$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d845b183-711b-4c94-b81c-1732651903fe.roa File: d845b183-711b-4c94-b81c-1732651903fe.roa (raw, json) Hash identifier: oe4c8hR/t+NnmVuPnfii1Y13r37+o0SqZZ2VwtOHSyA= Subject key identifier: 0C:7F:97:7A:AE:6A:0E:15:02:1B:C4:E4:C1:C0:17:37:70:2C:63:6E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4F954D2331A1C7612938065F7D0E1BE944CF02DE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d845b183-711b-4c94-b81c-1732651903fe.roa Signing time: Sat 01 Aug 2026 00:20:09 +0000 ROA not before: Sat 01 Aug 2026 00:20:09 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:95:4d:23:31:a1:c7:61:29:38:06:5f:7d:0e:1b:e9:44:cf:02:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:20:09 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=e6fa459697ad29b5dfff8382f89f60dada7712645ac4e660dd2f8a119e2f3080, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f4:5f:21:46:f0:80:b4:2e:e1:2f:c0:0a:99: 7a:90:cd:66:3f:b0:4f:8f:1b:f4:0e:37:97:4e:35: e1:48:66:8e:26:ab:36:0a:e8:ea:3d:46:99:fa:12: 86:1d:2e:8a:e6:31:69:0c:46:2c:7a:5a:b8:5e:ce: 04:7d:87:91:5b:3c:90:f2:50:54:0f:8e:b0:5a:2d: 71:a5:6f:3f:eb:a9:e0:b7:35:c0:f5:d8:07:a6:0a: 4c:2b:00:bb:28:e0:fc:f5:b5:c5:27:32:7d:07:ec: ad:41:e0:f9:55:d0:54:4e:9c:d7:af:c0:b9:c6:aa: 5e:be:83:36:17:f1:9f:e2:e2:93:df:7c:bf:cc:50: b5:28:8b:b0:60:26:7a:ca:62:03:02:71:ef:1e:cd: 94:ba:8a:9e:dc:24:8d:99:e3:90:23:ef:56:90:a6: 2f:86:04:6b:e9:47:87:74:ec:59:6f:5b:4a:69:a8: 51:cd:f5:c7:41:7d:62:96:65:4f:bf:55:78:d7:79: 82:aa:8a:8b:b7:75:fe:5a:b3:bd:7e:5f:64:61:67: 8a:b1:c2:1a:5b:4e:50:fa:06:15:6f:19:85:9a:ab: 9b:32:3f:7f:bc:76:7f:06:08:98:8f:8d:e7:e7:3a: 9c:17:b9:2d:b0:94:fc:0f:6d:c9:c5:ee:3a:b3:ca: 42:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7F:97:7A:AE:6A:0E:15:02:1B:C4:E4:C1:C0:17:37:70:2C:63:6E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d845b183-711b-4c94-b81c-1732651903fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:4800::/40 Signature Algorithm: sha256WithRSAEncryption ab:cc:f5:b5:79:f4:df:67:20:c9:f0:35:4f:35:5e:79:04:2c: ea:83:39:bb:48:f1:8d:c6:a0:17:bf:54:c7:9c:4b:92:a1:c7: cd:ad:6c:36:b7:9e:32:68:77:2c:76:d1:57:62:f5:91:04:aa: 8e:6b:dd:68:91:0d:d3:61:b7:bc:4b:c9:90:bc:80:cc:a0:d1: 2a:f8:5a:fe:c4:c1:53:5f:18:60:90:bd:50:2e:f0:27:9a:86: ea:ef:4c:91:aa:df:26:46:ac:2f:e8:c6:06:50:1f:c4:9a:56: fb:a8:bc:66:8f:c6:9b:64:49:da:74:64:66:cd:d8:8a:6d:fe: 39:00:d6:a5:37:01:23:10:d0:c3:4b:8e:6a:7c:2a:23:53:04: 77:a9:0c:89:59:89:f5:2b:9f:53:6c:77:6c:a9:0e:96:bd:3a: 1f:38:1b:91:84:4d:20:89:c3:55:98:f5:df:30:0b:b0:e5:c4: 46:6d:f2:06:34:59:c9:e8:fe:16:b2:f5:23:59:b7:6f:3e:57: 4c:8a:79:a0:32:69:af:53:35:0f:39:f4:0a:2b:bd:c8:a5:bc: d9:5e:48:44:ab:cb:3e:e6:3f:8f:c9:c0:9d:b0:20:3e:eb:61: 35:a0:70:1d:28:a3:7b:39:ad:a4:45:38:97:6f:aa:6f:e5:aa: 62:84:8d:79 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUT5VNIzGhx2EpOAZffQ4b6UTPAt4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMjAwOVoX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAZTZmYTQ1OTY5N2FkMjliNWRmZmY4 MzgyZjg5ZjYwZGFkYTc3MTI2NDVhYzRlNjYwZGQyZjhhMTE5ZTJmMzA4MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/RfIUbwgLQu4S/ACpl6kM1mP7BP jxv0DjeXTjXhSGaOJqs2CujqPUaZ+hKGHS6K5jFpDEYselq4Xs4EfYeRWzyQ8lBU D46wWi1xpW8/66ngtzXA9dgHpgpMKwC7KOD89bXFJzJ9B+ytQeD5VdBUTpzXr8C5 xqpevoM2F/Gf4uKT33y/zFC1KIuwYCZ6ymIDAnHvHs2Uuoqe3CSNmeOQI+9WkKYv hgRr6UeHdOxZb1tKaahRzfXHQX1ilmVPv1V413mCqoqLt3X+WrO9fl9kYWeKscIa W05Q+gYVbxmFmqubMj9/vHZ/BgiYj43n5zqcF7ktsJT8D23Jxe46s8pCUQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAx/l3quag4VAhvE5MHAFzdwLGNuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q4NDViMTgzLTcxMWItNGM5NC1iODFjLTE3MzI2NTE5MDNmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+EgwDQYJKoZIhvcNAQELBQADggEBAKvM9bV59N9nIMnwNU81 XnkELOqDObtI8Y3GoBe/VMecS5Khx82tbDa3njJodyx20Vdi9ZEEqo5r3WiRDdNh t7xLyZC8gMyg0Sr4Wv7EwVNfGGCQvVAu8CeahurvTJGq3yZGrC/oxgZQH8SaVvuo vGaPxptkSdp0ZGbN2Ipt/jkA1qU3ASMQ0MNLjmp8KiNTBHepDIlZifUrn1Nsd2yp Dpa9Oh84G5GETSCJw1WY9d8wC7DlxEZt8gY0Wcno/hay9SNZt28+V0yKeaAyaa9T NQ859AorvcilvNleSESryz7mP4/JwJ2wID7rYTWgcB0oo3s5raRFOJdvqm/lqmKE jXk= -----END CERTIFICATE-----Generated at Wed Aug 26 00:39:06 2026 by rpki-client