$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1d075ad8-69d2-4f67-b1e8-f269b1bdda72.roa File: 1d075ad8-69d2-4f67-b1e8-f269b1bdda72.roa (raw, json) Hash identifier: 5RALh6JoYl5pl4o0faPqHeoWrH6jbTujmEKsl42+YEY= Subject key identifier: FE:33:53:87:2D:EA:1B:C6:82:90:CF:51:DC:60:4A:57:F4:F7:07:13 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4CBF1D27510D6875F904E8B5ED6DA7FD0392C9F3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1d075ad8-69d2-4f67-b1e8-f269b1bdda72.roa Signing time: Thu 23 Jul 2026 00:00:08 +0000 ROA not before: Thu 23 Jul 2026 00:00:08 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bf:1d:27:51:0d:68:75:f9:04:e8:b5:ed:6d:a7:fd:03:92:c9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 23 00:00:08 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=cf5627b4910010bde3d84cd7d72e570ec752e0ba42b696a497d7f3d45666c02a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cc:4f:ac:84:a3:44:23:78:c2:f0:cd:a8:c7: 93:8c:1a:e8:ea:13:fa:92:04:ff:75:2a:d7:dc:a8: b6:85:fe:02:e5:41:21:4b:dc:44:9f:08:fe:94:e8: 44:40:81:f1:c5:20:9f:b6:05:0d:f6:a9:0d:83:ea: 49:8c:09:6d:f5:22:f4:4a:5a:2a:35:44:79:d1:1e: 3d:87:c7:75:71:05:e0:a3:91:bc:fa:80:5b:c7:90: ce:de:fa:38:88:2e:7f:f9:6a:d1:20:a2:fd:2d:cf: 3c:4d:8d:c0:19:75:3c:b3:23:80:2b:e0:42:ea:6b: bc:11:b6:48:b1:9c:81:0a:27:c6:43:ea:7d:73:9a: 2f:05:ca:e4:cb:8b:51:45:95:32:f1:11:ea:d4:43: 6e:85:87:a5:67:d8:37:51:a0:a7:ba:9a:a9:e7:2b: 6d:97:ac:46:b0:88:7c:f7:aa:54:86:20:95:04:fb: 80:e4:44:33:7a:fe:43:43:d5:61:d9:37:be:5d:11: ac:82:7e:2a:60:59:87:c1:72:8f:1b:cf:32:e2:72: 2c:70:ac:fc:a4:83:91:9a:32:96:80:01:96:47:7f: 49:76:b7:32:d2:ab:0f:83:94:ed:04:2a:d8:b1:ad: e0:b3:f2:d9:8f:f8:f2:3e:37:04:74:3b:79:b0:ef: 70:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:33:53:87:2D:EA:1B:C6:82:90:CF:51:DC:60:4A:57:F4:F7:07:13 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1d075ad8-69d2-4f67-b1e8-f269b1bdda72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:7000::/40 Signature Algorithm: sha256WithRSAEncryption c8:db:05:2a:f0:93:ec:f6:3e:31:a2:7c:a7:95:14:56:38:ac: 9d:90:32:71:1c:43:d5:16:82:cb:21:6e:94:d7:c3:0a:ae:d7: a5:c5:f6:e2:32:0c:b9:cb:6e:51:74:21:e4:4a:46:2c:88:68: 56:b1:dd:17:21:a1:22:c4:a3:9e:87:0b:67:37:61:cb:a0:36: f7:c1:a3:95:5d:6d:27:9c:06:c1:97:c0:4e:08:69:52:1c:eb: af:78:1f:cf:4a:43:f5:42:8e:fa:a7:d2:15:98:fc:78:cc:60: 56:6c:d7:2a:5e:44:aa:b1:3a:76:12:f4:d5:8c:cf:50:9d:23: 0c:d0:3a:16:f1:ca:88:67:ed:82:7d:1d:8e:91:37:d5:c1:cc: d4:6a:71:db:f0:23:ac:c3:f6:66:d1:30:78:47:21:e0:68:64: 3d:26:b7:07:00:a7:e9:c0:fe:9a:2c:1e:d9:8e:8e:68:2d:8a: 57:e5:fb:c9:a7:39:8b:55:9b:c0:bb:9a:40:33:39:07:d7:12: 24:80:71:1e:78:2f:40:b7:af:72:6f:35:96:71:c9:1d:fc:76: a7:cf:04:fa:f8:a9:fc:0d:df:76:32:7c:57:57:27:35:79:b1: bf:59:db:4b:fa:75:ee:86:31:ae:8f:fc:58:c5:e5:06:7f:c7: 98:28:44:b3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTL8dJ1ENaHX5BOi17W2n/QOSyfMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMzAwMDAwOFoX DTI2MTAyMTIzNTk1OVowejFJMEcGA1UEBRNAY2Y1NjI3YjQ5MTAwMTBiZGUzZDg0 Y2Q3ZDcyZTU3MGVjNzUyZTBiYTQyYjY5NmE0OTdkN2YzZDQ1NjY2YzAyYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sxPrISjRCN4wvDNqMeTjBro6hP6 kgT/dSrX3Ki2hf4C5UEhS9xEnwj+lOhEQIHxxSCftgUN9qkNg+pJjAlt9SL0Sloq NUR50R49h8d1cQXgo5G8+oBbx5DO3vo4iC5/+WrRIKL9Lc88TY3AGXU8syOAK+BC 6mu8EbZIsZyBCifGQ+p9c5ovBcrky4tRRZUy8RHq1ENuhYelZ9g3UaCnupqp5ytt l6xGsIh896pUhiCVBPuA5EQzev5DQ9Vh2Te+XRGsgn4qYFmHwXKPG88y4nIscKz8 pIORmjKWgAGWR39Jdrcy0qsPg5TtBCrYsa3gs/LZj/jyPjcEdDt5sO9wYwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP4zU4ct6hvGgpDPUdxgSlf09wcTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFkMDc1YWQ4LTY5ZDItNGY2Ny1iMWU4LWYyNjliMWJkZGE3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9XAwDQYJKoZIhvcNAQELBQADggEBAMjbBSrwk+z2PjGifKeV FFY4rJ2QMnEcQ9UWgsshbpTXwwqu16XF9uIyDLnLblF0IeRKRiyIaFax3RchoSLE o56HC2c3YcugNvfBo5VdbSecBsGXwE4IaVIc6694H89KQ/VCjvqn0hWY/HjMYFZs 1ypeRKqxOnYS9NWMz1CdIwzQOhbxyohn7YJ9HY6RN9XBzNRqcdvwI6zD9mbRMHhH IeBoZD0mtwcAp+nA/posHtmOjmgtilfl+8mnOYtVm8C7mkAzOQfXEiSAcR54L0C3 r3JvNZZxyR38dqfPBPr4qfwN33YyfFdXJzV5sb9Z20v6de6GMa6P/FjF5QZ/x5go RLM= -----END CERTIFICATE-----Generated at Fri Jul 24 05:11:23 2026 by rpki-client