$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29829019-1aae-4baa-bdb0-667a2d96a908.roa File: 29829019-1aae-4baa-bdb0-667a2d96a908.roa (raw, json) Hash identifier: r1IVju0HXL678KULRDjUCr0kWDMMgJmEErjEujIQdiQ= Subject key identifier: 8A:50:A4:15:91:0D:9D:EB:67:29:EB:54:F6:BF:63:FC:FE:95:DB:71 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 11FDF0085779B6BE3C3DD2A086B59D98452B5CA2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29829019-1aae-4baa-bdb0-667a2d96a908.roa Signing time: Mon 10 Aug 2026 00:01:05 +0000 ROA not before: Mon 10 Aug 2026 00:01:05 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:fd:f0:08:57:79:b6:be:3c:3d:d2:a0:86:b5:9d:98:45:2b:5c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:01:05 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=207273bc89403f82a3508800a1dca125b74f688f24a289176dd29c8c454a5b05, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:01:f8:7f:4a:d0:62:b6:4a:8a:7d:f9:43: ca:07:9f:e3:76:65:41:bd:3e:b4:b2:39:f9:e0:2a: 08:50:70:48:bd:04:76:ea:f5:c6:b0:a2:3b:08:6e: a2:85:89:95:42:01:ab:e6:99:93:24:a2:fc:5c:12: ae:dc:c8:06:55:e7:10:c5:c9:32:35:5f:8d:3d:4d: 38:16:0e:d9:da:20:07:32:7e:cc:54:1e:72:6a:92: 28:ce:ca:27:97:7c:35:88:47:67:6d:09:96:f8:d6: c9:4e:5d:ce:cb:97:ee:e0:0b:24:35:fa:37:18:74: 6b:75:c4:45:c4:39:f6:5b:1d:09:82:75:3f:10:c8: e8:17:19:18:e7:8a:72:64:03:45:22:be:e1:f4:95: a4:2d:72:39:d6:92:22:39:c5:86:49:6d:21:0c:4a: 3e:72:9e:8e:4e:9c:93:f7:2a:60:83:d2:e9:76:b8: fd:c9:16:5d:7a:a2:a6:81:1d:ce:01:cb:3f:60:e6: 34:f1:45:8c:9c:15:ad:e3:0b:a0:ed:ae:2d:df:01: cb:a0:d5:92:2d:9c:4f:4e:21:16:2e:f6:bf:2f:c4: 7d:59:dd:1a:8a:71:b7:fd:95:7c:68:6c:bb:62:a0: 1f:b0:71:eb:c0:be:4c:70:55:de:a3:13:45:95:da: 98:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:50:A4:15:91:0D:9D:EB:67:29:EB:54:F6:BF:63:FC:FE:95:DB:71 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29829019-1aae-4baa-bdb0-667a2d96a908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:9080::/48 Signature Algorithm: sha256WithRSAEncryption 41:08:20:fd:af:2f:a9:17:bb:13:25:83:db:cf:df:bb:8b:5e: 58:70:09:14:a9:0b:3f:d9:a4:37:60:0f:27:eb:a0:2c:9d:d4: f6:d7:68:b4:f4:20:36:01:e6:b4:94:0a:78:f0:9f:44:54:ac: 1c:be:f1:fa:bc:a1:57:cd:43:22:c3:d7:41:12:7c:f5:b1:ca: 40:fd:8f:1c:9b:12:cd:a8:f3:99:99:19:30:f9:ad:fe:a3:9a: 02:e6:f3:50:8e:16:0a:85:20:5c:00:b1:fe:68:b4:f7:2f:0f: 8d:0c:38:cb:a1:bd:77:84:2a:e2:44:ff:7c:ed:79:f8:48:37: 52:2d:0e:72:49:e6:01:71:fd:38:ad:bc:98:47:45:b9:b2:23: 62:71:18:52:5c:af:79:13:3c:d0:ce:60:59:80:77:19:97:57: 95:f9:ae:b7:d7:f3:85:dd:02:d1:bd:c4:d2:b3:d8:5c:0b:15: ae:e0:e5:1f:81:fd:03:a0:be:f0:b9:bc:75:ee:9e:c5:f9:fa: 76:61:d4:28:ca:64:1a:33:7f:3e:5f:3f:d4:51:f1:6e:5a:51: 0e:e8:c1:59:aa:8c:63:71:f8:fe:bb:76:e6:c8:4a:de:3c:81: 51:f7:8b:17:22:c9:39:70:ea:9f:0b:c2:e3:b6:2d:13:d7:5b: 88:7c:b1:b7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEf3wCFd5tr48PdKghrWdmEUrXKIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMDEwNVoX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAMjA3MjczYmM4OTQwM2Y4MmEzNTA4 ODAwYTFkY2ExMjViNzRmNjg4ZjI0YTI4OTE3NmRkMjljOGM0NTRhNWIwNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLwB+H9K0GK2Sop9+UPKB5/jdmVB vT60sjn54CoIUHBIvQR26vXGsKI7CG6ihYmVQgGr5pmTJKL8XBKu3MgGVecQxcky NV+NPU04Fg7Z2iAHMn7MVB5yapIozsonl3w1iEdnbQmW+NbJTl3Oy5fu4AskNfo3 GHRrdcRFxDn2Wx0JgnU/EMjoFxkY54pyZANFIr7h9JWkLXI51pIiOcWGSW0hDEo+ cp6OTpyT9ypgg9Lpdrj9yRZdeqKmgR3OAcs/YOY08UWMnBWt4wug7a4t3wHLoNWS LZxPTiEWLva/L8R9Wd0ainG3/ZV8aGy7YqAfsHHrwL5McFXeoxNFldqYCQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIpQpBWRDZ3rZynrVPa/Y/z+ldtxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI5ODI5MDE5LTFhYWUtNGJhYS1iZGIwLTY2N2EyZDk2YTkwOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6JCAMA0GCSqGSIb3DQEBCwUAA4IBAQBBCCD9ry+pF7sTJYPb z9+7i15YcAkUqQs/2aQ3YA8n66AsndT212i09CA2Aea0lAp48J9EVKwcvvH6vKFX zUMiw9dBEnz1scpA/Y8cmxLNqPOZmRkw+a3+o5oC5vNQjhYKhSBcALH+aLT3Lw+N DDjLob13hCriRP987Xn4SDdSLQ5ySeYBcf04rbyYR0W5siNicRhSXK95EzzQzmBZ gHcZl1eV+a631/OF3QLRvcTSs9hcCxWu4OUfgf0DoL7wubx17p7F+fp2YdQoymQa M38+Xz/UUfFuWlEO6MFZqoxjcfj+u3bmyErePIFR94sXIsk5cOqfC8Ljti0T11uI fLG3 -----END CERTIFICATE-----Generated at Wed Aug 26 07:11:49 2026 by rpki-client