$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/671d95a3-c003-4a86-88c6-405cd8ceff9e.roa File: 671d95a3-c003-4a86-88c6-405cd8ceff9e.roa (raw, json) Hash identifier: 8+FsYHewLwua21OQeLYwQ+GrG5q5eIMkVuzoHeZ0dlw= Subject key identifier: 3B:CB:92:D3:86:7A:27:FD:DD:BC:84:19:94:1F:AE:EE:28:7A:57:5E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3B18FB0075F5B13FC36A5A86CCE55C93659758A1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/671d95a3-c003-4a86-88c6-405cd8ceff9e.roa Signing time: Fri 07 Aug 2026 00:01:04 +0000 ROA not before: Fri 07 Aug 2026 00:01:04 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Aug 2026 00:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:18:fb:00:75:f5:b1:3f:c3:6a:5a:86:cc:e5:5c:93:65:97:58:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 7 00:01:04 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=b8e82b838e1925c0872fafe29f9e0d99f0c7bcd9e30a9ab4e267bb33bbc774e2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ef:dc:9d:f5:35:0e:46:05:6b:5f:f4:bf:31: 7b:4a:2e:20:8d:16:48:99:ee:71:35:75:c4:f4:35: 44:c5:ce:ae:84:36:ca:38:c9:97:ea:b5:5d:10:5d: 6f:b4:c1:9e:65:2f:c8:75:b4:6e:e9:fd:4c:f0:89: 35:1f:1a:44:84:55:c3:17:cd:8c:13:3c:84:f7:d4: 13:a6:f1:38:bc:45:7f:d6:0e:04:6f:5c:04:a7:66: 04:c9:09:ce:93:df:37:2c:fd:17:aa:ce:8e:70:37: 0f:f8:19:ef:85:ac:4d:c2:01:3a:7b:71:43:b0:5d: c1:e7:9a:c8:a8:2d:c2:b0:68:7e:a5:c7:ea:8a:d2: 77:f2:d4:f9:05:70:c2:8e:5e:e8:ed:ea:73:b6:dc: 36:7d:27:55:fb:9f:7a:fe:4f:16:5b:ea:2a:f3:1d: ad:54:ab:49:7e:3f:75:2d:a1:95:94:b9:3b:36:bf: 9c:ef:12:12:84:ea:7b:1a:a8:b4:fd:7d:31:d6:1d: ae:8e:b7:f8:ef:e7:cb:20:2b:65:80:ab:56:9b:30: 4c:b5:c5:da:0b:0a:23:83:67:15:db:fd:57:eb:86: 4e:ae:89:16:f0:74:bb:c8:f0:f3:68:ef:6e:97:b3: c9:39:0b:75:8a:77:16:f0:ee:45:52:89:2d:f1:c6: 97:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CB:92:D3:86:7A:27:FD:DD:BC:84:19:94:1F:AE:EE:28:7A:57:5E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/671d95a3-c003-4a86-88c6-405cd8ceff9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:c800::/40 Signature Algorithm: sha256WithRSAEncryption 25:04:14:07:bd:87:55:1e:34:9d:ae:0b:a3:8e:25:a8:f5:69: 3d:6a:23:df:db:a6:31:8a:82:66:4d:3a:21:1a:c2:ac:34:a9: b9:e8:d8:b7:26:8d:4a:a3:0d:d1:17:f3:0b:20:00:e4:f6:5e: 88:54:eb:00:ce:00:60:e5:6c:b7:a3:f1:8d:2c:8c:fb:52:61: 78:fd:71:59:99:35:1e:d5:b5:09:74:43:23:e1:12:b4:f3:98: a1:53:07:a1:c1:28:83:71:fc:d3:76:cd:0f:9c:84:31:d7:1f: 99:95:31:a5:5a:af:5a:ba:46:12:e6:19:66:95:f6:46:45:24: 46:3a:22:90:69:e9:34:73:9c:e8:93:d8:9c:f3:eb:16:7a:26: 25:af:2e:bf:8e:1f:2b:f8:54:fc:7d:55:5e:dd:25:02:a7:52: 11:f2:61:a2:0c:a1:27:bc:1a:6c:a9:6b:9f:6d:16:8b:58:23: 1d:ce:1a:54:d0:24:35:d4:94:0b:e9:27:b1:12:bd:ed:dc:62: 21:06:01:f0:00:87:63:e9:d5:a2:1a:c4:ef:32:65:80:49:8a: 7f:fa:74:a4:a2:13:03:6b:05:f9:bd:0d:2f:69:c1:e1:69:2a: cf:eb:45:3f:9a:88:96:2f:b8:4a:d5:a4:b6:eb:a2:66:6e:3f: 66:95:8d:43 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOxj7AHX1sT/DalqGzOVck2WXWKEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwNzAwMDEwNFoX DTI2MTEwNTIzNTk1OVowejFJMEcGA1UEBRNAYjhlODJiODM4ZTE5MjVjMDg3MmZh ZmUyOWY5ZTBkOTlmMGM3YmNkOWUzMGE5YWI0ZTI2N2JiMzNiYmM3NzRlMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+/cnfU1DkYFa1/0vzF7Si4gjRZI me5xNXXE9DVExc6uhDbKOMmX6rVdEF1vtMGeZS/IdbRu6f1M8Ik1HxpEhFXDF82M EzyE99QTpvE4vEV/1g4Eb1wEp2YEyQnOk983LP0Xqs6OcDcP+BnvhaxNwgE6e3FD sF3B55rIqC3CsGh+pcfqitJ38tT5BXDCjl7o7epzttw2fSdV+596/k8WW+oq8x2t VKtJfj91LaGVlLk7Nr+c7xIShOp7Gqi0/X0x1h2ujrf47+fLICtlgKtWmzBMtcXa Cwojg2cV2/1X64ZOrokW8HS7yPDzaO9ul7PJOQt1incW8O5FUokt8caXTwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDvLktOGeif93byEGZQfru4oeldeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY3MWQ5NWEzLWMwMDMtNGE4Ni04OGM2LTQwNWNkOGNlZmY5ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba78gwDQYJKoZIhvcNAQELBQADggEBACUEFAe9h1UeNJ2uC6OO Jaj1aT1qI9/bpjGKgmZNOiEawqw0qbno2LcmjUqjDdEX8wsgAOT2XohU6wDOAGDl bLej8Y0sjPtSYXj9cVmZNR7VtQl0QyPhErTzmKFTB6HBKINx/NN2zQ+chDHXH5mV MaVar1q6RhLmGWaV9kZFJEY6IpBp6TRznOiT2Jzz6xZ6JiWvLr+OHyv4VPx9VV7d JQKnUhHyYaIMoSe8Gmypa59tFotYIx3OGlTQJDXUlAvpJ7ESve3cYiEGAfAAh2Pp 1aIaxO8yZYBJin/6dKSiEwNrBfm9DS9pweFpKs/rRT+aiJYvuErVpLbromZuP2aV jUM= -----END CERTIFICATE-----Generated at Thu Aug 20 21:55:01 2026 by rpki-client