$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6d7d12e-d19b-4b6f-84d1-ef956b657000.roa File: a6d7d12e-d19b-4b6f-84d1-ef956b657000.roa (raw, json) Hash identifier: NB3MNfzIe0dt9qj1ZkKokBrYgl9a5Qhy8X8+bWYv3cQ= Subject key identifier: 75:45:80:2E:B8:32:15:31:82:A5:EF:94:7B:8C:9A:4C:A6:1F:89:63 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 491AE6707D0367DFBC5937A35E6403C2DDB1B3BE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6d7d12e-d19b-4b6f-84d1-ef956b657000.roa Signing time: Thu 30 Jul 2026 00:11:06 +0000 ROA not before: Thu 30 Jul 2026 00:11:06 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:f080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1a:e6:70:7d:03:67:df:bc:59:37:a3:5e:64:03:c2:dd:b1:b3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:11:06 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=4c7d1158f384443abbf6b1393d1ff9ba5782cc8aff4cfbb4f88acd1114651b9c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:07:aa:8d:bc:c3:07:70:80:f0:81:8c:67: 43:24:54:64:cb:48:19:00:48:63:61:d0:7b:32:d0: e2:88:3a:39:3d:3b:a3:00:0d:14:c1:ba:07:23:f9: 16:0a:91:ef:2d:4c:35:d8:c3:43:f7:9c:d0:11:eb: 71:90:0c:6f:c2:20:2b:60:9e:a7:8b:31:38:e3:24: d1:d1:b6:f7:6c:30:9b:88:f3:1f:cf:70:c9:d2:a6: fd:39:82:ee:39:35:68:ab:8f:a1:7e:43:c7:b2:82: 1f:c6:dd:18:98:7d:66:a7:58:72:b2:b6:a4:cf:68: ed:3b:81:28:66:de:89:03:ad:6d:93:38:4b:22:cf: a0:40:5b:53:22:fa:7b:c8:77:72:cb:a8:4a:2d:7b: 5e:68:77:84:d7:a7:1c:9b:0b:73:e5:56:69:54:26: 1c:c9:80:14:ad:01:d4:98:70:04:51:0e:bf:8a:bc: 1e:a5:99:a4:b9:e2:f1:4c:aa:2b:dd:7c:05:84:01: e3:d3:67:c2:09:63:a8:e7:55:42:92:92:01:a2:d4: ca:59:b9:f9:1f:85:36:0b:a3:f0:06:f2:b2:c5:4a: c8:2d:16:1e:3b:49:d3:c1:8a:7b:e9:22:b0:9e:7a: 38:23:9f:eb:c0:26:02:28:ff:26:1b:df:9f:2c:7d: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:45:80:2E:B8:32:15:31:82:A5:EF:94:7B:8C:9A:4C:A6:1F:89:63 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6d7d12e-d19b-4b6f-84d1-ef956b657000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:f080::/48 Signature Algorithm: sha256WithRSAEncryption 80:32:ba:38:6f:5a:99:13:0e:a7:16:7b:38:f8:66:fe:aa:78: 91:39:65:31:61:48:29:92:f4:10:95:81:8e:09:75:be:27:eb: 25:2a:9b:16:e6:2d:93:80:31:44:63:bd:9f:be:4d:db:db:eb: cf:73:85:00:ea:76:84:52:83:eb:b1:ee:b4:1d:d9:31:7d:74: 53:89:f8:13:12:5b:5c:69:c3:59:dc:f7:ca:9f:a5:cf:16:2c: f1:5a:42:c6:b5:d1:71:35:31:de:e6:96:96:48:2d:74:e2:01: b1:44:cc:c5:36:f2:f1:d0:2a:61:26:78:0d:98:22:32:5c:c9: 25:d6:3e:0f:2f:41:dc:35:64:64:89:9b:35:cd:96:3f:cf:bd: 5d:58:f2:6b:54:71:05:a3:35:08:97:88:01:02:18:60:01:ed: 60:b8:f8:97:19:24:a3:39:35:f4:89:6b:09:ac:a7:2f:4c:42: fe:a5:9c:18:b6:ed:98:94:99:f7:6e:55:a1:4a:d9:de:82:fa: 28:00:12:e6:64:61:6a:85:f5:27:ad:5d:23:6a:5d:0c:af:05: 44:09:34:84:9b:bc:bd:b0:9e:a7:81:f2:74:b5:0c:01:c2:0b: 83:45:cd:58:d1:8c:3d:e9:b2:b0:ea:1b:1b:f4:23:aa:06:fe: 78:bf:e8:62 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSRrmcH0DZ9+8WTejXmQDwt2xs74wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMTEwNloX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNANGM3ZDExNThmMzg0NDQzYWJiZjZi MTM5M2QxZmY5YmE1NzgyY2M4YWZmNGNmYmI0Zjg4YWNkMTExNDY1MWI5YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI8Hqo28wwdwgPCBjGdDJFRky0gZ AEhjYdB7MtDiiDo5PTujAA0UwboHI/kWCpHvLUw12MND95zQEetxkAxvwiArYJ6n izE44yTR0bb3bDCbiPMfz3DJ0qb9OYLuOTVoq4+hfkPHsoIfxt0YmH1mp1hysrak z2jtO4EoZt6JA61tkzhLIs+gQFtTIvp7yHdyy6hKLXteaHeE16ccmwtz5VZpVCYc yYAUrQHUmHAEUQ6/irwepZmkueLxTKor3XwFhAHj02fCCWOo51VCkpIBotTKWbn5 H4U2C6PwBvKyxUrILRYeO0nTwYp76SKwnno4I5/rwCYCKP8mG9+fLH100QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHVFgC64MhUxgqXvlHuMmkymH4ljMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E2ZDdkMTJlLWQxOWItNGI2Zi04NGQxLWVmOTU2YjY1NzAwMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAPCAMA0GCSqGSIb3DQEBCwUAA4IBAQCAMro4b1qZEw6nFns4 +Gb+qniROWUxYUgpkvQQlYGOCXW+J+slKpsW5i2TgDFEY72fvk3b2+vPc4UA6naE UoPrse60HdkxfXRTifgTEltcacNZ3PfKn6XPFizxWkLGtdFxNTHe5paWSC104gGx RMzFNvLx0CphJngNmCIyXMkl1j4PL0HcNWRkiZs1zZY/z71dWPJrVHEFozUIl4gB AhhgAe1guPiXGSSjOTX0iWsJrKcvTEL+pZwYtu2YlJn3blWhStnegvooABLmZGFq hfUnrV0jal0MrwVECTSEm7y9sJ6ngfJ0tQwBwguDRc1Y0Yw96bKw6hsb9COqBv54 v+hi -----END CERTIFICATE-----Generated at Wed Aug 26 16:08:33 2026 by rpki-client