$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0fa09bbc-c3f0-4725-9a44-f48ebd114097.roa File: 0fa09bbc-c3f0-4725-9a44-f48ebd114097.roa (raw, json) Hash identifier: s7q4gvdxPPmV2j0DF5hrD9VJVHcB6ByB5lhA9hIdJFM= Subject key identifier: 99:0C:A6:EE:47:61:C4:F4:10:1E:12:A5:9B:F1:46:E6:73:68:A8:54 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0C0E97DC495D141E3E3EA869AE274CF87D43B749 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0fa09bbc-c3f0-4725-9a44-f48ebd114097.roa Signing time: Thu 16 Jul 2026 00:00:34 +0000 ROA not before: Thu 16 Jul 2026 00:00:34 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:0e:97:dc:49:5d:14:1e:3e:3e:a8:69:ae:27:4c:f8:7d:43:b7:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 16 00:00:34 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=b02e35f5d41cc31b174a1ff407dbd00d3ab3bd9cef9e2af3a0055d0492fca796, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ce:3d:93:6f:a9:56:1f:7b:f4:6a:e5:9a:38: 6a:b2:c1:81:bf:34:b4:9d:97:fc:69:15:a1:fe:c4: 2b:1a:28:9f:22:c0:a6:5f:57:2d:4e:aa:85:5b:64: d5:32:6d:f4:f1:5d:f6:ed:eb:e1:12:34:a0:07:49: d1:95:98:62:95:73:63:4a:58:46:78:32:3b:2d:f0: 0d:13:01:04:c9:77:48:40:d4:53:4a:38:b0:77:e7: de:ef:3b:fd:23:95:b6:98:3a:fa:9d:5e:ab:d9:5f: 27:f7:d9:ab:4b:b5:08:cb:ce:47:15:a4:7a:c1:c1: f1:0d:8f:c3:2e:84:fd:8e:33:0d:92:39:f0:96:bc: b5:ba:0b:ed:f3:1e:60:9a:e6:aa:54:d4:77:c4:52: d6:64:c3:cc:1a:c9:4d:be:95:f1:ef:e1:16:01:db: 71:4e:b7:93:98:27:06:a6:3a:31:49:23:7c:ac:b8: 8d:fc:c1:c5:8e:79:85:df:57:5e:87:c7:36:33:59: 3e:96:68:00:98:9d:96:22:f2:6c:e5:40:fa:49:99: 93:3a:67:15:08:06:64:f2:94:dd:e0:5c:c0:8b:5c: 1e:74:37:e4:d8:42:ec:d1:22:66:be:f6:df:53:78: 0f:af:7e:95:5c:4d:6f:4d:c6:26:46:79:28:42:73: 40:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0C:A6:EE:47:61:C4:F4:10:1E:12:A5:9B:F1:46:E6:73:68:A8:54 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0fa09bbc-c3f0-4725-9a44-f48ebd114097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:4040::/48 Signature Algorithm: sha256WithRSAEncryption b4:2c:b8:f4:74:ee:04:ae:b6:70:c1:e2:4e:6a:bf:e2:07:b7: cf:03:fc:42:6c:2f:a7:40:2e:7e:7c:5e:92:5c:65:a2:83:a1: 88:90:a2:2a:02:90:74:80:20:15:ca:89:3c:40:2d:e8:81:11: 61:ee:25:d8:b1:c6:98:d4:b4:1e:bc:da:b1:fe:ea:b5:66:5c: 27:6d:20:25:ce:e5:79:a0:33:e1:17:d4:d2:ec:1f:b3:d5:32: 3f:ef:44:e1:9c:25:ff:5a:43:c8:a0:54:b9:96:18:a3:b2:a2: 8c:c8:7a:2a:f8:e1:c9:c4:dd:12:a8:e9:67:df:9e:82:37:42: ee:78:e5:c6:b1:85:ff:62:b2:ef:8c:2a:19:0a:75:50:b2:c8: 67:8d:f4:77:bb:62:5b:75:03:4f:87:1d:8d:cd:d8:69:6c:15: 1b:d5:e5:04:ca:61:65:97:54:31:ef:98:e1:b5:6a:8e:b8:50: f3:25:d3:43:c2:22:82:9e:df:22:0e:2a:0f:f1:4c:d4:1a:d6: 3e:b6:a6:66:eb:a4:ad:ce:cb:54:93:4f:fe:dd:23:31:db:44: 55:8c:43:2a:25:95:d9:9b:65:5d:d1:b9:ec:df:6f:b4:35:49: ed:e9:9f:7d:66:c8:66:e8:79:50:9e:1b:b0:08:3f:66:4a:40: b6:0d:f9:84 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDA6X3EldFB4+PqhpridM+H1Dt0kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcxNjAwMDAzNFoX DTI2MTAxNDIzNTk1OVowejFJMEcGA1UEBRNAYjAyZTM1ZjVkNDFjYzMxYjE3NGEx ZmY0MDdkYmQwMGQzYWIzYmQ5Y2VmOWUyYWYzYTAwNTVkMDQ5MmZjYTc5NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M49k2+pVh979GrlmjhqssGBvzS0 nZf8aRWh/sQrGiifIsCmX1ctTqqFW2TVMm308V327evhEjSgB0nRlZhilXNjSlhG eDI7LfANEwEEyXdIQNRTSjiwd+fe7zv9I5W2mDr6nV6r2V8n99mrS7UIy85HFaR6 wcHxDY/DLoT9jjMNkjnwlry1ugvt8x5gmuaqVNR3xFLWZMPMGslNvpXx7+EWAdtx TreTmCcGpjoxSSN8rLiN/MHFjnmF31deh8c2M1k+lmgAmJ2WIvJs5UD6SZmTOmcV CAZk8pTd4FzAi1wedDfk2ELs0SJmvvbfU3gPr36VXE1vTcYmRnkoQnNAswIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJkMpu5HYcT0EB4SpZvxRuZzaKhUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmYTA5YmJjLWMzZjAtNDcyNS05YTQ0LWY0OGViZDExNDA5Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7UBAMA0GCSqGSIb3DQEBCwUAA4IBAQC0LLj0dO4ErrZwweJO ar/iB7fPA/xCbC+nQC5+fF6SXGWig6GIkKIqApB0gCAVyok8QC3ogRFh7iXYscaY 1LQevNqx/uq1ZlwnbSAlzuV5oDPhF9TS7B+z1TI/70ThnCX/WkPIoFS5lhijsqKM yHoq+OHJxN0SqOln356CN0LueOXGsYX/YrLvjCoZCnVQsshnjfR3u2JbdQNPhx2N zdhpbBUb1eUEymFll1Qx75jhtWqOuFDzJdNDwiKCnt8iDioP8UzUGtY+tqZm66St zstUk0/+3SMx20RVjEMqJZXZm2Vd0bns32+0NUnt6Z99Zshm6HlQnhuwCD9mSkC2 DfmE -----END CERTIFICATE-----Generated at Fri Jul 24 01:18:46 2026 by rpki-client