$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8599491d-2ae9-4825-a543-bfafb49f8801.roa File: 8599491d-2ae9-4825-a543-bfafb49f8801.roa (raw, json) Hash identifier: n18/WD6TRbTWoyzzh9ffc6TAyWG+DbuUK9pKyLBHe2Y= Subject key identifier: 60:CC:E4:1D:6C:56:5C:FB:A9:4C:5F:F6:A0:43:AF:10:B6:E6:D6:D3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 53888F0BA6F1432E5B2D232EF49BDADE97D2960B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8599491d-2ae9-4825-a543-bfafb49f8801.roa Signing time: Thu 10 Sep 2026 00:00:26 +0000 ROA not before: Thu 10 Sep 2026 00:00:26 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:88:8f:0b:a6:f1:43:2e:5b:2d:23:2e:f4:9b:da:de:97:d2:96:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:00:26 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=bef504bc0ac891c5931ac7f609b11fb6c2f06638129a3a924b764a8bfd401b1f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fa:fb:a1:ff:25:98:bd:a4:1d:f1:d3:1c:0d: 38:8e:70:cd:92:b4:09:c3:33:28:e8:76:e7:13:60: b7:0c:b6:f7:ff:d6:51:91:b0:b1:90:c0:f5:38:e9: 13:f5:cf:08:5f:a3:ea:a1:aa:c7:00:d6:e2:62:9c: bc:d0:2c:40:9f:a7:12:0f:3c:35:3c:df:6f:c9:ca: 9e:2e:13:de:79:67:a5:de:72:ba:4b:9e:d1:71:a2: bd:a8:f1:08:bb:f9:5e:49:53:68:c6:d1:f8:c9:f2: 84:45:bb:f5:65:cd:32:95:ce:f9:87:4f:40:6f:e4: 8e:ce:55:91:12:ec:5b:a8:f6:4c:ba:4a:63:4d:75: 6d:c4:f9:31:3e:3d:1e:67:c5:c8:c0:2e:c6:9a:e3: 5a:4f:04:73:91:b2:0a:9a:36:2f:84:23:7e:23:cd: 6d:f5:ab:29:ff:6d:dd:dd:3c:01:d5:ba:66:54:f8: 28:f4:68:12:a1:58:a1:45:d8:00:37:07:2d:fa:2e: 85:a2:0c:bb:a2:0e:67:a0:91:da:bf:fb:a6:f9:84: 3d:55:e2:72:72:7d:03:41:33:9c:d8:da:8b:4b:cd: 23:ec:90:50:02:30:33:e2:33:42:27:d5:77:65:0f: cc:9b:6b:8f:70:5b:4c:82:d9:42:d6:d2:38:c1:08: 42:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CC:E4:1D:6C:56:5C:FB:A9:4C:5F:F6:A0:43:AF:10:B6:E6:D6:D3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8599491d-2ae9-4825-a543-bfafb49f8801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:e000::/40 Signature Algorithm: sha256WithRSAEncryption 98:4c:9c:40:39:72:29:10:d5:af:44:68:24:f8:78:c1:66:10: 94:9c:16:f9:36:94:fb:17:67:7c:54:2f:a6:d8:c6:98:7c:7d: de:b8:db:56:0b:38:e8:57:5e:e4:44:e1:97:5d:23:37:37:d8: 93:af:5a:06:0e:38:5f:61:79:14:c9:d9:fd:9e:e3:8b:16:97: a9:6b:2c:9e:16:d0:0d:65:1d:49:f8:44:0d:72:53:6b:a6:bd: 16:eb:78:7c:7b:45:e0:02:c3:76:34:59:cf:53:c3:3e:fa:40: 58:39:04:57:b7:85:a0:0c:d7:36:78:2f:14:3f:66:1b:c7:8f: fc:79:25:48:9c:54:bf:b4:47:df:b1:4a:1b:e3:41:98:a9:a3: 4d:3a:1c:b6:4a:ba:83:0b:56:08:b8:ef:1d:06:6b:fe:a7:89: ec:54:df:4b:9f:ec:a6:66:e3:b3:6f:fd:32:b1:81:b5:aa:ed: 49:9e:6c:4c:6a:5c:99:3d:f9:86:85:a4:4c:1a:96:89:a1:db: 78:ce:e0:18:d6:e6:84:2b:ca:89:bd:00:1e:0d:ae:ff:16:5f: 77:30:8c:b5:c9:86:95:e2:d6:18:73:40:45:84:cd:46:10:df: 25:25:73:a5:02:c5:5f:79:c6:85:1a:75:e2:f9:3d:ec:4e:a1: 91:b8:2e:09 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUU4iPC6bxQy5bLSMu9Jva3pfSlgswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMDAyNloX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAYmVmNTA0YmMwYWM4OTFjNTkzMWFj N2Y2MDliMTFmYjZjMmYwNjYzODEyOWEzYTkyNGI3NjRhOGJmZDQwMWIxZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Pr7of8lmL2kHfHTHA04jnDNkrQJ wzMo6HbnE2C3DLb3/9ZRkbCxkMD1OOkT9c8IX6PqoarHANbiYpy80CxAn6cSDzw1 PN9vycqeLhPeeWel3nK6S57RcaK9qPEIu/leSVNoxtH4yfKERbv1Zc0ylc75h09A b+SOzlWREuxbqPZMukpjTXVtxPkxPj0eZ8XIwC7GmuNaTwRzkbIKmjYvhCN+I81t 9asp/23d3TwB1bpmVPgo9GgSoVihRdgANwct+i6Fogy7og5noJHav/um+YQ9VeJy cn0DQTOc2NqLS80j7JBQAjAz4jNCJ9V3ZQ/Mm2uPcFtMgtlC1tI4wQhCMwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGDM5B1sVlz7qUxf9qBDrxC25tbTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg1OTk0OTFkLTJhZTktNDgyNS1hNTQzLWJmYWZiNDlmODgwMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6+AwDQYJKoZIhvcNAQELBQADggEBAJhMnEA5cikQ1a9EaCT4 eMFmEJScFvk2lPsXZ3xUL6bYxph8fd6421YLOOhXXuRE4ZddIzc32JOvWgYOOF9h eRTJ2f2e44sWl6lrLJ4W0A1lHUn4RA1yU2umvRbreHx7ReACw3Y0Wc9Twz76QFg5 BFe3haAM1zZ4LxQ/ZhvHj/x5JUicVL+0R9+xShvjQZipo006HLZKuoMLVgi47x0G a/6niexU30uf7KZm47Nv/TKxgbWq7UmebExqXJk9+YaFpEwalomh23jO4BjW5oQr yom9AB4Nrv8WX3cwjLXJhpXi1hhzQEWEzUYQ3yUlc6UCxV95xoUadeL5PexOoZG4 Lgk= -----END CERTIFICATE-----Generated at Sun Sep 20 22:13:51 2026 by rpki-client