$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f34870a-6ff1-4942-bad4-5224c601b9de.roa File: 6f34870a-6ff1-4942-bad4-5224c601b9de.roa (raw, json) Hash identifier: MmMMafiKpEu/hXORcqA2DYNWVMxvv1pof+cLzwQ3zXk= Subject key identifier: 21:7E:7E:37:39:95:DD:50:23:CB:F8:AC:07:4D:52:E6:84:F7:3A:A5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4B125BBB3BD487EADD3C232D23608E8680BBAF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f34870a-6ff1-4942-bad4-5224c601b9de.roa Signing time: Wed 19 Aug 2026 00:20:18 +0000 ROA not before: Wed 19 Aug 2026 00:20:18 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:c080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:12:5b:bb:3b:d4:87:ea:dd:3c:23:2d:23:60:8e:86:80:bb:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:20:18 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=305f9b1d068a330e5dc747972b38b87284e034ebfdfcf8408645c2daf102469d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:92:68:93:88:e3:10:c8:a5:fe:91:1d:ec:43: 46:90:d1:55:84:8c:e9:40:b9:a8:c3:78:bc:a7:8b: 5b:6a:03:d7:e5:e9:8e:ab:31:1c:91:5a:6b:6f:0f: 61:28:7c:2b:ad:f8:b7:ae:48:09:8b:a3:dd:f9:b7: ff:b1:ee:32:1a:77:ca:2b:86:e7:fa:cd:be:26:c3: 79:43:af:20:ee:40:d8:ba:d5:f1:f1:86:24:22:04: c9:13:3b:38:74:b7:90:b1:db:e0:c2:7c:15:47:f1: 83:7f:71:35:19:07:8d:48:17:a1:be:06:50:67:fa: 21:fa:49:c7:23:ae:9d:9a:19:da:3f:b9:4f:ab:b5: f5:5e:98:71:64:05:c8:c3:6f:7b:68:31:8f:49:46: 31:ff:f5:65:37:16:9b:0c:a0:61:2d:d6:9d:e8:73: 8e:01:e3:4b:e3:de:c4:c3:96:0b:0f:51:a1:83:9d: d3:36:9f:c8:4e:96:6d:28:eb:94:81:d5:33:4c:b1: 8e:ce:d9:82:f3:f7:1d:35:04:a1:c2:ae:3c:7b:db: 2c:98:7a:24:0c:6b:b0:95:67:75:93:35:18:6f:41: ba:fa:21:0d:62:2c:81:67:af:71:48:be:21:f3:72: 0e:65:cc:08:f2:a8:5f:93:df:29:68:6a:86:c1:dd: b7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7E:7E:37:39:95:DD:50:23:CB:F8:AC:07:4D:52:E6:84:F7:3A:A5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f34870a-6ff1-4942-bad4-5224c601b9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:c080::/48 Signature Algorithm: sha256WithRSAEncryption b9:b2:c5:f0:07:cd:1f:76:12:e7:9b:94:e4:08:9a:38:06:e8: 54:be:5d:86:57:8d:8e:d7:db:e5:06:47:fc:88:07:6e:37:a4: 3f:5d:82:b7:88:c4:c3:dc:99:69:f6:e2:5c:49:e1:d5:64:c0: 6e:7a:53:e4:f4:1e:55:2e:bc:0d:65:55:1b:26:56:3e:45:ef: 78:00:84:bd:80:cd:17:20:6c:e4:dd:f1:b6:cd:5e:aa:e7:98: 25:85:66:b0:80:b4:93:92:a0:0d:9e:cd:d3:4e:2f:83:a8:6b: 1d:32:bf:66:c3:1f:47:2d:3a:f5:21:06:5d:5a:62:fd:f3:d5: 98:94:91:8f:3d:08:10:07:b0:2b:e1:ef:bf:b5:58:f4:13:de: 90:03:47:25:52:85:a0:69:d8:51:af:d6:07:4a:96:3c:cd:5f: bf:b4:9d:f1:a0:e2:80:8b:86:c5:59:66:5b:12:d4:09:30:fe: df:5e:47:3c:58:f5:be:b7:b9:6a:e6:72:cb:5a:30:fc:f9:db: a3:ee:f2:69:7d:71:13:07:dd:6a:3b:64:64:f0:93:22:6a:cf: fa:81:9f:ea:c0:77:04:bf:f0:bf:7e:aa:1d:36:4b:01:ec:9f: d5:90:35:8a:2d:b0:e5:d0:10:dd:bf:ac:36:45:45:ec:a7:00: 33:6d:2f:fe -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgITSxJbuzvUh+rdPCMtI2COhoC7rzANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjYwODE5MDAyMDE4WhcN MjYxMTE3MjM1OTU5WjB6MUkwRwYDVQQFE0AzMDVmOWIxZDA2OGEzMzBlNWRjNzQ3 OTcyYjM4Yjg3Mjg0ZTAzNGViZmRmY2Y4NDA4NjQ1YzJkYWYxMDI0NjlkMS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFkmiTiOMQyKX+kR3sQ0aQ0VWEjOlA uajDeLyni1tqA9fl6Y6rMRyRWmtvD2EofCut+LeuSAmLo935t/+x7jIad8orhuf6 zb4mw3lDryDuQNi61fHxhiQiBMkTOzh0t5Cx2+DCfBVH8YN/cTUZB41IF6G+BlBn +iH6Sccjrp2aGdo/uU+rtfVemHFkBcjDb3toMY9JRjH/9WU3FpsMoGEt1p3oc44B 40vj3sTDlgsPUaGDndM2n8hOlm0o65SB1TNMsY7O2YLz9x01BKHCrjx72yyYeiQM a7CVZ3WTNRhvQbr6IQ1iLIFnr3FIviHzcg5lzAjyqF+T3yloaobB3bcDAgMBAAGj ggJLMIICRzAdBgNVHQ4EFgQUIX5+NzmV3VAjy/isB01S5oT3OqUwHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv NmYzNDg3MGEtNmZmMS00OTQyLWJhZDQtNTIyNGM2MDFiOWRlLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkBtq6wIAwDQYJKoZIhvcNAQELBQADggEBALmyxfAHzR92EueblOQI mjgG6FS+XYZXjY7X2+UGR/yIB243pD9dgreIxMPcmWn24lxJ4dVkwG56U+T0HlUu vA1lVRsmVj5F73gAhL2AzRcgbOTd8bbNXqrnmCWFZrCAtJOSoA2ezdNOL4Ooax0y v2bDH0ctOvUhBl1aYv3z1ZiUkY89CBAHsCvh77+1WPQT3pADRyVShaBp2FGv1gdK ljzNX7+0nfGg4oCLhsVZZlsS1Akw/t9eRzxY9b63uWrmcstaMPz526Pu8ml9cRMH 3Wo7ZGTwkyJqz/qBn+rAdwS/8L9+qh02SwHsn9WQNYotsOXQEN2/rDZFReynADNt L/4= -----END CERTIFICATE-----Generated at Wed Aug 26 00:38:46 2026 by rpki-client