$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa File: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (raw, json) Hash identifier: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA= Subject key identifier: BB:4B:92:58:E6:45:38:E2:8C:36:CB:0C:9B:43:EE:8E:AD:02:55:9C Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 18AC29A90EC7F51DB3FA87DC708607141B55BE9E Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa Signing time: Tue 04 Aug 2026 00:00:06 +0000 ROA not before: Tue 04 Aug 2026 00:00:06 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 00:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ac:29:a9:0e:c7:f5:1d:b3:fa:87:dc:70:86:07:14:1b:55:be:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 4 00:00:06 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=eb3d16648a8bf98a046142371fe9f1de12e729ade157602d97d29707de0dbe27, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:10:6f:0a:6c:42:20:81:b1:c7:61:30:ed:ec: 55:37:e6:54:bc:3f:f9:7f:ba:5a:b7:0d:3d:c7:19: cb:d4:3b:17:b7:eb:d2:45:b7:ca:47:83:5c:d4:d4: e3:c6:9b:e2:fa:46:5c:f8:53:69:3c:1a:8c:63:00: 24:e7:25:dd:cc:43:60:dd:61:2e:db:0a:eb:34:76: fa:0c:19:d7:75:58:ad:b6:bb:90:8c:ce:58:23:26: 9b:25:27:f9:f8:7e:87:87:d7:03:34:50:95:60:09: 9d:dc:4d:e1:8e:11:9a:1f:85:ed:cb:7b:b8:10:1d: ae:9a:21:f7:fb:7a:cf:c8:68:f8:a5:a4:8f:32:a4: 29:bc:d3:50:f7:17:68:3e:99:00:28:0d:44:ed:cd: 3c:10:75:19:7f:2d:fb:6f:bb:dd:8c:2f:bb:e0:f6: e5:18:67:05:d9:54:97:a2:ba:09:44:14:42:fa:2d: de:79:80:9c:e5:84:3c:b8:2b:23:53:94:6a:cc:44: 13:11:5f:1f:fd:ab:28:9b:8f:0a:29:8a:e0:5f:77: bc:d3:de:a9:22:16:29:a4:0e:a6:d5:d1:be:d3:47: 2f:19:44:88:1d:56:c5:16:cf:6c:99:cf:e7:e4:05: 71:70:28:9f:e4:3d:e3:64:f0:1b:78:7b:85:45:81: ef:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4B:92:58:E6:45:38:E2:8C:36:CB:0C:9B:43:EE:8E:AD:02:55:9C X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300::/48 Signature Algorithm: sha256WithRSAEncryption 35:40:39:00:9a:97:90:8d:98:a0:b3:e9:a9:48:0d:b8:df:83: 08:ee:80:1e:3a:ca:76:a2:ea:66:63:11:96:4d:14:0d:2d:1e: 39:c3:9b:4d:b9:7f:1c:cb:ca:43:7e:29:96:60:ed:84:08:86: c3:a4:2d:b7:8f:47:52:21:20:1a:3a:4c:e7:6f:b3:fa:f4:0c: dc:74:52:c0:c6:a4:8a:75:fc:fc:99:29:ba:e8:9a:5e:e7:11: e0:72:dc:58:c2:65:ce:e0:e9:b6:a9:d4:f4:47:ad:51:97:98: 1e:39:49:eb:29:65:64:f3:77:79:49:82:2c:0d:1a:b9:9a:69: 1c:3d:9f:4f:d2:83:53:15:12:da:d1:4c:c0:1c:50:94:ec:f0: 86:81:73:71:eb:35:70:63:96:b3:d2:b1:56:df:ab:1b:60:c3: ff:e8:f9:27:b2:5a:52:ec:7d:37:1d:cb:a2:2a:2b:27:ac:2e: c5:19:c2:35:3d:53:2c:79:22:6b:1f:c8:c3:d9:a6:68:49:de: 1d:63:67:85:9e:78:df:eb:28:69:3b:d8:48:a1:52:77:89:35: 0c:95:fb:dd:59:90:ce:8e:01:d2:6a:29:12:7c:2f:49:60:20: 20:0c:18:67:b0:a8:2f:47:d3:75:9b:85:48:40:fb:1c:a9:2d: 6c:54:2b:ec -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGKwpqQ7H9R2z+ofccIYHFBtVvp4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgwNDAwMDAwNloX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAZWIzZDE2NjQ4YThiZjk4YTA0NjE0 MjM3MWZlOWYxZGUxMmU3MjlhZGUxNTc2MDJkOTdkMjk3MDdkZTBkYmUyNzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhBvCmxCIIGxx2Ew7exVN+ZUvD/5 f7patw09xxnL1DsXt+vSRbfKR4Nc1NTjxpvi+kZc+FNpPBqMYwAk5yXdzENg3WEu 2wrrNHb6DBnXdVittruQjM5YIyabJSf5+H6Hh9cDNFCVYAmd3E3hjhGaH4Xty3u4 EB2umiH3+3rPyGj4paSPMqQpvNNQ9xdoPpkAKA1E7c08EHUZfy37b7vdjC+74Pbl GGcF2VSXoroJRBRC+i3eeYCc5YQ8uCsjU5RqzEQTEV8f/asom48KKYrgX3e8096p IhYppA6m1dG+00cvGUSIHVbFFs9smc/n5AVxcCif5D3jZPAbeHuFRYHvkwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLtLkljmRTjijDbLDJtD7o6tAlWcMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzM4MWZjNmU2LTVkNDktNDFiYy1iNTg0LWQ5NDM3YzY4ZTNjZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQA1QDkAmpeQjZigs+mp SA2434MI7oAeOsp2oupmYxGWTRQNLR45w5tNuX8cy8pDfimWYO2ECIbDpC23j0dS ISAaOkznb7P69AzcdFLAxqSKdfz8mSm66Jpe5xHgctxYwmXO4Om2qdT0R61Rl5ge OUnrKWVk83d5SYIsDRq5mmkcPZ9P0oNTFRLa0UzAHFCU7PCGgXNx6zVwY5az0rFW 36sbYMP/6PknslpS7H03HcuiKisnrC7FGcI1PVMseSJrH8jD2aZoSd4dY2eFnnjf 6yhpO9hIoVJ3iTUMlfvdWZDOjgHSaikSfC9JYCAgDBhnsKgvR9N1m4VIQPscqS1s VCvs -----END CERTIFICATE-----Generated at Thu Sep 17 14:21:30 2026 by rpki-client