$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cd144c0e-abfa-4d44-b17a-0908985b6114.roa File: cd144c0e-abfa-4d44-b17a-0908985b6114.roa (raw, json) Hash identifier: ZX8J2Aj8sqDt6NrNGvvbNkGKfWTOpIIlOq5drCPKMoQ= Subject key identifier: 98:9A:05:97:FC:E4:80:0F:27:B9:4A:F3:68:24:50:E4:E7:A7:D6:71 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3CE0C6E235F2AE1A8D3B4739231B5F887DDDDE23 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cd144c0e-abfa-4d44-b17a-0908985b6114.roa Signing time: Thu 30 Jul 2026 00:00:50 +0000 ROA not before: Thu 30 Jul 2026 00:00:50 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e0:c6:e2:35:f2:ae:1a:8d:3b:47:39:23:1b:5f:88:7d:dd:de:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:00:50 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=61e363af1e7a7d5527f26c1cea58dbfa9285a7097368f1afc2bf406ab5052e5f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:af:97:3c:fa:d4:b7:55:3a:8a:3c:61:e3: 96:34:f0:77:40:39:f1:95:47:aa:69:08:8b:1a:e5: 64:54:e7:db:fe:35:75:76:b8:a5:33:87:00:22:99: 4a:5e:8d:ec:f8:59:09:e1:2b:36:7e:74:68:c4:56: 56:cc:6d:92:7c:e1:ae:06:51:1d:49:c8:eb:07:ae: 64:cc:dd:84:c6:15:b7:e7:ef:bf:3c:b5:f9:b5:7c: 05:2b:b3:6e:ff:f0:84:5a:20:88:3d:8f:bf:13:6d: 47:0d:9c:af:39:61:9b:bd:03:73:3f:87:37:c0:14: c4:1d:4b:20:15:de:24:60:a8:16:62:44:7e:3e:52: 68:7d:fe:fb:1e:f0:1c:cc:d1:bf:d0:e3:17:30:74: cf:7f:23:31:45:e5:ad:a4:38:7b:2d:db:53:72:e3: 54:e2:d9:42:d6:8f:19:f8:86:bc:57:ef:42:a1:c4: 8d:4f:52:ef:f6:03:ab:22:2e:28:c0:83:22:91:e0: 30:e5:de:21:70:bd:c5:59:76:c9:81:c9:08:de:74: bd:bd:dc:17:df:30:67:75:af:d6:cf:19:1b:c7:f1: 0a:b4:78:7f:79:ab:b3:65:15:7e:b6:49:d1:bb:5f: c9:43:e9:70:21:85:d4:3a:fd:96:ee:13:75:56:19: 32:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9A:05:97:FC:E4:80:0F:27:B9:4A:F3:68:24:50:E4:E7:A7:D6:71 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cd144c0e-abfa-4d44-b17a-0908985b6114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 57:c7:5d:e4:d5:a8:f4:66:79:bf:48:72:66:8a:40:c5:31:8f: 6b:01:76:ea:89:fa:e9:31:51:25:17:32:34:f8:6e:85:14:30: bf:54:f0:2f:e6:2e:9d:8a:56:53:2e:99:29:9f:03:6d:60:b5: c2:b6:a4:63:92:75:bd:5d:bf:0f:24:bb:3c:d3:59:f9:bf:38: f4:43:81:ad:01:ec:24:a6:4f:bd:62:93:5f:02:15:36:63:bd: 8a:52:54:2f:f5:bb:f6:cd:2e:e3:7c:cb:ab:b8:df:10:47:85: be:3c:2f:30:0c:7e:bc:6d:aa:7c:96:d1:d5:96:72:ed:5b:2f: 0d:4a:55:b0:3f:b4:9d:c3:7d:ec:17:0a:c9:43:2d:2e:21:86: b0:cd:7e:a4:3b:51:3a:11:68:04:74:2c:21:26:a7:e6:d4:84: 9a:0d:a0:27:27:8f:c4:ff:0b:8c:f9:5b:e5:13:eb:5f:d2:51: 9e:8b:1c:66:4f:f8:96:6d:5f:32:e9:db:4c:66:29:38:b6:20: 76:91:01:c8:9f:ea:3b:c8:4d:eb:9a:90:50:94:bd:37:4f:5d: 83:d1:10:bd:79:33:0e:d9:f1:e5:37:df:46:d1:f2:c7:56:ca: 80:40:3b:02:f7:14:0d:fa:d4:5f:b9:c8:f1:dd:ae:b3:20:5a: 12:05:f7:25 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPODG4jXyrhqNO0c5IxtfiH3d3iMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMDA1MFoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNANjFlMzYzYWYxZTdhN2Q1NTI3ZjI2 YzFjZWE1OGRiZmE5Mjg1YTcwOTczNjhmMWFmYzJiZjQwNmFiNTA1MmU1ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUSvlzz61LdVOoo8YeOWNPB3QDnx lUeqaQiLGuVkVOfb/jV1drilM4cAIplKXo3s+FkJ4Ss2fnRoxFZWzG2SfOGuBlEd ScjrB65kzN2ExhW35++/PLX5tXwFK7Nu//CEWiCIPY+/E21HDZyvOWGbvQNzP4c3 wBTEHUsgFd4kYKgWYkR+PlJoff77HvAczNG/0OMXMHTPfyMxReWtpDh7LdtTcuNU 4tlC1o8Z+Ia8V+9CocSNT1Lv9gOrIi4owIMikeAw5d4hcL3FWXbJgckI3nS9vdwX 3zBnda/Wzxkbx/EKtHh/eauzZRV+tknRu1/JQ+lwIYXUOv2W7hN1VhkyawIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJiaBZf85IAPJ7lK82gkUOTnp9ZxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NkMTQ0YzBlLWFiZmEtNGQ0NC1iMTdhLTA5MDg5ODViNjExNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAGDAMA0GCSqGSIb3DQEBCwUAA4IBAQBXx13k1aj0Znm/SHJm ikDFMY9rAXbqifrpMVElFzI0+G6FFDC/VPAv5i6dilZTLpkpnwNtYLXCtqRjknW9 Xb8PJLs801n5vzj0Q4GtAewkpk+9YpNfAhU2Y72KUlQv9bv2zS7jfMuruN8QR4W+ PC8wDH68bap8ltHVlnLtWy8NSlWwP7Sdw33sFwrJQy0uIYawzX6kO1E6EWgEdCwh Jqfm1ISaDaAnJ4/E/wuM+VvlE+tf0lGeixxmT/iWbV8y6dtMZik4tiB2kQHIn+o7 yE3rmpBQlL03T12D0RC9eTMO2fHlN99G0fLHVsqAQDsC9xQN+tRfucjx3a6zIFoS Bfcl -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:35 2026 by rpki-client