$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa File: 89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa (raw, json) Hash identifier: bjJaiJ+4n5pDde3MYs+QU45fqM7CV/dE1ki39KQGxzw= Subject key identifier: 34:13:F2:29:F7:52:AA:0B:26:3F:0E:FE:06:1C:D2:F4:FD:A3:E0:6E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 180AE67AC5E7ACC7DEAF07ADA4F5666867425E97 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa Signing time: Sat 01 Aug 2026 00:10:32 +0000 ROA not before: Sat 01 Aug 2026 00:10:32 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1f:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:0a:e6:7a:c5:e7:ac:c7:de:af:07:ad:a4:f5:66:68:67:42:5e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:10:32 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=e3f47de5a6e9033db97453ec9e9fbbc52ff644264e79e4c444f9cddefc9d8b5a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a5:72:64:e5:aa:03:f9:41:41:76:43:f7:e3: 7a:d1:71:8f:33:39:2e:72:4c:ef:97:dd:c1:0f:48: 3e:45:d7:53:46:61:d2:64:83:d3:97:18:27:1a:8a: 57:e2:fc:ff:af:c3:44:40:7c:c2:fa:e7:2f:d0:9f: 71:f1:18:18:6b:41:75:0a:ad:f5:d0:e4:9e:99:d7: 65:c4:95:1a:e6:bb:33:06:45:a9:71:7b:d8:77:4a: ab:21:12:25:a3:03:1e:01:7a:c0:18:a9:ee:a2:e3: 79:75:4e:27:c3:bb:70:b5:b2:40:03:bf:53:36:99: 11:d0:89:ca:81:43:93:34:05:38:70:3d:d6:f1:39: 1e:94:6f:4d:99:9e:55:a1:1b:c1:40:68:0a:7b:bd: 43:96:57:34:9b:ca:c6:09:ec:54:ef:74:9b:1f:b4: 39:5b:80:58:f8:a6:21:c7:f1:8d:6b:e9:2d:04:df: c0:85:1e:f8:5f:f0:a6:8e:2f:e7:e8:da:8c:ef:fe: 48:88:f5:26:19:7c:10:75:e5:da:4e:d0:b6:5f:b4: 65:3a:62:a7:81:cb:dd:86:ce:76:6f:f5:70:02:58: b1:bf:11:80:35:e3:80:fa:7c:d2:2c:78:24:fd:ff: b5:6f:5f:e8:30:5d:62:85:96:e9:eb:3f:b5:22:48: 03:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:13:F2:29:F7:52:AA:0B:26:3F:0E:FE:06:1C:D2:F4:FD:A3:E0:6E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1f:400::/38 Signature Algorithm: sha256WithRSAEncryption 5f:0d:39:01:aa:d3:b9:e2:38:02:8f:ab:c6:62:8a:55:c8:96: 20:10:ed:40:05:d1:a6:de:f1:e1:2a:d0:e2:8b:3d:2c:4b:63: 91:1d:f4:0b:fd:c9:ab:4d:0b:e4:c3:44:dc:ac:0d:0f:84:d1: b5:8d:1d:74:4e:eb:1c:7b:e5:79:3f:09:80:04:95:fa:8b:39: cb:4e:f1:bc:da:95:07:61:40:ef:e3:b2:92:da:68:f0:e0:ed: ee:6b:51:29:fa:c8:f7:9c:82:c6:1c:ee:f0:65:1e:7f:31:17: 6a:fc:2d:5a:82:d4:84:1b:74:8d:28:46:70:4b:da:a8:14:4a: 15:25:b6:31:ee:0d:3a:e7:db:15:e8:f9:3d:e3:50:20:43:01: 9d:f6:78:68:a0:0f:1f:fe:f3:b6:a8:84:44:51:c6:84:66:2f: d4:12:80:e6:22:dd:32:48:9a:4f:34:0e:8b:ea:03:91:e8:ed: 18:50:5b:57:2b:e0:3c:c5:54:b5:65:e6:1b:3e:a6:34:81:e4: 7c:b1:f0:ec:32:11:a7:eb:b1:9e:76:65:4d:7d:0e:36:f9:b7: c1:5f:78:b5:2b:23:69:2c:df:23:db:36:77:3c:71:87:ef:9f: 2e:56:cc:e0:76:ad:47:79:af:10:c9:7d:92:5d:93:a3:81:ad: a6:fd:e3:e0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGArmesXnrMferwetpPVmaGdCXpcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMTAzMloX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAZTNmNDdkZTVhNmU5MDMzZGI5NzQ1 M2VjOWU5ZmJiYzUyZmY2NDQyNjRlNzllNGM0NDRmOWNkZGVmYzlkOGI1YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qVyZOWqA/lBQXZD9+N60XGPMzku ckzvl93BD0g+RddTRmHSZIPTlxgnGopX4vz/r8NEQHzC+ucv0J9x8RgYa0F1Cq31 0OSemddlxJUa5rszBkWpcXvYd0qrIRIlowMeAXrAGKnuouN5dU4nw7twtbJAA79T NpkR0InKgUOTNAU4cD3W8TkelG9NmZ5VoRvBQGgKe71Dllc0m8rGCexU73SbH7Q5 W4BY+KYhx/GNa+ktBN/AhR74X/Cmji/n6NqM7/5IiPUmGXwQdeXaTtC2X7RlOmKn gcvdhs52b/VwAlixvxGANeOA+nzSLHgk/f+1b1/oMF1ihZbp6z+1IkgDpwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDQT8in3UqoLJj8O/gYc0vT9o+BuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg5ZmM1NmQ2LWIwYWMtNDRhZC1iMDFmLTkzZGJjZDkyMTNmYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHwQwDQYJKoZIhvcNAQELBQADggEBAF8NOQGq07niOAKPq8Zi ilXIliAQ7UAF0abe8eEq0OKLPSxLY5Ed9Av9yatNC+TDRNysDQ+E0bWNHXRO6xx7 5Xk/CYAElfqLOctO8bzalQdhQO/jspLaaPDg7e5rUSn6yPecgsYc7vBlHn8xF2r8 LVqC1IQbdI0oRnBL2qgUShUltjHuDTrn2xXo+T3jUCBDAZ32eGigDx/+87aohERR xoRmL9QSgOYi3TJImk80DovqA5Ho7RhQW1cr4DzFVLVl5hs+pjSB5Hyx8OwyEafr sZ52ZU19Djb5t8FfeLUrI2ks3yPbNnc8cYfvny5WzOB2rUd5rxDJfZJdk6OBrab9 4+A= -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:24 2026 by rpki-client