$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a177984-44c1-4fc1-97dc-e08be80f4299.roa File: 2a177984-44c1-4fc1-97dc-e08be80f4299.roa (raw, json) Hash identifier: zIYnaamb+gzwEPkZL2RXr5zYLOA9UbIuT4HhsWeN2v4= Subject key identifier: 81:EA:12:4F:87:FA:88:6A:A7:D9:E0:1F:6C:98:29:6E:CA:DB:28:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 11318F26D0999BB420A9DC5B0EFA752B8FD0CF76 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a177984-44c1-4fc1-97dc-e08be80f4299.roa Signing time: Tue 21 Jul 2026 00:20:40 +0000 ROA not before: Tue 21 Jul 2026 00:20:40 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:4840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:31:8f:26:d0:99:9b:b4:20:a9:dc:5b:0e:fa:75:2b:8f:d0:cf:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:20:40 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=6271b201cc1a7efb7a5b204c16ca038f4862a9830bb1820c67f2d9735294c188, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ad:12:6c:99:26:c3:93:cc:09:bd:8f:1d:f4: 0e:14:81:77:8c:e0:ed:aa:fe:67:b3:e3:94:64:e2: 22:00:bd:c8:a5:94:15:35:3b:d6:f9:a4:7d:99:c0: 33:cb:58:a5:3b:66:28:51:da:d9:86:fe:6c:61:47: dd:32:6f:74:43:b3:bd:be:fa:66:14:8f:d0:0e:a8: ed:55:97:27:e9:37:60:43:67:d9:a2:7f:05:2c:05: 22:a8:3c:8a:a7:7b:5f:b5:ad:0b:d6:40:65:9b:dd: e7:15:47:26:46:74:eb:93:5a:9a:57:a5:d7:85:6f: 8e:35:4d:e4:7a:e9:de:d5:59:86:52:02:ed:93:19: 77:94:7e:80:75:7c:68:90:cd:96:69:03:75:45:b4: cf:c9:1d:65:55:53:b5:19:e9:25:47:e3:0c:28:f5: f9:06:80:16:a0:a0:b9:15:cc:19:a9:da:2b:8a:cb: e0:08:d4:7f:8a:7f:bd:56:04:42:8b:90:de:f7:e6: a5:69:40:c0:45:1f:5e:61:d7:24:e7:39:9a:94:a8: 14:48:67:61:5f:09:91:2e:d4:5e:db:6c:3a:70:d5: f8:26:42:30:4a:07:a0:23:c4:dd:26:54:37:73:fb: 2a:6a:89:d4:91:94:59:01:62:aa:2f:91:a4:69:6a: 56:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EA:12:4F:87:FA:88:6A:A7:D9:E0:1F:6C:98:29:6E:CA:DB:28:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a177984-44c1-4fc1-97dc-e08be80f4299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:4840::/46 Signature Algorithm: sha256WithRSAEncryption 83:9a:24:3e:83:65:0b:77:5d:eb:10:c8:af:6a:fe:6b:11:4a: d8:c1:05:3e:55:79:8d:bf:c7:fd:36:65:18:50:2f:77:fb:b4: 32:79:fa:cd:6d:2d:ec:cb:d6:8b:39:1a:8a:c6:7b:76:4f:0a: 7c:f8:3c:67:f0:95:b9:2a:ff:6b:de:18:ed:30:2f:87:f9:9a: 0b:51:1e:dd:0f:2c:af:a7:ec:72:e9:e0:b9:b3:dd:0c:24:14: 85:76:94:7f:46:f9:5c:65:37:8b:b5:2c:3b:34:6e:f1:b7:24: 45:be:9a:80:f9:f0:17:c2:7a:bb:74:a9:37:6e:16:1e:6d:9c: 2b:e3:f9:50:4b:fc:16:41:8d:c2:f9:e9:73:15:01:2c:52:4c: 24:40:a9:f9:f7:5d:ce:b2:9c:67:59:7d:e9:0d:00:b1:21:db: 3e:3e:ab:db:0d:d9:c4:c7:3f:dd:18:fb:44:ff:77:32:e0:cd: 17:ec:c5:d4:3b:8e:32:af:02:40:ca:c3:05:1a:c7:aa:01:8f: 78:97:b6:ce:c2:2c:f9:d6:6f:0e:bf:28:91:54:16:f9:24:1b: 3d:cf:83:85:2d:6a:90:bb:42:03:df:1c:48:12:62:65:5c:e8: 09:e2:f2:05:fa:47:03:15:b0:45:3f:31:33:9c:83:3e:d3:10: d0:c5:72:29 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUETGPJtCZm7QgqdxbDvp1K4/Qz3YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMjA0MFoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNANjI3MWIyMDFjYzFhN2VmYjdhNWIy MDRjMTZjYTAzOGY0ODYyYTk4MzBiYjE4MjBjNjdmMmQ5NzM1Mjk0YzE4ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia0SbJkmw5PMCb2PHfQOFIF3jODt qv5ns+OUZOIiAL3IpZQVNTvW+aR9mcAzy1ilO2YoUdrZhv5sYUfdMm90Q7O9vvpm FI/QDqjtVZcn6TdgQ2fZon8FLAUiqDyKp3tfta0L1kBlm93nFUcmRnTrk1qaV6XX hW+ONU3keune1VmGUgLtkxl3lH6AdXxokM2WaQN1RbTPyR1lVVO1GeklR+MMKPX5 BoAWoKC5FcwZqdorisvgCNR/in+9VgRCi5De9+alaUDARR9eYdck5zmalKgUSGdh XwmRLtRe22w6cNX4JkIwSgegI8TdJlQ3c/sqaonUkZRZAWKqL5GkaWpWkQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIHqEk+H+ohqp9ngH2yYKW7K2yjrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJhMTc3OTg0LTQ0YzEtNGZjMS05N2RjLWUwOGJlODBmNDI5OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba80hAMA0GCSqGSIb3DQEBCwUAA4IBAQCDmiQ+g2ULd13rEMiv av5rEUrYwQU+VXmNv8f9NmUYUC93+7QyefrNbS3sy9aLORqKxnt2Twp8+Dxn8JW5 Kv9r3hjtMC+H+ZoLUR7dDyyvp+xy6eC5s90MJBSFdpR/RvlcZTeLtSw7NG7xtyRF vpqA+fAXwnq7dKk3bhYebZwr4/lQS/wWQY3C+elzFQEsUkwkQKn5913OspxnWX3p DQCxIds+PqvbDdnExz/dGPtE/3cy4M0X7MXUO44yrwJAysMFGseqAY94l7bOwiz5 1m8OvyiRVBb5JBs9z4OFLWqQu0ID3xxIEmJlXOgJ4vIF+kcDFbBFPzEznIM+0xDQ xXIp -----END CERTIFICATE-----Generated at Fri Jul 24 07:28:21 2026 by rpki-client