$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/693455fd-3a93-4212-92a9-8a83e21ca82d.roa File: 693455fd-3a93-4212-92a9-8a83e21ca82d.roa (raw, json) Hash identifier: boCk0HL3leXEtAQTUMau6Yb+NasLZN94EQAixh/RTto= Subject key identifier: 0B:42:35:2E:15:4C:CB:BD:86:34:0D:37:16:EA:B2:FB:EC:71:B0:41 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6B5D98A7829A3C287C6B91F7B3302E1DFB63499D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/693455fd-3a93-4212-92a9-8a83e21ca82d.roa Signing time: Wed 19 Aug 2026 00:10:30 +0000 ROA not before: Wed 19 Aug 2026 00:10:30 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:5d:98:a7:82:9a:3c:28:7c:6b:91:f7:b3:30:2e:1d:fb:63:49:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:10:30 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=bfac66286daf1860a6b6c0974cd66cbdf925ea165ea292a6c7c899e122a59456, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d8:1a:e4:30:1a:77:de:57:aa:e5:4b:32:7c: b0:9e:9a:06:b4:aa:99:23:50:1a:1e:8d:ba:a9:d7: 13:e6:97:83:cf:c6:0a:4a:48:56:02:ce:09:2d:ee: f3:aa:0c:16:af:44:f9:b0:c3:b5:c7:c1:8d:cd:6d: 92:f0:e3:e6:c9:aa:8f:94:b0:6a:dd:50:b1:16:b5: ad:80:2f:3f:18:07:85:4f:56:f0:f0:47:ad:f2:d2: ef:64:a8:74:b5:81:8b:c5:ca:85:4b:6d:65:fd:6b: 27:24:e2:e6:dc:00:fa:e4:0a:ab:ca:0b:fd:1d:7a: 6d:51:00:01:90:08:4d:0d:a7:7c:5c:c5:22:43:a5: 69:06:17:11:f7:a5:fe:07:09:01:01:69:a1:64:d7: f7:ff:d2:24:3d:c8:73:8f:d8:98:07:59:49:64:c2: 45:b3:ee:6a:db:7b:9d:35:0c:c2:8d:77:cf:6a:f2: 81:dc:75:dc:42:72:e8:93:86:d1:35:eb:7c:52:42: ca:67:3c:fc:b0:e4:50:5d:6a:5d:3a:78:69:b6:b3: 00:44:b4:6b:bc:f6:36:4c:95:86:34:78:3a:6c:31: 68:fc:4e:0b:1c:12:03:0b:14:1a:49:0a:33:95:ef: c5:b1:e7:4b:15:b0:8d:8f:19:54:b6:fa:45:60:eb: 77:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:42:35:2E:15:4C:CB:BD:86:34:0D:37:16:EA:B2:FB:EC:71:B0:41 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/693455fd-3a93-4212-92a9-8a83e21ca82d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:c000::/40 Signature Algorithm: sha256WithRSAEncryption 8b:30:1e:c5:42:0d:54:df:8e:ef:bf:a0:55:71:33:5e:76:4d: 0c:a7:e6:8f:19:41:8d:e7:aa:a1:0c:40:69:ae:bd:ae:07:61: cb:cb:bb:19:cc:0a:99:95:d4:54:04:ff:e9:13:67:bd:e5:6d: 06:da:22:29:10:90:78:56:11:10:bf:b5:e7:a0:41:58:c3:48: fa:53:91:cf:a6:46:95:d6:c1:18:20:9a:eb:03:7c:c4:e8:4c: f6:00:ec:04:c8:6a:63:c1:1c:e9:22:2f:5f:86:d2:3a:e5:e6: 5a:cd:7d:20:ef:bc:ec:9e:37:b4:50:29:59:c1:93:d0:b0:c9: 7e:a7:10:f9:45:87:24:f5:6e:22:1f:7a:49:45:cd:5e:a2:3e: a8:0a:73:bc:5b:ca:79:45:c5:57:27:65:4d:3e:70:e4:31:f2: fe:a2:c0:4b:b0:03:32:6b:a7:de:6f:cd:be:59:68:c4:9b:26: 35:33:e9:15:e5:eb:a2:10:d9:85:94:e5:36:c8:c2:80:d8:c5: dc:f7:bd:98:50:44:46:c1:bd:c4:ad:e6:b6:80:de:09:df:e8: 4e:bf:bb:b3:99:b0:0f:e7:41:74:e7:8c:b6:56:f7:b4:f8:3c: 41:a3:3f:53:7f:9a:0d:49:8b:28:4f:e2:e4:b8:0b:8e:43:04: 66:d2:7b:5f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUa12Yp4KaPCh8a5H3szAuHftjSZ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMTAzMFoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAYmZhYzY2Mjg2ZGFmMTg2MGE2YjZj MDk3NGNkNjZjYmRmOTI1ZWExNjVlYTI5MmE2YzdjODk5ZTEyMmE1OTQ1NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9ga5DAad95XquVLMnywnpoGtKqZ I1AaHo26qdcT5peDz8YKSkhWAs4JLe7zqgwWr0T5sMO1x8GNzW2S8OPmyaqPlLBq 3VCxFrWtgC8/GAeFT1bw8Eet8tLvZKh0tYGLxcqFS21l/WsnJOLm3AD65Aqrygv9 HXptUQABkAhNDad8XMUiQ6VpBhcR96X+BwkBAWmhZNf3/9IkPchzj9iYB1lJZMJF s+5q23udNQzCjXfPavKB3HXcQnLok4bRNet8UkLKZzz8sORQXWpdOnhptrMARLRr vPY2TJWGNHg6bDFo/E4LHBIDCxQaSQozle/FsedLFbCNjxlUtvpFYOt3IwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAtCNS4VTMu9hjQNNxbqsvvscbBBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY5MzQ1NWZkLTNhOTMtNDIxMi05MmE5LThhODNlMjFjYTgyZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6cAwDQYJKoZIhvcNAQELBQADggEBAIswHsVCDVTfju+/oFVx M152TQyn5o8ZQY3nqqEMQGmuva4HYcvLuxnMCpmV1FQE/+kTZ73lbQbaIikQkHhW ERC/teegQVjDSPpTkc+mRpXWwRggmusDfMToTPYA7ATIamPBHOkiL1+G0jrl5lrN fSDvvOyeN7RQKVnBk9CwyX6nEPlFhyT1biIfeklFzV6iPqgKc7xbynlFxVcnZU0+ cOQx8v6iwEuwAzJrp95vzb5ZaMSbJjUz6RXl66IQ2YWU5TbIwoDYxdz3vZhQREbB vcSt5raA3gnf6E6/u7OZsA/nQXTnjLZW97T4PEGjP1N/mg1JiyhP4uS4C45DBGbS e18= -----END CERTIFICATE-----Generated at Wed Aug 26 16:10:28 2026 by rpki-client