$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b96f4-81ad-4d1d-a0e6-647a0ff39448.roa File: 783b96f4-81ad-4d1d-a0e6-647a0ff39448.roa (raw, json) Hash identifier: oTEMfKSNpJjkTXHU4uZQVvD4bh7W+Azwds97HwmNlYU= Subject key identifier: A7:C9:1F:40:01:FE:98:A2:94:24:C0:10:E0:E5:A1:D6:7D:B8:67:A2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3186E4F74DAD3E5FF987F4EECC94E475851025AF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b96f4-81ad-4d1d-a0e6-647a0ff39448.roa Signing time: Fri 24 Jul 2026 00:00:08 +0000 ROA not before: Fri 24 Jul 2026 00:00:08 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:86:e4:f7:4d:ad:3e:5f:f9:87:f4:ee:cc:94:e4:75:85:10:25:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 24 00:00:08 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=ce9b6d4acacddde505b435cf0478037ee5d71b40944f50a8844b85e98c47d1e2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:a7:9a:a8:ca:88:e5:a5:b5:08:9d:9a:88: fb:b4:ac:31:5f:9b:bc:33:c4:79:1d:c7:a7:d7:b3: 5c:87:95:58:98:98:13:b6:cf:40:6f:62:32:f5:00: 8c:58:e3:e2:ef:21:e0:9b:0d:77:48:01:8e:28:f7: 6b:bb:e7:71:f7:aa:2e:0f:fc:1e:4d:3f:2a:b5:8e: 5f:a2:74:2d:90:9a:37:83:7a:1f:41:84:b3:2b:bb: bf:af:5f:95:c0:ac:a4:1f:db:4b:ad:b8:9e:de:93: 3a:2b:d1:b4:7a:ef:dc:cf:e2:34:7a:db:2a:b9:fd: f9:20:37:89:9c:3f:52:bd:7f:55:f3:25:17:69:62: d5:c0:00:22:42:ee:6f:ce:7d:48:32:0e:33:7a:7d: 3b:b5:d9:ba:f7:da:32:79:2e:1b:16:bb:0e:82:70: e7:85:01:be:f9:a2:6d:ac:8d:29:35:4e:f6:37:03: 21:9f:f8:1a:19:83:b4:98:eb:58:f6:3a:e2:d9:28: f1:7c:3c:ea:21:be:43:c7:80:e6:37:58:4f:58:76: 7f:3a:ad:c2:d0:63:4b:1b:14:48:5a:b5:7d:af:f0: 82:3f:28:e9:0d:39:56:bc:69:79:48:89:06:f2:32: e1:89:5b:91:61:c5:d6:c4:87:93:31:a9:05:a3:a5: 27:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C9:1F:40:01:FE:98:A2:94:24:C0:10:E0:E5:A1:D6:7D:B8:67:A2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b96f4-81ad-4d1d-a0e6-647a0ff39448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:9000::/40 Signature Algorithm: sha256WithRSAEncryption 33:d4:60:d9:35:a8:aa:9e:95:b0:0d:1c:f8:a3:95:e9:3a:87: 34:73:bd:52:f7:14:5a:83:9f:05:61:ec:ae:41:8b:84:aa:43: b0:33:dc:53:31:81:2b:85:57:ab:51:41:9c:47:a6:25:d7:5e: 52:20:bc:e9:29:84:41:9d:f2:9e:54:5d:cf:45:04:48:99:71: ab:6c:47:29:e9:ac:3b:fb:18:f9:3f:7a:72:bd:29:bf:c2:f5: 02:18:cb:13:b5:18:15:57:3a:d9:fc:16:c3:c8:28:3d:5a:fd: a8:e2:12:e7:47:ae:f8:57:33:3d:c6:cb:bf:41:cd:67:88:9c: 84:32:78:f6:b2:af:aa:78:2e:30:c3:69:65:24:39:bd:d9:a3: f6:81:62:23:0c:70:20:e3:bd:f1:ae:43:5d:9d:53:f9:5d:17: 1e:e0:6b:ba:c8:c3:99:d9:48:e1:f5:71:ce:59:88:7d:54:00: cf:73:53:01:f5:2a:c4:6d:9f:ff:ca:9d:8b:d5:f2:53:24:e8: 44:98:db:13:fe:4f:85:f3:d1:ef:04:de:37:20:af:76:29:e2: 57:08:f3:0f:f3:84:d2:80:0c:c9:de:d7:0b:55:62:43:d6:2b: 09:2c:f0:85:33:4e:78:89:13:fb:48:3b:c9:d6:d0:68:b8:d0: 9f:3d:90:a1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMYbk902tPl/5h/TuzJTkdYUQJa8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNDAwMDAwOFoX DTI2MTAyMjIzNTk1OVowejFJMEcGA1UEBRNAY2U5YjZkNGFjYWNkZGRlNTA1YjQz NWNmMDQ3ODAzN2VlNWQ3MWI0MDk0NGY1MGE4ODQ0Yjg1ZTk4YzQ3ZDFlMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7qnmqjKiOWltQidmoj7tKwxX5u8 M8R5Hcen17Nch5VYmJgTts9Ab2Iy9QCMWOPi7yHgmw13SAGOKPdru+dx96ouD/we TT8qtY5fonQtkJo3g3ofQYSzK7u/r1+VwKykH9tLrbie3pM6K9G0eu/cz+I0etsq uf35IDeJnD9SvX9V8yUXaWLVwAAiQu5vzn1IMg4zen07tdm699oyeS4bFrsOgnDn hQG++aJtrI0pNU72NwMhn/gaGYO0mOtY9jri2SjxfDzqIb5Dx4DmN1hPWHZ/Oq3C 0GNLGxRIWrV9r/CCPyjpDTlWvGl5SIkG8jLhiVuRYcXWxIeTMakFo6UnqwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKfJH0AB/piilCTAEODlodZ9uGeiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc4M2I5NmY0LTgxYWQtNGQxZC1hMGU2LTY0N2EwZmYzOTQ0OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauZAwDQYJKoZIhvcNAQELBQADggEBADPUYNk1qKqelbANHPij lek6hzRzvVL3FFqDnwVh7K5Bi4SqQ7Az3FMxgSuFV6tRQZxHpiXXXlIgvOkphEGd 8p5UXc9FBEiZcatsRynprDv7GPk/enK9Kb/C9QIYyxO1GBVXOtn8FsPIKD1a/aji EudHrvhXMz3Gy79BzWeInIQyePayr6p4LjDDaWUkOb3Zo/aBYiMMcCDjvfGuQ12d U/ldFx7ga7rIw5nZSOH1cc5ZiH1UAM9zUwH1KsRtn//KnYvV8lMk6ESY2xP+T4Xz 0e8E3jcgr3Yp4lcI8w/zhNKADMne1wtVYkPWKwks8IUzTniJE/tIO8nW0Gi40J89 kKE= -----END CERTIFICATE-----Generated at Fri Jul 24 05:06:31 2026 by rpki-client