$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb34c7ac-b8fb-453a-9d10-1687123f285c.roa File: fb34c7ac-b8fb-453a-9d10-1687123f285c.roa (raw, json) Hash identifier: esuOa62mtFpTKiBfDjxbM0ZLzVy0ViAPzREo0Qf0Ddg= Subject key identifier: 00:6A:67:A2:E5:04:AF:14:B8:BD:F0:5C:E1:BC:8B:7A:C0:EE:F0:E6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7DC7CE7BB0C899C9CFD39A011DDF696375645C66 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb34c7ac-b8fb-453a-9d10-1687123f285c.roa Signing time: Thu 10 Sep 2026 00:00:25 +0000 ROA not before: Thu 10 Sep 2026 00:00:25 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c7:ce:7b:b0:c8:99:c9:cf:d3:9a:01:1d:df:69:63:75:64:5c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:00:25 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=84e801fcc83fe2422945a33687b73cc56e09f726bfb1a44d01129d612db46651, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:97:ad:3a:65:22:b7:b9:64:45:67:33:7d: 81:0d:e8:33:4f:5e:60:ec:1c:79:62:08:3d:02:ee: 2f:73:54:de:8c:98:a1:b0:d0:4b:f7:f7:88:49:9d: ba:67:c1:22:a0:69:91:2e:74:c8:0c:2b:f0:3b:af: 12:c6:e2:9d:16:94:d3:05:90:14:1e:9c:9e:98:59: c9:52:65:f7:43:59:19:ed:2f:1d:2a:7b:64:f0:49: a0:92:3b:89:43:e2:e2:a5:8c:0e:13:33:bb:1a:c8: c4:f9:17:3d:af:02:70:7c:0a:d5:ec:86:4a:f7:4d: 49:e1:85:cf:1e:e1:10:a1:24:d9:b3:f2:35:35:f5: cc:7b:6c:df:41:59:90:18:14:e6:67:07:3b:94:a1: bb:4a:46:3e:36:87:0d:51:4f:b7:d6:de:37:81:ce: 08:49:d8:9f:38:86:ea:b7:70:31:58:e0:42:c7:ae: 00:62:10:ad:43:e0:93:8d:88:f9:5f:ce:b4:d6:35: 5f:70:84:b2:71:d6:79:22:5e:e1:9a:06:1b:b8:96: 09:00:d8:a8:aa:74:69:02:a5:f2:e2:7d:95:f0:fc: 3f:74:f9:62:eb:f7:eb:9f:61:49:c8:22:ae:38:84: d9:5a:31:20:9c:29:73:83:73:75:17:11:82:6b:0d: 10:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6A:67:A2:E5:04:AF:14:B8:BD:F0:5C:E1:BC:8B:7A:C0:EE:F0:E6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb34c7ac-b8fb-453a-9d10-1687123f285c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 86:fa:bb:7f:ad:c9:f0:c9:b0:41:12:18:42:02:70:34:1a:9b: 3b:bf:07:62:a8:82:44:f8:b2:5f:38:9b:ee:71:ac:8d:67:f2: 94:ca:ca:42:b7:8b:91:69:81:f5:50:c7:d8:75:b6:1f:95:f3: a0:44:17:ca:17:6e:6e:22:83:27:2a:a0:27:92:cb:7c:2a:d4: 62:0c:6d:6c:5e:e5:40:5a:40:d3:4e:6e:c3:5b:7d:e7:e6:3b: a5:8d:76:6e:59:9c:25:14:9a:3b:90:a5:51:4b:fa:16:d1:a2: ec:aa:38:38:7e:46:2a:95:9e:1a:51:15:d3:28:51:4b:3b:f1: c0:ea:1b:bf:cc:e1:c6:e9:d1:6f:53:ca:ab:00:86:41:70:ae: 6a:eb:2e:ed:af:fa:07:0f:03:da:f4:0b:d2:6d:58:69:3f:c0: 98:d3:38:58:a3:c1:ce:89:e6:82:c5:78:84:9f:f7:50:41:00: fd:ca:9a:eb:27:70:b1:a5:1e:72:19:1a:40:f6:65:d2:ea:a0: 74:9f:f7:76:77:9a:5b:38:cf:80:44:0d:1a:6d:48:ab:c1:53: 17:1e:2a:5c:b5:9c:d2:03:7c:97:6d:85:7e:a6:58:ce:7e:fa: 88:b4:ea:8c:31:8d:33:6c:18:0e:ef:05:9d:5f:63:89:f3:27: 15:11:dd:23 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfcfOe7DImcnP05oBHd9pY3VkXGYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMDAyNVoX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAODRlODAxZmNjODNmZTI0MjI5NDVh MzM2ODdiNzNjYzU2ZTA5ZjcyNmJmYjFhNDRkMDExMjlkNjEyZGI0NjY1MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCqXrTplIre5ZEVnM32BDegzT15g 7Bx5Ygg9Au4vc1TejJihsNBL9/eISZ26Z8EioGmRLnTIDCvwO68SxuKdFpTTBZAU HpyemFnJUmX3Q1kZ7S8dKntk8EmgkjuJQ+LipYwOEzO7GsjE+Rc9rwJwfArV7IZK 901J4YXPHuEQoSTZs/I1NfXMe2zfQVmQGBTmZwc7lKG7SkY+NocNUU+31t43gc4I SdifOIbqt3AxWOBCx64AYhCtQ+CTjYj5X8601jVfcISycdZ5Il7hmgYbuJYJANio qnRpAqXy4n2V8Pw/dPli6/frn2FJyCKuOITZWjEgnClzg3N1FxGCaw0QGQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFABqZ6LlBK8UuL3wXOG8i3rA7vDmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZiMzRjN2FjLWI4ZmItNDUzYS05ZDEwLTE2ODcxMjNmMjg1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6wjAMA0GCSqGSIb3DQEBCwUAA4IBAQCG+rt/rcnwybBBEhhC AnA0Gps7vwdiqIJE+LJfOJvucayNZ/KUyspCt4uRaYH1UMfYdbYflfOgRBfKF25u IoMnKqAnkst8KtRiDG1sXuVAWkDTTm7DW33n5juljXZuWZwlFJo7kKVRS/oW0aLs qjg4fkYqlZ4aURXTKFFLO/HA6hu/zOHG6dFvU8qrAIZBcK5q6y7tr/oHDwPa9AvS bVhpP8CY0zhYo8HOieaCxXiEn/dQQQD9yprrJ3CxpR5yGRpA9mXS6qB0n/d2d5pb OM+ARA0abUirwVMXHipctZzSA3yXbYV+pljOfvqItOqMMY0zbBgO7wWdX2OJ8ycV Ed0j -----END CERTIFICATE-----Generated at Mon Sep 21 09:48:05 2026 by rpki-client