$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa File: 616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa (raw, json) Hash identifier: RIEFZBkIUL2uC2wtgkuw886dVJfApDxIB8GexKMJ2zE= Subject key identifier: 52:46:F7:6D:9E:2D:9A:81:0E:01:1E:83:03:C2:F1:2F:5B:D3:E1:A9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63C9C9C4704AF670B8A358F0D708876A0E3F11AD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa Signing time: Mon 03 Aug 2026 00:00:37 +0000 ROA not before: Mon 03 Aug 2026 00:00:37 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c9:c9:c4:70:4a:f6:70:b8:a3:58:f0:d7:08:87:6a:0e:3f:11:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 3 00:00:37 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=3b59af05c7e8ecdc57f495c5cb4722483accf5c54812f7b223cbc26f3ef240c8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:02:bb:25:04:cb:d6:7a:62:ce:16:f0:0c:ac: 53:e7:c1:23:41:b0:cf:d6:02:dc:b0:71:c7:9e:e9: 3f:c2:ca:95:3a:04:2a:8e:1a:81:85:72:e0:4d:71: 32:b5:1e:dc:16:d6:af:f7:fd:2a:9c:24:de:0d:c9: a7:5e:8e:18:4c:b5:6a:37:c1:a1:69:4b:41:b6:09: c7:75:5a:9d:c0:a8:e2:59:2b:57:81:2c:2a:8c:28: d0:f2:b5:5d:89:9c:a4:a5:0e:0d:13:c4:cd:7c:ca: f7:6f:c1:32:13:17:9c:5b:f7:20:4c:ac:c1:06:34: 9a:5d:30:ba:31:f3:2f:14:b7:b6:e6:d6:97:91:85: b9:58:9f:8a:77:e7:f0:5b:20:48:71:43:eb:1f:51: 7f:38:54:54:e6:0b:dc:0e:e2:41:b7:f6:aa:53:eb: 90:3b:c4:bb:fa:61:4f:10:c7:3a:b4:23:f1:96:00: 18:77:5f:0b:ca:51:4c:e5:e2:dd:aa:58:68:76:be: 9b:5c:b2:d2:8c:6e:0b:21:25:48:14:08:b6:72:0a: 4e:7d:6c:0b:94:bc:95:40:66:76:f8:95:8f:4a:1f: c3:9d:ab:54:01:b5:50:d1:d3:a1:b2:42:ce:e5:a8: 9a:c7:92:a6:60:c8:9b:13:65:2d:f1:8b:b7:1e:ad: e8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:46:F7:6D:9E:2D:9A:81:0E:01:1E:83:03:C2:F1:2F:5B:D3:E1:A9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1::/32 Signature Algorithm: sha256WithRSAEncryption 0b:3e:ff:75:32:63:6e:f4:17:db:b3:e4:fd:20:9b:9f:ac:d9: e4:da:d9:16:3b:82:e9:cf:83:03:b1:bb:24:dd:4c:b8:69:f1: 89:7a:5f:ce:a5:da:62:a4:27:02:8d:72:95:1a:4f:d3:98:68: d4:59:35:41:00:37:68:c1:d3:47:67:f4:d4:3e:95:59:38:dc: 7e:de:7f:51:05:49:fa:3e:bd:7a:ba:b0:06:b3:13:2c:e5:3e: b6:a8:4b:d3:c3:87:2c:b5:05:99:a8:6b:46:65:ee:67:d3:02: c5:a4:8b:f4:4c:48:12:99:9c:0d:aa:20:27:4a:62:09:a8:1e: f5:ba:0b:fa:36:37:5f:bc:d4:da:84:73:d2:73:f9:e4:83:b5: 7c:a0:ff:d2:fa:c8:a1:2d:e1:90:98:93:6b:fd:ff:20:3f:62: 41:f4:f0:81:18:48:93:59:7d:a6:5b:94:af:4d:09:a3:10:ba: 0e:98:ad:f0:4b:96:c5:e8:44:fc:91:e2:30:30:25:b8:40:b5: bd:c8:1e:4b:35:8c:11:48:f0:0f:af:3f:b2:8c:51:69:7b:bc: a4:bb:9e:af:76:76:ff:cf:17:53:ec:e5:f6:88:b3:07:68:01: 01:ad:25:e3:21:47:52:40:19:98:68:63:57:c5:63:52:b3:13: ad:49:5e:f5 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUY8nJxHBK9nC4o1jw1wiHag4/Ea0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMzAwMDAzN1oX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAM2I1OWFmMDVjN2U4ZWNkYzU3ZjQ5 NWM1Y2I0NzIyNDgzYWNjZjVjNTQ4MTJmN2IyMjNjYmMyNmYzZWYyNDBjODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAK7JQTL1npizhbwDKxT58EjQbDP 1gLcsHHHnuk/wsqVOgQqjhqBhXLgTXEytR7cFtav9/0qnCTeDcmnXo4YTLVqN8Gh aUtBtgnHdVqdwKjiWStXgSwqjCjQ8rVdiZykpQ4NE8TNfMr3b8EyExecW/cgTKzB BjSaXTC6MfMvFLe25taXkYW5WJ+Kd+fwWyBIcUPrH1F/OFRU5gvcDuJBt/aqU+uQ O8S7+mFPEMc6tCPxlgAYd18LylFM5eLdqlhodr6bXLLSjG4LISVIFAi2cgpOfWwL lLyVQGZ2+JWPSh/DnatUAbVQ0dOhskLO5aiax5KmYMibE2Ut8Yu3Hq3oQwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFFJG922eLZqBDgEegwPC8S9b0+GpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxNmRkYWUxLTJlMDctNDU1NS1hYjQ3LTFlZWFjMWQzYjNmNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba8TANBgkqhkiG9w0BAQsFAAOCAQEACz7/dTJjbvQX27Pk/SCb n6zZ5NrZFjuC6c+DA7G7JN1MuGnxiXpfzqXaYqQnAo1ylRpP05ho1Fk1QQA3aMHT R2f01D6VWTjcft5/UQVJ+j69erqwBrMTLOU+tqhL08OHLLUFmahrRmXuZ9MCxaSL 9ExIEpmcDaogJ0piCage9boL+jY3X7zU2oRz0nP55IO1fKD/0vrIoS3hkJiTa/3/ ID9iQfTwgRhIk1l9pluUr00JoxC6Dpit8EuWxehE/JHiMDAluEC1vcgeSzWMEUjw D68/soxRaXu8pLuer3Z2/88XU+zl9oizB2gBAa0l4yFHUkAZmGhjV8VjUrMTrUle 9Q== -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:55 2026 by rpki-client