$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa File: 0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa (raw, json) Hash identifier: MHfdwahXzYRsGZ9UptDrZLAj8t0qk9lnkBU5hV181vM= Subject key identifier: 2F:26:C9:34:E3:7D:44:F4:CC:1B:1A:90:BE:2E:B3:AA:D8:49:31:4D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 301504BA7E4289D33AB6584D0D521F152C0305FB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa Signing time: Sat 25 Jul 2026 00:00:59 +0000 ROA not before: Sat 25 Jul 2026 00:00:59 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:15:04:ba:7e:42:89:d3:3a:b6:58:4d:0d:52:1f:15:2c:03:05:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 25 00:00:59 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=27a2deb80503b563ffe3ace54d4ab9734eccbb6333f08884c54ff8ed073d1e7f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ef:6a:04:ab:be:01:1b:ea:64:a3:a0:9d:35: 7c:d6:07:ed:64:53:28:6c:17:a7:db:4c:fa:fd:c7: c8:df:8c:b7:f2:0a:41:8b:57:15:6a:a5:00:f1:c5: fd:30:ed:6b:0a:24:a6:57:86:24:23:12:19:4c:b2: 51:ff:f4:e8:d8:de:6a:56:3d:df:5c:d9:8e:ef:0b: b6:fe:08:0b:a6:9a:69:5c:3e:d6:25:1a:0e:19:28: 4e:90:52:9f:49:35:8b:01:6e:19:8f:3d:9d:11:66: 54:4c:26:a4:ee:14:4c:45:58:44:b3:e5:ea:09:b6: 2d:43:00:a7:1f:68:0a:88:20:a0:79:bb:0b:a9:fd: 79:d3:7d:1e:ac:db:16:56:fc:4f:2c:31:37:3c:56: 42:7a:20:38:75:b7:16:b7:8d:17:54:4c:f1:32:62: ee:bd:83:21:65:87:05:94:b6:40:81:aa:4e:21:23: a2:f0:c2:0f:eb:28:c1:f1:b6:16:29:8b:57:0a:18: 01:fa:96:c5:bd:9e:43:51:40:d8:92:da:a1:96:96: 3f:d3:2e:fd:66:c8:e5:63:a7:36:28:34:03:96:63: a6:65:c5:fd:4e:57:50:4f:0b:79:7c:4a:a1:29:40: 60:ef:8a:dc:5b:34:61:46:4d:53:d0:79:48:41:93: 46:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:26:C9:34:E3:7D:44:F4:CC:1B:1A:90:BE:2E:B3:AA:D8:49:31:4D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:1000::/48 Signature Algorithm: sha256WithRSAEncryption 41:85:ec:9b:30:ca:94:0e:3c:2f:e8:60:15:81:6e:f2:ad:29: 2f:08:9c:1a:5f:77:e4:10:48:08:de:ab:13:39:d7:b8:68:4c: 7d:61:74:ff:c8:e4:b8:0b:cd:f8:f8:ea:03:55:8d:9d:13:40: 5b:5e:d3:e3:19:af:4a:38:73:07:a2:2a:6b:c8:20:5d:b2:b6: 16:32:83:a5:c3:c9:8d:a4:a2:b3:d1:09:ea:de:e9:d9:50:75: a6:c4:6a:1d:64:47:04:29:60:ee:05:d2:7f:c9:67:f1:5c:76: f3:84:3b:81:04:84:ee:ac:de:1f:82:c9:c5:08:53:ab:ba:33: 70:0e:da:db:cd:a7:41:db:8b:8e:8f:8b:68:07:32:72:c0:2f: a8:2a:24:30:ea:cd:b2:a6:d1:41:4d:93:9c:2e:ac:dd:44:1f: c3:2a:70:bd:f7:a0:df:4f:37:ad:f2:a0:1d:6d:25:da:f3:c8: 59:d0:01:16:60:77:6e:2e:38:60:2f:d3:d9:22:6c:5d:65:96: 5e:08:ac:cb:7e:99:d3:e6:72:a5:00:1b:55:d1:a3:fd:3a:08: f4:54:2e:3d:68:e4:0e:6a:7f:a7:00:c5:4c:a3:f6:70:94:6b: fe:40:19:2d:55:48:77:62:2f:57:ea:8d:62:f0:60:a8:c5:ab: 1b:0c:bc:92 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMBUEun5CidM6tlhNDVIfFSwDBfswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNTAwMDA1OVoX DTI2MTAyMzIzNTk1OVowejFJMEcGA1UEBRNAMjdhMmRlYjgwNTAzYjU2M2ZmZTNh Y2U1NGQ0YWI5NzM0ZWNjYmI2MzMzZjA4ODg0YzU0ZmY4ZWQwNzNkMWU3ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju9qBKu+ARvqZKOgnTV81gftZFMo bBen20z6/cfI34y38gpBi1cVaqUA8cX9MO1rCiSmV4YkIxIZTLJR//To2N5qVj3f XNmO7wu2/ggLppppXD7WJRoOGShOkFKfSTWLAW4Zjz2dEWZUTCak7hRMRVhEs+Xq CbYtQwCnH2gKiCCgebsLqf15030erNsWVvxPLDE3PFZCeiA4dbcWt40XVEzxMmLu vYMhZYcFlLZAgapOISOi8MIP6yjB8bYWKYtXChgB+pbFvZ5DUUDYktqhlpY/0y79 ZsjlY6c2KDQDlmOmZcX9TldQTwt5fEqhKUBg74rcWzRhRk1T0HlIQZNGbQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFC8myTTjfUT0zBsakL4us6rYSTFNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBhYjljZmZiLTUwZWItNDE5Ni1hNGIyLWU2M2E0ZGExNGM1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9hAAMA0GCSqGSIb3DQEBCwUAA4IBAQBBheybMMqUDjwv6GAV gW7yrSkvCJwaX3fkEEgI3qsTOde4aEx9YXT/yOS4C834+OoDVY2dE0BbXtPjGa9K OHMHoipryCBdsrYWMoOlw8mNpKKz0Qnq3unZUHWmxGodZEcEKWDuBdJ/yWfxXHbz hDuBBITurN4fgsnFCFOrujNwDtrbzadB24uOj4toBzJywC+oKiQw6s2yptFBTZOc LqzdRB/DKnC996DfTzet8qAdbSXa88hZ0AEWYHduLjhgL9PZImxdZZZeCKzLfpnT 5nKlABtV0aP9Ogj0VC49aOQOan+nAMVMo/ZwlGv+QBktVUh3Yi9X6o1i8GCoxasb DLyS -----END CERTIFICATE-----Generated at Tue Jul 28 23:59:34 2026 by rpki-client