$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b92e0d-24ad-459d-a042-b5f94fba96db.roa File: 43b92e0d-24ad-459d-a042-b5f94fba96db.roa (raw, json) Hash identifier: dsX15xdxleqiBV0CB2EnatBWHi4xp763UQ+n5Zoliqc= Subject key identifier: 5A:36:B9:94:7B:2E:ED:CF:47:A7:8A:CB:F3:5F:B1:20:75:B6:61:72 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 70E02D24D1361345F7631A80696A48A30C5621A7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b92e0d-24ad-459d-a042-b5f94fba96db.roa Signing time: Tue 21 Jul 2026 00:00:11 +0000 ROA not before: Tue 21 Jul 2026 00:00:11 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e0:2d:24:d1:36:13:45:f7:63:1a:80:69:6a:48:a3:0c:56:21:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:00:11 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=df1b838da944f46272d91e6f3824104323910a7839dadacd74af63cce34d423f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:c0:d8:6f:81:66:72:1b:96:3b:43:d3:13: c4:86:fc:9f:8b:ee:bb:4b:8f:bb:73:13:fc:7f:e2: ec:38:c3:80:a4:2e:75:3e:52:6e:ef:e9:1d:55:c5: 5c:77:2e:6b:96:33:5c:12:cf:14:71:78:5d:cb:ec: 1a:d4:7d:26:46:ce:a4:28:7c:e3:93:87:94:b8:96: f1:c8:25:bd:eb:69:4b:92:1f:6e:37:d5:1c:f7:f0: 10:8e:e5:ac:14:50:d1:cf:66:e4:00:79:37:45:e9: 99:11:28:ed:bd:f1:d6:32:58:4a:95:c7:61:4b:7b: 84:b7:95:0c:bd:ca:0a:04:9f:53:95:66:01:5e:22: b0:d3:51:35:d6:2b:96:13:70:0f:9d:14:e9:c1:09: 83:8c:9d:84:b5:37:a0:69:7e:33:b5:42:83:a8:5d: 10:6c:4c:05:47:18:dc:9e:64:45:46:fa:b6:10:bb: 7d:58:83:97:1f:83:40:d1:a4:34:c5:e5:73:42:67: 6a:fb:65:f6:15:e7:06:41:e0:a0:cd:3f:cf:40:8f: 2f:0d:59:3f:f4:61:b1:83:34:ad:22:ec:89:11:89: d4:64:cd:f1:5c:ce:ab:04:f0:e5:98:bd:d6:31:f9: 03:6a:d8:56:7f:8d:2e:4f:80:47:38:e6:57:a6:ae: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:36:B9:94:7B:2E:ED:CF:47:A7:8A:CB:F3:5F:B1:20:75:B6:61:72 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b92e0d-24ad-459d-a042-b5f94fba96db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:e080::/48 Signature Algorithm: sha256WithRSAEncryption c2:71:56:c0:76:1b:16:ba:12:f0:4b:70:3e:28:45:41:16:bb: b2:62:5e:1e:6e:f2:df:56:f1:e3:76:2d:da:a6:a1:44:85:3e: e6:44:3a:74:a2:2d:60:f9:de:7b:ee:ae:41:7f:35:b1:7b:68: 0d:49:4f:4b:52:37:61:a1:06:b7:83:db:d7:f6:dc:6f:83:66: 3a:ea:4f:04:87:3e:6a:6d:e2:36:b2:46:db:82:ae:18:db:c9: 0f:50:71:e6:8e:e3:29:3b:9d:32:6a:2c:a1:82:fe:57:7d:34: 53:23:77:94:9c:79:29:07:38:ea:bf:6f:4f:38:e1:c3:7c:3b: 44:00:94:a5:a4:7f:99:ff:c2:74:38:7b:09:69:9b:cf:d6:b4: 5b:29:4e:02:5e:a4:d2:fe:f2:55:45:5a:f2:45:fa:69:a9:66: 7a:e6:28:db:e1:8e:09:87:e0:61:b6:0f:6c:dd:ca:1f:d5:37: 9b:8d:12:a8:17:9b:96:68:a2:ab:5e:ff:08:70:6d:c8:09:98: 59:09:91:6e:4a:44:da:16:3a:54:a4:e6:d4:e7:4f:bf:12:9e: c8:e1:8d:96:19:43:5a:83:2d:75:c8:22:db:79:45:0d:64:d2: 8c:8c:03:44:11:2c:a4:73:87:c4:d4:dd:8e:88:b6:68:a2:26: 71:4f:92:1f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcOAtJNE2E0X3YxqAaWpIowxWIacwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMDAxMVoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAZGYxYjgzOGRhOTQ0ZjQ2MjcyZDkx ZTZmMzgyNDEwNDMyMzkxMGE3ODM5ZGFkYWNkNzRhZjYzY2NlMzRkNDIzZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnDA2G+BZnIbljtD0xPEhvyfi+67 S4+7cxP8f+LsOMOApC51PlJu7+kdVcVcdy5rljNcEs8UcXhdy+wa1H0mRs6kKHzj k4eUuJbxyCW962lLkh9uN9Uc9/AQjuWsFFDRz2bkAHk3RemZESjtvfHWMlhKlcdh S3uEt5UMvcoKBJ9TlWYBXiKw01E11iuWE3APnRTpwQmDjJ2EtTegaX4ztUKDqF0Q bEwFRxjcnmRFRvq2ELt9WIOXH4NA0aQ0xeVzQmdq+2X2FecGQeCgzT/PQI8vDVk/ 9GGxgzStIuyJEYnUZM3xXM6rBPDlmL3WMfkDathWf40uT4BHOOZXpq4xaQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFo2uZR7Lu3PR6eKy/NfsSB1tmFyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzYjkyZTBkLTI0YWQtNDU5ZC1hMDQyLWI1Zjk0ZmJhOTZkYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6uCAMA0GCSqGSIb3DQEBCwUAA4IBAQDCcVbAdhsWuhLwS3A+ KEVBFruyYl4ebvLfVvHjdi3apqFEhT7mRDp0oi1g+d577q5BfzWxe2gNSU9LUjdh oQa3g9vX9txvg2Y66k8Ehz5qbeI2skbbgq4Y28kPUHHmjuMpO50yaiyhgv5XfTRT I3eUnHkpBzjqv29POOHDfDtEAJSlpH+Z/8J0OHsJaZvP1rRbKU4CXqTS/vJVRVry RfppqWZ65ijb4Y4Jh+Bhtg9s3cof1TebjRKoF5uWaKKrXv8IcG3ICZhZCZFuSkTa FjpUpObU50+/Ep7I4Y2WGUNagy11yCLbeUUNZNKMjANEESykc4fE1N2OiLZooiZx T5If -----END CERTIFICATE-----Generated at Fri Jul 24 08:37:43 2026 by rpki-client