$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31cc4837-3199-4dc0-bf9f-ce16210b6cca.roa File: 31cc4837-3199-4dc0-bf9f-ce16210b6cca.roa (raw, json) Hash identifier: PLJBm1YG4zJE+a+EolxTjoPX/jij2X1EnbJTH5ZA6mU= Subject key identifier: D5:54:0B:C5:C0:D9:F1:72:C7:31:5E:84:1A:B7:2D:13:08:47:35:9F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 23ED7D575E32974AD98C7F07F46364F094EAAAD2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31cc4837-3199-4dc0-bf9f-ce16210b6cca.roa Signing time: Tue 21 Jul 2026 00:00:08 +0000 ROA not before: Tue 21 Jul 2026 00:00:08 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:40c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ed:7d:57:5e:32:97:4a:d9:8c:7f:07:f4:63:64:f0:94:ea:aa:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:00:08 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=57d3fcf23b399373f61f00a7448ef733e51f15d65680b70a18076bb3a0b4793d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0f:d3:6a:cd:e1:1d:c0:09:a8:ba:a6:88:d7: 4b:82:ec:37:8a:60:4d:1f:fd:0e:65:1e:28:b4:e9: 4d:e8:f5:a2:3c:74:58:d6:99:ab:3d:c3:9b:68:4b: 0b:d9:1f:2f:32:99:72:a1:28:75:0e:d4:2e:86:47: 06:5a:31:03:01:1c:20:ba:07:fe:14:8d:fe:d1:b2: 85:bf:46:b8:ae:a8:57:32:12:a6:cd:9d:65:f9:48: 1e:00:6a:2c:b1:f4:4d:7e:b4:ae:40:ea:a6:fe:49: a0:6f:ca:bf:7b:ac:17:64:81:c4:3a:e8:14:b8:cd: 5a:d6:b1:0b:5a:c8:70:58:b5:98:66:01:f2:19:6c: 0c:5b:2b:b3:70:51:24:45:fc:91:fe:92:38:e8:b8: 6b:8a:5a:ee:56:37:cd:a9:df:c7:dc:87:2d:54:2e: 08:5f:db:74:29:6c:33:6b:9a:09:f8:7d:1c:64:18: 6c:49:f0:b6:c0:79:9f:8a:74:2b:c4:8a:98:a9:5e: 6e:25:a1:90:02:1d:d0:d7:99:41:cf:2d:bc:f4:58: 23:c4:f7:a1:2e:57:ab:cd:df:41:c9:23:06:6d:fa: 99:8d:bb:74:f6:50:8c:75:f4:8b:50:48:8e:41:3d: ff:a0:a8:35:90:7f:fd:c5:4f:5d:8e:05:b5:67:ac: a4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:54:0B:C5:C0:D9:F1:72:C7:31:5E:84:1A:B7:2D:13:08:47:35:9F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31cc4837-3199-4dc0-bf9f-ce16210b6cca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:40c0::/46 Signature Algorithm: sha256WithRSAEncryption 77:4a:67:8e:23:50:54:78:1e:23:6c:76:de:52:5c:7f:70:ab: 7b:9f:8d:eb:97:ed:b0:7a:17:83:a2:45:41:46:29:ae:fd:8e: 8f:0e:ba:69:81:53:bd:f9:a8:1e:06:d5:56:69:cb:c7:d2:22: 07:01:b6:4d:77:20:bd:d2:50:6f:54:ad:45:a6:c7:16:0d:fa: 69:c4:79:79:ba:28:c8:75:47:18:12:91:86:f0:2b:40:5a:cc: b1:65:b0:5b:80:09:73:75:8f:5d:51:fc:93:fa:cc:a7:9e:7d: 66:f6:84:fb:52:1c:22:fe:61:dd:a0:ba:0a:d1:b9:cc:ce:e7: 8c:37:59:3b:78:41:40:aa:0e:4c:a7:6f:73:fc:0c:67:78:a3: d2:35:ed:9b:42:12:fd:f4:ae:d1:ce:2d:ca:0b:6a:e5:18:d8: d1:39:37:ad:3e:4d:45:91:9d:24:3f:52:c5:df:a2:15:b4:80: 5d:5a:75:4d:62:3e:ef:3d:32:5e:b0:e9:fe:a6:33:4a:c8:85: ad:8d:6d:b7:8e:5a:5c:44:17:c0:84:2e:ad:f5:fe:ed:5c:c8: 7b:6d:ee:97:49:cb:e8:f4:78:40:1e:f7:0d:22:cb:be:a3:b7: d2:17:b4:fa:48:34:88:92:f2:37:da:12:d5:f5:79:71:42:29: 08:3e:33:d0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUI+19V14yl0rZjH8H9GNk8JTqqtIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMDAwOFoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNANTdkM2ZjZjIzYjM5OTM3M2Y2MWYw MGE3NDQ4ZWY3MzNlNTFmMTVkNjU2ODBiNzBhMTgwNzZiYjNhMGI0NzkzZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ/Tas3hHcAJqLqmiNdLguw3imBN H/0OZR4otOlN6PWiPHRY1pmrPcObaEsL2R8vMplyoSh1DtQuhkcGWjEDARwgugf+ FI3+0bKFv0a4rqhXMhKmzZ1l+UgeAGossfRNfrSuQOqm/kmgb8q/e6wXZIHEOugU uM1a1rELWshwWLWYZgHyGWwMWyuzcFEkRfyR/pI46LhrilruVjfNqd/H3IctVC4I X9t0KWwza5oJ+H0cZBhsSfC2wHmfinQrxIqYqV5uJaGQAh3Q15lBzy289FgjxPeh Llerzd9BySMGbfqZjbt09lCMdfSLUEiOQT3/oKg1kH/9xU9djgW1Z6yk5wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNVUC8XA2fFyxzFehBq3LRMIRzWfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMxY2M0ODM3LTMxOTktNGRjMC1iZjlmLWNlMTYyMTBiNmNjYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba80DAMA0GCSqGSIb3DQEBCwUAA4IBAQB3SmeOI1BUeB4jbHbe Ulx/cKt7n43rl+2weheDokVBRimu/Y6PDrppgVO9+ageBtVWacvH0iIHAbZNdyC9 0lBvVK1FpscWDfppxHl5uijIdUcYEpGG8CtAWsyxZbBbgAlzdY9dUfyT+synnn1m 9oT7Uhwi/mHdoLoK0bnMzueMN1k7eEFAqg5Mp29z/AxneKPSNe2bQhL99K7Rzi3K C2rlGNjROTetPk1FkZ0kP1LF36IVtIBdWnVNYj7vPTJesOn+pjNKyIWtjW23jlpc RBfAhC6t9f7tXMh7be6XScvo9HhAHvcNIsu+o7fSF7T6SDSIkvI32hLV9XlxQikI PjPQ -----END CERTIFICATE-----Generated at Fri Jul 24 08:42:34 2026 by rpki-client