$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db3180c2-3deb-4f03-b265-1be31638786c.roa File: db3180c2-3deb-4f03-b265-1be31638786c.roa (raw, json) Hash identifier: 9N8V20OmD9VzMa06b16ETCm1WRY7rx64hhMA9yXz4Mg= Subject key identifier: F4:B9:A8:E3:F0:BB:22:47:E6:73:78:7E:40:98:C5:2F:A6:8E:7F:6E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 11D870FE3F59E499971DE4B4F8A5EA086D2E31BD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db3180c2-3deb-4f03-b265-1be31638786c.roa Signing time: Wed 19 Aug 2026 00:00:44 +0000 ROA not before: Wed 19 Aug 2026 00:00:44 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d8:70:fe:3f:59:e4:99:97:1d:e4:b4:f8:a5:ea:08:6d:2e:31:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 19 00:00:44 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=35882823b77efcdefc5bf00f01e37d3f233df106a16492c237bda5d3b0919081, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:4e:02:6d:10:92:08:23:c1:98:e4:40:45: bc:d7:4d:42:ce:7f:b9:73:01:00:63:83:ad:d5:78: 97:9b:4b:26:01:28:57:24:1d:44:c2:4e:ac:cb:5e: 3c:f5:8a:34:9e:80:80:6c:30:ba:1d:4d:c0:c0:5f: 9f:b5:f0:f7:06:24:10:c5:4e:da:1b:ee:77:d6:b5: 91:ce:4b:d8:73:bc:2a:2b:9f:ce:e5:52:93:f3:14: 1f:72:5a:6a:c2:e8:f2:96:25:89:33:61:f9:30:ae: fd:fc:a6:ff:ac:c6:81:bf:b8:30:eb:33:71:b1:14: 5a:a4:b1:9b:40:1d:b2:9e:82:4f:57:21:cc:22:41: 30:35:1c:c0:e4:04:0c:35:94:7c:75:a0:c2:1d:e5: f9:bb:3c:61:43:76:51:ed:ee:c2:41:00:f2:82:be: 0d:8b:a3:5d:90:1f:be:87:e3:5f:d7:6a:cf:4b:4e: bc:45:e9:64:92:43:29:87:28:cb:e4:9b:af:53:e4: 5d:48:8e:80:06:6d:79:ba:28:af:8e:9b:8f:19:60: 31:58:ad:52:63:f7:d9:34:84:af:f4:dc:4a:35:6d: 9f:c3:8d:32:14:1e:dc:ee:f0:d5:c5:2d:68:1e:c2: db:01:ba:e8:75:30:e4:7e:bf:4b:89:5a:57:e3:e1: 6f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B9:A8:E3:F0:BB:22:47:E6:73:78:7E:40:98:C5:2F:A6:8E:7F:6E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db3180c2-3deb-4f03-b265-1be31638786c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:4040::/48 Signature Algorithm: sha256WithRSAEncryption 86:41:3b:d5:4e:43:58:f4:8e:66:15:a1:64:65:2d:11:95:a1: bb:60:d0:5a:47:fe:7f:f5:05:86:12:7b:18:48:f5:69:38:23: 4a:37:8c:d6:f6:1a:9e:6a:fa:6e:0f:99:46:97:e1:92:fb:87: 5a:ad:dd:64:6b:c2:ec:4d:c7:03:bb:6b:18:01:7a:db:ad:c1: 1e:ab:95:31:9a:78:b5:70:de:7d:93:80:ba:c5:79:02:60:fa: 24:fe:3c:16:ec:2a:00:1a:78:1b:32:7b:0d:77:06:44:ed:c6: cd:c2:ed:a2:6b:76:56:c9:ce:df:47:2f:ac:c5:4e:a6:0d:4b: 75:3e:93:37:2a:51:fa:a6:65:85:32:d4:1f:2c:0c:23:90:67: 69:52:82:a5:b7:11:8e:a9:b8:32:1e:de:01:f9:93:b9:49:d4: 50:c6:7c:48:96:fb:76:2a:30:d5:af:d3:a0:7c:7e:c4:3c:bd: bd:a7:be:73:58:53:98:e7:06:10:58:ab:e6:7c:8d:72:33:f9: d8:65:37:09:af:b6:06:83:7f:93:67:9d:fd:5a:a5:32:f7:35: 4a:1f:e6:35:8a:e7:e8:86:f5:68:e3:c7:1c:36:9f:bb:67:97: 10:6b:31:39:f8:bf:6c:51:39:b0:36:05:aa:e3:70:ee:81:c1: e1:a3:7d:44 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEdhw/j9Z5JmXHeS0+KXqCG0uMb0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxOTAwMDA0NFoX DTI2MTExNzIzNTk1OVowejFJMEcGA1UEBRNAMzU4ODI4MjNiNzdlZmNkZWZjNWJm MDBmMDFlMzdkM2YyMzNkZjEwNmExNjQ5MmMyMzdiZGE1ZDNiMDkxOTA4MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsChOAm0QkggjwZjkQEW8101Czn+5 cwEAY4Ot1XiXm0smAShXJB1Ewk6sy1489Yo0noCAbDC6HU3AwF+ftfD3BiQQxU7a G+531rWRzkvYc7wqK5/O5VKT8xQfclpqwujyliWJM2H5MK79/Kb/rMaBv7gw6zNx sRRapLGbQB2ynoJPVyHMIkEwNRzA5AQMNZR8daDCHeX5uzxhQ3ZR7e7CQQDygr4N i6NdkB++h+Nf12rPS068RelkkkMphyjL5JuvU+RdSI6ABm15uiivjpuPGWAxWK1S Y/fZNISv9NxKNW2fw40yFB7c7vDVxS1oHsLbAbrodTDkfr9LiVpX4+FvNwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPS5qOPwuyJH5nN4fkCYxS+mjn9uMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RiMzE4MGMyLTNkZWItNGYwMy1iMjY1LTFiZTMxNjM4Nzg2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaukBAMA0GCSqGSIb3DQEBCwUAA4IBAQCGQTvVTkNY9I5mFaFk ZS0RlaG7YNBaR/5/9QWGEnsYSPVpOCNKN4zW9hqeavpuD5lGl+GS+4dard1ka8Ls TccDu2sYAXrbrcEeq5Uxmni1cN59k4C6xXkCYPok/jwW7CoAGngbMnsNdwZE7cbN wu2ia3ZWyc7fRy+sxU6mDUt1PpM3KlH6pmWFMtQfLAwjkGdpUoKltxGOqbgyHt4B +ZO5SdRQxnxIlvt2KjDVr9OgfH7EPL29p75zWFOY5wYQWKvmfI1yM/nYZTcJr7YG g3+TZ539WqUy9zVKH+Y1iufohvVo48ccNp+7Z5cQazE5+L9sUTmwNgWq43DugcHh o31E -----END CERTIFICATE-----Generated at Wed Aug 26 00:37:51 2026 by rpki-client