$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a57b4c9a-cc25-4f0b-b618-f68a75f6e503.roa File: a57b4c9a-cc25-4f0b-b618-f68a75f6e503.roa (raw, json) Hash identifier: qFBkECDPz29QEWYSX8IupPfW6EDM8yIRwRcKixkR16k= Subject key identifier: 19:29:79:9E:37:8C:09:D2:DD:D2:5D:35:95:0B:CB:7C:DD:51:36:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41148686516201B161690B843A67A7D5CE1E362A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a57b4c9a-cc25-4f0b-b618-f68a75f6e503.roa Signing time: Wed 19 Aug 2026 00:00:17 +0000 ROA not before: Wed 19 Aug 2026 00:00:17 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:14:86:86:51:62:01:b1:61:69:0b:84:3a:67:a7:d5:ce:1e:36:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:00:17 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=460f023be307fb060ab97086734355203b59f85c36abfef87bd21724d39fc3d9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6f:d4:d9:89:37:37:ff:32:4a:55:41:5f:76: 3a:eb:92:4b:08:28:5a:25:d8:be:65:02:e0:7e:ec: 4f:d4:f8:0d:ee:72:8f:39:b9:84:31:7d:f3:b1:62: fb:e6:df:75:24:ad:e4:4c:07:c0:57:fa:d7:fa:35: 92:d8:19:4d:03:50:cd:cb:9e:f3:54:f0:37:e0:6b: b5:50:32:6a:75:d4:1a:60:18:40:66:e0:a7:41:69: 4f:4e:6b:b9:90:0b:fd:bb:fc:5e:93:f8:92:6c:b7: 5e:39:b6:b2:8a:78:03:fc:18:ed:b4:07:a2:92:15: 8f:a1:35:d8:4d:24:39:f8:38:62:33:de:00:4a:16: b9:ca:9b:ec:aa:ca:3d:9b:6e:39:65:2e:3a:41:eb: 09:5b:52:75:fb:d5:1d:f9:71:e4:e5:45:70:f8:2a: e7:84:d0:fb:06:32:ee:96:6d:c3:3e:db:b7:25:fa: 99:b0:41:fe:07:d4:4e:ad:30:b9:9c:7b:34:c8:d0: 10:b7:bc:ad:1c:65:01:85:95:f3:f0:b1:92:16:86: 50:ef:bb:33:f0:39:c3:35:31:8c:7b:6d:ed:a3:1e: 5e:54:d6:9a:4b:e6:42:b2:33:0f:19:c5:89:d6:63: 84:4e:b6:21:c9:02:2f:17:4a:32:7e:56:93:43:b3: 8c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:29:79:9E:37:8C:09:D2:DD:D2:5D:35:95:0B:CB:7C:DD:51:36:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a57b4c9a-cc25-4f0b-b618-f68a75f6e503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:a000::/40 Signature Algorithm: sha256WithRSAEncryption 7f:eb:cd:6f:fd:17:e3:14:cb:31:a9:e3:aa:4a:a2:f4:82:bc: a8:b0:14:11:19:ee:17:51:6d:ad:40:1f:c9:bf:e1:b9:59:43: 0e:b0:5b:d0:b7:63:71:21:32:9d:f0:65:c4:3f:a3:38:ae:b6: a1:b1:be:f1:60:be:6c:15:20:68:59:c1:1d:01:30:65:93:34: ae:35:60:a2:29:6d:05:e8:5b:9e:cd:6d:f1:78:10:cc:48:ad: f5:68:32:f9:75:74:07:e7:8b:d2:ed:9e:58:6a:a8:27:96:54: bd:bc:ea:70:98:93:f9:fd:d4:5f:3c:b6:3a:42:91:6f:0e:79: e8:74:41:84:a9:0a:c8:d4:09:b0:47:ae:a9:43:5c:eb:0e:c5: 4e:bf:4b:0d:17:ea:16:ed:23:5c:c6:fc:fa:64:0b:fe:d2:ff: 1b:43:61:b5:90:11:ba:63:e7:f7:73:9f:b5:e8:15:7a:6b:7f: 26:b3:f2:65:fa:a7:8d:09:fc:53:e8:8f:1d:3d:95:0a:f5:45: f4:9d:8c:e2:21:ce:ac:eb:e8:90:c0:a5:c4:87:db:6f:5a:a2: 31:e0:c8:29:88:82:0c:52:2e:91:30:18:10:18:00:80:70:1f: 7a:48:f6:41:53:7b:0c:61:88:c0:de:f9:e9:2f:b4:75:71:af: d4:13:6c:c5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQRSGhlFiAbFhaQuEOmen1c4eNiowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMDAxN1oX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNANDYwZjAyM2JlMzA3ZmIwNjBhYjk3 MDg2NzM0MzU1MjAzYjU5Zjg1YzM2YWJmZWY4N2JkMjE3MjRkMzlmYzNkOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12/U2Yk3N/8ySlVBX3Y665JLCCha Jdi+ZQLgfuxP1PgN7nKPObmEMX3zsWL75t91JK3kTAfAV/rX+jWS2BlNA1DNy57z VPA34Gu1UDJqddQaYBhAZuCnQWlPTmu5kAv9u/xek/iSbLdeObayingD/BjttAei khWPoTXYTSQ5+DhiM94ASha5ypvsqso9m245ZS46QesJW1J1+9Ud+XHk5UVw+Crn hND7BjLulm3DPtu3JfqZsEH+B9ROrTC5nHs0yNAQt7ytHGUBhZXz8LGSFoZQ77sz 8DnDNTGMe23tox5eVNaaS+ZCsjMPGcWJ1mOETrYhyQIvF0oyflaTQ7OMqQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBkpeZ43jAnS3dJdNZULy3zdUTYPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E1N2I0YzlhLWNjMjUtNGYwYi1iNjE4LWY2OGE3NWY2ZTUwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6aAwDQYJKoZIhvcNAQELBQADggEBAH/rzW/9F+MUyzGp46pK ovSCvKiwFBEZ7hdRba1AH8m/4blZQw6wW9C3Y3EhMp3wZcQ/oziutqGxvvFgvmwV IGhZwR0BMGWTNK41YKIpbQXoW57NbfF4EMxIrfVoMvl1dAfni9LtnlhqqCeWVL28 6nCYk/n91F88tjpCkW8Oeeh0QYSpCsjUCbBHrqlDXOsOxU6/Sw0X6hbtI1zG/Ppk C/7S/xtDYbWQEbpj5/dzn7XoFXprfyaz8mX6p40J/FPojx09lQr1RfSdjOIhzqzr 6JDApcSH229aojHgyCmIggxSLpEwGBAYAIBwH3pI9kFTewxhiMDe+ekvtHVxr9QT bMU= -----END CERTIFICATE-----Generated at Wed Aug 26 00:38:39 2026 by rpki-client