$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a91606af-f23b-41f1-a5e0-9c946ffa3ce0.roa File: a91606af-f23b-41f1-a5e0-9c946ffa3ce0.roa (raw, json) Hash identifier: kIMKSrhT4f6uI50sjyN9qFlhnUfwXV6ssm6wz0zGqCg= Subject key identifier: 8D:20:7D:6E:F2:1F:1A:22:27:98:E8:B6:95:E0:0A:04:3E:E4:83:11 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 06B3B716375AF52ABC322325866C62AF74C0098B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a91606af-f23b-41f1-a5e0-9c946ffa3ce0.roa Signing time: Sat 01 Aug 2026 00:10:34 +0000 ROA not before: Sat 01 Aug 2026 00:10:34 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b3:b7:16:37:5a:f5:2a:bc:32:23:25:86:6c:62:af:74:c0:09:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:10:34 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=b0367b9702c8d90bff2eaa10d6b4649bddd267a1b154c4ca932dca188114d79c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a8:75:20:32:23:54:8e:74:b9:35:87:c1:b4: b1:14:d0:ff:35:2f:1e:41:6e:3d:b7:ba:e8:1c:1c: 25:1e:bb:a8:74:95:be:13:69:56:a7:6b:34:33:da: a8:5e:e7:2c:1b:9b:8e:1c:32:0e:d1:fa:34:40:30: 84:5e:a6:f6:7c:42:b8:07:3f:b4:4d:da:92:70:29: 6f:21:1e:8f:6b:df:cf:a8:3f:77:e9:45:65:b8:58: 89:23:f1:c9:60:9a:e0:ec:64:d1:e8:90:fe:d9:cd: 3c:fc:ef:ac:da:5d:95:7e:22:4c:fd:5b:bf:f0:7b: a5:c8:a4:99:d4:ba:fe:0f:54:9c:e1:2e:1b:65:c1: 39:f5:92:dd:f8:db:10:79:37:9c:c4:2c:31:2a:d9: bc:f7:6e:65:22:5f:60:df:52:66:be:73:50:eb:2c: 95:22:a8:38:f8:86:ad:a9:94:96:c8:80:f6:38:01: f4:f4:79:14:b0:7a:ce:3a:12:ec:db:1d:70:fc:99: 35:87:e9:5c:a7:6b:d7:4b:d4:90:b3:25:73:6e:20: e1:99:f5:c9:a5:d0:7d:02:bc:5e:dd:9e:c7:b8:19: c9:90:a4:52:5b:d5:92:78:1a:26:62:78:fb:63:32: d6:65:de:6b:a7:78:90:ac:7f:dd:dc:bf:16:a6:52: a0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:20:7D:6E:F2:1F:1A:22:27:98:E8:B6:95:E0:0A:04:3E:E4:83:11 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a91606af-f23b-41f1-a5e0-9c946ffa3ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:8000::/40 Signature Algorithm: sha256WithRSAEncryption ca:a8:20:de:bd:93:aa:9a:6c:e2:da:5a:a6:01:9b:3d:d5:58: 3b:3d:11:78:f2:60:c4:2e:92:12:52:6f:a5:33:e0:75:b6:8a: 0b:bb:87:5d:46:3e:36:c9:fd:6f:cb:a5:0a:26:9d:76:67:a4: 62:89:7d:33:a4:60:af:b7:d6:1f:f4:b9:6a:41:81:f3:d8:fb: bb:a9:f5:37:4d:18:c0:fb:ce:d2:6f:b4:c4:b2:d1:fa:56:2b: 11:32:c8:26:a3:69:61:71:c9:d3:ab:14:51:91:da:40:f5:59: 3b:f1:85:ab:5f:8b:53:5d:30:f3:5e:79:be:0e:d2:0f:77:ed: 40:24:32:89:ae:dd:5e:20:d4:6c:83:08:7d:d5:f6:6f:5f:9d: f3:b2:4d:0b:b3:e3:29:72:37:82:f9:ef:1a:f3:59:f7:b5:b5: bb:f9:e8:5c:e4:f0:9f:71:32:47:35:f4:4f:b8:7d:f0:4f:05: ff:01:92:f0:25:8f:2f:83:73:bd:ad:a5:92:6f:45:46:04:40: 5b:ea:47:dd:2f:e1:be:d6:a3:65:07:b3:81:a3:f7:68:b2:21: bf:87:d1:91:96:47:de:fa:28:48:31:35:f5:46:70:32:2c:d5: b8:1c:c7:0d:6f:a5:20:82:91:04:0c:b4:ab:3d:f3:fa:78:cf: dc:1e:15:30 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBrO3Fjda9Sq8MiMlhmxir3TACYswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMTAzNFoX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAYjAzNjdiOTcwMmM4ZDkwYmZmMmVh YTEwZDZiNDY0OWJkZGQyNjdhMWIxNTRjNGNhOTMyZGNhMTg4MTE0ZDc5YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjah1IDIjVI50uTWHwbSxFND/NS8e QW49t7roHBwlHruodJW+E2lWp2s0M9qoXucsG5uOHDIO0fo0QDCEXqb2fEK4Bz+0 TdqScClvIR6Pa9/PqD936UVluFiJI/HJYJrg7GTR6JD+2c08/O+s2l2VfiJM/Vu/ 8HulyKSZ1Lr+D1Sc4S4bZcE59ZLd+NsQeTecxCwxKtm8925lIl9g31JmvnNQ6yyV Iqg4+IatqZSWyID2OAH09HkUsHrOOhLs2x1w/Jk1h+lcp2vXS9SQsyVzbiDhmfXJ pdB9Arxe3Z7HuBnJkKRSW9WSeBomYnj7YzLWZd5rp3iQrH/d3L8WplKg5wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFI0gfW7yHxoiJ5jotpXgCgQ+5IMRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5MTYwNmFmLWYyM2ItNDFmMS1hNWUwLTljOTQ2ZmZhM2NlMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+IAwDQYJKoZIhvcNAQELBQADggEBAMqoIN69k6qabOLaWqYB mz3VWDs9EXjyYMQukhJSb6Uz4HW2igu7h11GPjbJ/W/LpQomnXZnpGKJfTOkYK+3 1h/0uWpBgfPY+7up9TdNGMD7ztJvtMSy0fpWKxEyyCajaWFxydOrFFGR2kD1WTvx hatfi1NdMPNeeb4O0g937UAkMomu3V4g1GyDCH3V9m9fnfOyTQuz4ylyN4L57xrz Wfe1tbv56Fzk8J9xMkc19E+4ffBPBf8BkvAljy+Dc72tpZJvRUYEQFvqR90v4b7W o2UHs4Gj92iyIb+H0ZGWR976KEgxNfVGcDIs1bgcxw1vpSCCkQQMtKs98/p4z9we FTA= -----END CERTIFICATE-----Generated at Sat Aug 22 12:45:43 2026 by rpki-client