$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9fb21f9c-8f1d-4700-a451-c61be1e670a2.roa File: 9fb21f9c-8f1d-4700-a451-c61be1e670a2.roa (raw, json) Hash identifier: l9w7WDfNjU96mQO1Xf6vvpZjE9TYMLGj1FbpEolijXw= Subject key identifier: 5E:60:2D:03:EB:FD:2E:A8:B8:3B:86:44:D5:0C:F7:92:43:D9:25:A4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 58377988F164A7D320CDE43769D9C0057D81448B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9fb21f9c-8f1d-4700-a451-c61be1e670a2.roa Signing time: Wed 19 Aug 2026 00:01:27 +0000 ROA not before: Wed 19 Aug 2026 00:01:27 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:4880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:37:79:88:f1:64:a7:d3:20:cd:e4:37:69:d9:c0:05:7d:81:44:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:01:27 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=7d2bd1a6514b00e540be62cc55f583b49ab0b22d1520fa9e7c40f0a80033ef03, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:da:36:64:b1:eb:93:48:45:21:c5:26:32: cb:0e:a8:b1:dc:2b:fb:88:32:d3:12:0e:34:5e:0e: f8:b7:38:4d:00:19:23:7b:55:b0:d9:ea:35:cb:d9: a3:ba:83:e7:7f:08:bf:4a:fe:3f:1a:b7:9e:65:40: 96:7f:5f:a8:58:65:3c:c8:f0:22:7a:b3:74:cc:bd: 3e:5c:2c:6b:32:96:f8:c2:a6:75:73:cb:99:19:b9: 79:92:4a:7a:fa:85:bc:bf:eb:b9:67:15:57:25:70: 30:4d:b2:a4:f2:f4:1a:59:9f:27:cd:ee:64:28:a2: ea:21:98:58:47:8a:57:aa:8e:e5:9f:89:f7:eb:5f: ea:6e:f9:3c:41:c9:a5:9d:3d:db:b8:7b:3f:73:e9: f2:bb:52:d5:d2:12:bc:a0:2d:81:29:2f:bf:27:9f: 99:62:ff:8e:e9:fc:9a:91:7a:20:4e:3e:34:b0:94: 0a:9e:d4:0a:53:30:2b:e4:5d:26:da:14:86:52:be: 61:2c:d1:49:73:c7:56:00:f1:62:05:64:88:d3:6d: 44:6d:32:26:dc:47:25:c8:ef:50:79:c7:6e:7c:33: 60:fb:39:58:93:08:d5:da:e1:2d:b9:30:74:2b:d3: 59:56:a4:0b:2d:22:ba:37:5d:cc:8b:8f:2e:dc:da: 08:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:60:2D:03:EB:FD:2E:A8:B8:3B:86:44:D5:0C:F7:92:43:D9:25:A4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9fb21f9c-8f1d-4700-a451-c61be1e670a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:4880::/48 Signature Algorithm: sha256WithRSAEncryption 9f:5c:ef:9e:73:cf:49:0c:17:0b:de:90:92:85:ba:3d:1e:b2: a8:ae:8c:94:22:66:6a:3e:88:38:a3:84:d5:e1:68:c5:f0:49: c5:74:22:45:2f:02:93:24:15:58:9e:dc:45:d9:1c:e2:dc:65: 61:f4:9d:e7:34:12:61:83:1d:28:e6:6e:2d:0c:bb:2c:56:60: fd:e0:d7:29:99:75:89:d8:90:12:f5:9d:46:78:d7:af:95:9b: 2d:de:23:fd:2e:fb:48:2c:81:b3:c0:8a:35:ab:2f:62:a1:37: a6:0e:4e:96:84:76:e3:e1:c8:6e:9e:00:71:43:0d:91:a2:8e: c8:d5:23:79:c1:1d:33:84:26:3c:76:54:38:99:b5:3e:aa:2b: c3:33:7c:1b:bd:25:42:74:7a:4f:68:20:fe:a0:d8:dd:22:78: 7d:d4:76:c8:15:b7:da:ef:04:75:b4:d4:b9:85:b0:37:f1:0c: eb:56:0d:bc:13:c3:53:7a:b0:1a:2c:2f:35:4a:32:08:72:4b: 40:ad:a4:42:75:da:86:b2:c8:db:8e:81:a9:0c:49:37:85:7e: f2:e0:b5:13:0f:4c:15:5e:ab:ba:f6:4e:1e:e9:d0:14:ef:80: 96:60:80:8b:c9:fa:7b:d5:ac:92:78:d3:9d:91:a9:bb:fa:60: 41:7b:26:f9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWDd5iPFkp9MgzeQ3adnABX2BRIswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMDEyN1oX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAN2QyYmQxYTY1MTRiMDBlNTQwYmU2 MmNjNTVmNTgzYjQ5YWIwYjIyZDE1MjBmYTllN2M0MGYwYTgwMDMzZWYwMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjbaNmSx65NIRSHFJjLLDqix3Cv7 iDLTEg40Xg74tzhNABkje1Ww2eo1y9mjuoPnfwi/Sv4/GreeZUCWf1+oWGU8yPAi erN0zL0+XCxrMpb4wqZ1c8uZGbl5kkp6+oW8v+u5ZxVXJXAwTbKk8vQaWZ8nze5k KKLqIZhYR4pXqo7ln4n361/qbvk8QcmlnT3buHs/c+nyu1LV0hK8oC2BKS+/J5+Z Yv+O6fyakXogTj40sJQKntQKUzAr5F0m2hSGUr5hLNFJc8dWAPFiBWSI021EbTIm 3EclyO9QecdufDNg+zlYkwjV2uEtuTB0K9NZVqQLLSK6N13Mi48u3NoIJwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFF5gLQPr/S6ouDuGRNUM95JD2SWkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmYjIxZjljLThmMWQtNDcwMC1hNDUxLWM2MWJlMWU2NzBhMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6UiAMA0GCSqGSIb3DQEBCwUAA4IBAQCfXO+ec89JDBcL3pCS hbo9HrKoroyUImZqPog4o4TV4WjF8EnFdCJFLwKTJBVYntxF2Rzi3GVh9J3nNBJh gx0o5m4tDLssVmD94NcpmXWJ2JAS9Z1GeNevlZst3iP9LvtILIGzwIo1qy9ioTem Dk6WhHbj4chungBxQw2Roo7I1SN5wR0zhCY8dlQ4mbU+qivDM3wbvSVCdHpPaCD+ oNjdInh91HbIFbfa7wR1tNS5hbA38QzrVg28E8NTerAaLC81SjIIcktAraRCddqG ssjbjoGpDEk3hX7y4LUTD0wVXqu69k4e6dAU74CWYICLyfp71aySeNOdkam7+mBB eyb5 -----END CERTIFICATE-----Generated at Wed Aug 26 08:06:22 2026 by rpki-client