$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa File: 61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa (raw, json) Hash identifier: B7fI7+JmkdPtbLuS/tkNjtTW3C3xkp4CGsZplfLUeIc= Subject key identifier: 10:31:02:54:3F:F4:F5:A3:1C:D4:87:98:75:59:9B:A1:DA:45:F6:BB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1AF996B323B7971AD3FE02197DD323E8C2D265E2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa Signing time: Sat 01 Aug 2026 00:20:04 +0000 ROA not before: Sat 01 Aug 2026 00:20:04 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f9:96:b3:23:b7:97:1a:d3:fe:02:19:7d:d3:23:e8:c2:d2:65:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:20:04 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=1017f8899f62ae6c118dbdf1803b81f65eb51f954638117cc1e828b56051ad63, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6c:c9:e0:74:da:e9:67:5a:d9:06:13:e8:0a: 5e:cc:e2:63:07:32:0e:6e:b5:b4:6b:f0:fe:d2:e5: 50:cb:ef:f0:b4:b1:aa:54:a3:53:a7:94:c6:a4:21: 25:85:0f:8a:39:b5:78:25:52:12:fe:55:28:62:3b: f2:fe:59:fc:4d:97:4b:b7:09:50:24:96:1f:bd:2a: 7d:1d:39:1f:96:82:fa:d7:cf:8e:ca:73:58:e6:9f: 29:ed:ad:36:7b:24:d8:21:0e:cc:d1:32:f8:46:04: bb:4c:62:eb:78:cb:03:60:3f:79:c4:e8:ba:56:ee: fd:b2:9e:00:1f:6e:3b:42:68:2f:b5:55:bc:c2:62: dc:2f:a6:03:2d:59:c2:52:ad:c7:ef:47:72:27:f4: a1:17:59:53:40:05:8f:ce:d9:e5:b3:57:c4:4e:0a: bd:85:b7:6a:1d:3a:10:df:b6:de:93:8f:e6:59:90: ce:3e:c9:e3:cb:8b:9e:d1:c8:f3:f4:03:50:f0:1c: bf:16:31:ad:28:48:b3:9d:f9:b7:c3:48:2c:61:c2: 59:b0:2f:53:ab:dd:b0:c3:91:5e:07:82:9d:89:dd: d5:b4:0b:51:a2:81:b2:a5:38:65:6c:8e:46:ac:e7: 1f:84:06:4f:af:ec:8c:30:76:78:3e:10:63:4c:8a: f5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:31:02:54:3F:F4:F5:A3:1C:D4:87:98:75:59:9B:A1:DA:45:F6:BB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:c000::/40 Signature Algorithm: sha256WithRSAEncryption 11:7e:6d:a7:6e:3f:66:32:1c:d2:19:36:76:ae:2f:49:f0:0b: 74:65:e6:c7:57:fb:84:06:76:b2:ac:42:a2:0e:ee:77:a1:77: 04:9f:9a:c5:02:1e:f5:53:e7:25:73:c2:09:63:2f:06:b1:fc: bb:bb:84:38:83:cd:74:94:2a:58:44:f3:57:5e:e0:c7:a5:c7: e7:55:fd:3b:fe:14:ce:c0:2f:4e:91:e8:98:16:da:ad:bd:40: a8:31:24:f9:25:b2:3d:11:38:8f:fb:d5:68:dd:87:e9:16:76: fe:3a:92:4b:27:3b:3a:27:25:b0:fa:b3:c7:b9:8f:e6:9f:fb: a8:dd:e5:bd:ef:46:34:f7:71:ff:dd:4e:b6:7a:20:b3:d3:d9: 30:32:64:ee:3a:f6:7d:fa:bb:80:6c:2d:c4:36:96:c2:d6:2d: a0:75:8a:a5:24:e9:70:74:99:bb:64:97:40:70:5f:42:ac:de: 4f:7a:01:bb:d7:e4:a0:27:27:ab:ca:b0:4f:27:74:1f:90:1a: 47:ff:3a:02:b6:25:87:76:9a:e3:75:d3:13:fe:96:82:ef:27: 84:e4:af:1d:d5:84:6f:f3:2f:89:cd:6e:d0:c4:dd:54:6c:22: 2a:10:87:1b:0c:ec:08:39:f6:c8:f8:a3:e5:bd:2b:2e:21:93: ed:36:7b:56 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGvmWsyO3lxrT/gIZfdMj6MLSZeIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMjAwNFoX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAMTAxN2Y4ODk5ZjYyYWU2YzExOGRi ZGYxODAzYjgxZjY1ZWI1MWY5NTQ2MzgxMTdjYzFlODI4YjU2MDUxYWQ2MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2zJ4HTa6Wda2QYT6ApezOJjBzIO brW0a/D+0uVQy+/wtLGqVKNTp5TGpCElhQ+KObV4JVIS/lUoYjvy/ln8TZdLtwlQ JJYfvSp9HTkfloL618+OynNY5p8p7a02eyTYIQ7M0TL4RgS7TGLreMsDYD95xOi6 Vu79sp4AH247QmgvtVW8wmLcL6YDLVnCUq3H70dyJ/ShF1lTQAWPztnls1fETgq9 hbdqHToQ37bek4/mWZDOPsnjy4ue0cjz9ANQ8By/FjGtKEiznfm3w0gsYcJZsC9T q92ww5FeB4Kdid3VtAtRooGypThlbI5GrOcfhAZPr+yMMHZ4PhBjTIr1PwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBAxAlQ/9PWjHNSHmHVZm6HaRfa7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxYjlmZGMwLTE4MzYtNGI2My05NDliLTRhMGUyYjk1NTE2Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoMAwDQYJKoZIhvcNAQELBQADggEBABF+baduP2YyHNIZNnau L0nwC3Rl5sdX+4QGdrKsQqIO7nehdwSfmsUCHvVT5yVzwgljLwax/Lu7hDiDzXSU KlhE81de4Melx+dV/Tv+FM7AL06R6JgW2q29QKgxJPklsj0ROI/71Wjdh+kWdv46 kksnOzonJbD6s8e5j+af+6jd5b3vRjT3cf/dTrZ6ILPT2TAyZO469n36u4BsLcQ2 lsLWLaB1iqUk6XB0mbtkl0BwX0Ks3k96AbvX5KAnJ6vKsE8ndB+QGkf/OgK2JYd2 muN10xP+loLvJ4Tkrx3VhG/zL4nNbtDE3VRsIioQhxsM7Ag59sj4o+W9Ky4hk+02 e1Y= -----END CERTIFICATE-----Generated at Wed Aug 26 08:06:08 2026 by rpki-client