$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8149b6a0-3ee3-4471-b149-1e810ca39506.roa File: 8149b6a0-3ee3-4471-b149-1e810ca39506.roa (raw, json) Hash identifier: 4IZOUXGjT1UrjRDIzAHBr1/alw4sAaWUBBLJwK+jzLM= Subject key identifier: A1:B9:07:1A:59:23:FA:F7:B3:D1:05:CE:C5:6B:04:A9:9B:45:D0:98 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0F84A3E5B291551A0AE09AB17C82B98F986289C4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8149b6a0-3ee3-4471-b149-1e810ca39506.roa Signing time: Thu 16 Jul 2026 00:00:28 +0000 ROA not before: Thu 16 Jul 2026 00:00:28 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:a080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:84:a3:e5:b2:91:55:1a:0a:e0:9a:b1:7c:82:b9:8f:98:62:89:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 16 00:00:28 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=03b91274b568cb85d0f037167494221ac08f8e1e5e2370929bf6c116353287c2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:e1:46:6e:d1:36:48:a0:36:dd:70:07:09: 4e:4a:ab:47:3a:38:49:fe:58:6d:88:15:79:f3:cd: da:fb:1e:4f:5d:26:c0:fb:00:0c:c0:82:4a:b7:67: 3f:49:30:bb:08:cd:13:4e:f9:25:2e:75:ff:14:ee: 75:4a:e1:8e:bc:e4:5f:6c:b0:00:32:56:23:8c:15: a5:0b:4d:a9:48:1a:5c:ac:95:68:0d:81:aa:65:63: 5c:20:23:b9:5e:9d:4c:04:bf:72:55:24:49:91:8b: 3f:78:a5:32:4a:e3:e6:e9:e0:04:19:43:ad:81:9e: 70:ed:13:71:5d:9e:67:9e:32:a9:ab:b8:7c:55:82: 23:7c:0c:13:9f:33:09:58:93:05:2c:74:cf:51:75: 3a:81:32:4e:b1:46:32:f7:27:97:8b:94:55:8b:96: 5f:64:f6:a7:26:9d:af:a8:e9:c1:6d:b6:ef:37:a0: af:58:2a:77:df:6d:ce:83:71:bb:39:15:da:bd:a1: 37:28:2f:8b:49:87:56:e5:7a:69:81:96:9f:1e:8e: 9b:da:93:ff:6a:79:b9:17:4b:26:79:f6:82:30:a2: 55:32:de:b5:80:1a:96:36:2a:ee:da:42:5b:54:c9: 5d:55:b7:8d:2e:9d:b8:9f:a8:ff:9f:a0:34:10:4d: 88:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B9:07:1A:59:23:FA:F7:B3:D1:05:CE:C5:6B:04:A9:9B:45:D0:98 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8149b6a0-3ee3-4471-b149-1e810ca39506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:a080::/46 Signature Algorithm: sha256WithRSAEncryption ca:48:5d:c2:8a:e1:48:94:4b:cd:d1:63:32:6b:6a:3b:b9:51: 2b:8a:0e:6f:2e:9a:da:46:48:62:8a:87:8f:d1:4e:16:c8:f3: 7b:a7:47:43:70:14:b1:92:5a:c6:5a:ef:27:03:8a:23:74:40: 1d:96:8e:70:f5:6f:94:8e:ae:3c:a5:69:b7:6a:61:fc:f1:05: 61:dd:3e:22:c2:b1:a9:3d:80:cd:1c:3b:48:85:37:dd:e2:c5: 9a:e6:4a:5b:3f:ea:dd:64:71:1b:c7:76:8d:b0:a0:0e:4c:13: 1b:f3:0b:8c:db:56:f9:6e:b7:75:bd:2f:56:e7:33:3a:8f:ec: 47:e0:3d:d7:0f:3f:ff:e9:66:94:33:78:cd:b0:80:d2:06:08: f1:10:2a:77:4a:18:87:b1:5a:41:2c:d9:b4:2d:a3:2c:1a:d2: 82:10:4e:57:22:c2:83:e5:4c:be:3a:7b:de:6a:0c:ba:97:94: 6a:b6:ec:f7:a5:fd:a8:86:d7:db:61:3b:da:4b:f4:b7:5e:62: 84:8d:e3:98:64:2c:23:80:37:1d:2e:cd:63:b9:11:bd:03:47: 0f:cb:35:72:32:fb:23:bf:15:14:07:7a:41:bf:8a:c8:c5:5c: e4:b5:27:fb:df:17:33:08:ee:21:0e:7f:4c:39:05:4b:71:91: a0:fe:96:ea -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUD4Sj5bKRVRoK4JqxfIK5j5hiicQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcxNjAwMDAyOFoX DTI2MTAxNDIzNTk1OVowejFJMEcGA1UEBRNAMDNiOTEyNzRiNTY4Y2I4NWQwZjAz NzE2NzQ5NDIyMWFjMDhmOGUxZTVlMjM3MDkyOWJmNmMxMTYzNTMyODdjMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLnhRm7RNkigNt1wBwlOSqtHOjhJ /lhtiBV5883a+x5PXSbA+wAMwIJKt2c/STC7CM0TTvklLnX/FO51SuGOvORfbLAA MlYjjBWlC02pSBpcrJVoDYGqZWNcICO5Xp1MBL9yVSRJkYs/eKUySuPm6eAEGUOt gZ5w7RNxXZ5nnjKpq7h8VYIjfAwTnzMJWJMFLHTPUXU6gTJOsUYy9yeXi5RVi5Zf ZPanJp2vqOnBbbbvN6CvWCp3323Og3G7ORXavaE3KC+LSYdW5XppgZafHo6b2pP/ anm5F0smefaCMKJVMt61gBqWNiru2kJbVMldVbeNLp24n6j/n6A0EE2IeQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKG5BxpZI/r3s9EFzsVrBKmbRdCYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgxNDliNmEwLTNlZTMtNDQ3MS1iMTQ5LTFlODEwY2EzOTUwNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaKCAMA0GCSqGSIb3DQEBCwUAA4IBAQDKSF3CiuFIlEvN0WMy a2o7uVErig5vLpraRkhiioeP0U4WyPN7p0dDcBSxklrGWu8nA4ojdEAdlo5w9W+U jq48pWm3amH88QVh3T4iwrGpPYDNHDtIhTfd4sWa5kpbP+rdZHEbx3aNsKAOTBMb 8wuM21b5brd1vS9W5zM6j+xH4D3XDz//6WaUM3jNsIDSBgjxECp3ShiHsVpBLNm0 LaMsGtKCEE5XIsKD5Uy+Onveagy6l5Rqtuz3pf2ohtfbYTvaS/S3XmKEjeOYZCwj gDcdLs1juRG9A0cPyzVyMvsjvxUUB3pBv4rIxVzktSf73xczCO4hDn9MOQVLcZGg /pbq -----END CERTIFICATE-----Generated at Fri Jul 24 03:53:05 2026 by rpki-client