$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1310cdca-925e-4f9b-913f-8acc4b67cee7.roa File: 1310cdca-925e-4f9b-913f-8acc4b67cee7.roa (raw, json) Hash identifier: QLJgk8D9hcm/xE0KPb/ZE+zq/Q7fRUgvyNigVtqwCqk= Subject key identifier: 68:E3:B0:3C:16:9F:14:9F:8D:36:6C:D4:A7:4E:3B:71:F6:CE:CD:62 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7FC1A4CD20645152C3EFE5782F18A1C2C8496402 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1310cdca-925e-4f9b-913f-8acc4b67cee7.roa Signing time: Tue 21 Jul 2026 00:01:17 +0000 ROA not before: Tue 21 Jul 2026 00:01:17 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c1:a4:cd:20:64:51:52:c3:ef:e5:78:2f:18:a1:c2:c8:49:64:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:01:17 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=21f4cb85ff14a8538ff36a3ac68fe599eef5edce71d9b0c11ca747d43fbcc1ff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ac:ae:23:a0:c8:28:fe:8c:8f:d8:69:64:ac: f7:be:ed:ca:ad:18:a1:3d:12:d2:b8:f5:1b:a8:7c: 31:c1:b7:ff:fb:52:6c:7e:7a:92:38:cb:3b:8e:ba: 48:90:d1:a2:66:de:1f:47:35:13:c4:c5:70:ae:31: be:5b:67:6b:9a:09:2f:e7:9c:64:f6:1c:25:5a:74: 3c:4c:ee:c6:df:1a:d6:64:af:4c:69:3c:49:1f:3f: 22:2a:8f:df:28:c3:fd:e0:2b:0b:e8:56:d9:0d:79: d8:65:6e:48:87:7c:37:b7:97:0d:b9:38:98:af:bb: 12:fe:df:12:5b:bd:23:07:84:9e:c5:95:49:bb:fc: 0f:db:bd:ba:fc:24:c5:26:3c:96:a8:35:eb:fd:7e: b6:09:46:f8:51:f5:db:e9:2d:c9:49:fd:0a:51:4f: b5:38:b4:39:6a:fa:4a:90:c4:d5:fd:f4:6f:ac:c5: cd:ea:b5:cd:0a:96:cf:56:0a:25:33:6f:fb:1b:9d: 04:f9:bb:97:87:b7:bf:8b:1c:10:2e:8e:3a:84:a5: e9:58:22:e4:c3:bc:54:45:0a:9c:02:43:0d:f5:dc: f3:e9:e3:19:c8:c1:38:6a:eb:44:25:4b:2d:52:e2: 68:ff:41:e7:88:73:8c:8f:dd:77:59:a8:b0:c2:30: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E3:B0:3C:16:9F:14:9F:8D:36:6C:D4:A7:4E:3B:71:F6:CE:CD:62 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1310cdca-925e-4f9b-913f-8acc4b67cee7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:c880::/48 Signature Algorithm: sha256WithRSAEncryption 11:35:2c:0f:53:7a:ab:d9:23:5a:6e:be:b9:f4:db:b2:ef:ee: 6b:fd:aa:47:46:b0:b7:d8:83:72:8d:bd:c2:a8:73:58:e1:96: 54:89:74:58:17:30:3c:96:b3:4f:00:05:81:37:20:b0:a3:7d: 80:e0:a8:b5:6a:0d:3a:3f:fe:1b:30:d2:89:83:bd:2c:d9:41: 00:1c:c3:21:81:9c:00:e7:b3:62:e3:c7:4f:13:ab:f4:e5:82: fa:26:6f:91:93:a5:17:0a:bf:54:8b:47:9a:ac:9e:a7:6d:20: c9:ca:dc:c6:71:80:be:ee:19:3e:91:9e:c4:1c:fb:a3:d4:46: 84:71:a7:cc:5a:35:41:75:04:e0:58:b4:39:a0:ac:cf:26:88: c3:d7:7c:43:8f:49:11:eb:79:3a:c4:d5:56:5d:c7:4c:52:9e: 8c:9a:74:64:ee:fd:ba:e7:08:b9:d1:90:fa:ef:f2:16:da:37: ed:d7:78:c0:73:2d:1f:e7:9c:cc:74:6b:f0:39:5f:f8:f6:82: 9a:10:f3:ee:1f:59:ac:20:5e:56:48:ee:30:0d:a6:e0:9e:f3: 8e:c6:ce:3a:e8:d8:da:f1:bc:56:91:f1:f2:7f:11:46:81:49: 0e:6c:9a:39:c2:14:1a:f0:90:73:42:03:e9:01:db:5a:b7:c3: a9:fe:b7:77 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUf8GkzSBkUVLD7+V4LxihwshJZAIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMDExN1oX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAMjFmNGNiODVmZjE0YTg1MzhmZjM2 YTNhYzY4ZmU1OTllZWY1ZWRjZTcxZDliMGMxMWNhNzQ3ZDQzZmJjYzFmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qyuI6DIKP6Mj9hpZKz3vu3KrRih PRLSuPUbqHwxwbf/+1JsfnqSOMs7jrpIkNGiZt4fRzUTxMVwrjG+W2drmgkv55xk 9hwlWnQ8TO7G3xrWZK9MaTxJHz8iKo/fKMP94CsL6FbZDXnYZW5Ih3w3t5cNuTiY r7sS/t8SW70jB4SexZVJu/wP2726/CTFJjyWqDXr/X62CUb4UfXb6S3JSf0KUU+1 OLQ5avpKkMTV/fRvrMXN6rXNCpbPVgolM2/7G50E+buXh7e/ixwQLo46hKXpWCLk w7xURQqcAkMN9dzz6eMZyME4autEJUstUuJo/0HniHOMj913WaiwwjCgMwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGjjsDwWnxSfjTZs1KdOO3H2zs1iMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEzMTBjZGNhLTkyNWUtNGY5Yi05MTNmLThhY2M0YjY3Y2VlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6siAMA0GCSqGSIb3DQEBCwUAA4IBAQARNSwPU3qr2SNabr65 9Nuy7+5r/apHRrC32INyjb3CqHNY4ZZUiXRYFzA8lrNPAAWBNyCwo32A4Ki1ag06 P/4bMNKJg70s2UEAHMMhgZwA57Ni48dPE6v05YL6Jm+Rk6UXCr9Ui0earJ6nbSDJ ytzGcYC+7hk+kZ7EHPuj1EaEcafMWjVBdQTgWLQ5oKzPJojD13xDj0kR63k6xNVW XcdMUp6MmnRk7v265wi50ZD67/IW2jft13jAcy0f55zMdGvwOV/49oKaEPPuH1ms IF5WSO4wDabgnvOOxs466Nja8bxWkfHyfxFGgUkObJo5whQa8JBzQgPpAdtat8Op /rd3 -----END CERTIFICATE-----Generated at Fri Jul 24 02:08:14 2026 by rpki-client