$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9e1c759-db10-4a48-b586-da1f1ff39287.roa File: b9e1c759-db10-4a48-b586-da1f1ff39287.roa (raw, json) Hash identifier: vEgeuA/R8DP0fkzqnq4rXs1eMA6cZD6sAfNsPhZFyIs= Subject key identifier: 21:5A:D2:81:87:5F:BB:41:B0:AB:09:1C:E8:FD:CD:02:6C:AB:B1:4A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7362C777A9651DEB66152A28E2E91F6322511C00 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9e1c759-db10-4a48-b586-da1f1ff39287.roa Signing time: Wed 05 Aug 2026 00:00:11 +0000 ROA not before: Wed 05 Aug 2026 00:00:11 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:62:c7:77:a9:65:1d:eb:66:15:2a:28:e2:e9:1f:63:22:51:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 5 00:00:11 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=f018076d8f3628a640b9e75369b3e9a0dd6cac51100962e007c4717e34f6be0d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:a4:73:21:14:c2:90:29:4f:e4:fd:22:a9: 17:12:8d:13:0e:ee:cc:09:eb:a0:8b:6e:f6:c6:d9: aa:fd:86:e0:42:a6:a9:f7:e1:21:a5:9e:4d:c9:54: 40:52:bc:6d:e1:85:ac:49:92:30:45:8a:33:fb:11: 6c:c0:f7:08:91:c3:65:91:e7:49:c5:38:76:e3:57: bb:5f:96:01:07:3b:19:08:c4:45:7f:16:f2:e0:dd: 4a:c8:9c:c8:d0:a9:eb:6d:0a:44:6e:b1:39:aa:0e: f3:2e:fc:72:f0:3b:83:9e:42:f2:16:8c:26:c5:83: 62:23:5b:ed:1f:a3:3f:6a:bb:e3:5b:05:48:7f:1e: 5e:97:3d:20:6c:50:b6:1f:54:2c:dd:b9:9b:e8:e8: 04:d8:23:47:f1:7e:75:10:19:0b:f2:13:de:53:22: 14:d7:81:6e:01:f6:df:17:3a:30:02:59:c1:fb:52: c9:d9:de:f7:5c:ac:2b:71:9f:89:96:d2:fb:25:b5: 0d:01:39:0f:69:61:f4:89:3f:37:d0:31:a2:00:90: 4c:08:ef:82:66:38:97:ac:3b:17:cc:94:c3:5f:97: bc:2a:73:c4:71:da:23:6e:4b:eb:bb:2c:8d:49:5e: e6:5b:e6:0a:4f:29:d1:1f:82:64:af:c3:09:b2:6e: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5A:D2:81:87:5F:BB:41:B0:AB:09:1C:E8:FD:CD:02:6C:AB:B1:4A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9e1c759-db10-4a48-b586-da1f1ff39287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:9000::/40 Signature Algorithm: sha256WithRSAEncryption bf:bb:47:b5:b3:48:ed:f5:8a:4a:9d:30:91:12:c1:cc:c8:7e: 05:c3:fb:44:57:57:9a:98:6f:ca:85:82:d5:af:23:0f:d5:6d: 38:85:79:6a:c5:1c:4c:09:70:e2:32:5e:e8:a0:04:11:78:d0: e1:6d:8f:a7:5c:5e:bb:5a:12:ef:1a:59:91:7f:02:5a:fe:3f: 88:5d:e5:c6:79:68:1f:eb:dd:63:02:d6:8d:07:31:fc:09:31: e3:8e:86:72:25:5a:68:70:6a:e7:f1:ba:ab:87:02:cc:3e:d3: 37:ef:51:4d:fd:f7:38:06:29:bc:3b:ca:81:13:15:4d:80:ba: 67:5f:d8:05:50:00:bb:92:8e:57:9c:d0:43:4d:2b:88:89:24: 31:bb:f1:2a:2f:9b:b3:ec:f6:da:aa:46:59:de:4d:26:8f:a3: e8:a3:da:d0:12:33:27:e5:48:bb:05:14:2a:f3:2c:40:22:2a: bd:48:11:3f:74:44:17:5a:16:20:c9:07:37:68:51:33:12:63: 32:c6:8d:cf:b9:e8:c1:8b:8d:f7:09:82:78:ab:5c:96:a3:4b: 6e:9b:75:5d:e3:c5:13:2a:21:33:39:71:b8:43:ea:04:9e:90: d0:6b:71:a2:e1:60:09:8c:d2:7c:62:cf:72:fa:1b:18:36:d5: 40:82:82:f6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUc2LHd6llHetmFSoo4ukfYyJRHAAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwNTAwMDAxMVoX DTI2MTEwMzIzNTk1OVowejFJMEcGA1UEBRNAZjAxODA3NmQ4ZjM2MjhhNjQwYjll NzUzNjliM2U5YTBkZDZjYWM1MTEwMDk2MmUwMDdjNDcxN2UzNGY2YmUwZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRSkcyEUwpApT+T9IqkXEo0TDu7M Ceugi272xtmq/YbgQqap9+EhpZ5NyVRAUrxt4YWsSZIwRYoz+xFswPcIkcNlkedJ xTh241e7X5YBBzsZCMRFfxby4N1KyJzI0KnrbQpEbrE5qg7zLvxy8DuDnkLyFowm xYNiI1vtH6M/arvjWwVIfx5elz0gbFC2H1Qs3bmb6OgE2CNH8X51EBkL8hPeUyIU 14FuAfbfFzowAlnB+1LJ2d73XKwrcZ+JltL7JbUNATkPaWH0iT830DGiAJBMCO+C ZjiXrDsXzJTDX5e8KnPEcdojbkvruyyNSV7mW+YKTynRH4Jkr8MJsm55TQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCFa0oGHX7tBsKsJHOj9zQJsq7FKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I5ZTFjNzU5LWRiMTAtNGE0OC1iNTg2LWRhMWYxZmYzOTI4Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7ZAwDQYJKoZIhvcNAQELBQADggEBAL+7R7WzSO31ikqdMJES wczIfgXD+0RXV5qYb8qFgtWvIw/VbTiFeWrFHEwJcOIyXuigBBF40OFtj6dcXrta Eu8aWZF/Alr+P4hd5cZ5aB/r3WMC1o0HMfwJMeOOhnIlWmhwaufxuquHAsw+0zfv UU399zgGKbw7yoETFU2Aumdf2AVQALuSjlec0ENNK4iJJDG78Sovm7Ps9tqqRlne TSaPo+ij2tASMyflSLsFFCrzLEAiKr1IET90RBdaFiDJBzdoUTMSYzLGjc+56MGL jfcJgnirXJajS26bdV3jxRMqITM5cbhD6gSekNBrcaLhYAmM0nxiz3L6Gxg21UCC gvY= -----END CERTIFICATE-----Generated at Wed Aug 26 08:06:22 2026 by rpki-client