$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa File: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (raw, json) Hash identifier: 33hPW4gI2TGJ5byNnROxUh04t/0LZvEPOiok6H/PYmk= Subject key identifier: 03:76:33:D9:0D:4A:A2:E2:3D:59:C5:01:5B:51:B9:4E:7A:17:95:6D Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 826366796DA81839956673AE5075FB1F0C52D8 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa Signing time: Tue 04 Aug 2026 00:00:50 +0000 ROA not before: Tue 04 Aug 2026 00:00:50 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82:63:66:79:6d:a8:18:39:95:66:73:ae:50:75:fb:1f:0c:52:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Aug 4 00:00:50 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=fcabb585bbd37a86e239899d434b1ea3f22478eea1961a687902bed0cb47510a, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cc:c2:f8:e5:68:db:ce:68:99:d5:45:c0:dd: cc:05:bf:c9:0d:57:b6:d7:79:20:88:30:12:75:8b: 98:31:34:d5:99:7f:26:f9:67:7a:51:4d:0b:cc:1d: 23:39:31:5a:af:d6:8d:38:ef:9c:4d:ff:e5:e1:71: c9:13:ab:1d:40:fd:d8:2f:9f:8c:3d:21:22:2d:6e: f1:bf:92:25:7f:a9:dc:2f:6b:1f:44:91:24:34:b9: 4b:0f:1b:94:24:08:6c:2a:4d:f5:d7:bd:00:1d:4a: 91:df:7a:d6:98:4d:da:8b:ca:27:fc:0d:0c:e9:90: eb:4a:07:3b:5e:06:8b:45:dd:53:fe:1c:f9:fe:22: eb:90:21:f9:49:11:52:7c:bb:41:3d:32:5f:f7:ca: b7:d1:22:fd:6d:a7:12:dc:f6:53:ac:b8:f2:5f:75: 0f:9d:73:95:83:fa:cd:9b:ff:df:f2:16:84:0b:7a: 88:67:7d:83:9b:be:a7:97:43:4f:ce:c5:e6:d3:18: 24:83:55:3e:fa:8a:a6:df:11:9f:f6:86:20:0d:4b: a8:b1:b6:92:2f:d1:80:ea:9c:f7:1d:9b:d7:57:bd: af:75:87:70:36:c8:30:ff:77:bc:56:13:2d:30:6a: 6a:ad:e0:53:f1:a6:7b:18:0f:0d:ee:74:79:65:fa: cf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:76:33:D9:0D:4A:A2:E2:3D:59:C5:01:5B:51:B9:4E:7A:17:95:6D X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6700::/48 Signature Algorithm: sha256WithRSAEncryption 16:76:32:1a:62:a1:2d:79:e1:cc:53:65:60:02:25:ad:f0:8e: 87:13:24:ab:21:63:4f:ca:9b:e7:71:e9:46:6b:f0:64:37:af: db:3b:10:d1:21:4f:a2:e4:67:d2:76:46:d9:cc:39:1f:2f:cc: 85:03:05:ba:b0:90:70:c9:7c:e5:81:dc:5b:5c:0e:30:58:21: bd:ea:6d:52:e5:80:6e:72:9e:3b:0d:35:52:a3:cf:39:8a:5c: 79:59:d6:4c:5c:fa:4a:66:8d:55:47:b6:c6:4c:93:83:8c:e2: d2:43:83:ea:36:cb:b1:79:7e:21:93:df:a9:e4:64:21:d1:7a: 1f:da:a2:92:58:8e:eb:09:a0:da:39:cd:e4:fa:78:a0:95:7e: c5:34:1f:26:58:a2:e4:26:b9:23:7a:7a:0f:5f:ad:35:1d:64: 7a:d3:6e:ec:ee:00:7e:5e:fd:ef:02:2c:4e:bb:8c:94:ea:dc: 8e:d2:d6:78:b3:23:23:18:20:6f:16:90:3f:e8:9f:0b:5e:f1: 68:3d:d7:97:b3:80:f0:74:73:dd:d2:3f:cf:23:8e:74:2b:3d: 98:19:bb:8d:ae:60:79:09:88:62:d0:ee:55:f9:c1:56:5f:d7: dd:8d:b8:d8:f8:2b:08:8d:9b:f5:9c:e2:98:06:4b:09:6d:31: 75:e6:1a:c0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAIJjZnltqBg5lWZzrlB1+x8MUtgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDgwNDAwMDA1MFoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAZmNhYmI1ODViYmQzN2E4NmUyMzk4 OTlkNDM0YjFlYTNmMjI0NzhlZWExOTYxYTY4NzkwMmJlZDBjYjQ3NTEwYTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlczC+OVo285omdVFwN3MBb/JDVe2 13kgiDASdYuYMTTVmX8m+Wd6UU0LzB0jOTFar9aNOO+cTf/l4XHJE6sdQP3YL5+M PSEiLW7xv5Ilf6ncL2sfRJEkNLlLDxuUJAhsKk31170AHUqR33rWmE3ai8on/A0M 6ZDrSgc7XgaLRd1T/hz5/iLrkCH5SRFSfLtBPTJf98q30SL9bacS3PZTrLjyX3UP nXOVg/rNm//f8haEC3qIZ32Dm76nl0NPzsXm0xgkg1U++oqm3xGf9oYgDUuosbaS L9GA6pz3HZvXV72vdYdwNsgw/3e8VhMtMGpqreBT8aZ7GA8N7nR5ZfrPewIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAN2M9kNSqLiPVnFAVtRuU56F5VtMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 L2MxNTY0NjU5LWYzYWEtNDAyMS1hN2E1LThmNGIxYzJjNDk2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJABnAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAWdjIaYqEteeHMU2Vg AiWt8I6HEySrIWNPypvncelGa/BkN6/bOxDRIU+i5GfSdkbZzDkfL8yFAwW6sJBw yXzlgdxbXA4wWCG96m1S5YBucp47DTVSo885ilx5WdZMXPpKZo1VR7bGTJODjOLS Q4PqNsuxeX4hk9+p5GQh0Xof2qKSWI7rCaDaOc3k+niglX7FNB8mWKLkJrkjenoP X601HWR6027s7gB+Xv3vAixOu4yU6tyO0tZ4syMjGCBvFpA/6J8LXvFoPdeXs4Dw dHPd0j/PI450Kz2YGbuNrmB5CYhi0O5V+cFWX9fdjbjY+CsIjZv1nOKYBksJbTF1 5hrA -----END CERTIFICATE-----Generated at Sat Sep 5 08:44:18 2026 by rpki-client