$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa File: 9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa (raw, json) Hash identifier: YSJ1evLhbetbbBMkEO7Hbz6npELVo9Za5DTQTQI0tiE= Subject key identifier: 2F:99:B9:61:65:50:5A:AF:FC:A0:CA:CC:6D:19:0C:9B:41:BB:D6:E2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 060A984B263C7B17EB6D07F53724A9A2D7B39227 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa Signing time: Sat 01 Aug 2026 00:00:11 +0000 ROA not before: Sat 01 Aug 2026 00:00:11 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0a:98:4b:26:3c:7b:17:eb:6d:07:f5:37:24:a9:a2:d7:b3:92:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:00:11 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=303ee34d0a76b39639d46512fabb9edcb06a1b44329f0dd639eb87899b42e552, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cd:ba:41:22:88:e1:d2:20:85:ea:d5:20:29: af:f9:6c:ea:5b:ba:0c:d7:07:d4:d4:18:4a:cf:bb: c1:e3:b3:46:7f:ef:b4:25:52:99:74:81:5c:69:c6: 41:3e:bd:80:06:f6:fc:eb:55:a0:7a:a2:00:53:3f: 59:23:c2:c8:f1:49:7e:3e:d4:04:ff:7a:2f:fe:fc: 90:7b:0d:26:91:6e:4d:e1:fc:43:5b:7e:0d:d4:46: 23:76:d0:62:17:9d:36:d3:8c:ca:f1:28:91:09:d4: 22:2b:44:97:c4:a8:20:f7:8d:d4:5f:98:4e:29:37: 64:0f:cc:b2:a2:6c:16:a5:37:a5:22:05:e7:51:25: 83:92:d4:76:d5:a1:dd:a5:1f:e1:a7:3b:b9:57:ba: 31:21:01:e8:8a:3a:6c:07:98:44:8e:13:cd:20:68: b2:b6:de:1e:72:ad:24:40:8a:b8:7d:0b:1e:71:9b: 10:06:8d:b5:af:cb:a8:0d:66:1f:ed:31:50:9d:80: bb:c5:a8:51:b1:93:8e:60:53:2a:45:3f:4d:82:87: e6:52:2f:bf:20:51:ca:04:d8:ac:a0:cf:ef:29:00: 7a:8b:91:07:d7:7c:9c:c5:92:39:83:94:b6:87:b6: 53:23:2a:56:8e:01:f6:02:2d:ed:67:98:31:8f:ff: fd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:99:B9:61:65:50:5A:AF:FC:A0:CA:CC:6D:19:0C:9B:41:BB:D6:E2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:6000::/40 Signature Algorithm: sha256WithRSAEncryption 57:43:e1:b9:06:60:ff:4b:67:e1:2f:26:d8:72:20:99:4a:0f: f2:ef:ff:7d:63:68:97:3a:43:b4:64:55:f9:3c:9e:21:0c:cf: 1c:bb:34:d3:d3:07:15:4e:ed:89:3b:34:b3:8e:c4:f3:4b:bc: 44:d5:47:26:67:21:d0:d3:18:69:90:69:3c:11:a3:8c:4a:e9: f0:b8:f0:9a:08:27:1e:ae:48:c4:28:d4:90:97:65:d6:02:07: 30:96:7d:66:c4:d3:0a:0a:8c:74:4f:3b:49:d8:2b:75:9c:72: e9:da:d6:0b:98:05:26:1b:54:33:2d:a2:fb:3e:05:3c:83:11: 36:ee:2b:16:08:cb:71:dc:4f:6a:5a:f6:ed:b4:6a:92:e3:f8: 37:20:0e:7e:d8:67:87:47:3a:0a:73:97:b9:fc:ed:3a:ff:9f: c0:4c:4f:5f:02:ad:35:1b:2f:d8:94:92:90:53:45:65:ee:4b: 71:c5:f8:f4:dd:93:dc:7f:3a:7a:4a:44:51:a9:c5:f7:4c:49: 92:b0:8c:90:bd:e8:62:49:c2:58:e2:80:f7:28:5f:9c:d9:d3: 42:50:ef:da:91:48:80:7e:d0:1a:c7:ed:75:45:64:6b:cf:44: e7:6e:8b:fd:2a:b5:5d:e4:08:fc:c5:50:48:b8:98:49:ff:ed: fb:3a:21:d4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBgqYSyY8exfrbQf1NySpotezkicwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMDAxMVoX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAMzAzZWUzNGQwYTc2YjM5NjM5ZDQ2 NTEyZmFiYjllZGNiMDZhMWI0NDMyOWYwZGQ2MzllYjg3ODk5YjQyZTU1MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7s26QSKI4dIgherVICmv+WzqW7oM 1wfU1BhKz7vB47NGf++0JVKZdIFcacZBPr2ABvb861WgeqIAUz9ZI8LI8Ul+PtQE /3ov/vyQew0mkW5N4fxDW34N1EYjdtBiF50204zK8SiRCdQiK0SXxKgg943UX5hO KTdkD8yyomwWpTelIgXnUSWDktR21aHdpR/hpzu5V7oxIQHoijpsB5hEjhPNIGiy tt4ecq0kQIq4fQsecZsQBo21r8uoDWYf7TFQnYC7xahRsZOOYFMqRT9NgofmUi+/ IFHKBNisoM/vKQB6i5EH13ycxZI5g5S2h7ZTIypWjgH2Ai3tZ5gxj//9QwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFC+ZuWFlUFqv/KDKzG0ZDJtBu9biMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmMzJhZWRjLWEwNzMtNGY5Zi1hMzYyLWZiNmFiNjQ2ZDZkYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoGAwDQYJKoZIhvcNAQELBQADggEBAFdD4bkGYP9LZ+EvJthy IJlKD/Lv/31jaJc6Q7RkVfk8niEMzxy7NNPTBxVO7Yk7NLOOxPNLvETVRyZnIdDT GGmQaTwRo4xK6fC48JoIJx6uSMQo1JCXZdYCBzCWfWbE0woKjHRPO0nYK3Wccuna 1guYBSYbVDMtovs+BTyDETbuKxYIy3HcT2pa9u20apLj+DcgDn7YZ4dHOgpzl7n8 7Tr/n8BMT18CrTUbL9iUkpBTRWXuS3HF+PTdk9x/OnpKRFGpxfdMSZKwjJC96GJJ wljigPcoX5zZ00JQ79qRSIB+0BrH7XVFZGvPROdui/0qtV3kCPzFUEi4mEn/7fs6 IdQ= -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:23 2026 by rpki-client