$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6863d6e5-517f-4f3b-8358-e9965de82700.roa File: 6863d6e5-517f-4f3b-8358-e9965de82700.roa (raw, json) Hash identifier: w/K5AS7a06Z+iCnDLVx8gTuDUdWMOTge0w74A9XXlp4= Subject key identifier: AB:32:2D:D3:B8:79:91:DF:C7:E0:48:D5:04:52:D2:2F:A2:A1:C1:99 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 44CDCF6512D6ADA412F3F384C69D12499808F13A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6863d6e5-517f-4f3b-8358-e9965de82700.roa Signing time: Thu 30 Jul 2026 00:00:51 +0000 ROA not before: Thu 30 Jul 2026 00:00:51 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:c8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:cd:cf:65:12:d6:ad:a4:12:f3:f3:84:c6:9d:12:49:98:08:f1:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:00:51 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=4777530bdac22c5cf3b4d27284b47956df76e1f3bb629bd542687252c8ba95fc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:11:90:64:8f:8b:18:8e:f4:8f:3b:ab:d4:83: 48:89:07:6e:94:78:10:76:95:8d:74:23:91:bb:ee: 44:8e:bf:0a:7b:60:a6:53:1c:6b:2e:83:7b:8b:c6: a9:cc:ff:4a:77:d2:09:d0:85:5a:c9:a1:32:da:3f: f5:31:c2:9a:26:36:8a:f1:95:c0:87:fd:23:8f:dd: 43:10:a9:eb:02:88:d6:17:d0:6b:f5:b6:96:39:3e: ee:1c:70:19:2a:a2:ad:d9:6c:86:c5:dd:6e:c4:69: 22:5b:2e:12:2c:e7:3c:67:67:d0:80:bd:c1:da:ee: 79:22:67:f1:fe:1b:57:e9:50:3b:d2:cb:0d:b6:a2: 1e:55:71:78:b7:f1:aa:b5:94:e3:17:3c:3a:6c:14: 32:1d:7f:95:a8:00:0c:68:b7:3f:87:55:b4:d3:61: 3e:20:e7:1d:50:27:38:e5:f7:36:2e:e9:a4:3b:74: b2:93:2d:12:91:1d:30:fe:30:6d:21:7f:e6:d4:ee: e1:f0:7a:8a:3c:a0:e4:d9:74:6c:92:d5:4e:a1:a5: 38:2d:14:fe:71:33:9a:ad:61:ec:1a:52:c8:3a:95: 52:e9:6c:cb:3c:ca:38:cc:fd:ff:08:da:90:c0:fa: b5:43:d2:22:a8:b1:ce:96:bd:af:3d:41:06:dc:a6: dc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:32:2D:D3:B8:79:91:DF:C7:E0:48:D5:04:52:D2:2F:A2:A1:C1:99 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6863d6e5-517f-4f3b-8358-e9965de82700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:c8c0::/48 Signature Algorithm: sha256WithRSAEncryption 3c:18:b0:ee:08:78:95:5b:59:03:4d:1a:a0:e0:80:75:97:32: 33:ef:9e:8a:00:ee:58:f9:43:9c:e1:7b:77:25:50:2c:b1:cc: af:af:0f:ab:fd:17:16:12:8c:a8:d2:66:67:a6:57:40:d3:f5: 55:a8:b8:4d:90:9f:d1:57:c0:a3:22:9c:45:22:de:15:94:77: ed:27:9f:1d:50:23:df:aa:94:02:74:28:37:bc:c1:f6:a3:54: 1d:6e:15:4c:2e:c2:24:41:20:3e:53:94:84:69:f8:1e:06:f6: 27:05:c4:30:cc:a4:f2:4c:83:b8:27:e3:64:78:15:4e:e1:b3: 86:c4:7f:7d:32:9f:f3:82:d9:83:85:50:a9:5a:2a:56:e5:95: fa:12:d6:c1:85:31:a1:9c:4e:1e:c2:82:05:0f:1b:f5:eb:86: 42:db:4d:bb:f8:56:58:fc:9b:80:8c:3b:c2:21:75:01:6b:6d: ed:05:bb:4d:80:54:56:f5:ff:ea:75:54:44:06:15:72:ab:55: a1:a0:c4:a5:60:57:4e:23:77:a5:f4:14:bd:aa:3d:dc:22:40: 32:27:aa:bf:79:51:0c:53:98:20:7c:f1:ff:ae:df:75:9d:fd: 47:0e:5b:d6:cd:1e:af:44:fe:42:18:e6:e8:b1:fc:fe:52:a7: b0:94:80:63 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURM3PZRLWraQS8/OExp0SSZgI8TowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMDA1MVoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNANDc3NzUzMGJkYWMyMmM1Y2YzYjRk MjcyODRiNDc5NTZkZjc2ZTFmM2JiNjI5YmQ1NDI2ODcyNTJjOGJhOTVmYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BGQZI+LGI70jzur1INIiQdulHgQ dpWNdCORu+5Ejr8Ke2CmUxxrLoN7i8apzP9Kd9IJ0IVayaEy2j/1McKaJjaK8ZXA h/0jj91DEKnrAojWF9Br9baWOT7uHHAZKqKt2WyGxd1uxGkiWy4SLOc8Z2fQgL3B 2u55Imfx/htX6VA70ssNtqIeVXF4t/GqtZTjFzw6bBQyHX+VqAAMaLc/h1W002E+ IOcdUCc45fc2LumkO3Syky0SkR0w/jBtIX/m1O7h8HqKPKDk2XRsktVOoaU4LRT+ cTOarWHsGlLIOpVS6WzLPMo4zP3/CNqQwPq1Q9IiqLHOlr2vPUEG3KbcewIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKsyLdO4eZHfx+BI1QRS0i+iocGZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY4NjNkNmU1LTUxN2YtNGYzYi04MzU4LWU5OTY1ZGU4MjcwMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8sjAMA0GCSqGSIb3DQEBCwUAA4IBAQA8GLDuCHiVW1kDTRqg 4IB1lzIz756KAO5Y+UOc4Xt3JVAsscyvrw+r/RcWEoyo0mZnpldA0/VVqLhNkJ/R V8CjIpxFIt4VlHftJ58dUCPfqpQCdCg3vMH2o1QdbhVMLsIkQSA+U5SEafgeBvYn BcQwzKTyTIO4J+NkeBVO4bOGxH99Mp/zgtmDhVCpWipW5ZX6EtbBhTGhnE4ewoIF Dxv164ZC2027+FZY/JuAjDvCIXUBa23tBbtNgFRW9f/qdVREBhVyq1WhoMSlYFdO I3el9BS9qj3cIkAyJ6q/eVEMU5ggfPH/rt91nf1HDlvWzR6vRP5CGObosfz+Uqew lIBj -----END CERTIFICATE-----Generated at Wed Aug 26 16:08:51 2026 by rpki-client