$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/480c0e9e-6c3b-4ebf-aac8-e16cee47b0c2.roa File: 480c0e9e-6c3b-4ebf-aac8-e16cee47b0c2.roa (raw, json) Hash identifier: LL0UYuSE9xn3KVycRJQ18yqGDA1VoT8ioR/RjjLrpkY= Subject key identifier: E0:23:B4:D1:56:2F:31:9C:93:06:D4:78:E4:EA:52:36:08:77:3B:5C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7CDE86CB1199E2F6E5D2ACD77BC419AEBF55C29F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/480c0e9e-6c3b-4ebf-aac8-e16cee47b0c2.roa Signing time: Wed 19 Aug 2026 00:10:42 +0000 ROA not before: Wed 19 Aug 2026 00:10:42 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:de:86:cb:11:99:e2:f6:e5:d2:ac:d7:7b:c4:19:ae:bf:55:c2:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:10:42 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=1d4bf73d9a96d287a27b4f910ef1ca273d229e7e4c486cbc49f78d3ee02fa2dc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:31:68:bc:4f:ea:e1:b6:7b:90:04:34:b5:89: 19:69:06:13:ba:82:dd:d7:5f:28:1f:bf:d2:82:36: cb:99:7e:8c:70:4a:5a:73:e7:e3:27:22:f4:63:95: 1d:dd:44:90:7d:8e:69:26:e3:bf:0a:9f:ce:66:f1: d5:28:33:82:53:9e:9d:96:e8:f4:2a:9e:84:84:02: a5:fb:3a:e5:b0:8f:9f:5d:2d:07:e9:d0:c2:a0:ee: cd:c5:85:5c:bd:38:a3:2f:36:66:46:8f:3c:7c:80: 7f:5f:b1:24:4d:85:a5:11:eb:19:6b:c3:0a:c1:fb: 31:63:c0:33:80:ab:4c:ca:f3:ad:74:1c:9a:91:52: fb:fb:f9:af:0c:f5:bc:f4:f2:cd:78:35:35:af:ce: 31:03:ea:df:ca:71:e8:a4:3c:65:bb:3b:78:47:33: 2d:6d:55:3a:0c:fa:18:bb:78:6e:23:e0:17:8a:e3: ac:41:19:d5:5d:d2:74:61:2d:16:26:28:ef:d9:b7: 23:93:af:3b:62:26:cd:75:3f:3c:97:d2:64:c4:41: 1e:de:a7:fe:1b:15:58:4e:73:e3:50:9f:53:37:97: 91:d1:9f:2e:14:24:d3:be:90:cc:1f:5d:9c:bf:0c: 91:30:7e:83:9b:95:be:c4:19:3b:4b:6d:81:00:32: d5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:23:B4:D1:56:2F:31:9C:93:06:D4:78:E4:EA:52:36:08:77:3B:5C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/480c0e9e-6c3b-4ebf-aac8-e16cee47b0c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 18:59:a0:f7:a1:7d:ec:e1:50:8d:18:90:ef:a3:d6:e9:20:5e: f8:c9:4c:5a:91:da:e4:27:9c:dc:71:17:da:43:4a:3b:b0:21: 49:97:c8:8f:4e:d2:8a:6f:16:0b:9d:30:72:d0:db:73:13:0b: 07:2e:fc:be:38:f7:ad:c9:2d:00:a6:ed:cd:cb:0f:e6:b9:a8: 4b:04:78:54:65:d6:8b:5b:13:13:79:ae:c4:44:b6:26:32:0b: be:da:28:72:9c:87:f2:54:b4:58:86:1c:a6:a4:97:c9:a3:59: 82:b9:59:60:29:d0:ea:95:02:01:59:d1:d8:7a:69:c7:bf:20: c8:00:a6:ca:81:86:eb:aa:16:b5:7c:1b:04:b9:2c:ab:c8:7d: 9b:8e:79:fc:58:63:df:60:2d:c3:6c:09:2f:03:1b:47:18:44: 1e:41:91:5a:21:78:44:42:ad:65:fa:bc:03:a4:b3:e8:3c:ba: 74:e5:d7:8e:ae:57:0c:86:65:70:15:8a:8b:fe:de:f2:b1:e6: 01:d1:6f:84:de:83:91:34:d2:94:55:97:61:dc:8f:ce:d6:6c: 4b:f2:51:ca:40:22:e3:d4:36:12:ae:fb:09:38:1e:a0:b4:25: 12:6e:f2:3a:bc:f0:68:e3:b5:8f:9f:7c:e5:7f:dd:03:92:d9: 6d:f7:20:96 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfN6GyxGZ4vbl0qzXe8QZrr9Vwp8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMTA0MloX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAMWQ0YmY3M2Q5YTk2ZDI4N2EyN2I0 ZjkxMGVmMWNhMjczZDIyOWU3ZTRjNDg2Y2JjNDlmNzhkM2VlMDJmYTJkYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTFovE/q4bZ7kAQ0tYkZaQYTuoLd 118oH7/SgjbLmX6McEpac+fjJyL0Y5Ud3USQfY5pJuO/Cp/OZvHVKDOCU56dluj0 Kp6EhAKl+zrlsI+fXS0H6dDCoO7NxYVcvTijLzZmRo88fIB/X7EkTYWlEesZa8MK wfsxY8AzgKtMyvOtdByakVL7+/mvDPW89PLNeDU1r84xA+rfynHopDxluzt4RzMt bVU6DPoYu3huI+AXiuOsQRnVXdJ0YS0WJijv2bcjk687YibNdT88l9JkxEEe3qf+ GxVYTnPjUJ9TN5eR0Z8uFCTTvpDMH12cvwyRMH6Dm5W+xBk7S22BADLVdwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOAjtNFWLzGckwbUeOTqUjYIdztcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ4MGMwZTllLTZjM2ItNGViZi1hYWM4LWUxNmNlZTQ3YjBjMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauiDAMA0GCSqGSIb3DQEBCwUAA4IBAQAYWaD3oX3s4VCNGJDv o9bpIF74yUxakdrkJ5zccRfaQ0o7sCFJl8iPTtKKbxYLnTBy0NtzEwsHLvy+OPet yS0Apu3Nyw/muahLBHhUZdaLWxMTea7ERLYmMgu+2ihynIfyVLRYhhympJfJo1mC uVlgKdDqlQIBWdHYemnHvyDIAKbKgYbrqha1fBsEuSyryH2bjnn8WGPfYC3DbAkv AxtHGEQeQZFaIXhEQq1l+rwDpLPoPLp05deOrlcMhmVwFYqL/t7yseYB0W+E3oOR NNKUVZdh3I/O1mxL8lHKQCLj1DYSrvsJOB6gtCUSbvI6vPBo47WPn3zlf90Dktlt 9yCW -----END CERTIFICATE-----Generated at Wed Aug 26 16:04:57 2026 by rpki-client