$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/174051fd-a961-4033-90fe-9e58cfd0e3e7.roa File: 174051fd-a961-4033-90fe-9e58cfd0e3e7.roa (raw, json) Hash identifier: CDr5PK5IqAqpddJh5USZv6PcSGvyK+M1HFGxDI15k/Q= Subject key identifier: 59:B3:28:71:CE:B8:68:6F:EF:ED:DC:E8:72:59:16:82:5D:C5:AB:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6CE8E86E3394393A98D73B7953F5EA9C32D03027 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/174051fd-a961-4033-90fe-9e58cfd0e3e7.roa Signing time: Wed 09 Sep 2026 15:54:27 +0000 ROA not before: Wed 09 Sep 2026 15:54:27 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da62:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:e8:e8:6e:33:94:39:3a:98:d7:3b:79:53:f5:ea:9c:32:d0:30:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 9 15:54:27 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=078e6561d75b09eabd60942863a5e640e5f8147c8373b0f2762d68b2a81257fb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:37:f4:d4:46:58:a7:61:9e:cb:34:d1:cc:36: 8c:4d:ed:47:68:9e:f5:e5:e4:14:3f:6d:5e:5c:dc: 48:1f:18:5c:a6:e9:b0:95:21:12:ce:30:b7:80:9f: 47:62:72:a4:c1:c7:c9:2c:e7:74:99:5e:1a:9b:47: ff:88:38:28:40:4c:64:b2:4b:1e:53:31:b7:88:00: 86:61:19:9c:52:6b:ab:5f:52:79:a8:83:d5:cb:55: 6c:79:8a:ac:43:cb:2a:94:10:4f:ff:5f:98:ed:af: 8f:b1:84:5a:9a:1f:a9:29:ff:44:36:ea:85:65:6b: 3d:2e:05:df:75:22:b3:a5:4b:4f:61:0e:d2:fd:32: dd:92:64:79:e6:04:9b:b1:39:fb:94:3b:f9:34:4b: 3c:33:6e:36:e4:fe:5b:5b:54:45:cb:bd:6c:12:3e: 94:ee:2f:07:3f:92:c8:9b:35:0e:cd:d8:4a:d0:e2: 29:49:ac:10:48:dd:65:2d:a3:00:f0:e6:77:a0:01: 0a:a5:80:f9:62:a4:48:7a:e4:6d:11:3d:6f:48:1d: 0b:cc:76:e5:48:a9:37:00:5a:03:35:5d:c3:b7:29: 9f:24:1b:c6:10:09:65:db:88:73:c9:46:44:da:a6: f3:f1:9b:7e:ca:44:4c:5a:62:72:b8:49:5c:a5:16: 95:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B3:28:71:CE:B8:68:6F:EF:ED:DC:E8:72:59:16:82:5D:C5:AB:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/174051fd-a961-4033-90fe-9e58cfd0e3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da62:4800::/40 Signature Algorithm: sha256WithRSAEncryption 07:de:7a:0f:b1:c1:6d:21:85:27:88:ca:bb:14:bf:e3:41:41: 06:67:c3:51:5a:f6:ef:15:0d:4c:23:6f:4f:60:be:c3:24:68: 70:ed:8a:3b:35:7d:20:aa:f6:06:5e:9f:88:50:3d:1e:4f:8c: 45:8e:8b:3f:4e:ee:95:12:23:15:74:b9:43:72:9f:5a:da:13: 18:da:0c:47:f8:a0:3d:a5:d1:e6:6c:82:d5:2d:ea:5f:9c:47: ba:08:e7:ca:30:01:b5:27:62:f3:94:97:65:1f:c3:f3:e2:47: df:e5:f2:4a:19:ef:c7:cc:78:f0:79:65:b2:72:2c:95:60:4f: cc:0c:2b:92:94:7b:78:62:63:07:0f:60:f9:f2:c6:df:32:d9: 5e:e1:83:e7:dc:57:b2:4a:56:68:89:b5:9f:af:6e:ab:c8:51: 08:8b:68:7b:90:7d:d6:0f:b5:ba:6e:af:93:93:49:68:a9:a3: 74:63:9f:dc:69:30:0b:55:2d:a2:a1:7e:e3:9c:3c:ad:8d:74: f6:e3:0e:0d:13:f7:fe:75:4e:d8:6b:b9:76:fe:b9:00:db:21: 4a:eb:86:fe:5a:5c:e3:b8:57:48:9a:3a:25:56:4e:54:37:26: 7f:1c:97:be:70:ed:b5:69:3f:3b:66:a8:c5:c0:0b:f2:f0:00: 90:65:bf:9e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbOjobjOUOTqY1zt5U/XqnDLQMCcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkwOTE1NTQyN1oX DTI2MTIwODIzNTk1OVowejFJMEcGA1UEBRNAMDc4ZTY1NjFkNzViMDllYWJkNjA5 NDI4NjNhNWU2NDBlNWY4MTQ3YzgzNzNiMGYyNzYyZDY4YjJhODEyNTdmYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojf01EZYp2GeyzTRzDaMTe1HaJ71 5eQUP21eXNxIHxhcpumwlSESzjC3gJ9HYnKkwcfJLOd0mV4am0f/iDgoQExkskse UzG3iACGYRmcUmurX1J5qIPVy1VseYqsQ8sqlBBP/1+Y7a+PsYRamh+pKf9ENuqF ZWs9LgXfdSKzpUtPYQ7S/TLdkmR55gSbsTn7lDv5NEs8M2425P5bW1RFy71sEj6U 7i8HP5LImzUOzdhK0OIpSawQSN1lLaMA8OZ3oAEKpYD5YqRIeuRtET1vSB0LzHbl SKk3AFoDNV3DtymfJBvGEAll24hzyUZE2qbz8Zt+ykRMWmJyuElcpRaVYwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFmzKHHOuGhv7+3c6HJZFoJdxavrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE3NDA1MWZkLWE5NjEtNDAzMy05MGZlLTllNThjZmQwZTNlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYkgwDQYJKoZIhvcNAQELBQADggEBAAfeeg+xwW0hhSeIyrsU v+NBQQZnw1Fa9u8VDUwjb09gvsMkaHDtijs1fSCq9gZen4hQPR5PjEWOiz9O7pUS IxV0uUNyn1raExjaDEf4oD2l0eZsgtUt6l+cR7oI58owAbUnYvOUl2Ufw/PiR9/l 8koZ78fMePB5ZbJyLJVgT8wMK5KUe3hiYwcPYPnyxt8y2V7hg+fcV7JKVmiJtZ+v bqvIUQiLaHuQfdYPtbpur5OTSWipo3Rjn9xpMAtVLaKhfuOcPK2NdPbjDg0T9/51 TthruXb+uQDbIUrrhv5aXOO4V0iaOiVWTlQ3Jn8cl75w7bVpPztmqMXAC/LwAJBl v54= -----END CERTIFICATE-----Generated at Sun Sep 20 16:37:29 2026 by rpki-client