$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93aea36f-87bb-48e3-82fe-31b09b9d1250.roa File: 93aea36f-87bb-48e3-82fe-31b09b9d1250.roa (raw, json) Hash identifier: wi4uFQEetql2Ah6uf19f9F//aLorYITabwkp1euC0QU= Subject key identifier: 37:A0:64:76:79:F7:C2:7B:E3:21:56:1D:88:A0:79:D2:73:60:60:88 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 29859CDDC7CC70CA1ECF0E89B888BD434F0E7F8C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93aea36f-87bb-48e3-82fe-31b09b9d1250.roa Signing time: Wed 19 Aug 2026 00:00:46 +0000 ROA not before: Wed 19 Aug 2026 00:00:46 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:85:9c:dd:c7:cc:70:ca:1e:cf:0e:89:b8:88:bd:43:4f:0e:7f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:00:46 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=cdb8c3fbdc7aa40031b0dc5773cf2c4822f83e414464d6ecdb2396424bb151ed, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:d2:18:ff:94:dd:27:8b:61:10:56:c7:3e: 13:8e:43:51:0d:a4:22:00:2b:2d:1c:12:54:7f:e9: d6:73:fe:47:4f:42:3e:b4:a3:7d:50:33:62:4d:07: dd:60:d4:50:49:4e:ec:05:65:af:26:92:a0:75:d0: a2:7d:3d:bd:6d:31:9c:7d:00:60:47:8c:9f:b4:fb: 68:78:a0:0c:40:aa:88:f8:be:7f:b3:a9:e0:8a:80: 66:41:13:21:ef:e5:d9:02:41:85:61:64:54:de:94: bc:f1:78:bc:7b:ce:55:d3:54:2c:2f:97:0e:c9:77: 4d:ee:f9:4a:1a:e9:1f:ee:7c:94:f5:2a:83:db:81: dc:21:58:52:18:90:32:70:34:2f:e4:6b:19:5f:51: e3:3a:13:a4:2a:30:80:e3:90:ff:20:a7:85:64:dd: 5c:24:be:a2:6a:19:e3:05:90:5d:94:14:4f:ee:c8: b4:cc:87:43:7d:0a:f2:0e:b7:c5:31:c1:02:a1:20: d5:aa:92:42:ff:12:d1:3b:ca:be:1c:73:43:4e:c1: 88:1e:f2:45:d8:de:0f:ed:a7:19:4a:16:c2:a9:99: 16:64:02:1f:be:cf:4b:55:50:cd:45:ea:cc:30:58: 62:69:75:6f:6b:63:03:89:01:77:1f:ae:40:cd:9d: 2a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A0:64:76:79:F7:C2:7B:E3:21:56:1D:88:A0:79:D2:73:60:60:88 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93aea36f-87bb-48e3-82fe-31b09b9d1250.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:2800::/40 Signature Algorithm: sha256WithRSAEncryption 44:86:45:7f:4c:32:af:29:38:54:7d:d4:7e:2b:e6:80:e8:51: 5c:38:3a:01:c8:bc:b8:49:61:a7:47:09:65:cf:95:be:02:83: 33:29:33:f8:fb:81:4a:78:f5:d8:cd:1c:66:c8:1b:d8:4e:2d: b9:e9:f2:78:0e:6f:c7:e9:d5:e5:46:9d:9d:be:a0:bc:e8:0e: ee:a2:ad:fe:ce:16:04:a4:ff:b2:9c:18:83:ff:ee:35:cf:30: 9e:1b:2e:45:80:09:d3:3c:75:e1:87:37:66:f8:46:b1:b4:b5: f2:3b:2b:d4:3d:a4:79:6c:cd:03:7d:6a:bb:cd:2c:41:fe:93: a7:21:81:8f:2a:47:b6:07:f9:d4:97:97:98:8c:0c:06:0a:66: e0:6e:2b:eb:16:83:e9:7f:da:15:e1:8c:12:03:cd:ae:88:ad: 38:4e:41:8b:40:87:2a:cc:36:9c:af:1c:3a:70:05:84:99:e2: 47:e9:2a:3c:52:65:bf:2e:b4:5a:60:4b:7b:a7:69:4f:5e:80: 54:d7:8c:34:e5:0c:7f:e7:63:2a:5d:c5:e1:1e:86:a3:e8:bd: ca:53:e4:e1:56:67:7e:a7:e7:61:d4:8f:8f:c7:46:c2:0f:b3: ae:5f:48:1c:74:ea:3b:21:56:a6:ab:d1:d6:85:30:8e:c6:8b: 13:8c:af:c8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKYWc3cfMcMoezw6JuIi9Q08Of4wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMDA0NloX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAY2RiOGMzZmJkYzdhYTQwMDMxYjBk YzU3NzNjZjJjNDgyMmY4M2U0MTQ0NjRkNmVjZGIyMzk2NDI0YmIxNTFlZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3zSGP+U3SeLYRBWxz4TjkNRDaQi ACstHBJUf+nWc/5HT0I+tKN9UDNiTQfdYNRQSU7sBWWvJpKgddCifT29bTGcfQBg R4yftPtoeKAMQKqI+L5/s6ngioBmQRMh7+XZAkGFYWRU3pS88Xi8e85V01QsL5cO yXdN7vlKGukf7nyU9SqD24HcIVhSGJAycDQv5GsZX1HjOhOkKjCA45D/IKeFZN1c JL6iahnjBZBdlBRP7si0zIdDfQryDrfFMcECoSDVqpJC/xLRO8q+HHNDTsGIHvJF 2N4P7acZShbCqZkWZAIfvs9LVVDNRerMMFhiaXVva2MDiQF3H65AzZ0qVwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDegZHZ598J74yFWHYigedJzYGCIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkzYWVhMzZmLTg3YmItNDhlMy04MmZlLTMxYjA5YjlkMTI1MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6SgwDQYJKoZIhvcNAQELBQADggEBAESGRX9MMq8pOFR91H4r 5oDoUVw4OgHIvLhJYadHCWXPlb4CgzMpM/j7gUp49djNHGbIG9hOLbnp8ngOb8fp 1eVGnZ2+oLzoDu6irf7OFgSk/7KcGIP/7jXPMJ4bLkWACdM8deGHN2b4RrG0tfI7 K9Q9pHlszQN9arvNLEH+k6chgY8qR7YH+dSXl5iMDAYKZuBuK+sWg+l/2hXhjBID za6IrThOQYtAhyrMNpyvHDpwBYSZ4kfpKjxSZb8utFpgS3unaU9egFTXjDTlDH/n YypdxeEehqPovcpT5OFWZ36n52HUj4/HRsIPs65fSBx06jshVqar0daFMI7GixOM r8g= -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:32 2026 by rpki-client