$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa File: fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa (raw, json) Hash identifier: bVGKEyvFi2NG2B8MTDJw6iz8EyjpGHI+ji/X1M0NR6U= Subject key identifier: 07:40:58:F7:78:DB:8F:33:CB:6E:51:CD:91:95:5B:C6:42:AC:90:49 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7B45F160C3BE6D50BC2E743985639FDB4DE3E3E4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa Signing time: Sat 01 Aug 2026 00:10:13 +0000 ROA not before: Sat 01 Aug 2026 00:10:13 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Sep 2026 00:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:45:f1:60:c3:be:6d:50:bc:2e:74:39:85:63:9f:db:4d:e3:e3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:10:13 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=ae3d01363305688f0f08d9883764cc1bc90d4abc68d8fc65d18c916a4bb3356a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f8:f5:7d:43:e6:fa:fc:2e:ea:89:e7:91:59: e3:b0:78:55:4f:4a:e0:1a:64:1b:61:80:51:11:2c: d0:48:20:84:e8:ca:44:7e:b6:0c:75:19:08:9d:bd: 8a:dd:9b:28:4a:ba:00:27:18:6c:b8:04:60:dc:e4: 92:dd:e6:4d:df:85:25:3c:3b:bd:cf:a2:41:81:a1: 18:69:af:55:c8:1f:13:29:63:3b:59:a6:90:0c:c2: c8:5a:67:5b:7d:89:9e:c3:16:4d:6b:84:ba:a5:c9: bf:14:ec:ad:d9:df:03:85:5a:a5:fd:6e:f7:89:6f: e5:5f:da:aa:18:a6:c9:8c:f4:64:2b:c8:2f:bc:35: 6f:73:de:14:a7:1d:0d:0f:a5:5c:2c:5d:b9:cf:72: e6:4c:d3:31:25:e6:5c:d7:54:54:a5:db:5d:4a:df: 66:72:56:3c:ac:05:88:1b:d7:c7:7f:3f:e7:5d:e8: 03:3d:1d:ab:77:22:bc:e8:07:12:5b:37:bf:45:92: e3:55:0e:d4:b6:6e:cb:5e:dd:eb:04:57:64:0e:e8: 5c:d5:f5:c7:3a:15:96:ea:9a:a8:1c:23:1b:46:75: 5b:e5:7a:23:07:d4:df:ad:a0:78:5d:3c:ba:36:99: e5:94:66:df:23:a2:20:09:f1:cd:9c:90:ab:e3:53: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:40:58:F7:78:DB:8F:33:CB:6E:51:CD:91:95:5B:C6:42:AC:90:49 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:f000::/40 Signature Algorithm: sha256WithRSAEncryption 39:0d:b0:a1:b1:5d:a2:90:7c:ac:ca:47:85:2c:fa:2d:85:f9: 17:64:54:5a:74:41:57:f1:4f:f6:43:aa:b3:7a:38:af:5f:01: f2:d1:a8:3d:89:7b:93:20:28:6b:2f:bf:ae:3e:03:2c:68:44: c0:13:f9:b4:14:9b:5a:21:0b:6e:71:9a:fe:5c:87:51:37:4a: ce:48:f1:2b:00:63:7c:68:b8:f2:bf:ba:61:1a:bf:25:e0:77: d7:c1:dd:6f:e1:c3:a6:5c:4d:a5:5c:ff:15:44:70:b1:7e:df: 5a:2d:5d:de:af:c6:ea:bb:2e:46:36:a6:79:47:f8:bf:54:dc: 15:ba:3c:40:2b:53:6b:54:b3:71:7d:dd:da:52:37:a1:9d:20: 74:72:14:ac:bb:8b:9d:bc:1f:92:1a:ed:77:ad:6f:17:55:68: 7f:6c:b9:82:9f:e3:ec:88:b9:71:32:96:a3:be:2e:83:91:5f: 21:2e:d2:0e:e6:0d:1c:ef:65:22:e8:bc:e9:f3:a3:16:75:dc: ff:a9:6b:06:9e:09:41:f3:c2:e9:09:76:19:ac:13:3f:2f:2f: 50:d7:dd:b9:e4:db:f8:a6:3b:b5:ec:19:19:77:4c:c8:a3:b3: 05:20:27:1b:84:2a:6b:f6:a5:ff:2d:d1:9e:08:cd:a2:e2:de: 3d:db:0a:32 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUe0XxYMO+bVC8LnQ5hWOf203j4+QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMTAxM1oX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAYWUzZDAxMzYzMzA1Njg4ZjBmMDhk OTg4Mzc2NGNjMWJjOTBkNGFiYzY4ZDhmYzY1ZDE4YzkxNmE0YmIzMzU2YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvj1fUPm+vwu6onnkVnjsHhVT0rg GmQbYYBRESzQSCCE6MpEfrYMdRkInb2K3ZsoSroAJxhsuARg3OSS3eZN34UlPDu9 z6JBgaEYaa9VyB8TKWM7WaaQDMLIWmdbfYmewxZNa4S6pcm/FOyt2d8DhVql/W73 iW/lX9qqGKbJjPRkK8gvvDVvc94Upx0ND6VcLF25z3LmTNMxJeZc11RUpdtdSt9m clY8rAWIG9fHfz/nXegDPR2rdyK86AcSWze/RZLjVQ7Utm7LXt3rBFdkDuhc1fXH OhWW6pqoHCMbRnVb5XojB9TfraB4XTy6NpnllGbfI6IgCfHNnJCr41PdxwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAdAWPd4248zy25RzZGVW8ZCrJBJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZlZjNhYmY2LWYyZTAtNDRlOC1hN2IzLTFjODdjOWMxZDI2Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOPAwDQYJKoZIhvcNAQELBQADggEBADkNsKGxXaKQfKzKR4Us +i2F+RdkVFp0QVfxT/ZDqrN6OK9fAfLRqD2Je5MgKGsvv64+AyxoRMAT+bQUm1oh C25xmv5ch1E3Ss5I8SsAY3xouPK/umEavyXgd9fB3W/hw6ZcTaVc/xVEcLF+31ot Xd6vxuq7LkY2pnlH+L9U3BW6PEArU2tUs3F93dpSN6GdIHRyFKy7i528H5Ia7Xet bxdVaH9suYKf4+yIuXEylqO+LoORXyEu0g7mDRzvZSLovOnzoxZ13P+pawaeCUHz wukJdhmsEz8vL1DX3bnk2/imO7XsGRl3TMijswUgJxuEKmv2pf8t0Z4IzaLi3j3b CjI= -----END CERTIFICATE-----Generated at Thu Sep 10 04:21:41 2026 by rpki-client