$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b20a7e82-867b-4d4d-bff9-1bf42972706b.roa File: b20a7e82-867b-4d4d-bff9-1bf42972706b.roa (raw, json) Hash identifier: pWa8AvvkG/VZSkyXcp+9/wmEztPKTXBbAJTUtYN/ELw= Subject key identifier: 9C:4A:D4:A6:6C:A4:9D:3E:12:6A:A7:D2:14:F9:E8:27:82:50:93:D5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3FB478142E6288FBFBC7BBC133B439F7E54FB476 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b20a7e82-867b-4d4d-bff9-1bf42972706b.roa Signing time: Sat 01 Aug 2026 00:30:58 +0000 ROA not before: Sat 01 Aug 2026 00:30:58 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b4:78:14:2e:62:88:fb:fb:c7:bb:c1:33:b4:39:f7:e5:4f:b4:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:30:58 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=c249bcc4c0cb90a693ace2629daf035081dd89cd14b6eda976a24eb3a4933771, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:e1:46:aa:d6:99:1f:e2:81:1c:13:d8:13: 52:1d:18:5c:f8:fa:3a:54:2a:45:a9:61:db:08:8a: a4:6b:1f:98:2d:56:c3:77:00:09:c9:1c:c0:31:84: fa:9d:59:f6:0a:d5:6f:24:8d:27:6d:f9:c5:a0:88: e5:31:26:ac:38:24:3a:02:22:9d:0f:bc:f1:95:75: ab:51:57:d1:63:b5:2f:9c:62:2b:79:e0:8d:ef:e3: e7:b7:cb:1d:2f:f0:2e:df:7f:3a:6f:ba:c0:44:ab: 6e:86:7b:63:fe:97:3d:69:35:fe:5d:33:fe:8e:6a: 4e:dd:ce:0b:27:4a:a6:15:f6:2d:c5:05:ca:db:2d: 15:af:d2:8e:7d:60:be:e8:1a:eb:33:0b:1c:b9:3a: 54:db:02:3a:9d:41:14:a8:23:e1:9b:a8:37:56:6a: 8f:c0:6d:46:0d:c3:eb:68:d5:47:f6:4c:be:dd:dc: 29:0a:27:25:53:ff:b9:40:a6:2c:9d:97:12:be:23: 23:5f:01:30:e5:48:9e:a6:07:3f:96:50:e9:3d:6a: b8:f9:b8:ea:6f:e3:35:71:80:e7:94:93:29:43:3c: 55:5d:86:6f:23:89:45:12:d1:68:8f:97:15:95:ad: 2a:c1:0a:29:4e:6d:22:d4:ff:f0:f2:99:91:15:da: 9d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4A:D4:A6:6C:A4:9D:3E:12:6A:A7:D2:14:F9:E8:27:82:50:93:D5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b20a7e82-867b-4d4d-bff9-1bf42972706b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:4800::/40 Signature Algorithm: sha256WithRSAEncryption 33:85:9c:4b:c6:da:5f:2c:ec:c6:e0:ef:73:0b:28:e9:6b:60: 51:a3:ad:48:63:2b:dc:1f:46:a5:7a:24:9c:9d:79:db:db:cd: 0a:86:87:f0:ca:f3:ce:c3:99:e1:d5:8f:69:ef:53:76:03:83: 55:6c:04:82:8a:df:d8:bf:81:31:9a:e0:22:a6:32:60:9f:ee: 01:fb:fb:12:59:f2:2a:48:ac:8d:1d:b7:aa:a1:8c:26:a8:87: f8:ad:3c:90:60:f2:3f:4e:e2:76:bf:e2:a3:6d:2a:ed:be:43: 7c:65:2f:a6:d6:a5:02:e9:8f:b6:4c:cf:a2:47:35:4e:a9:67: 2c:b8:38:8d:d5:fc:08:bd:b8:24:e9:d8:c1:df:5d:62:b7:ca: 5c:c3:de:93:dd:04:ca:56:0e:e3:74:0a:8e:e6:f6:85:11:4d: d2:88:86:84:ea:75:e5:9a:a4:de:d2:c8:17:97:ef:53:2f:63: fa:06:c7:f5:65:ac:57:c5:77:c0:b5:07:f4:28:3a:e6:ee:ea: 96:78:ed:d0:a6:2a:01:97:3d:9b:8c:dd:f6:5c:e5:94:bb:a6: e0:97:94:15:8b:6a:20:fe:22:f9:c8:fd:44:4c:6b:71:88:24: 9e:dc:e7:71:91:a4:21:05:f2:d8:ae:56:4c:a7:85:29:d4:2e: a2:e0:2f:d4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUP7R4FC5iiPv7x7vBM7Q59+VPtHYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMzA1OFoX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAYzI0OWJjYzRjMGNiOTBhNjkzYWNl MjYyOWRhZjAzNTA4MWRkODljZDE0YjZlZGE5NzZhMjRlYjNhNDkzMzc3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT3hRqrWmR/igRwT2BNSHRhc+Po6 VCpFqWHbCIqkax+YLVbDdwAJyRzAMYT6nVn2CtVvJI0nbfnFoIjlMSasOCQ6AiKd D7zxlXWrUVfRY7UvnGIreeCN7+Pnt8sdL/Au3386b7rARKtuhntj/pc9aTX+XTP+ jmpO3c4LJ0qmFfYtxQXK2y0Vr9KOfWC+6BrrMwscuTpU2wI6nUEUqCPhm6g3VmqP wG1GDcPraNVH9ky+3dwpCiclU/+5QKYsnZcSviMjXwEw5Uiepgc/llDpPWq4+bjq b+M1cYDnlJMpQzxVXYZvI4lFEtFoj5cVla0qwQopTm0i1P/w8pmRFdqddwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJxK1KZspJ0+Emqn0hT56CeCUJPVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IyMGE3ZTgyLTg2N2ItNGQ0ZC1iZmY5LTFiZjQyOTcyNzA2Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMkgwDQYJKoZIhvcNAQELBQADggEBADOFnEvG2l8s7Mbg73ML KOlrYFGjrUhjK9wfRqV6JJydedvbzQqGh/DK887DmeHVj2nvU3YDg1VsBIKK39i/ gTGa4CKmMmCf7gH7+xJZ8ipIrI0dt6qhjCaoh/itPJBg8j9O4na/4qNtKu2+Q3xl L6bWpQLpj7ZMz6JHNU6pZyy4OI3V/Ai9uCTp2MHfXWK3ylzD3pPdBMpWDuN0Co7m 9oURTdKIhoTqdeWapN7SyBeX71MvY/oGx/VlrFfFd8C1B/QoOubu6pZ47dCmKgGX PZuM3fZc5ZS7puCXlBWLaiD+IvnI/URMa3GIJJ7c53GRpCEF8tiuVkynhSnULqLg L9Q= -----END CERTIFICATE-----Generated at Wed Aug 26 08:06:30 2026 by rpki-client