$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/41e0909c-5b11-419b-8046-ee979b1850a3.roa File: 41e0909c-5b11-419b-8046-ee979b1850a3.roa (raw, json) Hash identifier: SmPlsxECLungyIHHMyQy8G8kScxQ05qlp1iMQkZeceU= Subject key identifier: 46:15:C5:A9:7D:9E:C3:C0:73:F7:25:7D:E9:0A:0F:9D:99:64:8E:15 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6E22080CCBBD142B1976923741B91B519AEFF9D5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/41e0909c-5b11-419b-8046-ee979b1850a3.roa Signing time: Sat 25 Jul 2026 00:00:44 +0000 ROA not before: Sat 25 Jul 2026 00:00:44 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:22:08:0c:cb:bd:14:2b:19:76:92:37:41:b9:1b:51:9a:ef:f9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 25 00:00:44 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=25313e20e9cd67a88735af841e8d10e80c8269af7237571069bf7e4be06d091e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c9:7b:b2:2a:6d:ad:dd:01:58:1e:20:87:eb: 6c:3a:52:55:af:42:6a:11:a1:c9:bc:99:67:f5:41: 44:c5:c5:29:08:2b:ed:e0:92:f8:4c:03:c8:15:53: 8e:89:36:0f:1b:b3:82:83:16:e4:7c:74:e5:9c:d2: 66:f5:ed:08:99:ed:c6:89:02:cd:73:a7:f9:09:6b: bd:6a:ef:4e:fc:89:b2:e4:33:b9:31:76:fe:2f:a3: f6:a2:71:19:03:35:b7:6a:48:60:bc:2f:47:94:64: 92:b7:fc:7b:7a:16:dc:cd:82:84:d5:49:ca:9d:c7: 08:7e:18:da:f9:b7:d4:3e:f6:83:01:2f:ef:ec:e6: 67:97:d4:e2:8a:39:2c:2b:14:45:20:01:d9:2f:b4: 4a:b0:d2:69:dc:ab:a8:41:9c:31:84:f5:da:dd:dc: a3:7f:6a:d8:5b:3e:5f:0f:ea:6e:b8:f2:df:84:e5: 97:76:91:75:64:df:ce:52:89:31:99:44:2b:e8:7d: 6f:ad:9d:1a:67:0d:04:c0:c7:f4:43:e6:ba:82:bb: ad:1a:17:d0:6a:55:85:87:34:66:ea:9b:76:aa:fe: 9e:1b:67:db:3a:5e:f6:62:0e:c2:88:cc:ee:a2:85: aa:13:32:3a:31:2c:83:43:e9:7e:fb:a7:d9:d4:68: 82:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:15:C5:A9:7D:9E:C3:C0:73:F7:25:7D:E9:0A:0F:9D:99:64:8E:15 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/41e0909c-5b11-419b-8046-ee979b1850a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:8800::/40 Signature Algorithm: sha256WithRSAEncryption 1e:08:9b:0a:66:f1:ab:1a:56:1c:3d:c6:e5:1e:06:6c:4d:f1: d4:ec:bd:d9:51:54:ae:e6:59:6a:5d:21:9c:fb:5b:45:cc:8b: 61:5a:91:13:52:bc:7e:b2:95:22:7d:d1:ec:34:c4:42:ab:12: 37:f0:23:3d:ac:2d:86:f3:8d:b6:a2:51:b1:0b:0c:13:c5:ac: e8:42:9a:b0:c5:4c:d9:96:9d:75:f6:0d:85:b3:a4:2d:aa:f5: 01:82:66:cc:de:05:1d:84:b0:fe:93:f9:ca:36:8d:b9:10:34: f5:68:5b:38:cc:e4:fc:21:bc:52:1f:06:7d:20:33:74:f8:2e: 6b:7a:c2:88:2b:df:7f:f1:2a:c7:bd:22:39:60:f5:61:02:65: 12:21:f2:7f:06:3e:cb:1f:6f:b1:b1:f8:0c:33:8c:be:de:c8: d1:fa:ae:47:a8:11:14:1e:24:08:e0:6b:22:04:53:d5:b3:a8: 62:b1:3c:eb:2b:ea:b1:a5:f8:a1:ed:20:ab:07:2e:68:c3:2d: a3:fc:1c:11:72:0c:30:b9:aa:c9:9b:96:3e:f1:c1:0f:45:3a: 04:e3:0d:57:1b:a8:ba:d5:56:99:ed:f3:d9:5e:ae:1d:a4:e6: ca:a6:00:a1:7c:21:1e:47:94:24:47:60:bf:56:93:ea:e9:c2: 4a:52:d0:1c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbiIIDMu9FCsZdpI3QbkbUZrv+dUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNTAwMDA0NFoX DTI2MTAyMzIzNTk1OVowejFJMEcGA1UEBRNAMjUzMTNlMjBlOWNkNjdhODg3MzVh Zjg0MWU4ZDEwZTgwYzgyNjlhZjcyMzc1NzEwNjliZjdlNGJlMDZkMDkxZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ml7siptrd0BWB4gh+tsOlJVr0Jq EaHJvJln9UFExcUpCCvt4JL4TAPIFVOOiTYPG7OCgxbkfHTlnNJm9e0Ime3GiQLN c6f5CWu9au9O/Imy5DO5MXb+L6P2onEZAzW3akhgvC9HlGSSt/x7ehbczYKE1UnK nccIfhja+bfUPvaDAS/v7OZnl9TiijksKxRFIAHZL7RKsNJp3KuoQZwxhPXa3dyj f2rYWz5fD+puuPLfhOWXdpF1ZN/OUokxmUQr6H1vrZ0aZw0EwMf0Q+a6grutGhfQ alWFhzRm6pt2qv6eG2fbOl72Yg7CiMzuooWqEzI6MSyDQ+l++6fZ1GiCswIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEYVxal9nsPAc/clfekKD52ZZI4VMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQxZTA5MDljLTViMTEtNDE5Yi04MDQ2LWVlOTc5YjE4NTBhMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYIgwDQYJKoZIhvcNAQELBQADggEBAB4Imwpm8asaVhw9xuUe BmxN8dTsvdlRVK7mWWpdIZz7W0XMi2FakRNSvH6ylSJ90ew0xEKrEjfwIz2sLYbz jbaiUbELDBPFrOhCmrDFTNmWnXX2DYWzpC2q9QGCZszeBR2EsP6T+co2jbkQNPVo WzjM5PwhvFIfBn0gM3T4Lmt6wogr33/xKse9Ijlg9WECZRIh8n8GPssfb7Gx+Awz jL7eyNH6rkeoERQeJAjgayIEU9WzqGKxPOsr6rGl+KHtIKsHLmjDLaP8HBFyDDC5 qsmblj7xwQ9FOgTjDVcbqLrVVpnt89lerh2k5sqmAKF8IR5HlCRHYL9Wk+rpwkpS 0Bw= -----END CERTIFICATE-----Generated at Wed Aug 26 06:25:04 2026 by rpki-client