$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/423962f8-7751-42a3-a459-7a33fc536f8e.roa File: 423962f8-7751-42a3-a459-7a33fc536f8e.roa (raw, json) Hash identifier: AU9uFQCeXRakazlWeEtzx0P8TgG2nd4SrIrGINUeIAk= Subject key identifier: 4F:97:81:E8:7B:4E:8F:69:9C:DA:88:5D:F8:3B:84:17:1C:DE:AD:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1DAF86B7A2B1BE0DCC6209D82635F3C32A197682 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/423962f8-7751-42a3-a459-7a33fc536f8e.roa Signing time: Wed 19 Aug 2026 00:20:21 +0000 ROA not before: Wed 19 Aug 2026 00:20:21 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:af:86:b7:a2:b1:be:0d:cc:62:09:d8:26:35:f3:c3:2a:19:76:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:20:21 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=5d362a83adeceb4ecd8987a1f5b363f25a8d4bce3e68dc9f75e5ba4a57113e35, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:60:6f:ea:62:3c:a3:43:9b:c2:19:0e:c1: 94:03:00:ec:fb:66:70:9f:49:75:7e:7c:1e:49:ae: 74:80:c8:3f:77:f7:1c:47:9b:b4:70:5a:f1:a1:8e: 31:0e:ff:41:a5:b5:c0:9e:92:5c:87:83:ae:15:6f: a9:47:fe:e9:c8:d5:45:c2:fe:e6:90:45:6e:b6:d1: e1:64:c0:df:62:c4:92:c4:fe:54:53:ca:fd:45:b4: a3:b7:24:cc:36:ce:48:f8:7f:a2:68:26:61:04:67: f0:fd:3b:5f:ae:10:f8:6a:a8:b9:75:2f:cb:ef:98: 81:ad:04:39:38:9d:6f:3e:b3:74:4c:00:98:eb:74: e1:46:88:5c:0b:be:81:9d:7c:83:0e:b0:0b:fb:00: 9d:7d:d9:e5:38:39:6e:1c:fd:55:f5:13:31:f8:7a: f1:12:d9:9b:88:05:25:9b:19:c5:e1:b9:5f:35:45: 7e:bd:1c:8f:19:dc:7c:41:1b:7c:37:58:e5:e3:93: b4:05:34:e2:ff:31:8a:ed:a4:dc:a2:0a:7e:c2:5c: 52:b3:a1:e2:98:dd:8d:16:31:1b:e2:58:21:94:74: a1:23:2a:eb:2a:e0:74:22:6d:59:61:b5:1e:f4:4d: 24:f5:48:60:39:9f:18:e4:a9:be:bd:c1:32:5d:11: 40:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:97:81:E8:7B:4E:8F:69:9C:DA:88:5D:F8:3B:84:17:1C:DE:AD:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/423962f8-7751-42a3-a459-7a33fc536f8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 2d:5d:e0:29:e1:2f:25:dd:fc:4f:9e:af:11:de:e4:ea:c2:f4: 71:65:5c:0f:c6:19:07:35:42:6a:c6:fc:25:03:0d:58:b3:74: b8:b9:8a:ce:99:52:e2:04:6a:72:c3:57:40:6f:0b:87:ee:53: b0:b6:05:0a:fc:5b:d4:bb:20:c2:f6:b4:3b:ab:31:0f:cf:5e: 24:76:78:18:a0:53:5f:c0:f2:0d:17:d4:37:f1:ed:7a:3e:cf: 8d:f3:14:c7:06:10:d6:f1:9b:93:fc:5d:3f:b1:22:a3:49:65: 99:c7:54:06:ed:8a:8f:fb:57:33:bb:69:a9:95:99:45:6a:24: 9b:19:c7:fa:42:7c:07:6e:eb:6e:09:55:e6:dd:4c:ea:a1:f0: b6:04:92:b3:ac:78:c5:a1:d4:4b:50:47:51:f6:8d:5b:44:d4: 90:d1:b5:a0:aa:e6:18:03:66:bd:20:65:15:53:12:dd:c3:6c: ab:86:01:ac:0c:94:91:e3:27:0c:18:67:45:38:cc:1b:bc:51: c0:85:3e:0f:85:5a:f8:02:7a:c0:ab:c9:1c:8b:ae:37:f9:3e: 7f:69:ee:d9:cc:15:1a:78:89:a1:91:b5:e0:5c:a7:70:06:82: bb:84:06:a2:96:c2:63:85:cc:bd:4d:a8:27:1f:f1:28:19:05: 35:c1:1d:87 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHa+Gt6Kxvg3MYgnYJjXzwyoZdoIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMjAyMVoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNANWQzNjJhODNhZGVjZWI0ZWNkODk4 N2ExZjViMzYzZjI1YThkNGJjZTNlNjhkYzlmNzVlNWJhNGE1NzExM2UzNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoxgb+piPKNDm8IZDsGUAwDs+2Zw n0l1fnweSa50gMg/d/ccR5u0cFrxoY4xDv9BpbXAnpJch4OuFW+pR/7pyNVFwv7m kEVuttHhZMDfYsSSxP5UU8r9RbSjtyTMNs5I+H+iaCZhBGfw/TtfrhD4aqi5dS/L 75iBrQQ5OJ1vPrN0TACY63ThRohcC76BnXyDDrAL+wCdfdnlODluHP1V9RMx+Hrx EtmbiAUlmxnF4blfNUV+vRyPGdx8QRt8N1jl45O0BTTi/zGK7aTcogp+wlxSs6Hi mN2NFjEb4lghlHShIyrrKuB0Im1ZYbUe9E0k9UhgOZ8Y5Km+vcEyXRFAcwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE+Xgeh7To9pnNqIXfg7hBcc3q3KMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQyMzk2MmY4LTc3NTEtNDJhMy1hNDU5LTdhMzNmYzUzNmY4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaugjAMA0GCSqGSIb3DQEBCwUAA4IBAQAtXeAp4S8l3fxPnq8R 3uTqwvRxZVwPxhkHNUJqxvwlAw1Ys3S4uYrOmVLiBGpyw1dAbwuH7lOwtgUK/FvU uyDC9rQ7qzEPz14kdngYoFNfwPINF9Q38e16Ps+N8xTHBhDW8ZuT/F0/sSKjSWWZ x1QG7YqP+1czu2mplZlFaiSbGcf6QnwHbutuCVXm3UzqofC2BJKzrHjFodRLUEdR 9o1bRNSQ0bWgquYYA2a9IGUVUxLdw2yrhgGsDJSR4ycMGGdFOMwbvFHAhT4PhVr4 AnrAq8kci643+T5/ae7ZzBUaeImhkbXgXKdwBoK7hAailsJjhcy9TagnH/EoGQU1 wR2H -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:59 2026 by rpki-client