$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a5d528b-27bc-4304-ae36-9155c90a560a.roa File: 6a5d528b-27bc-4304-ae36-9155c90a560a.roa (raw, json) Hash identifier: 9IqJjiTGVW2v8Tr3eMy+G1+ocdTe9uLnoDAo5a7k/E4= Subject key identifier: E0:D1:6C:A2:6A:AB:6C:0F:9B:2F:6A:69:06:3B:7F:2F:66:FD:1A:CE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C8829F696323C2B8C5088AACB4893FEAD6A7F21 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a5d528b-27bc-4304-ae36-9155c90a560a.roa Signing time: Thu 10 Sep 2026 00:00:04 +0000 ROA not before: Thu 10 Sep 2026 00:00:04 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:88:29:f6:96:32:3c:2b:8c:50:88:aa:cb:48:93:fe:ad:6a:7f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:00:04 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=c5c7a563d018001444938cf36cbd6caff9999ac38acbb255742942bdaa89d5dd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:f2:4a:84:19:4a:74:01:65:7c:ab:bf:64: a0:be:21:5e:49:79:e8:93:76:c9:10:aa:7b:1b:e6: b3:2b:ed:ec:26:25:ef:20:f8:c7:b2:dd:87:db:d5: f3:84:4b:23:c4:09:3c:c4:9b:42:16:03:69:99:89: f2:57:00:c0:59:a5:6e:52:d9:b5:ea:71:c0:f3:59: d9:bb:11:5a:fc:b5:77:a7:8d:52:85:2d:8f:3a:87: 8d:f6:73:4f:45:bb:74:ce:89:7f:0b:72:0b:ff:62: 25:3c:ca:8b:ce:f1:1d:e0:57:c6:4d:fb:84:51:ef: af:68:b9:e9:af:ea:83:63:2a:33:e3:66:5d:de:87: 9d:c4:fc:ba:d2:4d:dc:46:3b:1a:59:a8:18:bc:c2: ca:7d:1f:b6:5f:11:3a:d5:76:78:df:d4:e6:28:0d: 3b:b6:65:13:9b:5f:54:98:ab:05:13:78:b9:97:58: a7:f8:a3:4f:35:99:50:80:34:e3:f2:aa:34:fb:0e: 84:0a:6d:c3:02:b0:0a:fb:8c:16:9e:08:df:04:09: 30:ff:cf:91:e5:e5:2d:e0:c5:7e:5a:b0:6a:a6:19: 29:98:e6:d8:41:ce:d6:7c:57:af:0f:e5:c6:58:dc: 21:8d:ad:a1:ee:e5:ad:b3:71:8d:b5:cc:9f:b2:8f: b2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D1:6C:A2:6A:AB:6C:0F:9B:2F:6A:69:06:3B:7F:2F:66:FD:1A:CE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a5d528b-27bc-4304-ae36-9155c90a560a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:2840::/48 Signature Algorithm: sha256WithRSAEncryption 97:69:c8:7a:f5:2a:15:cd:1e:8d:ad:04:be:03:a8:85:f5:c6: d9:87:7b:76:02:2d:96:ab:58:de:67:d0:12:dd:fd:31:6b:ad: a6:b0:c3:5c:a8:71:17:47:b9:40:42:89:77:60:ce:88:82:97: 76:de:3e:8d:27:9d:d9:c7:60:70:6a:c7:02:75:c6:a8:b3:04: d4:0a:41:21:3a:22:db:af:1c:0d:9d:a4:3f:40:27:a4:7e:ee: 92:f2:a2:7f:52:2d:a6:11:d1:b1:37:0b:a4:03:5d:62:0b:5c: 64:fa:36:6c:d7:9c:17:fe:3a:e0:d1:90:06:8d:97:37:9a:4e: 24:5e:a2:6c:1b:b7:08:40:d1:e8:fa:ce:69:b4:a0:5b:0a:09: f5:90:2f:8b:e3:38:30:4e:64:ee:40:de:7a:07:d2:d3:92:43: f0:86:67:16:24:42:4a:be:22:ec:a3:e6:b4:fb:9f:6f:f6:3c: c2:f4:9d:c0:f7:79:f3:83:89:98:03:b0:3d:5c:e3:40:c1:5a: 82:f6:94:aa:30:a5:d1:b0:78:0c:7d:cd:64:55:e9:91:6e:10: 47:63:e9:08:ff:55:cb:3a:a7:e5:70:95:90:b3:14:47:44:ce: 3e:b3:e7:6b:9c:08:39:46:c5:0a:e0:8d:57:36:a5:40:41:c3: 9d:3e:f6:c5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXIgp9pYyPCuMUIiqy0iT/q1qfyEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMDAwNFoX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAYzVjN2E1NjNkMDE4MDAxNDQ0OTM4 Y2YzNmNiZDZjYWZmOTk5OWFjMzhhY2JiMjU1NzQyOTQyYmRhYTg5ZDVkZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6zySoQZSnQBZXyrv2SgviFeSXno k3bJEKp7G+azK+3sJiXvIPjHst2H29XzhEsjxAk8xJtCFgNpmYnyVwDAWaVuUtm1 6nHA81nZuxFa/LV3p41ShS2POoeN9nNPRbt0zol/C3IL/2IlPMqLzvEd4FfGTfuE Ue+vaLnpr+qDYyoz42Zd3oedxPy60k3cRjsaWagYvMLKfR+2XxE61XZ439TmKA07 tmUTm19UmKsFE3i5l1in+KNPNZlQgDTj8qo0+w6ECm3DArAK+4wWngjfBAkw/8+R 5eUt4MV+WrBqphkpmObYQc7WfFevD+XGWNwhja2h7uWts3GNtcyfso+yAQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFODRbKJqq2wPmy9qaQY7fy9m/RrOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZhNWQ1MjhiLTI3YmMtNDMwNC1hZTM2LTkxNTVjOTBhNTYwYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6yhAMA0GCSqGSIb3DQEBCwUAA4IBAQCXach69SoVzR6NrQS+ A6iF9cbZh3t2Ai2Wq1jeZ9AS3f0xa62msMNcqHEXR7lAQol3YM6Igpd23j6NJ53Z x2BwascCdcaoswTUCkEhOiLbrxwNnaQ/QCekfu6S8qJ/Ui2mEdGxNwukA11iC1xk +jZs15wX/jrg0ZAGjZc3mk4kXqJsG7cIQNHo+s5ptKBbCgn1kC+L4zgwTmTuQN56 B9LTkkPwhmcWJEJKviLso+a0+59v9jzC9J3A93nzg4mYA7A9XONAwVqC9pSqMKXR sHgMfc1kVemRbhBHY+kI/1XLOqflcJWQsxRHRM4+s+drnAg5RsUK4I1XNqVAQcOd PvbF -----END CERTIFICATE-----Generated at Mon Sep 21 14:02:35 2026 by rpki-client