$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28c7fdef-48c4-4f4a-8efa-48ddf73bdfb6.roa File: 28c7fdef-48c4-4f4a-8efa-48ddf73bdfb6.roa (raw, json) Hash identifier: Mq3G0dusHTtd5Kz3WmKSLabNWTwj/9QSDQ0D4eJHiZI= Subject key identifier: 45:9C:83:F2:68:68:7C:6F:0F:55:88:C3:A6:72:52:0E:E5:E9:CC:63 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4365056551CC852F63F5ABBFD4A796068CA87B02 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28c7fdef-48c4-4f4a-8efa-48ddf73bdfb6.roa Signing time: Mon 10 Aug 2026 00:00:12 +0000 ROA not before: Mon 10 Aug 2026 00:00:12 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:90c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:65:05:65:51:cc:85:2f:63:f5:ab:bf:d4:a7:96:06:8c:a8:7b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:00:12 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=8d8e38852642d4651ed2f08b2b791507e13fba9a7d814d265a4bcce77121a4e0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c5:34:29:74:a8:af:f1:3e:6c:8a:68:c5:08: 5c:14:16:5d:dd:25:92:00:83:14:11:b0:89:01:3b: 3f:52:2d:f3:a5:8d:5b:ac:16:4e:4a:2a:c3:3d:38: b8:9b:ac:91:50:c6:83:e7:32:e0:a5:0b:7b:ea:03: 47:e7:95:8c:86:32:e3:ab:3a:b7:58:58:fa:90:32: 0a:3f:06:94:b3:64:89:80:dd:f3:de:87:14:76:3a: fe:32:5f:62:fd:61:8a:dc:30:f8:67:6d:89:7c:d9: 37:bf:e6:49:6c:2a:a0:44:50:e4:0c:d8:d6:59:ba: 27:6e:cd:11:24:fc:7c:99:a6:59:4f:27:88:3d:a4: 0a:c6:c5:0c:45:39:b2:8e:72:6d:a7:c8:bc:82:57: dd:f6:39:db:f2:9f:11:2b:0b:2a:72:8d:ec:4e:9d: 8d:35:c0:d9:a4:08:64:d3:0a:3c:8a:1c:ba:ba:7b: 07:68:da:9a:c0:df:96:68:a2:65:40:98:10:21:0b: 53:b1:a4:ed:f2:18:7c:3e:77:35:be:5a:17:6c:5a: 09:4a:01:3c:1f:6e:5a:fc:67:bf:c0:c1:25:8e:e1: b5:89:cf:8f:91:2d:5d:0d:4f:23:95:d8:96:6a:04: 74:2c:3a:80:08:2a:fa:08:c0:f6:91:b5:5a:7e:fe: 0c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9C:83:F2:68:68:7C:6F:0F:55:88:C3:A6:72:52:0E:E5:E9:CC:63 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28c7fdef-48c4-4f4a-8efa-48ddf73bdfb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:90c0::/48 Signature Algorithm: sha256WithRSAEncryption 83:3c:dd:4e:6f:dc:d7:79:6f:72:4c:a3:8b:ae:f5:a8:f2:71: 06:7d:c0:da:9b:b5:bc:4a:fe:19:62:98:50:2b:d3:2d:9d:24: 23:57:f1:b8:b4:94:44:5c:83:04:e3:b4:ad:96:fc:e3:48:19: 9d:47:2d:ce:3c:1f:c2:5d:9c:b2:7f:eb:64:57:58:a9:96:3c: d7:92:dd:43:de:f1:40:58:40:3c:3f:dc:a9:a7:b3:0f:6e:b5: 75:4e:dc:4c:7e:43:91:df:0f:63:ff:7e:0b:80:81:7e:c9:a5: b5:0e:fe:47:02:6d:53:7c:f5:d9:00:9c:cc:78:3d:f9:30:93: 02:6d:27:99:5e:48:8b:74:ec:0b:a1:be:3d:5a:7b:13:f5:74: 20:b5:e5:0a:e4:01:c8:5e:2e:fe:90:a6:f8:6d:35:61:68:ed: 44:1e:72:ad:03:7e:c8:3c:ed:17:b7:50:7d:3c:dd:89:70:36: b9:ac:7b:4b:86:ab:88:cf:d8:9d:24:28:51:89:65:da:56:c9: 81:59:e3:81:98:49:95:2e:a7:84:94:a0:a1:ef:9f:87:0d:6e: b7:67:b4:ce:a1:64:1d:b2:20:30:98:e6:93:33:52:10:74:19: e3:9e:ac:91:fe:23:2f:66:c3:98:5b:ad:b6:5a:35:27:ea:a2: c6:fe:bd:cb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQ2UFZVHMhS9j9au/1KeWBoyoewIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMDAxMloX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAOGQ4ZTM4ODUyNjQyZDQ2NTFlZDJm MDhiMmI3OTE1MDdlMTNmYmE5YTdkODE0ZDI2NWE0YmNjZTc3MTIxYTRlMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28U0KXSor/E+bIpoxQhcFBZd3SWS AIMUEbCJATs/Ui3zpY1brBZOSirDPTi4m6yRUMaD5zLgpQt76gNH55WMhjLjqzq3 WFj6kDIKPwaUs2SJgN3z3ocUdjr+Ml9i/WGK3DD4Z22JfNk3v+ZJbCqgRFDkDNjW Wbonbs0RJPx8maZZTyeIPaQKxsUMRTmyjnJtp8i8glfd9jnb8p8RKwsqco3sTp2N NcDZpAhk0wo8ihy6unsHaNqawN+WaKJlQJgQIQtTsaTt8hh8Pnc1vloXbFoJSgE8 H25a/Ge/wMEljuG1ic+PkS1dDU8jldiWagR0LDqACCr6CMD2kbVafv4M6wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEWcg/JoaHxvD1WIw6ZyUg7l6cxjMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI4YzdmZGVmLTQ4YzQtNGY0YS04ZWZhLTQ4ZGRmNzNiZGZiNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6JDAMA0GCSqGSIb3DQEBCwUAA4IBAQCDPN1Ob9zXeW9yTKOL rvWo8nEGfcDam7W8Sv4ZYphQK9MtnSQjV/G4tJREXIME47StlvzjSBmdRy3OPB/C XZyyf+tkV1ipljzXkt1D3vFAWEA8P9ypp7MPbrV1TtxMfkOR3w9j/34LgIF+yaW1 Dv5HAm1TfPXZAJzMeD35MJMCbSeZXkiLdOwLob49WnsT9XQgteUK5AHIXi7+kKb4 bTVhaO1EHnKtA37IPO0Xt1B9PN2JcDa5rHtLhquIz9idJChRiWXaVsmBWeOBmEmV LqeElKCh75+HDW63Z7TOoWQdsiAwmOaTM1IQdBnjnqyR/iMvZsOYW622WjUn6qLG /r3L -----END CERTIFICATE-----Generated at Wed Aug 26 17:35:17 2026 by rpki-client