$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec8e23bf-c8d6-4a69-9151-124b795d815a.roa File: ec8e23bf-c8d6-4a69-9151-124b795d815a.roa (raw, json) Hash identifier: LyvDgfgqQbZIDI11mTP01RwRuWGFhq7Qu4Pcz/l2BeY= Subject key identifier: FC:5B:F2:16:94:3D:7F:9A:2E:D3:83:76:2C:AC:32:4E:58:6A:3E:2F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5966D0A08F6264F6751DE1F095A05940172DDB65 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec8e23bf-c8d6-4a69-9151-124b795d815a.roa Signing time: Thu 30 Jul 2026 00:10:46 +0000 ROA not before: Thu 30 Jul 2026 00:10:46 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:66:d0:a0:8f:62:64:f6:75:1d:e1:f0:95:a0:59:40:17:2d:db:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:10:46 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=5311d23ff03ef13dbc7ba3f36a88828efc0e3ce8abb262f028adac91cd6a0d4c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:c0:8c:bd:84:c2:0f:17:98:73:1a:c4:cb: 60:fc:aa:6d:58:53:9a:dd:fa:99:f7:50:6b:9e:6a: 00:0f:71:47:aa:34:dc:3b:66:63:28:93:d2:fd:11: 02:db:69:73:5e:20:aa:87:da:81:6b:60:8d:57:e2: 0d:41:2c:ff:d6:51:58:79:76:4e:8f:12:46:e3:01: 2e:63:ab:f1:02:0f:e7:40:ea:26:d0:cd:99:8f:18: 42:b5:28:f3:e1:b5:e7:af:de:22:56:18:ec:77:7b: 53:98:89:28:f2:34:80:f3:a0:f6:07:e5:62:5e:32: 79:80:99:fa:2f:89:f0:29:71:69:49:3d:e8:e2:cf: 5c:65:4c:07:9b:96:94:e9:71:2d:ce:9f:04:0e:55: b4:85:e4:db:8d:16:51:4f:dd:96:da:1e:60:33:03: 57:35:85:7e:f3:38:1e:39:b7:13:8e:1a:f7:c6:6a: 97:a7:77:de:b7:c6:4f:ed:a0:3e:f1:fc:6c:c7:f0: 76:ec:30:a3:9f:d8:76:b1:0a:6f:1d:65:a1:c7:2a: 0d:ab:ca:21:51:0a:cb:7c:74:1b:5a:6b:90:a9:0d: 70:f7:3d:bf:83:a4:8e:8f:14:82:d4:9e:f6:06:71: 8a:be:2c:df:32:b7:bf:d9:d8:a0:af:e4:f2:58:f9: ae:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5B:F2:16:94:3D:7F:9A:2E:D3:83:76:2C:AC:32:4E:58:6A:3E:2F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec8e23bf-c8d6-4a69-9151-124b795d815a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:6040::/48 Signature Algorithm: sha256WithRSAEncryption 95:b8:5e:10:73:ed:ca:7e:0a:82:4a:cd:ba:84:82:a9:82:1a: fd:99:f7:4c:7b:c4:5f:c6:fe:b2:06:79:5e:c1:1c:01:73:2f: ab:90:9e:01:11:52:c6:ed:f8:24:2e:1f:c7:6f:28:8b:99:58: 9c:91:ff:62:85:a1:35:7e:ad:f8:70:a9:09:c6:13:0b:b6:19: 85:06:aa:17:09:9d:5c:22:60:5c:69:f3:a6:e5:aa:d8:e8:82: ed:d2:12:d3:f9:41:c9:00:e3:b0:07:4d:9e:85:36:f3:f8:47: bf:b0:c1:2a:17:e9:02:a2:bb:8e:43:78:ff:67:5f:c2:ff:61: d3:38:bd:1d:58:ca:a2:20:30:1c:c9:18:ff:5a:ba:4f:7d:29: e2:dc:8e:30:81:ca:eb:d8:81:20:17:a7:3b:ae:cb:a8:ff:49: 3d:6b:c9:e4:0c:51:48:a3:7b:25:b8:13:ab:fe:92:62:66:d6: 7f:d1:f6:25:90:74:03:59:63:41:5a:8f:af:94:6a:63:9b:80: df:29:99:fe:1a:86:20:57:4b:0a:49:b3:55:f6:20:d3:a3:62: 4c:d7:e3:66:fb:66:b8:08:99:e5:59:1d:f5:46:45:e9:c5:95: 5b:7a:45:ac:0b:e1:7c:42:29:f0:34:d3:72:f3:83:ae:f6:fd: 28:9e:ee:ba -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWWbQoI9iZPZ1HeHwlaBZQBct22UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMTA0NloX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNANTMxMWQyM2ZmMDNlZjEzZGJjN2Jh M2YzNmE4ODgyOGVmYzBlM2NlOGFiYjI2MmYwMjhhZGFjOTFjZDZhMGQ0YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu7AjL2Ewg8XmHMaxMtg/KptWFOa 3fqZ91BrnmoAD3FHqjTcO2ZjKJPS/REC22lzXiCqh9qBa2CNV+INQSz/1lFYeXZO jxJG4wEuY6vxAg/nQOom0M2ZjxhCtSjz4bXnr94iVhjsd3tTmIko8jSA86D2B+Vi XjJ5gJn6L4nwKXFpST3o4s9cZUwHm5aU6XEtzp8EDlW0heTbjRZRT92W2h5gMwNX NYV+8zgeObcTjhr3xmqXp3fet8ZP7aA+8fxsx/B27DCjn9h2sQpvHWWhxyoNq8oh UQrLfHQbWmuQqQ1w9z2/g6SOjxSC1J72BnGKvizfMre/2digr+TyWPmuVQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPxb8haUPX+aLtODdiysMk5Yaj4vMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VjOGUyM2JmLWM4ZDYtNGE2OS05MTUxLTEyNGI3OTVkODE1YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAGBAMA0GCSqGSIb3DQEBCwUAA4IBAQCVuF4Qc+3KfgqCSs26 hIKpghr9mfdMe8Rfxv6yBnlewRwBcy+rkJ4BEVLG7fgkLh/HbyiLmVickf9ihaE1 fq34cKkJxhMLthmFBqoXCZ1cImBcafOm5arY6ILt0hLT+UHJAOOwB02ehTbz+Ee/ sMEqF+kCoruOQ3j/Z1/C/2HTOL0dWMqiIDAcyRj/WrpPfSni3I4wgcrr2IEgF6c7 rsuo/0k9a8nkDFFIo3sluBOr/pJiZtZ/0fYlkHQDWWNBWo+vlGpjm4DfKZn+GoYg V0sKSbNV9iDTo2JM1+Nm+2a4CJnlWR31RkXpxZVbekWsC+F8QinwNNNy84Ou9v0o nu66 -----END CERTIFICATE-----Generated at Wed Aug 26 17:35:10 2026 by rpki-client