$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c670c602-2b57-47d8-86f4-92e2ac7bc247.roa File: c670c602-2b57-47d8-86f4-92e2ac7bc247.roa (raw, json) Hash identifier: qMrx+ZvZCrxM2T1QPKzVjNYHfWEG7CLY7JnVKF5Qd30= Subject key identifier: 09:D0:C0:FC:3E:24:71:20:7A:7D:D9:F3:1E:2E:D6:CB:0E:69:CF:72 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 23B6757D69AAFB0C063D4EC945AB02B99198F596 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c670c602-2b57-47d8-86f4-92e2ac7bc247.roa Signing time: Mon 10 Aug 2026 00:00:49 +0000 ROA not before: Mon 10 Aug 2026 00:00:49 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae2:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b6:75:7d:69:aa:fb:0c:06:3d:4e:c9:45:ab:02:b9:91:98:f5:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:00:49 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=82eb77dcbbdf68920ae6f5503bc47b9b29ac9b82986b19ae7c1eed5dac206694, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:55:8b:ae:c5:33:95:95:fb:64:3e:1c:6a:cf: e5:81:3c:33:55:95:31:d2:91:c3:b7:49:4b:f9:b7: 87:34:de:f5:01:57:27:e6:0b:52:bd:a0:7f:d8:f9: bd:62:18:b0:d6:76:c9:72:dc:66:b6:ed:14:31:5c: 6b:c8:b5:ce:05:09:83:e8:af:71:f0:14:12:fc:bc: 36:8c:32:b6:cd:98:eb:b4:69:ae:77:db:b1:36:93: 49:10:11:1e:fb:37:97:d6:52:da:d3:94:ab:c1:ee: dd:d1:a3:fd:4a:a0:7a:6a:0c:58:54:89:aa:08:28: c3:04:46:94:5f:af:06:bc:25:d7:53:ba:a6:49:3f: c0:49:3d:00:7b:51:1a:b7:72:2a:ba:50:ed:b0:3b: d1:89:fc:f5:2b:72:90:2e:b8:23:8c:4c:00:17:01: 98:81:69:e0:9f:27:95:c1:cb:6a:aa:9f:48:4d:67: ca:be:ff:5a:95:38:48:19:f0:66:2c:64:d0:11:16: 42:7f:28:08:b0:95:ec:00:f7:ff:ef:e3:c2:b4:5f: 88:ed:92:a8:1f:21:c1:a2:36:a3:1c:b7:c0:6d:57: ed:72:8a:57:04:f4:72:0a:57:df:6b:50:64:ac:39: 3a:1b:f1:f9:38:22:ae:3c:00:77:39:69:b8:12:7c: fb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D0:C0:FC:3E:24:71:20:7A:7D:D9:F3:1E:2E:D6:CB:0E:69:CF:72 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c670c602-2b57-47d8-86f4-92e2ac7bc247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae2:9000::/40 Signature Algorithm: sha256WithRSAEncryption 4d:0f:57:74:ac:89:03:86:60:f3:bd:67:f7:d7:87:be:c6:4c: ff:cc:28:6f:8b:4c:26:af:65:06:c6:cf:08:a7:89:3a:39:0d: ad:1c:b8:99:1b:22:f2:18:ea:8c:37:80:c7:c9:fd:f4:f8:a5: 4c:99:28:a8:aa:cd:d5:20:5a:12:1b:2a:eb:05:fd:de:b5:76: 56:03:ef:37:9f:9e:46:db:77:b5:ce:69:f6:81:b4:56:04:a7: 7f:bf:fc:12:89:7d:4d:81:79:d0:c7:9e:88:81:07:73:91:1a: be:38:39:25:98:5e:7f:22:4d:a7:41:cc:14:7c:5b:7c:ba:eb: 6c:7d:8a:3f:88:5f:52:a0:7f:4a:b7:41:1d:3b:2b:94:7b:8b: 96:8e:5d:58:ad:ae:4e:be:bf:1c:c0:44:7e:02:35:1c:97:a9: 8e:34:d3:1b:4c:14:25:dd:4b:e7:3e:d7:80:c8:e6:3f:c2:74: da:59:29:44:df:2f:a9:1c:08:74:fb:a8:09:df:05:c8:3b:5b: f7:4b:a7:62:cf:a8:96:88:0e:7c:ca:74:97:a0:e4:93:9a:1f: 28:c6:bb:b8:b4:54:89:a9:53:46:40:58:b9:33:91:7a:d8:cf: fa:58:b7:dd:93:2c:6f:8a:17:04:ce:c1:6d:c7:c7:04:90:8e: 5f:8a:0a:7c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUI7Z1fWmq+wwGPU7JRasCuZGY9ZYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMDA0OVoX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAODJlYjc3ZGNiYmRmNjg5MjBhZTZm NTUwM2JjNDdiOWIyOWFjOWI4Mjk4NmIxOWFlN2MxZWVkNWRhYzIwNjY5NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFWLrsUzlZX7ZD4cas/lgTwzVZUx 0pHDt0lL+beHNN71AVcn5gtSvaB/2Pm9Yhiw1nbJctxmtu0UMVxryLXOBQmD6K9x 8BQS/Lw2jDK2zZjrtGmud9uxNpNJEBEe+zeX1lLa05Srwe7d0aP9SqB6agxYVImq CCjDBEaUX68GvCXXU7qmST/AST0Ae1Eat3IqulDtsDvRifz1K3KQLrgjjEwAFwGY gWngnyeVwctqqp9ITWfKvv9alThIGfBmLGTQERZCfygIsJXsAPf/7+PCtF+I7ZKo HyHBojajHLfAbVftcopXBPRyClffa1BkrDk6G/H5OCKuPAB3OWm4Enz79wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAnQwPw+JHEgen3Z8x4u1ssOac9yMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M2NzBjNjAyLTJiNTctNDdkOC04NmY0LTkyZTJhYzdiYzI0Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4pAwDQYJKoZIhvcNAQELBQADggEBAE0PV3SsiQOGYPO9Z/fX h77GTP/MKG+LTCavZQbGzwiniTo5Da0cuJkbIvIY6ow3gMfJ/fT4pUyZKKiqzdUg WhIbKusF/d61dlYD7zefnkbbd7XOafaBtFYEp3+//BKJfU2BedDHnoiBB3ORGr44 OSWYXn8iTadBzBR8W3y662x9ij+IX1Kgf0q3QR07K5R7i5aOXVitrk6+vxzARH4C NRyXqY400xtMFCXdS+c+14DI5j/CdNpZKUTfL6kcCHT7qAnfBcg7W/dLp2LPqJaI DnzKdJeg5JOaHyjGu7i0VImpU0ZAWLkzkXrYz/pYt92TLG+KFwTOwW3HxwSQjl+K Cnw= -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:18 2026 by rpki-client