$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d39e32ae-9518-4361-ac33-e6ce716bda79.roa File: d39e32ae-9518-4361-ac33-e6ce716bda79.roa (raw, json) Hash identifier: 8//aB6UiLxkDWlolZL68k6L71ULr+JLzVgP5uqX8tcw= Subject key identifier: C4:1F:C1:88:17:A4:AA:08:A7:DC:9A:01:20:7F:D0:D0:8B:75:68:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 16664C51985782779CECA9D4A46C92DFA2F0F184 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d39e32ae-9518-4361-ac33-e6ce716bda79.roa Signing time: Thu 10 Sep 2026 00:00:28 +0000 ROA not before: Thu 10 Sep 2026 00:00:28 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:66:4c:51:98:57:82:77:9c:ec:a9:d4:a4:6c:92:df:a2:f0:f1:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:00:28 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=f74cbee8b374295f9a79a0ae55488b92fb0a36697e3d5c3eb44fe9cc92b9425f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:35:39:a3:17:dd:d9:bc:28:d8:7e:73:33:7c: 00:a0:47:3c:d6:df:19:b1:8f:5e:af:0f:15:95:2e: df:cf:ae:e0:67:99:0e:41:64:86:0a:51:84:37:a1: a3:75:d0:e9:f8:dd:bd:e8:4e:2b:4b:ba:0e:5a:e9: 54:f1:2e:cb:5d:c3:21:be:d5:19:01:2e:8f:84:0c: 25:f2:e6:4c:55:59:51:b2:7b:a5:e9:4c:30:e1:3e: c1:54:5f:d0:48:6c:a5:a7:3a:30:d7:4d:c8:e0:99: 35:31:8d:86:20:c8:01:3d:71:ae:96:98:47:5f:9d: 4e:25:ed:ff:a4:56:6c:8c:ad:e2:1b:6e:36:1f:26: 73:83:e8:cf:2e:ef:71:02:8b:e5:fd:a7:7c:42:37: 4a:fe:ff:47:06:fa:82:5f:d8:37:94:3f:9e:36:d7: 9d:00:d1:4a:7a:b6:cb:c6:4a:63:18:31:df:74:02: 58:86:9a:75:9c:df:dd:d2:41:a9:bd:99:0d:56:75: 78:09:be:f2:56:e8:aa:a9:17:98:8f:79:7b:76:a9: 79:2c:77:f8:30:37:de:63:9b:9f:8a:44:50:a7:84: 03:61:0d:33:d5:3b:2e:04:8e:f5:8a:32:55:ef:32: f3:51:22:9e:ae:8c:d1:3c:f1:8b:82:45:a6:d3:ed: f6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1F:C1:88:17:A4:AA:08:A7:DC:9A:01:20:7F:D0:D0:8B:75:68:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d39e32ae-9518-4361-ac33-e6ce716bda79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:4000::/40 Signature Algorithm: sha256WithRSAEncryption 89:d7:f2:70:b2:16:83:28:83:fa:f8:a1:98:b0:bf:87:f6:a3: 62:10:ba:af:2b:aa:4b:5a:a7:30:b6:6c:56:02:f0:91:80:53: 93:18:aa:67:b4:df:db:3c:0c:e6:46:c4:32:22:ec:eb:d9:5e: b8:a3:6c:30:f4:ef:94:89:1b:39:a2:10:66:14:4f:df:af:f5: 0d:e0:54:14:98:59:93:e7:b9:b2:f1:37:d5:50:d2:59:82:db: 8d:ea:0a:85:af:3b:cf:e6:05:e5:7b:58:4c:46:83:8d:3f:c3: 02:8c:49:75:63:32:59:08:e0:0b:ae:96:3b:16:05:78:e5:cb: 18:26:5c:e4:3d:eb:71:18:c3:5c:fb:2e:83:03:84:f5:dd:32: 70:74:fa:9a:59:6b:cf:9b:ff:35:ce:9d:25:3e:99:29:b6:f1: a7:b5:95:0a:84:53:8a:6b:e2:0a:67:39:59:af:60:ea:ef:99: 36:67:a7:1c:94:28:91:4d:86:ee:74:4b:f8:9e:8b:ad:b6:93: f8:4f:14:bd:7d:fb:a4:59:a3:ff:4c:8b:70:b9:27:47:04:b1: 7e:4a:6b:65:e6:a1:55:cc:0e:4d:1d:10:a8:7d:1f:a3:39:50: 55:56:61:e8:93:b7:53:93:f0:9c:36:44:cf:70:a0:ff:63:e6: 15:5f:05:60 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFmZMUZhXgnec7KnUpGyS36Lw8YQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMDAyOFoX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAZjc0Y2JlZThiMzc0Mjk1ZjlhNzlh MGFlNTU0ODhiOTJmYjBhMzY2OTdlM2Q1YzNlYjQ0ZmU5Y2M5MmI5NDI1ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTU5oxfd2bwo2H5zM3wAoEc81t8Z sY9erw8VlS7fz67gZ5kOQWSGClGEN6GjddDp+N296E4rS7oOWulU8S7LXcMhvtUZ AS6PhAwl8uZMVVlRsnul6Uww4T7BVF/QSGylpzow103I4Jk1MY2GIMgBPXGulphH X51OJe3/pFZsjK3iG242HyZzg+jPLu9xAovl/ad8QjdK/v9HBvqCX9g3lD+eNted ANFKerbLxkpjGDHfdAJYhpp1nN/d0kGpvZkNVnV4Cb7yVuiqqReYj3l7dql5LHf4 MDfeY5ufikRQp4QDYQ0z1TsuBI71ijJV7zLzUSKerozRPPGLgkWm0+32jQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMQfwYgXpKoIp9yaASB/0NCLdWhbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QzOWUzMmFlLTk1MTgtNDM2MS1hYzMzLWU2Y2U3MTZiZGE3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba60AwDQYJKoZIhvcNAQELBQADggEBAInX8nCyFoMog/r4oZiw v4f2o2IQuq8rqktapzC2bFYC8JGAU5MYqme039s8DOZGxDIi7OvZXrijbDD075SJ GzmiEGYUT9+v9Q3gVBSYWZPnubLxN9VQ0lmC243qCoWvO8/mBeV7WExGg40/wwKM SXVjMlkI4AuuljsWBXjlyxgmXOQ963EYw1z7LoMDhPXdMnB0+ppZa8+b/zXOnSU+ mSm28ae1lQqEU4pr4gpnOVmvYOrvmTZnpxyUKJFNhu50S/iei622k/hPFL19+6RZ o/9Mi3C5J0cEsX5Ka2XmoVXMDk0dEKh9H6M5UFVWYeiTt1OT8Jw2RM9woP9j5hVf BWA= -----END CERTIFICATE-----Generated at Mon Sep 21 04:48:52 2026 by rpki-client