$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d8a79c-3ca8-436a-8d77-45eb7cbe51ad.roa File: 02d8a79c-3ca8-436a-8d77-45eb7cbe51ad.roa (raw, json) Hash identifier: 8M9q9vXPnpjLD8ybKKU1HzeoZOv334SFLx6+g9E9ncQ= Subject key identifier: 21:90:93:53:6C:AD:AC:59:6B:B1:88:A0:1A:6E:42:B2:DD:89:35:2E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 36E96BAB2476DE0E6D68FD7DB482AA84EF1BF979 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d8a79c-3ca8-436a-8d77-45eb7cbe51ad.roa Signing time: Tue 21 Jul 2026 00:10:30 +0000 ROA not before: Tue 21 Jul 2026 00:10:30 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e9:6b:ab:24:76:de:0e:6d:68:fd:7d:b4:82:aa:84:ef:1b:f9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:10:30 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=7f10474fdd6e72edaec809f6c76035761bd08c26ee24931596a6fcd4a5ac9b57, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:53:40:26:95:ed:97:c8:f5:6b:0a:3f:29:3d: d2:17:d4:1f:39:b8:92:27:92:14:e8:3a:65:b2:9c: 58:b2:10:f7:52:38:65:90:71:76:f0:1c:0d:0d:f7: ee:35:4e:96:49:76:92:2d:ec:e4:7a:bc:ef:79:ff: 8f:cf:31:6b:93:b2:12:01:6e:4e:80:a8:08:ba:4a: 95:aa:a0:cd:71:0d:d7:a2:17:19:53:f9:dd:12:cf: 47:4d:fc:9a:f7:71:de:0b:66:ba:3f:22:a4:0e:db: 29:b7:41:90:90:19:5f:2d:b0:6d:b9:95:14:91:ec: 92:2e:b9:bf:f2:9e:81:5a:75:86:18:c4:ff:ab:a1: a9:f5:7d:14:91:7a:22:e0:42:f2:f9:ad:70:ac:22: 3c:c9:5b:87:f5:20:cd:1a:86:88:7d:75:b1:12:39: e6:8c:a5:d3:b0:3e:91:7a:84:cc:c5:85:5a:7a:85: e0:a1:63:41:a5:05:04:c5:c8:70:f3:18:b1:34:68: 6a:e4:73:6e:79:04:95:b4:6b:fd:d2:e2:04:57:ec: 79:6d:6b:d5:d7:25:4a:9f:c9:8b:1a:6c:f6:5e:56: 27:e1:85:5f:eb:1a:34:97:9b:96:ba:64:ec:f9:5a: ed:ec:2c:e7:67:2e:0c:3b:53:54:b6:ff:f8:84:de: ee:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:90:93:53:6C:AD:AC:59:6B:B1:88:A0:1A:6E:42:B2:DD:89:35:2E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d8a79c-3ca8-436a-8d77-45eb7cbe51ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:1080::/48 Signature Algorithm: sha256WithRSAEncryption a0:a2:01:ba:6b:f9:f9:e4:c2:13:74:23:75:04:bd:8f:c1:fb: 33:aa:9b:62:af:13:e7:82:9c:2a:c5:07:f0:4a:82:2d:da:4a: ea:d4:61:e4:d9:b3:72:d2:8a:ca:70:ed:c8:ac:16:7c:76:d7: 15:bf:ba:95:4f:fa:c2:07:ad:e1:d7:d9:ec:23:bb:c0:38:df: 69:97:28:80:a3:93:d1:89:09:4d:1a:c2:d8:f1:d0:eb:90:76: 60:02:5a:dc:0d:8f:0d:08:9c:0f:9d:75:c4:49:99:b5:8e:20: 9b:4d:bf:79:20:64:b2:01:b8:9e:c5:e2:9a:7f:31:56:8e:ef: 0a:03:e2:14:a7:e8:3e:d0:b8:fb:e8:2c:cc:43:a5:5a:a2:b1: 22:fb:07:96:3f:52:c2:1f:d9:ac:3b:11:6c:00:6d:b4:13:f2: 1c:76:e9:4a:9c:12:57:e5:17:aa:18:fa:7d:ea:5f:45:9e:e4: ea:51:a3:83:b2:ac:44:0b:a9:8c:78:b8:0a:a1:fb:9c:c4:85: 91:94:68:88:0e:45:43:60:9c:bb:06:f7:92:ee:4f:c5:12:c5: 80:b8:49:43:13:ee:8a:a8:13:20:dd:7f:30:c5:5f:ed:8f:32: 14:b6:d9:cf:dd:79:c8:f4:d2:25:28:ca:25:6f:7f:ea:95:39: 71:a9:a9:dd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNulrqyR23g5taP19tIKqhO8b+XkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMTAzMFoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAN2YxMDQ3NGZkZDZlNzJlZGFlYzgw OWY2Yzc2MDM1NzYxYmQwOGMyNmVlMjQ5MzE1OTZhNmZjZDRhNWFjOWI1NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FNAJpXtl8j1awo/KT3SF9QfObiS J5IU6DplspxYshD3UjhlkHF28BwNDffuNU6WSXaSLezkerzvef+PzzFrk7ISAW5O gKgIukqVqqDNcQ3XohcZU/ndEs9HTfya93HeC2a6PyKkDtspt0GQkBlfLbBtuZUU keySLrm/8p6BWnWGGMT/q6Gp9X0UkXoi4ELy+a1wrCI8yVuH9SDNGoaIfXWxEjnm jKXTsD6ReoTMxYVaeoXgoWNBpQUExchw8xixNGhq5HNueQSVtGv90uIEV+x5bWvV 1yVKn8mLGmz2XlYn4YVf6xo0l5uWumTs+Vrt7CznZy4MO1NUtv/4hN7uDQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCGQk1NsraxZa7GIoBpuQrLdiTUuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAyZDhhNzljLTNjYTgtNDM2YS04ZDc3LTQ1ZWI3Y2JlNTFhZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6hCAMA0GCSqGSIb3DQEBCwUAA4IBAQCgogG6a/n55MITdCN1 BL2PwfszqptirxPngpwqxQfwSoIt2krq1GHk2bNy0orKcO3IrBZ8dtcVv7qVT/rC B63h19nsI7vAON9plyiAo5PRiQlNGsLY8dDrkHZgAlrcDY8NCJwPnXXESZm1jiCb Tb95IGSyAbiexeKafzFWju8KA+IUp+g+0Lj76CzMQ6VaorEi+weWP1LCH9msOxFs AG20E/IcdulKnBJX5ReqGPp96l9FnuTqUaODsqxEC6mMeLgKofucxIWRlGiIDkVD YJy7BveS7k/FEsWAuElDE+6KqBMg3X8wxV/tjzIUttnP3XnI9NIlKMolb3/qlTlx qand -----END CERTIFICATE-----Generated at Fri Jul 24 07:28:58 2026 by rpki-client