$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ccc2fec-a7d2-49ed-8497-75338c1b568e.roa File: 2ccc2fec-a7d2-49ed-8497-75338c1b568e.roa (raw, json) Hash identifier: jcsJskGq2HHokuBYyw/sHAljUOSLmoxlbErxzTy7IZM= Subject key identifier: 23:28:24:A3:52:21:9F:71:4B:31:8C:09:CD:39:4F:CD:C3:A0:CA:82 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5638D24E71E55B2E3987DE5F479CDDBB1ECC50C6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ccc2fec-a7d2-49ed-8497-75338c1b568e.roa Signing time: Wed 05 Aug 2026 00:00:11 +0000 ROA not before: Wed 05 Aug 2026 00:00:11 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:38:d2:4e:71:e5:5b:2e:39:87:de:5f:47:9c:dd:bb:1e:cc:50:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 5 00:00:11 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=0669bb6518791d001ce4d822963e2864f3c00026e785dbcd10357045b3c080fb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:73:dd:3b:55:d1:2e:5b:b8:2a:02:8d:04:17: 9a:6f:0d:fa:0d:77:d3:99:26:6d:a3:b7:95:96:7c: 80:e4:c2:c7:38:50:01:c9:4d:95:9b:fa:0c:63:ea: cf:ec:80:67:d9:2e:c6:8d:f9:d0:ad:5d:2a:6d:cf: 6d:30:9a:f5:c6:66:7a:cf:ea:ce:ca:75:6e:e4:f6: 0a:b5:5f:2b:fb:80:73:65:7b:db:eb:a7:4e:4c:73: 65:ab:9d:19:04:57:2b:02:fe:7d:f2:52:47:21:00: a6:85:c4:cd:0f:f3:03:10:6c:d8:db:ce:8a:fd:5e: c2:1f:00:d1:77:92:a8:d8:ce:f8:fe:f5:50:51:70: 5f:1f:a1:cd:ec:45:8d:ed:43:dd:64:3e:83:a2:77: 91:fd:36:d4:d9:6b:ef:27:a2:c8:df:dc:b8:09:63: dd:01:70:61:6f:41:72:9b:aa:83:7d:14:7b:06:05: 67:a8:5b:4a:f1:8f:02:30:dd:8c:e9:87:c0:69:82: 7c:67:0e:79:a8:d5:12:38:41:7c:8c:0c:2a:3f:1f: 98:b8:67:42:20:ab:d5:c5:2f:93:36:40:b4:4e:14: b0:49:35:f1:db:d2:d5:af:21:eb:4c:02:ff:64:93: fc:3f:63:0a:13:d3:f9:aa:34:b2:2d:4c:a0:4b:fa: 9b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:28:24:A3:52:21:9F:71:4B:31:8C:09:CD:39:4F:CD:C3:A0:CA:82 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ccc2fec-a7d2-49ed-8497-75338c1b568e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:800::/40 Signature Algorithm: sha256WithRSAEncryption 85:4e:f9:6e:e2:ff:93:fd:4e:98:1d:d1:4e:14:93:5e:78:28: a2:9e:b8:b3:2a:d5:9c:3e:df:9a:cc:fc:f7:de:b5:d6:08:49: ea:83:47:a1:a0:45:2f:0b:07:46:38:03:83:92:81:30:7e:dd: 79:4c:f8:45:a7:07:33:f5:13:f1:f3:ce:34:c8:01:37:3a:43: fc:12:67:31:ad:89:dd:d7:75:87:53:9f:8e:13:4d:2b:fe:c0: c9:4c:8b:4b:e0:e8:ec:a1:dd:4b:04:e9:4e:c2:55:14:7e:8c: 41:e1:17:d0:97:c3:72:88:cd:64:d9:89:e2:a4:5f:ad:82:ec: 62:65:48:65:25:dc:5b:63:34:67:2f:aa:ba:97:d4:6e:53:89: b5:94:b9:1b:48:ae:27:24:fb:da:25:12:e9:65:e7:f2:bb:3f: 71:df:10:40:26:2e:65:1a:b0:fb:0a:64:a1:af:ee:eb:df:07: 50:85:76:43:79:61:85:20:fb:1e:2a:42:22:fe:d5:f6:ed:15: a9:ff:94:e7:34:6b:fb:fa:9e:6a:e6:f5:44:30:56:0d:4a:20: 34:0e:7f:4b:60:14:a8:aa:24:10:bd:18:7a:af:a9:ef:2d:a3: 62:0f:cb:ce:44:6b:07:21:bf:a5:da:b5:9d:f8:96:bb:1c:11: 77:fe:da:eb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVjjSTnHlWy45h95fR5zdux7MUMYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwNTAwMDAxMVoX DTI2MTEwMzIzNTk1OVowejFJMEcGA1UEBRNAMDY2OWJiNjUxODc5MWQwMDFjZTRk ODIyOTYzZTI4NjRmM2MwMDAyNmU3ODVkYmNkMTAzNTcwNDViM2MwODBmYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HPdO1XRLlu4KgKNBBeabw36DXfT mSZto7eVlnyA5MLHOFAByU2Vm/oMY+rP7IBn2S7GjfnQrV0qbc9tMJr1xmZ6z+rO ynVu5PYKtV8r+4BzZXvb66dOTHNlq50ZBFcrAv598lJHIQCmhcTND/MDEGzY286K /V7CHwDRd5Ko2M74/vVQUXBfH6HN7EWN7UPdZD6DoneR/TbU2WvvJ6LI39y4CWPd AXBhb0Fym6qDfRR7BgVnqFtK8Y8CMN2M6YfAaYJ8Zw55qNUSOEF8jAwqPx+YuGdC IKvVxS+TNkC0ThSwSTXx29LVryHrTAL/ZJP8P2MKE9P5qjSyLUygS/qbfQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCMoJKNSIZ9xSzGMCc05T83DoMqCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJjY2MyZmVjLWE3ZDItNDllZC04NDk3LTc1MzM4YzFiNTY4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7QgwDQYJKoZIhvcNAQELBQADggEBAIVO+W7i/5P9Tpgd0U4U k154KKKeuLMq1Zw+35rM/PfetdYISeqDR6GgRS8LB0Y4A4OSgTB+3XlM+EWnBzP1 E/HzzjTIATc6Q/wSZzGtid3XdYdTn44TTSv+wMlMi0vg6Oyh3UsE6U7CVRR+jEHh F9CXw3KIzWTZieKkX62C7GJlSGUl3FtjNGcvqrqX1G5TibWUuRtIrick+9olEull 5/K7P3HfEEAmLmUasPsKZKGv7uvfB1CFdkN5YYUg+x4qQiL+1fbtFan/lOc0a/v6 nmrm9UQwVg1KIDQOf0tgFKiqJBC9GHqvqe8to2IPy85Eawchv6XatZ34lrscEXf+ 2us= -----END CERTIFICATE-----Generated at Wed Aug 26 16:08:43 2026 by rpki-client