$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d47ded25-5cff-4b90-bf7f-ab4629d5b507.roa File: d47ded25-5cff-4b90-bf7f-ab4629d5b507.roa (raw, json) Hash identifier: LBMv17zk020wUGxYV5KqCSjOHoaDuoYXorlHwwLXbUw= Subject key identifier: 80:CC:6A:6A:F7:2B:BA:8D:5D:39:E0:EA:F5:D5:30:3A:8A:99:0B:F5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 09CE69987E921F79DF4DCA9C110C35BDE2475E46 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d47ded25-5cff-4b90-bf7f-ab4629d5b507.roa Signing time: Wed 19 Aug 2026 00:01:01 +0000 ROA not before: Wed 19 Aug 2026 00:01:01 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ce:69:98:7e:92:1f:79:df:4d:ca:9c:11:0c:35:bd:e2:47:5e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:01:01 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=1be04c137f891bbd689f9a730ab83e532fb03000f8d5ae3b57a6274d08e8fd19, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:47:d1:56:cd:8f:e4:d6:d5:3d:91:56:a5:80: 5f:b6:83:55:6e:70:31:6c:54:b7:0f:a5:3d:9d:f7: 97:99:4a:d6:97:e6:43:05:5c:0e:5f:3c:49:3b:30: 19:22:fe:17:31:72:4d:dd:cc:fc:11:2e:8a:d2:7b: 34:c7:dd:ae:36:c6:6b:b0:8f:7b:49:86:9a:1a:84: b8:67:98:51:cd:03:a1:7d:93:ec:38:8d:c3:a2:7f: 0d:90:3b:1e:6b:de:5e:46:ed:68:ae:67:a2:b8:87: 52:a0:b3:74:71:55:1c:69:67:a9:f1:9d:cd:cf:ed: 71:d0:26:d9:f9:fd:8b:82:55:f6:9b:e9:16:68:0e: 0e:d6:7f:d2:ec:f1:d3:ff:13:f5:b7:ea:74:0b:ba: 15:21:0b:48:63:63:83:f0:cf:23:85:6f:79:54:fa: 2a:6a:2e:b9:ec:84:a1:22:91:37:d9:29:cc:18:42: 21:6d:0e:88:cb:78:1b:03:68:e2:37:48:70:d1:5e: e9:e0:ec:93:3c:61:5f:62:f2:99:d0:89:f7:8d:9e: ab:b8:5a:ba:b7:22:7d:f0:d5:d1:dc:3b:ae:e5:29: e2:f6:c0:8b:78:64:90:41:58:c4:ad:99:8b:b7:eb: c7:9c:31:58:81:8b:52:f6:f9:ed:65:60:68:17:39: e5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CC:6A:6A:F7:2B:BA:8D:5D:39:E0:EA:F5:D5:30:3A:8A:99:0B:F5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d47ded25-5cff-4b90-bf7f-ab4629d5b507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:e040::/48 Signature Algorithm: sha256WithRSAEncryption 5a:dd:f3:f8:2e:3f:49:a4:af:c7:02:2d:ae:1b:87:75:f8:ad: 89:fa:f9:d9:f6:f7:27:f8:57:65:23:27:0a:66:4d:ed:46:c1: af:75:ed:9f:79:29:b7:4c:3e:3b:c6:83:4d:48:f1:3f:22:0d: 2a:41:31:c0:ff:9f:f3:b4:9d:23:32:58:1d:83:0e:c5:1d:f0: 13:00:20:22:7a:e4:b2:70:79:14:a4:d6:d0:a2:16:c5:42:73: 08:e1:e0:68:b6:77:4f:a7:14:9e:7d:45:33:71:6f:79:ad:75: 99:3b:04:41:1f:f8:ee:3d:80:91:5e:bc:97:08:68:fe:b9:e5: 51:8c:34:27:74:2f:2d:3b:9e:59:86:46:82:9f:26:04:b0:2a: f0:20:01:b2:53:d7:39:7a:02:80:88:6a:11:0d:e2:ce:fc:ce: 46:4d:5e:66:1b:3d:b7:13:cd:84:eb:91:68:b3:35:26:10:1a: cc:c0:e0:20:47:82:63:22:c1:27:b3:1c:21:23:1b:79:2c:ad: 35:e4:d0:34:1a:06:4a:28:e3:56:02:84:0a:a1:ed:01:57:99: 89:60:e5:40:0f:f5:37:c6:29:24:f5:0d:c0:4b:4e:2a:ff:b2: 37:8b:4b:ca:42:7f:c3:3a:3f:e2:d1:41:bb:14:61:40:ac:d0: bb:2b:49:d7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCc5pmH6SH3nfTcqcEQw1veJHXkYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMDEwMVoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAMWJlMDRjMTM3Zjg5MWJiZDY4OWY5 YTczMGFiODNlNTMyZmIwMzAwMGY4ZDVhZTNiNTdhNjI3NGQwOGU4ZmQxOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kfRVs2P5NbVPZFWpYBftoNVbnAx bFS3D6U9nfeXmUrWl+ZDBVwOXzxJOzAZIv4XMXJN3cz8ES6K0ns0x92uNsZrsI97 SYaaGoS4Z5hRzQOhfZPsOI3Don8NkDsea95eRu1ormeiuIdSoLN0cVUcaWep8Z3N z+1x0CbZ+f2LglX2m+kWaA4O1n/S7PHT/xP1t+p0C7oVIQtIY2OD8M8jhW95VPoq ai657IShIpE32SnMGEIhbQ6Iy3gbA2jiN0hw0V7p4OyTPGFfYvKZ0In3jZ6ruFq6 tyJ98NXR3Duu5Sni9sCLeGSQQVjErZmLt+vHnDFYgYtS9vntZWBoFznl3wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIDMamr3K7qNXTng6vXVMDqKmQv1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q0N2RlZDI1LTVjZmYtNGI5MC1iZjdmLWFiNDYyOWQ1YjUwNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6eBAMA0GCSqGSIb3DQEBCwUAA4IBAQBa3fP4Lj9JpK/HAi2u G4d1+K2J+vnZ9vcn+FdlIycKZk3tRsGvde2feSm3TD47xoNNSPE/Ig0qQTHA/5/z tJ0jMlgdgw7FHfATACAieuSycHkUpNbQohbFQnMI4eBotndPpxSefUUzcW95rXWZ OwRBH/juPYCRXryXCGj+ueVRjDQndC8tO55ZhkaCnyYEsCrwIAGyU9c5egKAiGoR DeLO/M5GTV5mGz23E82E65FoszUmEBrMwOAgR4JjIsEnsxwhIxt5LK015NA0GgZK KONWAoQKoe0BV5mJYOVAD/U3xikk9Q3AS04q/7I3i0vKQn/DOj/i0UG7FGFArNC7 K0nX -----END CERTIFICATE-----Generated at Wed Aug 26 13:04:37 2026 by rpki-client