$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71870024-8ed4-4150-a104-52f4b8c56809.roa File: 71870024-8ed4-4150-a104-52f4b8c56809.roa (raw, json) Hash identifier: 2ZF98CbvlnNYn8sAA9/3WFhgPjJi4ao7NTlHOD/di4w= Subject key identifier: 4F:32:51:F7:68:48:F6:BA:06:DB:DF:87:78:57:F3:74:68:72:0F:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 28EF05F846653D22457218B5B09B36F2FDB844FA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71870024-8ed4-4150-a104-52f4b8c56809.roa Signing time: Tue 21 Jul 2026 00:00:55 +0000 ROA not before: Tue 21 Jul 2026 00:00:55 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ef:05:f8:46:65:3d:22:45:72:18:b5:b0:9b:36:f2:fd:b8:44:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:00:55 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=541c1eb93d019b81902474f6a6ad6722526aacbb2bcbd4da41eca5670908b858, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:a0:21:1a:02:45:9c:e9:f5:e1:3c:be:0f: 30:4b:51:73:75:f9:21:78:38:d5:29:94:db:25:bc: 5d:46:f3:3e:3b:3f:14:3d:70:c9:fb:2d:eb:f4:3e: b2:c6:24:50:dc:16:c2:19:d2:41:0e:88:ee:db:b5: 80:ab:27:5d:83:f4:a2:d2:79:9d:4e:95:fb:f1:83: 4b:68:21:db:56:d3:ea:31:a9:b7:30:ec:c1:c4:64: 26:76:0b:c7:65:4c:35:da:22:80:66:bf:c0:08:11: 4a:dd:a0:8f:55:b4:11:22:13:f2:23:31:fa:af:0f: 32:c5:db:9b:c2:2f:6e:d2:4d:69:97:3f:d0:08:25: 82:fd:c0:d5:05:57:c2:68:66:30:87:8a:96:00:a4: af:f9:56:ef:ae:a8:dc:59:fb:14:fb:35:c2:1f:6c: 2a:0f:55:7c:2e:9a:61:cc:f1:09:f9:84:65:a2:4f: 90:64:56:c5:a3:c8:9d:5b:3b:8a:d8:fc:52:c7:df: b6:ef:c9:fd:fe:f2:6e:0c:ad:72:7e:63:00:13:2c: 62:5c:c4:32:77:65:cf:d8:cd:d6:8d:c1:bd:1e:9d: ad:13:e5:cb:36:99:6f:be:57:56:0e:d5:bf:b9:f7: 8c:22:b0:cc:ba:d7:7f:67:5f:37:ac:22:66:60:cc: 77:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:32:51:F7:68:48:F6:BA:06:DB:DF:87:78:57:F3:74:68:72:0F:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71870024-8ed4-4150-a104-52f4b8c56809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:2000::/40 Signature Algorithm: sha256WithRSAEncryption 77:53:4e:ef:b2:f3:19:1b:92:a0:e0:36:8c:42:0a:f8:73:dd: b4:0c:4a:aa:db:a7:20:fb:b4:04:7b:8a:80:44:34:ed:e9:4f: 73:bb:9f:cd:44:6a:f8:57:7b:1f:a5:4a:f0:c1:9f:65:85:1a: ac:a4:cd:16:d7:90:44:84:04:81:d6:d4:1a:29:29:99:3f:09: 17:bb:83:6e:d0:be:a8:24:02:5e:29:be:78:14:61:7f:2a:b0: be:3d:c4:35:55:f6:b5:29:38:71:52:23:50:8e:37:f5:ea:af: 39:cd:34:97:55:c0:de:c4:a5:7d:79:2d:50:7f:d8:60:00:f8: 3f:00:03:14:b8:33:fb:ed:a1:5a:50:39:cb:61:74:09:75:52: d2:c9:66:21:e3:01:1b:b2:f0:e0:b2:9a:21:3e:ff:b5:ee:56: 62:25:4e:ac:f7:5d:94:19:5c:f3:08:a7:4a:1d:9e:03:dd:b3: 27:df:c7:52:b5:d2:03:d5:c2:9e:2e:b4:39:73:ab:6c:5a:54: 7e:d2:f2:4b:cf:5a:c8:d6:06:06:0e:24:69:8c:b3:b7:5b:56: e3:6e:47:c8:59:0d:86:20:e0:91:cb:a4:60:4d:0f:27:3a:db: 13:01:81:c7:fe:19:e5:ce:8f:5c:9b:f2:c4:a2:d0:bf:4b:12: 78:e7:99:4f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKO8F+EZlPSJFchi1sJs28v24RPowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMDA1NVoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNANTQxYzFlYjkzZDAxOWI4MTkwMjQ3 NGY2YTZhZDY3MjI1MjZhYWNiYjJiY2JkNGRhNDFlY2E1NjcwOTA4Yjg1ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYmgIRoCRZzp9eE8vg8wS1Fzdfkh eDjVKZTbJbxdRvM+Oz8UPXDJ+y3r9D6yxiRQ3BbCGdJBDoju27WAqyddg/Si0nmd TpX78YNLaCHbVtPqMam3MOzBxGQmdgvHZUw12iKAZr/ACBFK3aCPVbQRIhPyIzH6 rw8yxdubwi9u0k1plz/QCCWC/cDVBVfCaGYwh4qWAKSv+VbvrqjcWfsU+zXCH2wq D1V8LpphzPEJ+YRlok+QZFbFo8idWzuK2PxSx9+278n9/vJuDK1yfmMAEyxiXMQy d2XP2M3WjcG9Hp2tE+XLNplvvldWDtW/ufeMIrDMutd/Z183rCJmYMx3iQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE8yUfdoSPa6Btvfh3hX83Rocg8PMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcxODcwMDI0LThlZDQtNDE1MC1hMTA0LTUyZjRiOGM1NjgwOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauCAwDQYJKoZIhvcNAQELBQADggEBAHdTTu+y8xkbkqDgNoxC Cvhz3bQMSqrbpyD7tAR7ioBENO3pT3O7n81EavhXex+lSvDBn2WFGqykzRbXkESE BIHW1BopKZk/CRe7g27QvqgkAl4pvngUYX8qsL49xDVV9rUpOHFSI1CON/XqrznN NJdVwN7EpX15LVB/2GAA+D8AAxS4M/vtoVpQOcthdAl1UtLJZiHjARuy8OCymiE+ /7XuVmIlTqz3XZQZXPMIp0odngPdsyffx1K10gPVwp4utDlzq2xaVH7S8kvPWsjW BgYOJGmMs7dbVuNuR8hZDYYg4JHLpGBNDyc62xMBgcf+GeXOj1yb8sSi0L9LEnjn mU8= -----END CERTIFICATE-----Generated at Fri Jul 24 01:21:37 2026 by rpki-client