$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56f42d5c-eb43-49bf-b9d7-51747507376d.roa File: 56f42d5c-eb43-49bf-b9d7-51747507376d.roa (raw, json) Hash identifier: VabK9IJ6niCCTR0pYXWfa47m8+Ghen7G4aNMcgw8uhQ= Subject key identifier: 8C:BA:53:BA:65:92:40:65:ED:0F:8F:1C:98:D2:60:DF:CE:E7:32:DE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0C06EB231E62A7A7149842B123D3329CB43206D8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56f42d5c-eb43-49bf-b9d7-51747507376d.roa Signing time: Sat 01 Aug 2026 00:20:07 +0000 ROA not before: Sat 01 Aug 2026 00:20:07 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafa:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:06:eb:23:1e:62:a7:a7:14:98:42:b1:23:d3:32:9c:b4:32:06:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:20:07 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=21e7d7543f7cb2650471ee857ec1f8915d397f8132b8da517732ad3fc63de83a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:08:71:9a:59:1a:50:5e:e0:94:04:89:bf:90: 5b:36:8d:8a:38:36:78:04:e7:0a:db:8b:cf:fc:83: 79:27:7c:0c:2d:bf:b5:4e:8d:48:d6:36:37:b5:07: f6:89:ae:c1:8b:d0:c9:da:c0:59:a4:64:d1:6c:a0: d2:6d:e1:a5:89:d5:33:16:9e:1d:c5:f5:e5:90:94: 3b:3d:14:d1:67:f9:5b:d6:91:e0:60:c5:27:d8:87: e3:e5:13:77:f5:ed:51:8f:d3:d4:68:3f:aa:59:c0: 80:99:77:30:ab:77:2b:ec:65:07:07:81:5f:e8:80: a0:0b:c1:8b:28:5c:20:a3:25:7f:67:66:9d:f3:35: 28:0c:e0:42:b9:72:7b:b4:69:36:26:92:84:6c:ee: 51:7e:fd:b5:c1:f1:b2:ee:10:8c:9d:f4:fe:ac:21: 24:85:93:f1:05:23:b6:5f:da:1e:cf:d8:7c:33:4a: 62:27:e2:4d:19:b8:82:f3:8a:cc:45:ab:06:7b:69: 16:c7:b0:f4:59:57:bc:ba:6b:8d:a5:ef:23:48:c4: c9:6f:db:ac:bf:7d:a0:cb:58:69:5b:04:ab:8a:d0: e6:b4:03:aa:1c:5d:bb:f0:62:bc:8a:26:39:11:27: c2:37:74:ad:9c:af:dc:74:28:62:f4:17:2e:ec:63: 44:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BA:53:BA:65:92:40:65:ED:0F:8F:1C:98:D2:60:DF:CE:E7:32:DE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56f42d5c-eb43-49bf-b9d7-51747507376d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafa:a000::/40 Signature Algorithm: sha256WithRSAEncryption 7f:88:c9:74:dc:15:55:18:19:7f:55:dc:8e:7e:10:9a:04:2b: f2:38:e0:99:4e:bb:44:c9:c2:18:db:8e:bd:1e:96:8e:72:89: d1:bc:df:dc:b8:2c:16:2a:58:dc:03:1c:67:99:74:7c:d2:ae: a9:5f:2d:55:e7:bd:3e:a9:3a:72:3e:a4:db:2d:2a:e2:0c:a1: 51:fc:17:4d:0e:ee:bc:ef:9c:b7:a6:ee:54:04:1c:8d:23:d9: 8f:a0:ad:8f:d2:61:20:12:75:6b:4e:79:41:6b:52:9d:28:97: 8b:30:fd:8a:85:b3:ba:55:29:8c:b9:1d:cb:80:d8:b5:72:85: eb:aa:f6:c5:58:af:ae:bc:36:81:3b:02:88:0c:1a:57:c5:db: 6b:e7:21:d6:71:47:e8:94:1a:5a:d3:84:e3:40:eb:7e:d5:bf: c0:1e:9e:bc:24:58:66:93:4c:cd:dd:d5:df:1a:2e:1a:5e:cf: b0:05:5b:f0:85:5f:39:29:4e:26:3f:d6:89:f9:85:b3:03:5b: 2a:03:e7:6f:62:f6:f2:93:c5:e2:33:eb:5a:38:8f:aa:fd:43: c4:54:01:1c:cd:aa:35:b6:ae:6e:92:7d:51:e6:59:63:90:ec: 66:a7:19:54:f6:de:eb:b6:77:82:0e:fb:2d:22:a8:2f:c4:6c: 0c:ea:05:8d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDAbrIx5ip6cUmEKxI9MynLQyBtgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMjAwN1oX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAMjFlN2Q3NTQzZjdjYjI2NTA0NzFl ZTg1N2VjMWY4OTE1ZDM5N2Y4MTMyYjhkYTUxNzczMmFkM2ZjNjNkZTgzYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0whxmlkaUF7glASJv5BbNo2KODZ4 BOcK24vP/IN5J3wMLb+1To1I1jY3tQf2ia7Bi9DJ2sBZpGTRbKDSbeGlidUzFp4d xfXlkJQ7PRTRZ/lb1pHgYMUn2Ifj5RN39e1Rj9PUaD+qWcCAmXcwq3cr7GUHB4Ff 6ICgC8GLKFwgoyV/Z2ad8zUoDOBCuXJ7tGk2JpKEbO5Rfv21wfGy7hCMnfT+rCEk hZPxBSO2X9oez9h8M0piJ+JNGbiC84rMRasGe2kWx7D0WVe8umuNpe8jSMTJb9us v32gy1hpWwSritDmtAOqHF278GK8iiY5ESfCN3StnK/cdChi9Bcu7GNEwQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIy6U7plkkBl7Q+PHJjSYN/O5zLeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2ZjQyZDVjLWViNDMtNDliZi1iOWQ3LTUxNzQ3NTA3Mzc2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+qAwDQYJKoZIhvcNAQELBQADggEBAH+IyXTcFVUYGX9V3I5+ EJoEK/I44JlOu0TJwhjbjr0elo5yidG839y4LBYqWNwDHGeZdHzSrqlfLVXnvT6p OnI+pNstKuIMoVH8F00O7rzvnLem7lQEHI0j2Y+grY/SYSASdWtOeUFrUp0ol4sw /YqFs7pVKYy5HcuA2LVyheuq9sVYr668NoE7AogMGlfF22vnIdZxR+iUGlrThONA 637Vv8AenrwkWGaTTM3d1d8aLhpez7AFW/CFXzkpTiY/1on5hbMDWyoD529i9vKT xeIz61o4j6r9Q8RUARzNqjW2rm6SfVHmWWOQ7GanGVT23uu2d4IO+y0iqC/EbAzq BY0= -----END CERTIFICATE-----Generated at Wed Aug 26 00:37:36 2026 by rpki-client