$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/53031915-2be6-4f88-ba17-79c0452b5b39.roa File: 53031915-2be6-4f88-ba17-79c0452b5b39.roa (raw, json) Hash identifier: lq8dt9pRBPnvgX9Fvxi0Ldtmv4wr/lOS9oSeW3Uygn0= Subject key identifier: D7:DC:4D:35:8E:D1:06:71:BF:F9:91:F9:21:7E:8C:9D:8B:2D:5D:60 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E9F1F2F6FD668A5ABC704CD35162ABEEC096E61 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/53031915-2be6-4f88-ba17-79c0452b5b39.roa Signing time: Mon 10 Aug 2026 00:00:28 +0000 ROA not before: Mon 10 Aug 2026 00:00:28 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9f:1f:2f:6f:d6:68:a5:ab:c7:04:cd:35:16:2a:be:ec:09:6e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:00:28 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=f2d6f84a7fdc281eb51d8bfec946bfe709f06d0e6a6c8a8adb4de4d90f481066, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1f:d2:98:55:50:88:1d:31:d6:fd:05:52:0b: 4c:6e:76:db:5f:78:b6:65:61:b9:ef:a1:c5:d0:50: cf:ab:5f:e9:ce:4a:46:a3:98:b4:aa:27:96:67:f7: 6c:b4:ac:54:a0:5b:50:85:ee:f0:23:23:9d:c0:3e: fb:86:e1:23:a6:f3:12:db:fe:24:24:84:28:a6:77: c6:67:28:64:52:23:2e:18:6b:c8:5f:6e:9d:66:91: e1:6a:c4:25:26:cd:7c:92:29:39:0a:ab:2d:41:2b: cd:6c:1c:ef:9f:3b:2d:f8:a6:81:ea:3c:42:ca:11: 00:5c:9b:c2:b4:7b:1f:0f:98:9b:1f:3c:b5:c7:b9: 30:95:e8:cb:c7:5e:da:4d:04:73:fd:06:92:b0:e5: 3a:54:58:28:c9:fc:9b:83:42:38:75:b4:fb:0b:70: b6:73:5d:a3:f0:2b:0b:36:f1:17:79:98:82:89:91: 92:56:dc:04:18:78:d8:b0:90:63:51:de:0f:58:4a: 2d:8b:5c:bc:ca:26:58:8e:52:65:1a:e8:e6:c4:3b: 5a:08:20:29:d5:8d:80:79:e6:ec:67:21:dd:c6:d2: 4d:9e:cd:40:35:15:d5:bf:d2:4e:f1:d2:61:37:12: fe:d3:ec:47:30:f8:5c:ab:ca:f5:f4:58:f2:ff:23: 24:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DC:4D:35:8E:D1:06:71:BF:F9:91:F9:21:7E:8C:9D:8B:2D:5D:60 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/53031915-2be6-4f88-ba17-79c0452b5b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:2800::/40 Signature Algorithm: sha256WithRSAEncryption 33:92:a8:41:76:58:fa:10:4a:bd:56:91:97:90:65:d1:7d:f1: 30:f0:13:58:3d:be:9e:95:1b:07:31:b3:82:f3:89:6d:30:dc: fa:21:22:9e:a1:bd:60:e1:64:e6:62:af:3f:bb:c8:89:76:d8: bc:16:b3:8a:25:80:f1:44:f9:72:7a:1f:1a:ef:e8:d6:df:df: 92:4d:df:e3:fd:e2:99:9b:89:3a:d5:29:43:3e:07:23:d3:b7: fe:09:31:6f:20:2e:dc:c7:60:26:2b:cc:7c:f4:99:cf:80:8c: 51:ae:f6:4c:74:8f:9b:c5:fc:0c:ee:d4:8e:e2:41:fa:b8:0b: 29:1e:91:29:f3:f8:a4:97:02:74:f4:91:fe:fd:03:d8:e8:f5: dc:c5:12:42:77:8e:2e:35:5d:f0:dd:a7:ff:e3:20:6a:20:ea: a6:2b:4f:33:29:9c:88:49:60:03:ef:5a:60:c5:93:cf:2f:a6: 09:44:6a:0f:23:a3:19:0d:3e:0e:a3:23:af:05:76:32:0e:32: ef:5a:4b:d1:ac:c2:73:14:8c:cd:6b:56:51:d6:76:7c:f7:0d: 97:1e:3c:61:f4:e1:1d:b8:d0:2b:32:3b:7b:26:aa:24:05:ed: fd:b1:9c:ce:a2:c2:c7:b7:d8:a0:03:77:b3:24:ec:a4:00:00: ae:ab:90:50 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULp8fL2/WaKWrxwTNNRYqvuwJbmEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMDAyOFoX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAZjJkNmY4NGE3ZmRjMjgxZWI1MWQ4 YmZlYzk0NmJmZTcwOWYwNmQwZTZhNmM4YThhZGI0ZGU0ZDkwZjQ4MTA2NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx/SmFVQiB0x1v0FUgtMbnbbX3i2 ZWG576HF0FDPq1/pzkpGo5i0qieWZ/dstKxUoFtQhe7wIyOdwD77huEjpvMS2/4k JIQopnfGZyhkUiMuGGvIX26dZpHhasQlJs18kik5CqstQSvNbBzvnzst+KaB6jxC yhEAXJvCtHsfD5ibHzy1x7kwlejLx17aTQRz/QaSsOU6VFgoyfybg0I4dbT7C3C2 c12j8CsLNvEXeZiCiZGSVtwEGHjYsJBjUd4PWEoti1y8yiZYjlJlGujmxDtaCCAp 1Y2AeebsZyHdxtJNns1ANRXVv9JO8dJhNxL+0+xHMPhcq8r19Fjy/yMkiQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNfcTTWO0QZxv/mR+SF+jJ2LLV1gMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUzMDMxOTE1LTJiZTYtNGY4OC1iYTE3LTc5YzA0NTJiNWIzOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6CgwDQYJKoZIhvcNAQELBQADggEBADOSqEF2WPoQSr1WkZeQ ZdF98TDwE1g9vp6VGwcxs4LziW0w3PohIp6hvWDhZOZirz+7yIl22LwWs4olgPFE +XJ6Hxrv6Nbf35JN3+P94pmbiTrVKUM+ByPTt/4JMW8gLtzHYCYrzHz0mc+AjFGu 9kx0j5vF/Azu1I7iQfq4CykekSnz+KSXAnT0kf79A9jo9dzFEkJ3ji41XfDdp//j IGog6qYrTzMpnIhJYAPvWmDFk88vpglEag8joxkNPg6jI68FdjIOMu9aS9GswnMU jM1rVlHWdnz3DZcePGH04R240CsyO3smqiQF7f2xnM6iwse32KADd7Mk7KQAAK6r kFA= -----END CERTIFICATE-----Generated at Wed Aug 26 16:09:57 2026 by rpki-client