$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63fa6d0e-6726-46dd-8ccc-34d86aee4374.roa File: 63fa6d0e-6726-46dd-8ccc-34d86aee4374.roa (raw, json) Hash identifier: qTcuKlzt8VfiLqaDBrtgrYqCEdn17tgUvABYa6FT0d8= Subject key identifier: 5F:89:AE:42:39:3B:91:AE:DA:0F:6A:4D:38:A6:69:76:CD:BD:95:E5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 155D13720B1BDE5F0D5C72A4DED28E0BBE5BBBCF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63fa6d0e-6726-46dd-8ccc-34d86aee4374.roa Signing time: Thu 30 Jul 2026 00:10:06 +0000 ROA not before: Thu 30 Jul 2026 00:10:06 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:5d:13:72:0b:1b:de:5f:0d:5c:72:a4:de:d2:8e:0b:be:5b:bb:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:10:06 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=c026e6fae4906b2f2929c9db172baa0da6688333cca8a7ed6b2e0a1fee863204, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:98:b9:83:60:df:25:a0:21:20:94:7d:fa:9a: b2:14:46:4f:bb:ec:be:07:51:71:60:af:af:c5:e2: 74:0d:f5:c2:af:13:80:c7:45:f5:31:e3:ce:f6:a2: 40:3c:16:eb:2a:c1:c8:2b:33:40:f2:16:4b:4a:c2: 3b:84:a0:43:4f:cd:94:9a:d6:c0:d3:f3:ef:e3:26: 6a:5d:fe:b8:3f:56:17:1c:4a:58:8b:e4:ec:0d:ac: 1e:10:c6:03:02:37:b8:6e:7e:70:81:e2:43:98:68: 24:e8:77:49:73:a5:67:43:4c:31:2d:75:06:90:9a: 1b:ee:53:e6:90:45:e3:d7:a4:f5:02:34:dd:9d:03: 2a:ff:00:f7:48:8d:cf:3e:ac:e8:8b:91:67:fa:68: 13:e2:c8:3e:48:eb:e6:b3:2b:ca:6e:f5:ea:ad:c8: 68:c1:21:3f:26:9b:f5:e4:5e:ad:12:c8:eb:2d:f4: 64:a1:00:a9:78:ef:39:43:0a:e7:95:58:26:3b:2b: 3f:8a:05:f4:28:ee:76:92:52:f1:03:8c:59:67:f4: 08:a0:cc:2f:26:d3:ad:bd:64:46:4e:24:f3:b6:75: 2c:32:d0:a4:6b:9e:64:63:ee:f8:89:54:a2:59:44: 7a:f8:a4:15:3d:3e:44:19:b0:e5:b0:e4:1c:0a:6b: fe:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:89:AE:42:39:3B:91:AE:DA:0F:6A:4D:38:A6:69:76:CD:BD:95:E5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63fa6d0e-6726-46dd-8ccc-34d86aee4374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:e000::/40 Signature Algorithm: sha256WithRSAEncryption 4b:f3:51:bb:88:45:e0:5e:d9:27:6a:4a:21:bf:56:da:5c:50: ad:ee:60:3f:17:64:62:8c:fb:ec:5a:21:d2:0d:da:ba:62:0b: 49:0b:17:2c:29:38:67:c5:3f:ff:b7:90:b2:52:75:c2:5c:19: 90:f9:bf:ef:9b:e5:3f:61:63:fa:2f:6e:1f:db:64:20:04:f6: 5b:66:7b:29:8a:9d:4e:0c:2b:6f:0b:75:e8:2e:ed:2e:12:24: 3e:29:d5:e6:98:e3:25:7d:74:bd:fc:e6:82:6e:f2:f8:49:42: 67:10:a6:f2:62:2a:d6:75:9b:17:93:39:d5:e9:07:8e:f9:fa: 60:3a:92:f0:26:2a:27:8a:63:6f:ab:4d:15:67:1f:2c:12:cf: d7:28:ea:a3:9e:14:37:d5:56:d6:7d:23:49:76:eb:f7:44:c3: 90:33:d9:11:65:8f:be:a7:ee:de:11:bb:d8:64:60:b1:25:58: 41:83:62:eb:3a:a0:09:17:05:03:a8:38:d1:b2:8b:5a:1e:f8: 3a:01:a7:34:58:7a:61:2c:db:52:df:98:dc:58:2e:3b:f6:b5: 5b:44:32:e6:ad:04:87:ac:94:2e:c2:a2:1c:2a:1e:0f:93:d4: 7f:d2:4a:28:7f:b0:10:77:a7:05:29:aa:d2:8e:08:a6:2c:47: 3e:ae:d4:3a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFV0Tcgsb3l8NXHKk3tKOC75bu88wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMTAwNloX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAYzAyNmU2ZmFlNDkwNmIyZjI5Mjlj OWRiMTcyYmFhMGRhNjY4ODMzM2NjYThhN2VkNmIyZTBhMWZlZTg2MzIwNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZi5g2DfJaAhIJR9+pqyFEZPu+y+ B1FxYK+vxeJ0DfXCrxOAx0X1MePO9qJAPBbrKsHIKzNA8hZLSsI7hKBDT82UmtbA 0/Pv4yZqXf64P1YXHEpYi+TsDaweEMYDAje4bn5wgeJDmGgk6HdJc6VnQ0wxLXUG kJob7lPmkEXj16T1AjTdnQMq/wD3SI3PPqzoi5Fn+mgT4sg+SOvmsyvKbvXqrcho wSE/Jpv15F6tEsjrLfRkoQCpeO85QwrnlVgmOys/igX0KO52klLxA4xZZ/QIoMwv JtOtvWRGTiTztnUsMtCka55kY+74iVSiWUR6+KQVPT5EGbDlsOQcCmv+MwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFF+JrkI5O5Gu2g9qTTimaXbNvZXlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYzZmE2ZDBlLTY3MjYtNDZkZC04Y2NjLTM0ZDg2YWVlNDM3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8uAwDQYJKoZIhvcNAQELBQADggEBAEvzUbuIReBe2SdqSiG/ VtpcUK3uYD8XZGKM++xaIdIN2rpiC0kLFywpOGfFP/+3kLJSdcJcGZD5v++b5T9h Y/ovbh/bZCAE9ltmeymKnU4MK28Ldegu7S4SJD4p1eaY4yV9dL385oJu8vhJQmcQ pvJiKtZ1mxeTOdXpB475+mA6kvAmKieKY2+rTRVnHywSz9co6qOeFDfVVtZ9I0l2 6/dEw5Az2RFlj76n7t4Ru9hkYLElWEGDYus6oAkXBQOoONGyi1oe+DoBpzRYemEs 21LfmNxYLjv2tVtEMuatBIeslC7CohwqHg+T1H/SSih/sBB3pwUpqtKOCKYsRz6u 1Do= -----END CERTIFICATE-----Generated at Wed Aug 26 13:03:30 2026 by rpki-client