$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a70d4d76-62c1-473c-a867-e6ac78a9aaa4.roa File: a70d4d76-62c1-473c-a867-e6ac78a9aaa4.roa (raw, json) Hash identifier: NBkhumgHhfKG5a8h8WN87kKhvzgf8UKdDjMp1UIog7w= Subject key identifier: E1:CE:80:A5:7C:C5:79:DA:E6:A2:8F:D8:AD:57:E9:35:93:D4:62:29 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 37718EDA73835EFB4D16DCA4338D3FEF9215D8C1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a70d4d76-62c1-473c-a867-e6ac78a9aaa4.roa Signing time: Wed 19 Aug 2026 00:01:02 +0000 ROA not before: Wed 19 Aug 2026 00:01:02 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:71:8e:da:73:83:5e:fb:4d:16:dc:a4:33:8d:3f:ef:92:15:d8:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:01:02 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=94c55a3d3863d4583951ffdaa73e6af7e0caa747599eb3cb9256488805833930, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:7e:b5:9d:98:a5:7b:22:6d:fa:30:ba:5e: e6:85:67:f7:07:2d:32:73:87:ca:54:78:49:1f:95: dc:08:2c:ac:e8:3a:49:86:a8:5c:5e:51:e3:ca:1a: 81:aa:d8:23:cb:e5:eb:13:bf:17:29:54:3b:16:1e: 04:3e:63:3b:e7:9d:4d:72:b5:26:8f:fd:f2:b5:98: ec:af:14:b7:e0:e3:11:28:7d:06:11:b9:77:03:d0: 57:c4:68:fa:de:bc:b0:de:68:62:00:2d:2a:07:80: f2:eb:2b:a7:db:38:e5:3b:af:ad:94:d3:f5:3b:8d: 9d:b6:c2:d3:c1:05:0c:37:04:92:31:6b:72:7e:9f: 67:d6:ff:57:c2:43:b2:6e:d9:f7:32:e9:e5:ac:7e: f0:92:9e:90:ab:57:bc:13:c6:44:bc:57:30:4e:fb: 67:52:80:d7:19:6a:4c:c1:c9:8f:f1:68:c9:53:4e: 42:29:b7:01:ec:d3:71:c5:47:94:09:29:dd:fd:21: d8:bc:1a:00:f2:e0:4e:29:0d:8d:3c:ba:b2:14:c5: 72:2b:01:24:15:8e:a6:da:b5:d6:c1:37:63:d5:a4: 02:2d:a0:07:b4:4f:1d:d5:66:3c:a6:e0:8b:59:0a: 11:e0:97:3e:71:10:5c:9d:6a:38:2b:79:a8:2c:62: 95:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CE:80:A5:7C:C5:79:DA:E6:A2:8F:D8:AD:57:E9:35:93:D4:62:29 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a70d4d76-62c1-473c-a867-e6ac78a9aaa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:8840::/48 Signature Algorithm: sha256WithRSAEncryption 2d:9d:d1:6b:ec:3f:93:86:ee:53:90:c5:45:45:2e:ff:f1:0f: bc:a6:a3:b5:54:ee:3c:a8:76:c2:34:4b:4f:18:59:a0:ec:60: 77:c0:8d:92:e6:13:7d:25:a9:85:59:db:98:8b:be:18:27:d7: 6e:5c:4c:76:61:25:4b:52:0a:ac:47:e0:4b:ca:ed:1c:d0:7e: 40:de:e1:9d:f0:63:08:13:aa:b6:76:6d:81:18:1a:04:eb:c8: 8e:95:16:80:8f:97:51:54:b0:f0:71:4c:5f:98:b3:ae:ca:42: 8b:0c:08:9c:45:c8:71:1d:ef:98:0f:49:15:8e:bd:46:dc:9d: 28:1a:92:6c:0e:4b:9f:d3:51:61:a6:36:06:05:71:09:1b:6d: 44:34:6b:1c:8b:af:c4:ac:98:4a:eb:e4:f2:da:ec:4c:d7:85: 5d:b3:3d:74:4b:26:ee:86:85:86:d1:9a:e5:a6:13:0c:5a:5e: b4:06:90:0b:56:3a:40:05:8e:69:b3:a1:c1:47:cf:7a:ca:77: fc:7d:b8:b1:b9:4b:dc:4a:c0:14:ad:7a:8c:6f:fe:82:b7:24: ae:03:e6:d5:51:c8:38:ba:73:69:88:70:a3:93:57:bc:73:90: ed:d5:80:15:89:59:b8:16:2a:81:bc:7c:41:90:da:c2:15:cf: bf:26:39:38 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUN3GO2nODXvtNFtykM40/75IV2MEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMDEwMloX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAOTRjNTVhM2QzODYzZDQ1ODM5NTFm ZmRhYTczZTZhZjdlMGNhYTc0NzU5OWViM2NiOTI1NjQ4ODgwNTgzMzkzMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJV+tZ2YpXsibfowul7mhWf3By0y c4fKVHhJH5XcCCys6DpJhqhcXlHjyhqBqtgjy+XrE78XKVQ7Fh4EPmM7551NcrUm j/3ytZjsrxS34OMRKH0GEbl3A9BXxGj63ryw3mhiAC0qB4Dy6yun2zjlO6+tlNP1 O42dtsLTwQUMNwSSMWtyfp9n1v9XwkOybtn3MunlrH7wkp6Qq1e8E8ZEvFcwTvtn UoDXGWpMwcmP8WjJU05CKbcB7NNxxUeUCSnd/SHYvBoA8uBOKQ2NPLqyFMVyKwEk FY6m2rXWwTdj1aQCLaAHtE8d1WY8puCLWQoR4Jc+cRBcnWo4K3moLGKV4wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOHOgKV8xXna5qKP2K1X6TWT1GIpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E3MGQ0ZDc2LTYyYzEtNDczYy1hODY3LWU2YWM3OGE5YWFhNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauohAMA0GCSqGSIb3DQEBCwUAA4IBAQAtndFr7D+Thu5TkMVF RS7/8Q+8pqO1VO48qHbCNEtPGFmg7GB3wI2S5hN9JamFWduYi74YJ9duXEx2YSVL UgqsR+BLyu0c0H5A3uGd8GMIE6q2dm2BGBoE68iOlRaAj5dRVLDwcUxfmLOuykKL DAicRchxHe+YD0kVjr1G3J0oGpJsDkuf01FhpjYGBXEJG21ENGsci6/ErJhK6+Ty 2uxM14Vdsz10SybuhoWG0ZrlphMMWl60BpALVjpABY5ps6HBR896ynf8fbixuUvc SsAUrXqMb/6CtySuA+bVUcg4unNpiHCjk1e8c5Dt1YAViVm4FiqBvHxBkNrCFc+/ Jjk4 -----END CERTIFICATE-----Generated at Wed Aug 26 18:16:57 2026 by rpki-client