fb:db:ff:85:68:7e:f7: 3b:59:b0:d1:f4:a5:f1:a5:7c:ed:5b:44:b9:5f:77: 8f:5c:80:03:5d:80:23:ca:79:7e:a5:32:44:8a:48: 65:b0:78:12:1a:4a:b7:b5:3d:a4:3f:e8:3c:95:7c: e8:5e:96:a5:2f:65:a2:27:f9:a1:3e:e0:b2:77:0b: e6:47:95:fa:85:f1:9e:e5:63:2f:49:5b:00:9e:a4: f9:b3:2f:53:05:ed:cf:52:9f:23:ad:7d:11:92:ad: 59:b4:68:d7:7d:da:b0:26:a1:5c:38:ac:9a:fb:cf: d0:3e:b0:9c:10:ff:b0:84:a2:bb:ae:89:50:ad:75: 67:1d:22:d2:33:db:f4:80:67:0c:d7:c6:4c:49:76: 1c:a7:21:18:78:52:1b:31:f3:24:fd:ea:60:76:5c: db:c8:ae:33:7a:0a:cd:88:fa:8b:bd:21:63:35:8a: b8:52:41:94:0a:b9:bb:6c:90:c4:13:2e:d4:38:09: 74:74:b3:58:8c:68:39:c1:12:b6:34:12:d1:44:38: ec:8c:64:d4:0e:15:e5:18:4d:cc:44:a1:51:48:6b: 37:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:92:0B:BF:8D:87:54:CA:CA:25:71:C2:6F:8A:E3:BC:66:A6:18:C0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/266d96b0-d687-4442-ba06-b5d8fd944b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:b000::/40 Signature Algorithm: sha256WithRSAEncryption 04:43:15:92:a3:60:4c:dc:73:e3:92:8e:f2:38:fb:f6:0c:c1: 44:d2:51:a0:d8:96:33:04:f5:9e:0e:44:d4:09:ee:22:4f:7e: db:83:d8:1c:86:a7:a8:ba:58:dc:0b:d1:83:1c:d7:c5:bb:5f: 38:8d:ed:c9:ff:5b:fe:f1:93:c3:23:03:16:11:5c:6c:a9:4b: c4:aa:82:cc:d1:42:6f:b4:76:24:53:28:1d:13:0b:80:3f:88: 46:39:d7:54:c3:c4:55:52:7d:ed:a1:a4:c8:f8:28:c2:5e:43: a0:ef:1c:d9:93:21:dd:f2:e4:ec:a3:9f:9b:db:f8:e9:97:b8: 55:52:96:12:01:8b:f8:63:45:36:3a:87:ff:4b:08:c4:f2:73: c0:80:67:fc:57:1f:22:c6:50:8f:3d:68:fe:35:d4:6c:78:9e: 47:b4:b8:55:ad:af:1e:cc:7d:0e:a2:1c:ef:36:6d:46:c5:52: 86:8a:b3:33:93:40:dd:6f:85:93:0a:3e:28:1c:ab:5d:6e:95: 67:5b:1e:29:92:ec:9d:b6:ed:17:12:6d:0d:f3:7f:9b:33:2e: 9b:7c:22:ae:30:f2:7c:dd:50:48:0a:c4:db:cc:80:7e:10:5e: 26:fd:ef:7b:c9:26:bf:61:4b:9b:bf:05:f7:a9:b2:94:2e:1e: cb:9e:3a:32 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUX6Sf3TQ9gD9Jrst6KyQ3GPTYf70wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMDAyOVoX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAOWJkOGI1MzE3YjgwNzc0ZWM1NzZj OTZlMTg0Y2Y2NzFhNTczYTI4ZmQ4Y2RmZjUxNTBkYjQwNzMyMzNlZTVjMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRDURVpiUSXu4IFWyODS4JzUB16d aVd2KYQITQS1+06WChzDaPvb/4Vofvc7WbDR9KXxpXztW0S5X3ePXIADXYAjynl+ pTJEikhlsHgSGkq3tT2kP+g8lXzoXpalL2WiJ/mhPuCydwvmR5X6hfGe5WMvSVsA nqT5sy9TBe3PUp8jrX0Rkq1ZtGjXfdqwJqFcOKya+8/QPrCcEP+whKK7rolQrXVn HSLSM9v0gGcM18ZMSXYcpyEYeFIbMfMk/epgdlzbyK4zegrNiPqLvSFjNYq4UkGU Crm7bJDEEy7UOAl0dLNYjGg5wRK2NBLRRDjsjGTUDhXlGE3MRKFRSGs3+wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEWSC7+Nh1TKyiVxwm+K47xmphjAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI2NmQ5NmIwLWQ2ODctNDQ0Mi1iYTA2LWI1ZDhmZDk0NGI4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYbAwDQYJKoZIhvcNAQELBQADggEBAARDFZKjYEzcc+OSjvI4 +/YMwUTSUaDYljME9Z4ORNQJ7iJPftuD2ByGp6i6WNwL0YMc18W7XziN7cn/W/7x k8MjAxYRXGypS8SqgszRQm+0diRTKB0TC4A/iEY511TDxFVSfe2hpMj4KMJeQ6Dv HNmTId3y5Oyjn5vb+OmXuFVSlhIBi/hjRTY6h/9LCMTyc8CAZ/xXHyLGUI89aP41 1Gx4nke0uFWtrx7MfQ6iHO82bUbFUoaKszOTQN1vhZMKPigcq11ulWdbHimS7J22 7RcSbQ3zf5szLpt8Iq4w8nzdUEgKxNvMgH4QXib973vJJr9hS5u/BfepspQuHsue OjI= -----END CERTIFICATE-----Generated at Wed Aug 26 07:09:47 2026 by rpki-client