$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c92d86f-d096-414c-bd9a-599ba8ca213f.roa File: 5c92d86f-d096-414c-bd9a-599ba8ca213f.roa (raw, json) Hash identifier: MXF1+uzVP4SCL89TqcCD1emuqiLBdmuRZ8xnEL5eQP8= Subject key identifier: 96:A3:42:8D:3E:52:35:7D:C2:74:85:82:9D:9A:94:DD:FD:53:AF:23 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 24FBA48AECEBA481CBF5F24FF4F7EB8293FD9437 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c92d86f-d096-414c-bd9a-599ba8ca213f.roa Signing time: Sat 01 Aug 2026 00:21:23 +0000 ROA not before: Sat 01 Aug 2026 00:21:23 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fb:a4:8a:ec:eb:a4:81:cb:f5:f2:4f:f4:f7:eb:82:93:fd:94:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:21:23 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=cddb9d0461a8675e41a038e64a5aad2cc1513e73a58e1768bf9fb9e9b459df92, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d1:d3:5a:30:2d:81:d3:03:e0:6d:06:94:23: aa:bb:b7:fd:12:6d:f6:e4:85:48:dc:e1:7a:3e:39: df:ff:b4:e0:63:ac:e0:0d:05:7f:bd:8b:53:8f:df: d0:d9:b5:e6:2d:15:19:6e:a1:64:f4:b9:e4:2a:f5: 1f:57:96:cd:b0:4a:3f:96:c3:89:3f:dd:aa:40:3e: c4:7f:72:6c:05:e5:fd:d3:ff:5a:84:78:12:45:7c: 46:78:17:e2:39:ab:e9:df:31:b3:af:77:ce:85:ff: 71:8c:58:28:cc:d4:e3:4c:a1:37:14:95:ed:45:3e: 0c:8b:5b:f3:7b:19:ed:7c:6e:e8:81:77:93:9a:38: 03:7e:e1:30:40:fb:f4:77:06:50:2c:fc:15:81:5f: 0d:e7:0f:1e:e1:6d:ec:a6:23:71:6c:f1:08:9a:a9: 7f:cf:52:a4:4e:6b:b0:25:a7:0c:2d:23:cf:c6:4c: 5a:b8:de:0b:5d:c2:72:0d:8b:25:e4:00:98:0e:db: 8d:5c:6c:bf:f7:7b:7e:78:fe:22:e4:88:ef:a1:aa: 45:2b:1f:aa:87:5a:a7:f7:55:98:d4:17:ad:62:20: 97:d4:5e:9e:09:a4:b7:84:80:97:49:f9:c3:34:77: 59:df:b7:32:9e:94:b1:16:eb:b6:5d:20:18:80:fc: e9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A3:42:8D:3E:52:35:7D:C2:74:85:82:9D:9A:94:DD:FD:53:AF:23 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c92d86f-d096-414c-bd9a-599ba8ca213f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:2800::/40 Signature Algorithm: sha256WithRSAEncryption 28:f1:8c:33:4d:de:0a:b0:aa:ca:ea:e7:8f:ac:d8:7f:ad:24: 59:2b:7d:d0:62:b5:6d:26:6e:ff:b3:ae:d4:64:70:28:33:24: 40:20:6a:28:9d:d7:8d:94:71:da:92:5c:60:e5:d3:20:70:08: a6:aa:31:19:8f:0b:a1:c8:22:20:90:e7:8c:3d:45:cd:7f:16: 24:e1:53:ac:b5:af:2d:3e:a2:9d:3e:5e:be:80:cd:5e:7c:24: 77:4e:97:49:f8:6e:6d:e3:fd:1d:5a:80:b0:eb:61:fa:14:79: a1:18:4b:3a:fd:df:2b:a7:03:6e:f0:0e:4a:98:00:3b:7a:8d: 83:f3:76:8b:51:d6:10:ac:81:a4:cf:82:f0:f7:a0:85:c7:dd: fa:ca:28:93:e3:3e:e3:96:8a:e8:55:30:77:70:49:48:fa:a7: c7:36:f6:e0:9c:8a:8e:c0:be:4f:22:bc:13:77:cc:e8:fb:17: d9:aa:7b:c9:bc:a8:80:5a:e2:63:37:34:a1:24:9b:6e:7c:9e: 42:79:b3:26:4f:1f:96:b4:a7:38:22:fd:15:d4:1c:15:be:8e: 12:41:78:5d:f2:d5:91:82:5b:60:5d:93:0f:e2:b8:f8:6b:0c: 0b:26:dc:96:21:3a:b9:bb:9e:a3:35:f0:38:b3:5f:b6:1b:8e: 79:2e:9c:eb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJPukiuzrpIHL9fJP9PfrgpP9lDcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMjEyM1oX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAY2RkYjlkMDQ2MWE4Njc1ZTQxYTAz OGU2NGE1YWFkMmNjMTUxM2U3M2E1OGUxNzY4YmY5ZmI5ZTliNDU5ZGY5MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9HTWjAtgdMD4G0GlCOqu7f9Em32 5IVI3OF6Pjnf/7TgY6zgDQV/vYtTj9/Q2bXmLRUZbqFk9LnkKvUfV5bNsEo/lsOJ P92qQD7Ef3JsBeX90/9ahHgSRXxGeBfiOavp3zGzr3fOhf9xjFgozNTjTKE3FJXt RT4Mi1vzexntfG7ogXeTmjgDfuEwQPv0dwZQLPwVgV8N5w8e4W3spiNxbPEImql/ z1KkTmuwJacMLSPPxkxauN4LXcJyDYsl5ACYDtuNXGy/93t+eP4i5IjvoapFKx+q h1qn91WY1BetYiCX1F6eCaS3hICXSfnDNHdZ37cynpSxFuu2XSAYgPzp1wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJajQo0+UjV9wnSFgp2alN39U68jMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVjOTJkODZmLWQwOTYtNDE0Yy1iZDlhLTU5OWJhOGNhMjEzZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacCgwDQYJKoZIhvcNAQELBQADggEBACjxjDNN3gqwqsrq54+s 2H+tJFkrfdBitW0mbv+zrtRkcCgzJEAgaiid142UcdqSXGDl0yBwCKaqMRmPC6HI IiCQ54w9Rc1/FiThU6y1ry0+op0+Xr6AzV58JHdOl0n4bm3j/R1agLDrYfoUeaEY Szr93yunA27wDkqYADt6jYPzdotR1hCsgaTPgvD3oIXH3frKKJPjPuOWiuhVMHdw SUj6p8c29uCcio7Avk8ivBN3zOj7F9mqe8m8qIBa4mM3NKEkm258nkJ5syZPH5a0 pzgi/RXUHBW+jhJBeF3y1ZGCW2Bdkw/iuPhrDAsm3JYhOrm7nqM18DizX7Ybjnku nOs= -----END CERTIFICATE-----Generated at Wed Aug 26 16:10:28 2026 by rpki-client