$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87e22441-1418-4229-88ee-c283b029cb95.roa File: 87e22441-1418-4229-88ee-c283b029cb95.roa (raw, json) Hash identifier: cFm5RgNNakNhbEDayLObXqOGu+CT92SoLEnl3gWaO7U= Subject key identifier: E1:32:A0:4C:7A:A1:B9:FB:5B:65:2F:29:87:AD:D9:3B:A3:7E:EF:7A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 03E0FD98D996A1AFCFFAF4BD107400520B16CD3A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87e22441-1418-4229-88ee-c283b029cb95.roa Signing time: Fri 07 Aug 2026 00:01:02 +0000 ROA not before: Fri 07 Aug 2026 00:01:02 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e0:fd:98:d9:96:a1:af:cf:fa:f4:bd:10:74:00:52:0b:16:cd:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 7 00:01:02 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=de2f0a1edb642fb978cb7c5788c832db6dfb617483eb37ceb262b6c60cb12e91, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:98:13:b6:08:81:2c:8c:7e:b5:d2:c1:17:3c: 7f:fb:92:96:67:7f:44:08:78:70:ab:60:69:9d:ad: 4d:13:78:88:db:52:d5:55:2c:75:da:c5:aa:88:10: 56:f4:99:90:cb:e3:c0:a2:61:60:0e:f5:72:5a:f6: 8e:d7:78:0b:80:8e:02:46:c1:c9:77:b4:16:7c:63: 8f:91:14:67:dd:7f:8d:af:f5:ad:58:19:60:fd:26: 75:3b:a7:ec:7d:aa:2c:8e:41:7b:df:60:55:3a:9b: 6d:29:b3:00:14:98:e9:28:a1:27:c2:be:1a:b9:08: 52:4a:75:1d:38:00:3c:9f:58:e6:83:87:44:97:8a: 7e:c4:9c:42:f9:b0:4b:a7:35:ce:6a:e8:81:45:4e: 59:e1:c3:7b:08:cd:9d:a5:47:4a:37:71:ef:4f:f8: 46:2c:b2:85:54:c3:1c:e9:cd:be:f3:d4:23:83:7f: 03:43:58:d4:7b:c4:54:d4:95:11:f0:95:16:6a:eb: 04:dc:35:e9:df:b5:4d:32:17:2d:1d:36:fd:8b:ce: af:7c:3f:81:fd:ec:88:a4:90:5b:d4:44:52:41:73: d3:68:36:3c:fa:b4:eb:0d:2b:4f:d8:5e:e4:af:cb: 98:c0:ec:07:1d:17:0d:22:c4:03:47:05:00:c6:60: 3a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:32:A0:4C:7A:A1:B9:FB:5B:65:2F:29:87:AD:D9:3B:A3:7E:EF:7A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87e22441-1418-4229-88ee-c283b029cb95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:9000::/40 Signature Algorithm: sha256WithRSAEncryption 43:ac:5c:54:bd:1d:5d:59:0d:76:08:4a:99:90:61:5e:b0:0a: 58:fd:1a:99:59:46:a7:81:eb:1d:41:47:69:b0:b2:dc:a0:2a: 0a:d9:25:1c:c0:94:3e:d7:b8:2a:8c:65:c2:df:63:56:ca:3e: 6f:1b:b9:31:93:05:9f:ac:c9:76:ce:9c:36:95:41:66:6b:38: e3:60:1b:79:f7:6e:05:d0:d1:61:73:40:cb:e8:2f:54:af:57: dc:3f:48:64:d5:87:7b:03:02:49:10:5f:22:b5:22:eb:d8:f7: 00:a8:d2:99:ac:17:1e:42:d9:d4:46:ed:40:4a:2d:f1:13:02: c8:bf:3b:21:cf:cf:e9:9d:1b:38:d1:85:29:16:66:2c:04:92: 75:96:ed:d7:de:e8:d5:94:0b:c4:c3:b3:5a:db:07:09:9c:fc: c6:a8:6b:aa:e5:07:f2:42:e2:2f:13:d6:55:c5:ee:4b:f6:55: 76:4f:30:b3:24:10:ab:b3:a4:7d:6f:07:ad:cb:8b:40:65:75: fe:fd:42:b0:84:65:fb:71:39:3a:05:96:bf:45:17:a6:c2:4e: 7c:37:8b:9d:03:3d:e0:eb:ad:61:9f:90:d2:a8:85:31:af:3d: 99:85:57:e7:75:3e:8f:dc:10:5e:81:3e:aa:19:ef:97:b1:cf: ec:87:e2:04 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUA+D9mNmWoa/P+vS9EHQAUgsWzTowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwNzAwMDEwMloX DTI2MTEwNTIzNTk1OVowejFJMEcGA1UEBRNAZGUyZjBhMWVkYjY0MmZiOTc4Y2I3 YzU3ODhjODMyZGI2ZGZiNjE3NDgzZWIzN2NlYjI2MmI2YzYwY2IxMmU5MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZgTtgiBLIx+tdLBFzx/+5KWZ39E CHhwq2Bpna1NE3iI21LVVSx12sWqiBBW9JmQy+PAomFgDvVyWvaO13gLgI4CRsHJ d7QWfGOPkRRn3X+Nr/WtWBlg/SZ1O6fsfaosjkF732BVOpttKbMAFJjpKKEnwr4a uQhSSnUdOAA8n1jmg4dEl4p+xJxC+bBLpzXOauiBRU5Z4cN7CM2dpUdKN3HvT/hG LLKFVMMc6c2+89Qjg38DQ1jUe8RU1JUR8JUWausE3DXp37VNMhctHTb9i86vfD+B /eyIpJBb1ERSQXPTaDY8+rTrDStP2F7kr8uYwOwHHRcNIsQDRwUAxmA6HwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOEyoEx6obn7W2UvKYet2Tujfu96MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg3ZTIyNDQxLTE0MTgtNDIyOS04OGVlLWMyODNiMDI5Y2I5NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba75AwDQYJKoZIhvcNAQELBQADggEBAEOsXFS9HV1ZDXYISpmQ YV6wClj9GplZRqeB6x1BR2mwstygKgrZJRzAlD7XuCqMZcLfY1bKPm8buTGTBZ+s yXbOnDaVQWZrOONgG3n3bgXQ0WFzQMvoL1SvV9w/SGTVh3sDAkkQXyK1IuvY9wCo 0pmsFx5C2dRG7UBKLfETAsi/OyHPz+mdGzjRhSkWZiwEknWW7dfe6NWUC8TDs1rb Bwmc/Maoa6rlB/JC4i8T1lXF7kv2VXZPMLMkEKuzpH1vB63Li0Bldf79QrCEZftx OToFlr9FF6bCTnw3i50DPeDrrWGfkNKohTGvPZmFV+d1Po/cEF6BPqoZ75exz+yH 4gQ= -----END CERTIFICATE-----Generated at Wed Aug 26 00:38:25 2026 by rpki-client