$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/498f6dc3-db03-415e-b534-d74ca6f01901.roa File: 498f6dc3-db03-415e-b534-d74ca6f01901.roa (raw, json) Hash identifier: 5Uxnx5b6hqRLtzBUVYS8ULgQEezqAuXQvEkYoIcs1R0= Subject key identifier: B1:13:07:7F:7A:57:E3:FA:14:FC:C2:4B:05:58:96:CF:70:B7:36:6A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 51D959FA7C5AA46E0B020A8DFBA0A591FE3320 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/498f6dc3-db03-415e-b534-d74ca6f01901.roa Signing time: Mon 20 Jul 2026 00:00:10 +0000 ROA not before: Mon 20 Jul 2026 00:00:10 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d9:59:fa:7c:5a:a4:6e:0b:02:0a:8d:fb:a0:a5:91:fe:33:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 20 00:00:10 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=94664574b0a07eb2cf676a805131b5f2f0e7f50937c0d5833c9370f5e54fb7f4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a2:d5:4b:76:46:b1:ef:37:a8:ad:60:a9:41: cf:d7:35:69:54:7d:19:eb:5b:54:87:43:fd:ab:f1: 43:1c:b6:41:83:1a:f9:0d:63:4a:c2:9d:14:b6:e0: 4f:fa:fa:ec:ef:54:83:51:dd:fb:bf:e7:01:02:68: 92:31:b3:c2:07:3d:be:cb:f7:a0:01:83:3b:2e:97: 40:fe:b0:c5:bc:f2:b6:93:37:9e:8f:d5:dd:20:c9: 6d:72:02:3a:e2:da:36:4b:e6:32:dc:21:24:93:32: 2d:c0:c6:27:00:75:2f:8b:d8:b6:1d:d7:08:08:3b: 6a:70:29:92:f1:7e:59:69:6e:ee:26:2a:bc:80:72: 25:d0:59:5d:ed:59:2d:40:05:1f:ad:c7:a5:15:d5: 50:79:2f:4f:51:15:1f:ed:ee:0e:96:8e:c8:58:a0: e3:42:45:39:82:70:87:86:ee:80:a9:aa:db:25:4d: e2:a9:35:42:a7:fa:3c:f7:9b:40:d4:83:fe:c3:be: 18:0d:f4:4b:83:68:c2:e2:0c:29:a2:31:39:33:8d: 0e:a7:af:10:6b:6c:3b:8b:61:87:89:ef:9e:cf:0a: b9:0d:8d:a6:ab:a0:e3:4a:21:9e:a9:b7:35:85:d4: b4:c2:10:60:81:99:8d:c6:09:7f:e9:83:5c:aa:46: b0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:13:07:7F:7A:57:E3:FA:14:FC:C2:4B:05:58:96:CF:70:B7:36:6A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/498f6dc3-db03-415e-b534-d74ca6f01901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:2000::/40 Signature Algorithm: sha256WithRSAEncryption 11:f5:a9:93:4d:4f:4e:d6:14:cf:36:0c:80:7c:ca:88:eb:5c: b2:b7:08:fd:90:f7:2e:1c:9f:6b:18:ca:c4:74:20:9b:50:bf: b7:3a:c3:10:75:8c:43:55:4c:c0:99:91:e2:61:2f:e0:ce:1b: c4:ea:1c:6a:00:d8:0b:39:bb:31:7b:07:a2:0d:cf:e0:55:d6: c0:b5:ed:3f:e3:28:44:02:4d:52:6e:f7:18:9d:9c:95:99:33: 00:bb:40:03:04:b0:a6:ac:cd:93:76:47:1a:bb:08:81:5c:63: d4:10:e4:5e:19:d7:9d:bc:07:2f:c0:65:36:b3:df:44:d2:65: 08:6c:85:ef:94:da:00:71:84:26:10:a2:e9:a7:16:b1:d2:d4: c6:a5:13:66:90:ae:90:85:34:93:30:b3:65:87:aa:16:42:0d: 1c:fb:68:c1:9e:42:17:5e:43:a5:4a:c0:58:d7:57:b5:f2:63: 43:d9:ee:58:63:71:3f:ed:4c:d4:02:92:2b:14:f6:b5:66:f7: 2e:40:0c:70:15:18:79:46:0c:d7:99:46:54:79:fd:fa:23:a1: 23:d6:2c:74:3b:0e:0c:f2:8b:5f:05:35:30:50:83:a7:72:6c: 15:61:9c:9c:c7:cc:8b:3f:c0:f4:b7:e6:32:d1:cc:4d:ea:a6: fa:a6:e5:ed -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgITUdlZ+nxapG4LAgqN+6Clkf4zIDANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjYwNzIwMDAwMDEwWhcN MjYxMDE4MjM1OTU5WjB6MUkwRwYDVQQFE0A5NDY2NDU3NGIwYTA3ZWIyY2Y2NzZh ODA1MTMxYjVmMmYwZTdmNTA5MzdjMGQ1ODMzYzkzNzBmNWU1NGZiN2Y0MS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTotVLdkax7zeorWCpQc/XNWlUfRnr W1SHQ/2r8UMctkGDGvkNY0rCnRS24E/6+uzvVINR3fu/5wECaJIxs8IHPb7L96AB gzsul0D+sMW88raTN56P1d0gyW1yAjri2jZL5jLcISSTMi3AxicAdS+L2LYd1wgI O2pwKZLxfllpbu4mKryAciXQWV3tWS1ABR+tx6UV1VB5L09RFR/t7g6WjshYoONC RTmCcIeG7oCpqtslTeKpNUKn+jz3m0DUg/7DvhgN9EuDaMLiDCmiMTkzjQ6nrxBr bDuLYYeJ757PCrkNjaaroONKIZ6ptzWF1LTCEGCBmY3GCX/pg1yqRrDrAgMBAAGj ggJKMIICRjAdBgNVHQ4EFgQUsRMHf3pX4/oU/MJLBViWz3C3NmowHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv NDk4ZjZkYzMtZGIwMy00MTVlLWI1MzQtZDc0Y2E2ZjAxOTAxLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkBtoyIDANBgkqhkiG9w0BAQsFAAOCAQEAEfWpk01PTtYUzzYMgHzK iOtcsrcI/ZD3LhyfaxjKxHQgm1C/tzrDEHWMQ1VMwJmR4mEv4M4bxOocagDYCzm7 MXsHog3P4FXWwLXtP+MoRAJNUm73GJ2clZkzALtAAwSwpqzNk3ZHGrsIgVxj1BDk XhnXnbwHL8BlNrPfRNJlCGyF75TaAHGEJhCi6acWsdLUxqUTZpCukIU0kzCzZYeq FkINHPtowZ5CF15DpUrAWNdXtfJjQ9nuWGNxP+1M1AKSKxT2tWb3LkAMcBUYeUYM 15lGVHn9+iOhI9YsdDsODPKLXwU1MFCDp3JsFWGcnMfMiz/A9LfmMtHMTeqm+qbl 7Q== -----END CERTIFICATE-----Generated at Fri Jul 24 06:12:44 2026 by rpki-client