$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/12b30a3b-1d2e-4189-bbdf-5ac21b634a36.roa File: 12b30a3b-1d2e-4189-bbdf-5ac21b634a36.roa (raw, json) Hash identifier: Lp0gmHalKbgYaDUjnXdGWzo9L2FsmsVz0NspSyHpZs0= Subject key identifier: 74:90:8A:52:87:02:8C:4C:9D:AC:3B:A6:C9:81:BD:9D:F8:D0:BB:9B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 30BDE323A4A8FE6BA0BB03FFAA3271BCE62CC666 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/12b30a3b-1d2e-4189-bbdf-5ac21b634a36.roa Signing time: Tue 21 Jul 2026 00:11:00 +0000 ROA not before: Tue 21 Jul 2026 00:11:00 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:7080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:bd:e3:23:a4:a8:fe:6b:a0:bb:03:ff:aa:32:71:bc:e6:2c:c6:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:11:00 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=8d0243da3d735e59f5a555415bac343702f6d05d5244e8ea74441f346de6f7cc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:69:e4:98:ac:f6:f1:5e:e6:35:e1:90:c2:87: c8:83:d9:eb:76:48:47:34:62:cb:3a:7e:3a:83:df: 92:1a:49:24:af:61:eb:a4:21:ed:c9:09:9f:8c:93: c5:03:c2:fa:5b:72:07:4d:51:b4:61:a5:51:43:6d: e1:a3:14:76:c8:9d:61:8e:8b:83:cb:e4:75:e9:0f: 5a:6d:ca:42:b7:27:f7:eb:7d:3c:54:36:dd:e8:13: e7:b4:6a:09:06:96:82:3d:f1:90:66:1a:76:0d:1e: d8:de:33:38:e7:d4:03:70:fd:40:bb:bb:7b:5e:01: f8:ff:b9:80:46:20:00:80:98:c9:56:c4:d0:7a:f8: 34:14:b7:2e:7a:4b:19:5b:9a:27:3b:de:1a:4f:ff: f9:00:9e:f3:8a:43:02:d7:f5:25:4c:7a:62:f3:db: 9e:42:77:1e:09:43:d7:b3:a7:2e:98:d3:44:2d:11: 11:c9:97:63:4d:00:3f:6f:e5:d3:b1:fd:7f:2a:1b: 73:52:22:c8:ca:0b:41:3f:90:80:a6:23:81:4e:e0: 05:c5:a5:92:1d:1a:75:9c:59:69:a4:f8:b0:ea:d9: 01:c9:3e:93:f6:5e:5d:67:66:a9:54:24:9d:ed:94: d3:39:85:a1:dd:14:c9:ce:7a:bb:2f:c3:db:89:7b: 02:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:90:8A:52:87:02:8C:4C:9D:AC:3B:A6:C9:81:BD:9D:F8:D0:BB:9B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/12b30a3b-1d2e-4189-bbdf-5ac21b634a36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:7080::/46 Signature Algorithm: sha256WithRSAEncryption 1a:18:c5:f2:d4:ba:d2:5b:10:56:84:0c:d4:57:8c:0b:58:ab: 6b:40:30:ea:00:68:41:8c:ba:e2:61:0c:94:56:ae:fd:30:69: 54:9f:70:5b:7c:bb:b1:0b:6f:57:8c:1f:a7:9b:95:a8:5f:82: 02:72:04:01:02:25:ec:0f:5f:b7:4f:68:a2:67:6a:73:e6:fe: f6:4b:47:c6:07:be:5c:b0:86:4d:36:d2:c9:ac:4f:cf:fa:a3: cf:ca:e1:58:b8:0c:75:8e:e0:39:be:a6:e3:82:db:90:e9:cd: e4:bd:77:f1:2f:3d:06:96:f1:ba:3f:72:dc:04:99:66:62:c8: 17:e4:29:9c:90:13:82:94:d4:37:00:3d:02:c5:80:a8:4f:1c: b1:bf:90:2e:e1:c4:0f:d4:d6:9a:a3:12:6d:04:b7:a0:bc:a7: 61:fa:b7:3e:ee:19:6b:23:c7:85:f0:f4:b8:b6:fc:83:80:ab: f1:69:47:ee:80:a5:b4:19:65:ba:f5:d9:be:95:3e:b7:1f:d2: 5b:be:65:8a:72:a4:ec:9c:16:19:47:37:c1:ad:20:e4:0d:42: 33:c6:eb:cc:6a:bb:37:7e:36:fa:f5:5d:6d:f9:e7:bf:3c:20: 73:4b:cd:4c:79:9a:3a:4e:06:0c:af:62:3c:bd:26:f0:5a:87: 0d:e7:d6:fb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUML3jI6So/muguwP/qjJxvOYsxmYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMTEwMFoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAOGQwMjQzZGEzZDczNWU1OWY1YTU1 NTQxNWJhYzM0MzcwMmY2ZDA1ZDUyNDRlOGVhNzQ0NDFmMzQ2ZGU2ZjdjYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmnkmKz28V7mNeGQwofIg9nrdkhH NGLLOn46g9+SGkkkr2HrpCHtyQmfjJPFA8L6W3IHTVG0YaVRQ23hoxR2yJ1hjouD y+R16Q9abcpCtyf36308VDbd6BPntGoJBpaCPfGQZhp2DR7Y3jM459QDcP1Au7t7 XgH4/7mARiAAgJjJVsTQevg0FLcueksZW5onO94aT//5AJ7zikMC1/UlTHpi89ue QnceCUPXs6cumNNELRERyZdjTQA/b+XTsf1/KhtzUiLIygtBP5CApiOBTuAFxaWS HRp1nFlppPiw6tkByT6T9l5dZ2apVCSd7ZTTOYWh3RTJznq7L8PbiXsCLQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHSQilKHAoxMnaw7psmBvZ340LubMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEyYjMwYTNiLTFkMmUtNDE4OS1iYmRmLTVhYzIxYjYzNGEzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba83CAMA0GCSqGSIb3DQEBCwUAA4IBAQAaGMXy1LrSWxBWhAzU V4wLWKtrQDDqAGhBjLriYQyUVq79MGlUn3BbfLuxC29XjB+nm5WoX4ICcgQBAiXs D1+3T2iiZ2pz5v72S0fGB75csIZNNtLJrE/P+qPPyuFYuAx1juA5vqbjgtuQ6c3k vXfxLz0GlvG6P3LcBJlmYsgX5CmckBOClNQ3AD0CxYCoTxyxv5Au4cQP1NaaoxJt BLegvKdh+rc+7hlrI8eF8PS4tvyDgKvxaUfugKW0GWW69dm+lT63H9JbvmWKcqTs nBYZRzfBrSDkDUIzxuvMars3fjb69V1t+ee/PCBzS81MeZo6TgYMr2I8vSbwWocN 59b7 -----END CERTIFICATE-----Generated at Fri Jul 24 03:45:56 2026 by rpki-client