$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9fc55de3-6bab-4f99-86c4-dfd94c764f95.roa File: 9fc55de3-6bab-4f99-86c4-dfd94c764f95.roa (raw, json) Hash identifier: oo0kG0E7BgHPvR96FCLGyg7nNWEfU70g1Jkhf8crqtc= Subject key identifier: 75:E0:03:CB:E1:66:74:3B:70:B1:B1:F7:EC:23:C6:05:5C:24:92:D0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 65DC08E8A10451D5159B98455BBF7737FE5DD106 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9fc55de3-6bab-4f99-86c4-dfd94c764f95.roa Signing time: Mon 10 Aug 2026 00:10:30 +0000 ROA not before: Mon 10 Aug 2026 00:10:30 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae2:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:dc:08:e8:a1:04:51:d5:15:9b:98:45:5b:bf:77:37:fe:5d:d1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:10:30 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=d3e8b31b451aec999d8e936047b95ca7df9df6796e00ac73b33b7960abc34062, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:11:7a:fe:29:68:ec:b3:95:74:c9:ee:9f:48: db:8d:95:82:e5:32:6b:ee:8e:a8:9f:1a:d3:50:1c: a8:f0:96:a2:70:b0:3d:07:7a:8f:1a:d1:e5:a4:52: 7e:d7:c9:c3:9d:f5:60:b8:c4:7b:ee:47:0b:e8:19: 52:8b:f7:11:9c:a2:44:9c:1e:6f:46:ee:c8:66:f5: bd:dd:83:1a:77:35:56:4b:0e:32:41:7d:b5:97:6d: 87:ad:6a:37:16:5a:ee:99:b5:fa:92:58:da:38:72: 13:83:66:a0:7b:1f:66:df:ad:77:d2:a1:0c:32:72: 29:27:1c:de:d2:d8:a8:a0:bc:eb:9e:b2:3c:0e:e5: 33:b0:de:e1:84:ef:24:09:77:09:ef:c8:a9:f1:45: 63:d9:31:a1:74:e0:ee:f4:15:ae:46:93:c3:54:87: 7a:cd:38:f0:0c:ab:8b:00:73:ef:83:2d:7b:02:6d: 82:4a:5a:c0:ba:b2:8c:04:e4:2c:e5:70:a6:68:1f: 15:b3:b9:73:11:f6:15:da:9a:a9:c4:57:b9:b8:be: d6:02:be:a9:e1:2c:19:0f:c5:1b:bc:28:c3:50:c2: 1d:11:a7:a6:0e:09:b4:3a:f1:b0:83:0c:10:97:48: 49:07:1e:3c:6e:10:f4:bf:2f:51:71:43:5e:95:84: 5f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E0:03:CB:E1:66:74:3B:70:B1:B1:F7:EC:23:C6:05:5C:24:92:D0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9fc55de3-6bab-4f99-86c4-dfd94c764f95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae2:c800::/40 Signature Algorithm: sha256WithRSAEncryption 12:e6:8b:08:69:1f:3b:61:32:26:cc:f1:11:92:6d:6e:27:f9: 9c:aa:4a:04:a3:2a:04:c1:d6:4b:7c:d1:f2:b0:35:8b:91:08: 4a:64:07:94:b2:98:fd:ba:dc:c5:fb:7f:d1:cf:35:eb:1d:0c: 3d:93:0b:ee:fe:ea:17:b3:66:41:71:31:46:6f:23:31:96:bb: 47:e6:ce:59:a0:fa:25:66:de:25:c8:a4:f0:89:b2:55:a9:6c: a5:82:ba:81:36:2c:e8:3d:f8:c2:b4:cd:8e:0c:94:0e:cf:ce: f8:b8:63:15:de:de:55:32:1a:df:66:b2:ba:58:28:74:81:f9: 06:09:50:99:c4:8d:b2:90:6e:e6:c4:ed:50:7a:10:83:42:f2: 71:4b:70:b0:02:53:bc:bf:8e:2e:e7:4b:2c:3f:f8:b0:5d:d0: 79:d3:19:ce:c3:fe:a3:dc:18:96:d0:cd:7c:3f:4b:d4:97:1f: 25:5f:8c:b3:43:2a:08:bb:e6:6b:73:9f:b7:23:19:e5:65:3d: b4:25:82:44:30:fb:fa:99:d6:7e:9c:54:f0:55:32:8d:af:19: 83:63:f5:c3:22:93:80:09:57:71:4f:97:5c:42:14:31:38:d3: 11:78:59:09:07:9f:4f:86:9c:28:a3:47:e9:25:5d:d0:57:cf: 8c:43:cf:e3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZdwI6KEEUdUVm5hFW793N/5d0QYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMTAzMFoX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAZDNlOGIzMWI0NTFhZWM5OTlkOGU5 MzYwNDdiOTVjYTdkZjlkZjY3OTZlMDBhYzczYjMzYjc5NjBhYmMzNDA2MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixF6/ilo7LOVdMnun0jbjZWC5TJr 7o6onxrTUByo8JaicLA9B3qPGtHlpFJ+18nDnfVguMR77kcL6BlSi/cRnKJEnB5v Ru7IZvW93YMadzVWSw4yQX21l22HrWo3FlrumbX6kljaOHITg2agex9m36130qEM MnIpJxze0tiooLzrnrI8DuUzsN7hhO8kCXcJ78ip8UVj2TGhdODu9BWuRpPDVId6 zTjwDKuLAHPvgy17Am2CSlrAurKMBOQs5XCmaB8Vs7lzEfYV2pqpxFe5uL7WAr6p 4SwZD8UbvCjDUMIdEaemDgm0OvGwgwwQl0hJBx48bhD0vy9RcUNelYRftQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHXgA8vhZnQ7cLGx9+wjxgVcJJLQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmYzU1ZGUzLTZiYWItNGY5OS04NmM0LWRmZDk0Yzc2NGY5NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4sgwDQYJKoZIhvcNAQELBQADggEBABLmiwhpHzthMibM8RGS bW4n+ZyqSgSjKgTB1kt80fKwNYuRCEpkB5SymP263MX7f9HPNesdDD2TC+7+6hez ZkFxMUZvIzGWu0fmzlmg+iVm3iXIpPCJslWpbKWCuoE2LOg9+MK0zY4MlA7Pzvi4 YxXe3lUyGt9msrpYKHSB+QYJUJnEjbKQbubE7VB6EINC8nFLcLACU7y/ji7nSyw/ +LBd0HnTGc7D/qPcGJbQzXw/S9SXHyVfjLNDKgi75mtzn7cjGeVlPbQlgkQw+/qZ 1n6cVPBVMo2vGYNj9cMik4AJV3FPl1xCFDE40xF4WQkHn0+GnCijR+klXdBXz4xD z+M= -----END CERTIFICATE-----Generated at Wed Aug 26 17:42:07 2026 by rpki-client