$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae7cac0c-d4a8-4e41-95c5-05a70db88e81.roa File: ae7cac0c-d4a8-4e41-95c5-05a70db88e81.roa (raw, json) Hash identifier: 3+EwDWJzOr/xvBfLk+PzpjZ9JnemrERfU2gahdWE87g= Subject key identifier: F0:9A:7F:11:D2:34:33:7B:E0:A1:92:9D:78:EB:69:17:F2:D2:3C:DA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5230FC10B341BE40D096FDFAD0221878942ED974 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae7cac0c-d4a8-4e41-95c5-05a70db88e81.roa Signing time: Wed 19 Aug 2026 00:00:21 +0000 ROA not before: Wed 19 Aug 2026 00:00:21 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:30:fc:10:b3:41:be:40:d0:96:fd:fa:d0:22:18:78:94:2e:d9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:00:21 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=2004e73b577c4c67c313704592e16dbbc449d14c799845ea0b60df40b30c2a04, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:83:9f:cb:1a:85:f6:16:c4:d2:43:5a:e0: 77:0b:e5:1e:5b:af:76:fe:16:6e:e9:a8:5a:df:81: ad:13:11:5c:e3:4e:29:a5:ab:4b:12:56:9b:bf:56: 0d:6f:2d:d6:16:a4:52:ac:7a:b1:8f:b5:91:68:c6: 4b:90:ad:36:09:c3:4e:9d:f6:1b:0a:43:3a:d1:8a: 1f:29:62:5f:e1:56:d0:db:b5:fb:b5:61:26:df:cd: da:e2:41:48:6f:98:76:70:f5:d1:89:c6:20:b6:3d: 73:c0:43:9c:1c:74:86:b4:ee:41:64:79:a1:7f:71: 15:37:8a:a3:5b:f6:53:5e:79:21:dc:6e:20:a6:1a: 84:6d:e0:1d:57:cf:14:5b:4a:58:f5:a5:72:12:55: 98:0b:cf:20:69:fe:bd:3b:26:c5:45:cb:75:1d:6b: d1:36:3f:54:a1:1d:60:55:16:02:e7:56:6b:8e:47: ed:87:41:3b:fc:88:60:4c:ca:09:e6:24:d7:1d:e7: 89:e1:32:f5:da:6d:62:06:8c:19:19:c2:24:00:fa: 84:39:77:cf:45:11:3a:bb:0e:b2:f8:2a:d9:ff:79: e9:05:7b:6f:27:f8:75:5f:3c:12:2f:45:e9:9e:8f: 5e:24:4d:47:4d:b6:80:97:46:b2:9f:d5:38:ba:b5: c7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9A:7F:11:D2:34:33:7B:E0:A1:92:9D:78:EB:69:17:F2:D2:3C:DA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae7cac0c-d4a8-4e41-95c5-05a70db88e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 52:aa:68:c6:2f:02:1f:c8:2b:d3:6b:e6:ab:48:98:ed:0d:9c: f6:44:2b:97:62:f8:e4:ff:8c:83:9f:d2:21:e2:47:f3:2f:15: f3:82:8b:c2:a2:97:e1:6b:fc:55:98:53:4a:4f:8f:54:5d:38: bb:74:2c:99:49:8e:13:2b:43:58:eb:b2:84:93:7d:48:c8:ce: e0:83:c2:50:1b:a4:19:fd:ed:06:65:34:1b:7a:e5:08:71:0b: bc:4d:a8:6a:e5:72:82:b5:d6:e1:20:4b:0a:c8:63:79:3c:39: 8e:73:06:c6:c4:74:b8:78:c5:c4:7a:e8:d7:53:b7:dc:18:1a: 4f:d0:ff:1c:eb:44:e4:e2:92:20:df:a2:ac:63:76:4a:87:13: e0:79:f9:57:a5:9d:c5:a5:62:75:1f:a6:67:e9:f6:f6:18:4c: 14:73:27:ae:f9:df:b1:e8:03:ed:b3:13:a5:d7:48:90:ed:3b: df:d7:29:41:e8:b8:17:15:eb:3c:52:a2:1a:db:c5:5b:7e:80: 0a:85:37:26:49:f5:64:19:d7:43:74:96:36:94:89:73:72:28: a6:21:8a:c6:a5:6e:b2:9c:78:14:b3:a4:79:4c:7f:02:13:6e: c0:00:f6:a0:a4:17:83:01:46:34:d3:ec:ba:a4:21:3d:09:a7: 8d:bc:41:b0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUjD8ELNBvkDQlv360CIYeJQu2XQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMDAyMVoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAMjAwNGU3M2I1NzdjNGM2N2MzMTM3 MDQ1OTJlMTZkYmJjNDQ5ZDE0Yzc5OTg0NWVhMGI2MGRmNDBiMzBjMmEwNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCmDn8sahfYWxNJDWuB3C+UeW692 /hZu6aha34GtExFc404ppatLElabv1YNby3WFqRSrHqxj7WRaMZLkK02CcNOnfYb CkM60YofKWJf4VbQ27X7tWEm383a4kFIb5h2cPXRicYgtj1zwEOcHHSGtO5BZHmh f3EVN4qjW/ZTXnkh3G4gphqEbeAdV88UW0pY9aVyElWYC88gaf69OybFRct1HWvR Nj9UoR1gVRYC51Zrjkfth0E7/IhgTMoJ5iTXHeeJ4TL12m1iBowZGcIkAPqEOXfP RRE6uw6y+CrZ/3npBXtvJ/h1XzwSL0Xpno9eJE1HTbaAl0ayn9U4urXHNwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPCafxHSNDN74KGSnXjraRfy0jzaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FlN2NhYzBjLWQ0YTgtNGU0MS05NWM1LTA1YTcwZGI4OGU4MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaumDAMA0GCSqGSIb3DQEBCwUAA4IBAQBSqmjGLwIfyCvTa+ar SJjtDZz2RCuXYvjk/4yDn9Ih4kfzLxXzgovCopfha/xVmFNKT49UXTi7dCyZSY4T K0NY67KEk31IyM7gg8JQG6QZ/e0GZTQbeuUIcQu8Tahq5XKCtdbhIEsKyGN5PDmO cwbGxHS4eMXEeujXU7fcGBpP0P8c60Tk4pIg36KsY3ZKhxPgeflXpZ3FpWJ1H6Zn 6fb2GEwUcyeu+d+x6APtsxOl10iQ7Tvf1ylB6LgXFes8UqIa28VbfoAKhTcmSfVk GddDdJY2lIlzciimIYrGpW6ynHgUs6R5TH8CE27AAPagpBeDAUY00+y6pCE9CaeN vEGw -----END CERTIFICATE-----Generated at Wed Aug 26 21:24:26 2026 by rpki-client