$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae9201a3-94d9-460b-bd4d-478ba8ba682b.roa File: ae9201a3-94d9-460b-bd4d-478ba8ba682b.roa (raw, json) Hash identifier: voBde5KVEyXDITEs3g/LeFSwCx0gKlpdWf66W4HWstk= Subject key identifier: AB:CC:D8:E5:45:CA:DF:BE:2D:87:05:9B:BC:09:16:10:7E:39:C6:94 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3186CA5C7A968D4484E3C9E78B345752DAC8944D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae9201a3-94d9-460b-bd4d-478ba8ba682b.roa Signing time: Sat 01 Aug 2026 00:11:16 +0000 ROA not before: Sat 01 Aug 2026 00:11:16 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da16::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:86:ca:5c:7a:96:8d:44:84:e3:c9:e7:8b:34:57:52:da:c8:94:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:11:16 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=87f972687338b2e279cafb76853d007a509ef8972ab7c6cfb67a375043814aa8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:32:99:ef:7d:38:39:44:a6:ab:b7:08:28: b7:11:f7:ab:7a:98:ea:7c:a2:98:2f:82:4b:16:10: 08:b7:47:f2:12:87:80:5f:92:8d:73:d4:4a:c4:da: 99:57:0a:1e:dd:46:0b:57:e9:8d:6a:73:e1:2c:36: 5e:d6:b6:f9:d5:a1:52:43:06:18:b7:b5:1f:0e:84: 3f:41:e8:c9:63:1e:e2:74:c3:3a:7b:9a:1f:5c:bd: ae:27:7f:aa:c2:f1:35:14:28:fa:4c:5b:d3:8a:36: e4:5d:ea:b1:7a:2c:3c:bf:0e:de:62:4d:d5:af:d7: 0f:ed:30:98:9c:6f:19:c0:fe:d9:6f:5e:c1:9a:5c: 90:5c:03:12:40:c0:53:a6:b1:a0:57:bc:0c:9d:15: 9b:92:b0:31:d5:c4:ef:8d:68:2b:ce:e9:7c:97:3a: 80:ee:97:95:c0:59:fa:b6:75:b3:85:3c:c7:88:81: 8b:62:5f:95:6b:cc:ad:c5:a1:c7:a3:b5:38:6b:06: 4b:e8:db:0d:72:49:97:0a:95:31:f7:45:41:34:56: 41:32:10:bc:28:c8:19:2b:99:1c:06:43:65:b2:99: 97:94:9f:95:74:3b:8a:f8:22:cc:7a:35:23:1c:7b: 94:cc:64:c0:d2:c7:2c:05:7a:1b:ef:9a:8f:5e:47: fb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CC:D8:E5:45:CA:DF:BE:2D:87:05:9B:BC:09:16:10:7E:39:C6:94 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae9201a3-94d9-460b-bd4d-478ba8ba682b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da16::/38 Signature Algorithm: sha256WithRSAEncryption ab:fc:83:9a:74:a6:d2:8d:8f:bc:68:c5:02:46:0e:b7:4b:37: cd:09:20:09:74:04:8c:4f:a7:8a:83:4a:db:ba:ae:13:26:cc: 13:db:f1:a9:b3:23:69:fe:d7:0c:cd:5b:15:8b:a2:f9:51:44: 58:02:09:3b:a0:67:0b:c9:22:2d:82:e8:e6:a7:22:03:89:e3: 57:92:a4:be:ab:6c:b5:05:d7:34:74:07:6d:00:26:11:0f:ec: ea:a3:a5:7b:15:38:05:80:ac:9b:c5:22:ef:5b:84:73:f0:df: 6e:a9:e6:a6:7f:b4:f0:17:d4:e0:44:b7:3e:64:11:e2:6f:22: 75:92:d6:0c:f1:83:7d:63:e7:4e:d3:88:45:22:7a:ce:0b:26: cc:00:3b:a5:4b:db:15:7e:cd:d5:cf:bd:0c:9d:8f:80:9c:d7: 2f:4f:78:da:ef:82:ed:34:b6:07:e0:bc:64:29:6a:d0:26:4e: 3a:d5:b2:e6:54:4c:95:78:b4:f3:50:f7:ff:7d:ac:95:0e:bb: 08:36:2f:b3:2a:fd:aa:e1:60:08:38:d8:6e:37:b0:c1:85:92: 91:33:18:c7:a7:90:82:c1:54:93:10:67:bd:2a:38:b1:79:ec: 21:87:d9:6d:d2:54:a1:b3:3f:60:ed:55:c1:57:12:19:4b:14: dc:41:c2:db -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMYbKXHqWjUSE48nnizRXUtrIlE0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMTExNloX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAODdmOTcyNjg3MzM4YjJlMjc5Y2Fm Yjc2ODUzZDAwN2E1MDllZjg5NzJhYjdjNmNmYjY3YTM3NTA0MzgxNGFhODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBgyme99ODlEpqu3CCi3Eferepjq fKKYL4JLFhAIt0fyEoeAX5KNc9RKxNqZVwoe3UYLV+mNanPhLDZe1rb51aFSQwYY t7UfDoQ/QejJYx7idMM6e5ofXL2uJ3+qwvE1FCj6TFvTijbkXeqxeiw8vw7eYk3V r9cP7TCYnG8ZwP7Zb17BmlyQXAMSQMBTprGgV7wMnRWbkrAx1cTvjWgrzul8lzqA 7peVwFn6tnWzhTzHiIGLYl+Va8ytxaHHo7U4awZL6NsNckmXCpUx90VBNFZBMhC8 KMgZK5kcBkNlspmXlJ+VdDuK+CLMejUjHHuUzGTA0scsBXob75qPXkf7xwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKvM2OVFyt++LYcFm7wJFhB+OcaUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FlOTIwMWEzLTk0ZDktNDYwYi1iZDRkLTQ3OGJhOGJhNjgyYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFgAwDQYJKoZIhvcNAQELBQADggEBAKv8g5p0ptKNj7xoxQJG DrdLN80JIAl0BIxPp4qDStu6rhMmzBPb8amzI2n+1wzNWxWLovlRRFgCCTugZwvJ Ii2C6OanIgOJ41eSpL6rbLUF1zR0B20AJhEP7OqjpXsVOAWArJvFIu9bhHPw326p 5qZ/tPAX1OBEtz5kEeJvInWS1gzxg31j507TiEUies4LJswAO6VL2xV+zdXPvQyd j4Cc1y9PeNrvgu00tgfgvGQpatAmTjrVsuZUTJV4tPNQ9/99rJUOuwg2L7Mq/arh YAg42G43sMGFkpEzGMenkILBVJMQZ70qOLF57CGH2W3SVKGzP2DtVcFXEhlLFNxB wts= -----END CERTIFICATE-----Generated at Wed Aug 26 08:04:14 2026 by rpki-client