$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a91b902a-3780-4e0a-8062-46df71087b57.roa File: a91b902a-3780-4e0a-8062-46df71087b57.roa (raw, json) Hash identifier: LdjFuAB930ziSGmJJi1GMv/LddQ1tC/IWskLu8vPmCU= Subject key identifier: 40:01:72:7D:27:A5:29:CD:EF:F8:38:2D:8F:4F:28:1E:E1:89:03:73 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 18ABE80AAEC175883E9ABCE950E047E54BD43292 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a91b902a-3780-4e0a-8062-46df71087b57.roa Signing time: Fri 31 Jul 2026 00:10:05 +0000 ROA not before: Fri 31 Jul 2026 00:10:05 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ab:e8:0a:ae:c1:75:88:3e:9a:bc:e9:50:e0:47:e5:4b:d4:32:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:10:05 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=3d14eaffd02c9b5f55e2f1d4446f86c5ac6e8e86e152f67c1eb55a3a16ed73bc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c0:b1:b8:31:cd:41:cb:f4:ff:70:0a:54:ec: 25:6e:f1:5e:d7:17:84:00:c8:16:f4:4a:99:e4:8e: 7d:90:1f:ae:87:41:59:be:47:19:0c:68:56:f5:dd: 51:23:dd:8b:e6:85:87:2f:92:94:c6:71:05:0e:a2: 4e:60:29:c1:2a:f9:af:75:24:64:41:97:76:36:03: fb:6c:ac:d4:84:f0:2f:39:54:fb:7a:da:fd:0c:5c: d0:d0:e9:14:78:66:9d:07:60:0a:9d:65:ab:54:01: 01:4b:09:bb:9b:6c:dd:10:00:92:fe:a1:f3:d1:6d: 9f:2f:b0:05:f7:8b:53:92:11:88:a2:1c:0d:67:a0: 0d:1a:b5:73:4e:63:28:b0:a7:01:e5:a7:75:2d:59: 25:92:a2:92:7a:f7:66:17:e3:28:e2:b3:3b:6c:c2: 2d:8a:e7:58:f9:6c:d3:d1:14:58:95:ea:20:6c:f6: 5d:1d:42:b9:84:ae:d0:f5:54:c7:b3:f8:63:90:e4: fa:9e:9f:a0:2a:00:2f:df:b8:41:0c:0e:cb:36:87: c7:d7:4e:3d:e4:e5:74:f6:bc:8b:55:af:24:15:58: 34:0d:1f:b4:1d:4a:0d:65:86:e4:cd:7b:d3:6b:62: 12:3a:0e:9b:68:f3:81:48:92:cd:39:e6:c3:cb:c0: bd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:01:72:7D:27:A5:29:CD:EF:F8:38:2D:8F:4F:28:1E:E1:89:03:73 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a91b902a-3780-4e0a-8062-46df71087b57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:b000::/40 Signature Algorithm: sha256WithRSAEncryption 5c:45:55:47:9e:30:0b:a4:24:00:be:61:bc:f2:e3:77:65:ff: 30:55:b0:28:16:23:33:b5:64:96:7b:c1:ee:ec:8a:12:d9:f8: 58:ad:6f:c9:2e:dd:45:ca:c4:67:c3:c1:1b:5d:ca:b5:66:2a: ae:fc:6a:55:e1:3f:76:bf:88:79:78:c1:60:79:00:24:20:02: 67:c1:20:55:6c:ea:6a:d2:58:d3:de:05:30:fa:21:a1:08:2e: cd:50:be:be:6e:05:03:49:bd:d5:b5:19:f4:e7:33:c9:84:12: b1:e3:53:cd:63:06:c7:91:f1:4e:ea:ed:f8:64:97:07:0c:4c: ac:ff:e5:ca:9c:75:4d:4f:53:09:59:2e:ff:ea:bc:6c:f5:f5: 40:01:96:f3:9e:dd:6b:3d:ab:21:0c:a4:3b:5b:68:fe:b5:a0: cf:b0:39:62:1d:e8:47:1b:25:50:44:19:ec:09:71:db:1d:53: 72:fa:fd:01:0e:9f:30:18:9b:f8:0d:9c:61:7e:be:c2:04:36: 3b:b0:ae:9a:a2:31:99:d7:ef:39:dc:91:d6:55:54:b3:f7:ab: db:9f:5a:fc:32:ec:c8:47:1e:61:be:0e:e9:98:58:20:4f:84: 47:c8:f7:12:e4:8d:eb:0d:50:d9:51:87:34:a8:41:a1:da:4c: 73:37:c9:f5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGKvoCq7BdYg+mrzpUOBH5UvUMpIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMTAwNVoX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNAM2QxNGVhZmZkMDJjOWI1ZjU1ZTJm MWQ0NDQ2Zjg2YzVhYzZlOGU4NmUxNTJmNjdjMWViNTVhM2ExNmVkNzNiYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8CxuDHNQcv0/3AKVOwlbvFe1xeE AMgW9EqZ5I59kB+uh0FZvkcZDGhW9d1RI92L5oWHL5KUxnEFDqJOYCnBKvmvdSRk QZd2NgP7bKzUhPAvOVT7etr9DFzQ0OkUeGadB2AKnWWrVAEBSwm7m2zdEACS/qHz 0W2fL7AF94tTkhGIohwNZ6ANGrVzTmMosKcB5ad1LVklkqKSevdmF+Mo4rM7bMIt iudY+WzT0RRYleogbPZdHUK5hK7Q9VTHs/hjkOT6np+gKgAv37hBDA7LNofH1049 5OV09ryLVa8kFVg0DR+0HUoNZYbkzXvTa2ISOg6baPOBSJLNOebDy8C9BQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEABcn0npSnN7/g4LY9PKB7hiQNzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5MWI5MDJhLTM3ODAtNGUwYS04MDYyLTQ2ZGY3MTA4N2I1Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/7AwDQYJKoZIhvcNAQELBQADggEBAFxFVUeeMAukJAC+Ybzy 43dl/zBVsCgWIzO1ZJZ7we7sihLZ+Fitb8ku3UXKxGfDwRtdyrVmKq78alXhP3a/ iHl4wWB5ACQgAmfBIFVs6mrSWNPeBTD6IaEILs1Qvr5uBQNJvdW1GfTnM8mEErHj U81jBseR8U7q7fhklwcMTKz/5cqcdU1PUwlZLv/qvGz19UABlvOe3Ws9qyEMpDtb aP61oM+wOWId6EcbJVBEGewJcdsdU3L6/QEOnzAYm/gNnGF+vsIENjuwrpqiMZnX 7znckdZVVLP3q9ufWvwy7MhHHmG+DumYWCBPhEfI9xLkjesNUNlRhzSoQaHaTHM3 yfU= -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:47 2026 by rpki-client