$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31b93eb1-f3df-41e8-97a9-6d61adfae37d.roa File: 31b93eb1-f3df-41e8-97a9-6d61adfae37d.roa (raw, json) Hash identifier: WKhsynH4KtBsyAnOHDjWZsVkRmlBuywjnLmkdpcVCS0= Subject key identifier: 2B:CA:9E:E8:4E:1A:D4:8A:B5:13:0E:FD:F5:60:7B:1B:2F:0B:D7:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 440F1A66E0F1F42F2DBE5C92D877B4046A636EAB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31b93eb1-f3df-41e8-97a9-6d61adfae37d.roa Signing time: Wed 19 Aug 2026 00:01:31 +0000 ROA not before: Wed 19 Aug 2026 00:01:31 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:b0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0f:1a:66:e0:f1:f4:2f:2d:be:5c:92:d8:77:b4:04:6a:63:6e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:01:31 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=03f3c7582fa8cc4a233614e244bc33d8758630fb7f7b6da676cb2a125cd6258b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:24:fe:79:d8:0e:17:83:16:a1:97:32:7c: 70:e6:9f:79:09:e2:fd:b7:4b:05:25:c9:05:f1:37: db:a0:33:dd:68:ec:06:91:e9:1a:65:ea:06:91:fd: 2f:b5:1b:04:87:a3:94:55:70:9a:da:20:58:a9:33: 67:b8:7b:bc:b7:99:78:aa:96:f0:00:74:2b:40:6b: bc:81:e8:5d:5d:4c:5a:ae:32:e2:18:b3:9d:1d:33: 03:68:da:98:e6:30:f8:56:27:9c:e7:89:1b:f1:b0: 69:5e:ae:df:56:93:20:5e:33:77:12:1a:7f:38:ff: 6f:a6:f8:15:b2:1a:39:38:af:21:57:d5:e1:d8:7d: b1:34:20:96:c9:af:06:63:a1:36:33:6c:db:28:c4: 76:56:a5:43:bc:f9:78:8b:ba:2f:1e:b4:ae:20:7a: c0:51:d2:cb:5f:04:a0:c7:a2:95:48:17:79:a0:f7: b7:dd:16:1d:d1:95:29:ac:60:3d:bc:e9:ef:5e:1f: 6f:ff:8d:bc:31:ce:73:8d:41:23:88:db:8c:73:a0: 27:39:ae:d3:c2:3f:ca:d4:de:b8:9d:f5:2b:bd:89: 83:ce:71:b3:07:4e:66:aa:7b:15:88:c3:f4:92:f1: af:91:1a:ee:80:d0:4f:30:9e:21:46:c2:de:f0:c6: 80:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CA:9E:E8:4E:1A:D4:8A:B5:13:0E:FD:F5:60:7B:1B:2F:0B:D7:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31b93eb1-f3df-41e8-97a9-6d61adfae37d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:b0c0::/48 Signature Algorithm: sha256WithRSAEncryption 68:3c:35:fa:ab:bd:19:b0:f4:71:1e:6f:ee:a9:a1:0b:76:fd: 03:1e:7a:3d:52:c1:c0:c0:7e:7e:32:b2:40:1e:05:de:8f:b4: 2d:f1:8c:17:ac:c0:97:06:d3:49:cd:7b:7a:0c:ac:69:2f:02: c9:dc:c8:76:d3:81:5c:0d:8e:7b:d3:7c:a4:ee:77:c1:61:7b: db:bd:50:b1:5f:0f:c9:46:80:87:3c:c4:c7:8f:16:4d:d0:17: 90:5a:0e:c2:c5:54:a9:77:ff:fd:a4:f6:f2:c2:b0:fb:9a:cb: 65:3f:b7:7e:e9:17:32:1a:c1:fa:19:3c:8a:04:b8:83:14:64: c0:a5:62:2d:9a:b9:56:32:73:8a:64:85:f7:da:15:88:47:9f: 46:08:a8:30:bc:3e:7e:6c:05:2d:de:47:31:ec:20:63:79:47: 14:fa:f1:80:c3:15:d1:cd:54:44:53:e3:95:35:6b:4b:51:56: 21:5f:5d:81:12:ae:34:ff:6c:c4:3c:61:90:90:6d:27:cb:61: f6:ce:fa:15:f7:b0:29:db:05:38:13:39:5b:d7:88:d5:35:bf: 24:b2:6b:38:0f:c9:b8:cd:a6:1c:15:ec:20:2e:06:2c:ec:51: 16:92:4b:cc:33:a6:f2:75:e2:4a:49:b9:4b:99:03:bc:55:e6: 6e:a9:68:4f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURA8aZuDx9C8tvlyS2He0BGpjbqswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMDEzMVoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAMDNmM2M3NTgyZmE4Y2M0YTIzMzYx NGUyNDRiYzMzZDg3NTg2MzBmYjdmN2I2ZGE2NzZjYjJhMTI1Y2Q2MjU4YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsssk/nnYDheDFqGXMnxw5p95CeL9 t0sFJckF8TfboDPdaOwGkekaZeoGkf0vtRsEh6OUVXCa2iBYqTNnuHu8t5l4qpbw AHQrQGu8gehdXUxarjLiGLOdHTMDaNqY5jD4Viec54kb8bBpXq7fVpMgXjN3Ehp/ OP9vpvgVsho5OK8hV9Xh2H2xNCCWya8GY6E2M2zbKMR2VqVDvPl4i7ovHrSuIHrA UdLLXwSgx6KVSBd5oPe33RYd0ZUprGA9vOnvXh9v/428Mc5zjUEjiNuMc6AnOa7T wj/K1N64nfUrvYmDznGzB05mqnsViMP0kvGvkRrugNBPMJ4hRsLe8MaAawIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCvKnuhOGtSKtRMO/fVgexsvC9cUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMxYjkzZWIxLWYzZGYtNDFlOC05N2E5LTZkNjFhZGZhZTM3ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaurDAMA0GCSqGSIb3DQEBCwUAA4IBAQBoPDX6q70ZsPRxHm/u qaELdv0DHno9UsHAwH5+MrJAHgXej7Qt8YwXrMCXBtNJzXt6DKxpLwLJ3Mh204Fc DY5703yk7nfBYXvbvVCxXw/JRoCHPMTHjxZN0BeQWg7CxVSpd//9pPbywrD7mstl P7d+6RcyGsH6GTyKBLiDFGTApWItmrlWMnOKZIX32hWIR59GCKgwvD5+bAUt3kcx 7CBjeUcU+vGAwxXRzVREU+OVNWtLUVYhX12BEq40/2zEPGGQkG0ny2H2zvoV97Ap 2wU4Ezlb14jVNb8ksms4D8m4zaYcFewgLgYs7FEWkkvMM6bydeJKSblLmQO8VeZu qWhP -----END CERTIFICATE-----Generated at Wed Aug 26 00:38:42 2026 by rpki-client