$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4cdc7d3b-18df-493d-a1d5-cbb7b0773478.roa File: 4cdc7d3b-18df-493d-a1d5-cbb7b0773478.roa (raw, json) Hash identifier: DuvEskxyMDk+zSL+K0ES/mvGGwIKT15c2POGUQispL0= Subject key identifier: 59:2B:72:6D:CD:BF:A3:BD:09:25:44:34:8A:5A:96:1A:47:FF:0B:9E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6B70A169CF20901EC1A643426DD0FD31FF473433 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4cdc7d3b-18df-493d-a1d5-cbb7b0773478.roa Signing time: Mon 10 Aug 2026 00:11:05 +0000 ROA not before: Mon 10 Aug 2026 00:11:05 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:70:a1:69:cf:20:90:1e:c1:a6:43:42:6d:d0:fd:31:ff:47:34:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:11:05 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=75c99bbb2087632f25ce00c4950df0d1f7d12be5cc384daaf0e164be178f8e32, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f7:58:ac:31:86:e7:9c:49:d2:4b:72:b1:32: 7e:cf:c8:ac:59:c1:89:08:71:ed:a0:2b:b3:1f:ee: 0e:d6:c8:81:1f:3d:a3:6e:f5:c5:69:a6:15:f9:c6: 17:f5:75:17:23:05:90:5a:56:52:dc:95:40:6c:31: ac:8b:bb:ef:7f:c8:1a:e8:b8:fd:67:e8:1f:12:14: d4:b3:bd:1a:95:c7:e6:b5:13:dd:12:55:dd:54:be: 02:5c:d6:f6:a2:72:6b:be:5a:69:f2:26:6f:4c:83: 64:4c:7b:ae:6d:01:7b:ae:e3:7b:b6:23:8f:73:9b: fb:d8:19:58:34:77:38:85:d7:e6:92:ca:51:db:80: 70:6a:9c:c6:a0:e6:ea:10:89:13:3c:d9:a7:4c:f1: af:e3:6b:cf:3b:b2:1f:74:2a:73:71:3b:9d:f1:4d: 71:c4:9b:07:e8:de:ea:26:0f:bc:a2:66:26:db:20: 57:56:fe:3d:80:3d:7e:59:05:9f:e2:a0:1d:1b:dd: 33:c9:92:72:4d:30:10:c7:61:6e:97:48:34:92:ed: da:cc:c9:e8:76:be:ae:40:54:47:40:13:12:e5:bf: ac:39:75:b8:3d:44:9d:1c:cc:bc:22:78:c6:61:55: 5a:0d:3e:eb:78:89:c7:45:c0:9a:16:49:f0:d3:ef: 67:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2B:72:6D:CD:BF:A3:BD:09:25:44:34:8A:5A:96:1A:47:FF:0B:9E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4cdc7d3b-18df-493d-a1d5-cbb7b0773478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:4040::/48 Signature Algorithm: sha256WithRSAEncryption 3a:5a:f9:d2:07:31:79:26:66:e6:4f:6d:88:bc:04:df:5a:ca: ed:4b:a4:bb:64:e9:15:c8:ad:1d:9f:19:03:fa:73:53:64:a2: d3:b7:42:df:1f:e0:8b:12:0d:53:1e:db:bc:5d:25:01:12:dc: 70:2a:9a:11:79:59:92:52:ae:65:86:a9:07:53:25:8d:db:4b: 43:04:40:9e:8d:46:62:7c:a8:b4:9c:0a:30:5f:bc:22:70:ea: b8:eb:08:2a:df:c2:62:8b:80:2e:4d:bd:6d:08:19:f3:51:06: dd:d1:2f:ea:7e:0e:97:28:62:21:d1:92:7b:30:57:b4:7c:e4: f6:2a:04:3c:85:36:86:c0:35:b5:b8:0d:93:8e:b9:8e:6a:39: eb:c0:24:37:fb:1a:6b:70:0d:18:a4:5d:3b:67:21:e8:4c:76: 70:1d:ad:b1:fa:69:9b:77:e8:34:0b:57:e2:0a:e5:05:06:b8: a3:e9:34:46:26:39:7a:64:e2:2e:3b:7d:39:03:c7:f1:44:3d: 5b:c4:38:9b:fb:32:e8:a4:ad:e4:7e:3f:38:4d:83:06:e0:3b: 4b:03:f9:79:c7:01:fb:73:6f:31:9d:b2:1c:20:00:ec:2d:e4: 3e:05:83:8c:19:c0:6f:28:f0:a5:98:d9:b6:9a:76:75:da:5e: f1:b4:67:23 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUa3Chac8gkB7BpkNCbdD9Mf9HNDMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMTEwNVoX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNANzVjOTliYmIyMDg3NjMyZjI1Y2Uw MGM0OTUwZGYwZDFmN2QxMmJlNWNjMzg0ZGFhZjBlMTY0YmUxNzhmOGUzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fdYrDGG55xJ0ktysTJ+z8isWcGJ CHHtoCuzH+4O1siBHz2jbvXFaaYV+cYX9XUXIwWQWlZS3JVAbDGsi7vvf8ga6Lj9 Z+gfEhTUs70alcfmtRPdElXdVL4CXNb2onJrvlpp8iZvTINkTHuubQF7ruN7tiOP c5v72BlYNHc4hdfmkspR24BwapzGoObqEIkTPNmnTPGv42vPO7IfdCpzcTud8U1x xJsH6N7qJg+8omYm2yBXVv49gD1+WQWf4qAdG90zyZJyTTAQx2Ful0g0ku3azMno dr6uQFRHQBMS5b+sOXW4PUSdHMy8InjGYVVaDT7reInHRcCaFknw0+9nrwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFkrcm3Nv6O9CSVENIpalhpH/wueMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRjZGM3ZDNiLTE4ZGYtNDkzZC1hMWQ1LWNiYjdiMDc3MzQ3OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6EBAMA0GCSqGSIb3DQEBCwUAA4IBAQA6WvnSBzF5JmbmT22I vATfWsrtS6S7ZOkVyK0dnxkD+nNTZKLTt0LfH+CLEg1THtu8XSUBEtxwKpoReVmS Uq5lhqkHUyWN20tDBECejUZifKi0nAowX7wicOq46wgq38Jii4AuTb1tCBnzUQbd 0S/qfg6XKGIh0ZJ7MFe0fOT2KgQ8hTaGwDW1uA2TjrmOajnrwCQ3+xprcA0YpF07 ZyHoTHZwHa2x+mmbd+g0C1fiCuUFBrij6TRGJjl6ZOIuO305A8fxRD1bxDib+zLo pK3kfj84TYMG4DtLA/l5xwH7c28xnbIcIADsLeQ+BYOMGcBvKPClmNm2mnZ12l7x tGcj -----END CERTIFICATE-----Generated at Wed Aug 26 16:06:48 2026 by rpki-client