$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/820a0b5e-6319-4d60-9b67-d7a244dd152d.roa File: 820a0b5e-6319-4d60-9b67-d7a244dd152d.roa (raw, json) Hash identifier: GJqjdnFIhl11l7MOI8RfTT/iTpxF1WKXGj80o1XnNBM= Subject key identifier: D1:1F:3A:65:75:67:F1:14:B9:90:17:B8:B6:B0:DF:54:CB:E1:A1:B6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 689CCB016C8F012589220B0424A5CEB0F14179B4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/820a0b5e-6319-4d60-9b67-d7a244dd152d.roa Signing time: Mon 10 Aug 2026 00:10:23 +0000 ROA not before: Mon 10 Aug 2026 00:10:23 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:9c:cb:01:6c:8f:01:25:89:22:0b:04:24:a5:ce:b0:f1:41:79:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:10:23 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=124451b4834d159147893860fcb52286f61f0e9c0925c07ef0ed967f8731f9e1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0e:b2:72:32:f3:ab:40:f2:ed:d2:5b:87:45: 9e:42:11:da:19:70:14:bd:a8:6e:56:e5:50:f9:96: 45:a1:16:4d:77:f5:70:b5:1d:8d:95:d1:0b:40:85: 5b:16:9d:a0:2a:81:4c:9c:60:05:2e:23:e0:9a:0d: bc:b7:cf:34:61:50:47:95:e9:e3:2f:7f:78:e7:2d: 84:5d:87:9c:bd:f3:ef:ab:82:d7:16:7a:48:23:f4: 95:6d:b6:63:0a:9a:79:c3:00:e1:16:a4:78:2d:a2: 07:c5:21:fd:d0:8d:ae:c0:de:d4:d7:83:9d:74:96: d2:5b:77:f5:9e:17:3a:e6:8a:dc:99:dd:53:42:fa: 2e:0f:e3:3b:29:19:98:92:32:0f:93:80:f7:cd:b7: b7:70:a4:a2:48:50:69:1f:59:44:d6:0a:32:2d:fe: 61:7c:15:39:c7:70:d0:24:6b:57:4a:3d:cf:7e:27: 36:ad:56:6a:61:9c:48:d9:c2:6a:b0:76:87:d3:67: 01:cd:8f:a8:6f:9c:4f:24:57:09:e4:8b:2f:b7:a6: 1e:96:66:8c:4b:7c:11:27:db:60:1d:b7:7f:30:1d: bf:f2:78:2a:5f:62:73:ed:89:8d:42:1b:1c:77:2f: 6a:ea:b8:f5:2f:fc:eb:c8:c1:dc:ff:11:80:76:dd: e9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1F:3A:65:75:67:F1:14:B9:90:17:B8:B6:B0:DF:54:CB:E1:A1:B6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/820a0b5e-6319-4d60-9b67-d7a244dd152d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:b080::/48 Signature Algorithm: sha256WithRSAEncryption 75:23:7d:b9:65:29:8e:f7:d3:c8:64:fc:73:3e:45:48:d8:05: a9:c7:35:41:d0:80:0c:ab:85:42:59:8f:03:6c:47:52:9c:34: 94:bc:b9:52:c2:66:d2:34:ca:20:f0:ce:64:02:0f:42:46:94: 49:a2:b0:55:a4:b8:42:c9:cf:c5:eb:78:22:a9:d3:4d:4b:df: 09:0d:d3:33:00:68:b8:71:25:18:7d:31:f9:93:26:a1:ba:ca: 0f:b5:22:1a:01:21:b3:52:80:24:3b:40:47:11:20:cd:68:c5: fd:90:bb:3e:f7:52:46:7a:7f:c5:c1:14:76:be:a7:09:ce:90: 1f:eb:c9:0b:12:ed:11:23:f2:d8:d7:6e:a1:7e:58:01:f7:3d: 2e:4e:eb:e4:9b:1d:e3:e2:ba:0c:4d:2b:d2:02:b8:fb:9d:75: 01:9c:94:88:52:79:67:b3:ea:f4:0a:be:a9:62:f0:ad:f8:b0: 50:6b:e8:dc:b6:26:78:1e:e9:0c:aa:46:61:fa:1b:6c:c6:52: 08:ef:50:ca:cc:c4:42:4b:92:70:a9:1c:2c:e2:3a:f7:55:8d: 4d:32:51:c6:a9:c7:03:47:38:f6:b0:7b:fa:39:a0:82:14:de: b2:5d:ed:76:35:36:09:6b:6c:56:b3:67:9b:bc:f0:10:ff:1e: 14:6f:63:74 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaJzLAWyPASWJIgsEJKXOsPFBebQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMTAyM1oX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAMTI0NDUxYjQ4MzRkMTU5MTQ3ODkz ODYwZmNiNTIyODZmNjFmMGU5YzA5MjVjMDdlZjBlZDk2N2Y4NzMxZjllMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Q6ycjLzq0Dy7dJbh0WeQhHaGXAU vahuVuVQ+ZZFoRZNd/VwtR2NldELQIVbFp2gKoFMnGAFLiPgmg28t880YVBHlenj L3945y2EXYecvfPvq4LXFnpII/SVbbZjCpp5wwDhFqR4LaIHxSH90I2uwN7U14Od dJbSW3f1nhc65orcmd1TQvouD+M7KRmYkjIPk4D3zbe3cKSiSFBpH1lE1goyLf5h fBU5x3DQJGtXSj3Pfic2rVZqYZxI2cJqsHaH02cBzY+ob5xPJFcJ5Isvt6YelmaM S3wRJ9tgHbd/MB2/8ngqX2Jz7YmNQhscdy9q6rj1L/zryMHc/xGAdt3pYwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNEfOmV1Z/EUuZAXuLaw31TL4aG2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgyMGEwYjVlLTYzMTktNGQ2MC05YjY3LWQ3YTI0NGRkMTUyZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6LCAMA0GCSqGSIb3DQEBCwUAA4IBAQB1I325ZSmO99PIZPxz PkVI2AWpxzVB0IAMq4VCWY8DbEdSnDSUvLlSwmbSNMog8M5kAg9CRpRJorBVpLhC yc/F63giqdNNS98JDdMzAGi4cSUYfTH5kyahusoPtSIaASGzUoAkO0BHESDNaMX9 kLs+91JGen/FwRR2vqcJzpAf68kLEu0RI/LY126hflgB9z0uTuvkmx3j4roMTSvS Arj7nXUBnJSIUnlns+r0Cr6pYvCt+LBQa+jctiZ4HukMqkZh+htsxlII71DKzMRC S5JwqRws4jr3VY1NMlHGqccDRzj2sHv6OaCCFN6yXe12NTYJa2xWs2ebvPAQ/x4U b2N0 -----END CERTIFICATE-----Generated at Wed Aug 26 13:04:31 2026 by rpki-client