$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f032d335-7230-4df6-bd5a-fb4ff10b7376.roa File: f032d335-7230-4df6-bd5a-fb4ff10b7376.roa (raw, json) Hash identifier: HqF4knWkZyRGI1OXpRZiEkc49s37pYVNwzOnexoPfyU= Subject key identifier: FC:E4:07:74:FA:1D:84:D0:FE:C9:33:86:07:D8:7A:41:A2:51:18:EF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0C9394FF91FA7DB66EAD7378498EA0FFBAE76F80 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f032d335-7230-4df6-bd5a-fb4ff10b7376.roa Signing time: Fri 07 Aug 2026 00:00:12 +0000 ROA not before: Fri 07 Aug 2026 00:00:12 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Aug 2026 00:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:93:94:ff:91:fa:7d:b6:6e:ad:73:78:49:8e:a0:ff:ba:e7:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 7 00:00:12 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=33d1746d563237940b91bdbdc4601a2eb748c76afb8a5555d706ee4fd6d8102f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:0b:1a:bd:5e:bb:df:06:4b:4f:0a:44:0f: b0:9a:0c:97:07:d6:d8:32:1c:fc:37:82:f7:5f:a9: 87:9f:30:67:b4:a5:7b:bd:e8:c1:32:4b:cb:85:81: 6a:13:4a:05:67:ea:a6:96:3e:74:25:3d:09:d7:3a: 24:66:44:0e:ef:d5:1e:69:3a:27:93:52:f9:8b:60: 98:98:3e:1a:3d:26:28:f5:7a:88:4a:8e:52:24:32: dc:17:5f:4e:98:28:0b:63:b7:7a:58:94:d3:d3:97: 0b:12:3b:6e:da:11:72:80:cd:3f:67:90:d4:77:0f: b5:16:dc:e9:09:55:3f:7e:87:2b:6d:09:69:9b:4c: cf:7b:9d:f8:28:91:8f:d4:da:a7:bb:b5:5e:56:a6: db:99:be:96:d0:9e:37:63:af:58:9a:8a:2e:57:70: 7e:e4:bd:78:f6:dc:31:c5:be:10:c8:eb:bf:a4:8a: 54:d1:5f:ca:cc:42:4f:f2:b9:9b:d4:8e:3f:65:92: 27:d3:76:35:e7:8e:50:3f:6b:f7:65:9f:da:89:cd: 70:0c:13:ec:0f:1d:7c:19:c3:b1:5f:0d:40:96:c5: 78:50:69:9c:ff:78:d7:93:30:33:eb:76:1e:4a:22: 0a:3b:ed:0e:54:94:ce:6e:22:96:d7:18:95:fb:8f: d2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E4:07:74:FA:1D:84:D0:FE:C9:33:86:07:D8:7A:41:A2:51:18:EF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f032d335-7230-4df6-bd5a-fb4ff10b7376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:b000::/40 Signature Algorithm: sha256WithRSAEncryption 44:24:33:c8:ef:2a:34:5f:2a:dc:b1:b7:75:d9:da:5c:5d:64: 70:9e:ef:17:5a:1a:fb:d6:82:bc:c7:d1:8c:7c:3d:5b:65:42: 63:70:d8:31:7c:7c:2a:dc:c4:b1:f1:3f:f0:08:d8:d6:37:e5: 07:3c:d7:76:69:ee:46:4e:66:85:20:36:ca:b4:12:a5:0c:6c: 47:06:fc:17:0d:90:82:f6:b2:55:1a:ba:6a:78:f8:03:96:9e: c5:a1:a9:93:f7:e5:07:ba:fd:ef:4f:5a:2b:1b:6c:4e:12:fa: 6f:00:c2:2f:ed:26:d9:c4:1c:39:a7:cf:99:a3:b4:13:b2:d5: a5:70:f0:6c:eb:22:9d:de:96:ca:4f:a5:db:5f:5f:59:a2:1c: 04:dc:7b:b3:ad:13:1a:6c:a3:10:3d:61:f2:9b:e1:46:3f:61: bd:f2:3a:80:dc:23:9e:dc:14:ea:5e:c5:ae:d3:c6:4e:96:48: 87:e0:f6:b7:bc:ab:98:7c:8a:50:2d:a8:e8:d7:bd:64:be:30: 9d:41:42:65:4e:d6:88:77:e1:51:fa:71:66:3a:0a:fd:86:89: 09:97:e0:a7:27:0d:58:7a:3a:4e:90:e8:b1:e2:31:c9:5e:c8: 26:79:8f:30:b9:60:f1:c9:b8:bd:1a:a7:17:69:6d:54:bc:bb: 07:d3:5e:21 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDJOU/5H6fbZurXN4SY6g/7rnb4AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwNzAwMDAxMloX DTI2MTEwNTIzNTk1OVowejFJMEcGA1UEBRNAMzNkMTc0NmQ1NjMyMzc5NDBiOTFi ZGJkYzQ2MDFhMmViNzQ4Yzc2YWZiOGE1NTU1ZDcwNmVlNGZkNmQ4MTAyZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcYLGr1eu98GS08KRA+wmgyXB9bY Mhz8N4L3X6mHnzBntKV7vejBMkvLhYFqE0oFZ+qmlj50JT0J1zokZkQO79UeaTon k1L5i2CYmD4aPSYo9XqISo5SJDLcF19OmCgLY7d6WJTT05cLEjtu2hFygM0/Z5DU dw+1FtzpCVU/focrbQlpm0zPe534KJGP1Nqnu7VeVqbbmb6W0J43Y69YmoouV3B+ 5L149twxxb4QyOu/pIpU0V/KzEJP8rmb1I4/ZZIn03Y1545QP2v3ZZ/aic1wDBPs Dx18GcOxXw1AlsV4UGmc/3jXkzAz63YeSiIKO+0OVJTObiKW1xiV+4/SuQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPzkB3T6HYTQ/skzhgfYekGiURjvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YwMzJkMzM1LTcyMzAtNGRmNi1iZDVhLWZiNGZmMTBiNzM3Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba77AwDQYJKoZIhvcNAQELBQADggEBAEQkM8jvKjRfKtyxt3XZ 2lxdZHCe7xdaGvvWgrzH0Yx8PVtlQmNw2DF8fCrcxLHxP/AI2NY35Qc813Zp7kZO ZoUgNsq0EqUMbEcG/BcNkIL2slUaump4+AOWnsWhqZP35Qe6/e9PWisbbE4S+m8A wi/tJtnEHDmnz5mjtBOy1aVw8GzrIp3elspPpdtfX1miHATce7OtExpsoxA9YfKb 4UY/Yb3yOoDcI57cFOpexa7Txk6WSIfg9re8q5h8ilAtqOjXvWS+MJ1BQmVO1oh3 4VH6cWY6Cv2GiQmX4KcnDVh6Ok6Q6LHiMcleyCZ5jzC5YPHJuL0apxdpbVS8uwfT XiE= -----END CERTIFICATE-----Generated at Thu Aug 20 22:53:32 2026 by rpki-client