$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996cc3b8-0df0-4f17-97f0-d59aa845427c.roa File: 996cc3b8-0df0-4f17-97f0-d59aa845427c.roa (raw, json) Hash identifier: kxmELZ/tEj6//ZmFKvzv2L/Lxovy8rWKX3RqafkJGsc= Subject key identifier: DA:9E:5B:05:F8:35:5C:3E:24:20:0B:E7:B1:11:03:75:1E:74:1A:F7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3D62637B244464CC0E886DE2BFBFC173D70319AE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996cc3b8-0df0-4f17-97f0-d59aa845427c.roa Signing time: Thu 16 Jul 2026 00:00:32 +0000 ROA not before: Thu 16 Jul 2026 00:00:32 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da00:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:62:63:7b:24:44:64:cc:0e:88:6d:e2:bf:bf:c1:73:d7:03:19:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 16 00:00:32 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=49ac9e7e57b41709ddab61b309dcee0de17399661e33523f88e260edb1e59ff8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9e:b0:44:23:00:78:4c:ac:e6:f6:4f:8e:8c: c1:ff:a9:83:2e:1b:fd:ca:a6:5b:17:c4:3c:7b:f4: 7b:c6:f3:e1:c5:da:53:de:8f:55:23:85:16:b8:d5: 95:8a:5c:d6:bb:ed:73:7b:b1:82:b7:6a:e4:47:ff: d3:2e:99:2b:29:c6:af:8e:ff:22:91:4b:7c:a5:5a: 0d:48:e4:bf:35:d9:05:97:c6:dc:87:d8:b1:c2:0f: f6:03:55:af:80:85:6d:2f:20:01:b1:14:ac:21:47: a0:e8:19:84:ed:6b:08:35:08:fd:1b:b6:ae:db:f0: d7:29:0c:4f:21:91:3c:93:77:cb:cb:d9:5e:f7:a7: b6:84:80:89:d5:af:6c:a3:f8:09:a5:4d:bc:2b:a0: 01:02:af:84:30:80:b6:61:ad:34:31:5c:59:fb:a3: b5:fe:e3:d2:94:ec:d3:1e:cc:42:2c:09:b3:71:59: dc:74:c9:57:32:95:81:52:46:52:ae:3d:16:58:bc: ae:d5:2b:ee:88:0f:76:48:d4:ee:76:b5:22:f0:25: eb:1c:33:a8:5d:b6:06:7f:83:21:13:b2:c5:e9:27: b6:92:58:6b:27:ff:96:44:f6:26:65:58:d8:3d:9b: a7:f7:a2:f2:3b:58:2e:16:e1:82:e4:b3:5a:ab:49: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9E:5B:05:F8:35:5C:3E:24:20:0B:E7:B1:11:03:75:1E:74:1A:F7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996cc3b8-0df0-4f17-97f0-d59aa845427c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:ff00::/48 Signature Algorithm: sha256WithRSAEncryption 6b:6b:d3:fb:10:13:47:f8:50:2f:fa:a9:22:5e:73:52:61:ee: 2d:3b:50:ae:9e:d5:ee:cf:13:79:36:95:83:73:b0:4b:11:64: 74:e6:a0:43:7c:3f:c0:a0:8a:81:d4:23:68:56:23:76:34:ef: 66:f9:35:c0:1d:21:29:94:3c:f7:05:98:ae:40:b2:07:1b:28: b9:7d:01:2e:c3:60:3b:09:8b:c3:fa:ec:cb:76:e5:87:a2:7b: 8f:81:0d:6e:de:6d:1b:7e:bb:e3:69:01:07:cf:95:72:ce:00: 64:d2:f8:eb:57:bc:81:cb:a7:df:a9:8d:20:58:ab:7e:8f:eb: ce:54:c5:c4:55:86:88:fd:6f:7e:c7:a1:db:0c:23:ed:11:e4: 71:6d:69:c2:b1:a4:f7:6b:19:55:51:33:cd:1e:6d:ef:18:ba: 56:a8:61:77:b7:23:57:d6:65:8c:05:dc:52:20:d5:f1:d2:62: a4:43:87:82:d0:a9:51:fe:b8:23:c7:5a:68:f8:7b:39:2d:f8: 90:e9:90:b0:26:0d:33:fa:a1:3e:f0:64:c8:8e:19:f9:e9:de: a5:66:ee:bb:58:62:0a:3c:d6:b1:8d:b0:78:b4:b4:66:ed:7d: bb:f7:45:70:70:95:58:de:57:85:15:50:cd:04:17:af:d7:e8: 02:8e:62:7d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPWJjeyREZMwOiG3iv7/Bc9cDGa4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcxNjAwMDAzMloX DTI2MTAxNDIzNTk1OVowejFJMEcGA1UEBRNANDlhYzllN2U1N2I0MTcwOWRkYWI2 MWIzMDlkY2VlMGRlMTczOTk2NjFlMzM1MjNmODhlMjYwZWRiMWU1OWZmODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup6wRCMAeEys5vZPjozB/6mDLhv9 yqZbF8Q8e/R7xvPhxdpT3o9VI4UWuNWVilzWu+1ze7GCt2rkR//TLpkrKcavjv8i kUt8pVoNSOS/NdkFl8bch9ixwg/2A1WvgIVtLyABsRSsIUeg6BmE7WsINQj9G7au 2/DXKQxPIZE8k3fLy9le96e2hICJ1a9so/gJpU28K6ABAq+EMIC2Ya00MVxZ+6O1 /uPSlOzTHsxCLAmzcVncdMlXMpWBUkZSrj0WWLyu1SvuiA92SNTudrUi8CXrHDOo XbYGf4MhE7LF6Se2klhrJ/+WRPYmZVjYPZun96LyO1guFuGC5LNaq0m46wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNqeWwX4NVw+JCAL57ERA3UedBr3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5NmNjM2I4LTBkZjAtNGYxNy05N2YwLWQ1OWFhODQ1NDI3Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAP8AMA0GCSqGSIb3DQEBCwUAA4IBAQBra9P7EBNH+FAv+qki XnNSYe4tO1CuntXuzxN5NpWDc7BLEWR05qBDfD/AoIqB1CNoViN2NO9m+TXAHSEp lDz3BZiuQLIHGyi5fQEuw2A7CYvD+uzLduWHonuPgQ1u3m0bfrvjaQEHz5VyzgBk 0vjrV7yBy6ffqY0gWKt+j+vOVMXEVYaI/W9+x6HbDCPtEeRxbWnCsaT3axlVUTPN Hm3vGLpWqGF3tyNX1mWMBdxSINXx0mKkQ4eC0KlR/rgjx1po+Hs5LfiQ6ZCwJg0z +qE+8GTIjhn56d6lZu67WGIKPNaxjbB4tLRm7X2790VwcJVY3leFFVDNBBev1+gC jmJ9 -----END CERTIFICATE-----Generated at Thu Jul 23 22:35:50 2026 by rpki-client