$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d9174a7-34d8-412c-b0b9-d4b3d78f5705.roa File: 9d9174a7-34d8-412c-b0b9-d4b3d78f5705.roa (raw, json) Hash identifier: 5HEd30rxs0KocwE1351x/6enRwNiwjRATF5ud/SEuxY= Subject key identifier: 2A:49:66:FC:05:24:0C:EF:06:8F:BA:7E:A0:CF:EB:7C:8A:D8:50:E1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 15C650E441D513F5B871A2BAC70B292F22328AB4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d9174a7-34d8-412c-b0b9-d4b3d78f5705.roa Signing time: Tue 21 Jul 2026 00:10:25 +0000 ROA not before: Tue 21 Jul 2026 00:10:25 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c6:50:e4:41:d5:13:f5:b8:71:a2:ba:c7:0b:29:2f:22:32:8a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:10:25 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=7a42c265f7d3f4f649c991c7687d85ef44a1d42b11cc5d82c0d8e4ecf73db009, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4d:af:30:24:d8:8c:e5:e1:5f:99:4f:f9:f3: 0b:05:ec:3f:d0:9b:35:c5:df:61:fb:b9:d4:40:f8: 8d:57:a7:2f:91:f1:6c:22:c9:d4:81:2a:af:0e:f2: 8b:de:60:64:09:d8:15:81:83:32:6e:8a:da:0c:bf: 55:a5:9d:73:e6:d4:c9:7f:9b:5c:50:9c:c3:4f:5f: 8c:94:74:50:17:4a:95:58:a1:f3:10:66:68:a2:5c: af:e5:46:71:a2:a0:3c:90:c0:63:56:4b:5b:f1:62: a6:d3:87:fe:d3:a9:0d:16:ac:4e:b3:ee:19:3d:ff: f3:dd:48:a4:e4:e5:b0:11:9b:71:71:d9:01:1e:16: dc:b9:e7:aa:b6:b8:17:f3:5b:0c:d6:e7:35:f1:97: db:7b:43:f6:48:46:08:94:6e:f6:82:ad:f6:b1:eb: 97:22:3e:30:44:c5:90:9a:54:35:17:74:e2:0d:d8: 98:6b:21:90:d0:2d:b7:5d:bf:9c:60:61:06:87:5f: c9:6a:29:dc:c3:dd:75:ab:84:db:e7:f7:d8:1d:8e: 37:30:10:ca:91:11:6b:70:92:42:65:e0:24:68:85: a1:ab:b9:a9:d0:e7:27:3f:b4:17:14:25:ff:bd:fa: b0:81:70:26:a4:4c:9c:cd:ed:e9:b0:14:d3:81:b3: 41:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:49:66:FC:05:24:0C:EF:06:8F:BA:7E:A0:CF:EB:7C:8A:D8:50:E1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d9174a7-34d8-412c-b0b9-d4b3d78f5705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:4020::/48 Signature Algorithm: sha256WithRSAEncryption 3d:48:f9:b1:8c:64:d9:be:1e:cb:25:dd:96:c3:73:82:79:ed: 6d:96:09:25:fa:2f:e3:1d:0a:07:e6:45:24:d0:2c:55:0a:c0: 81:84:a1:92:25:43:cc:da:0a:83:8d:4f:28:bb:e3:71:1b:74: bf:bb:68:c9:fa:4a:f5:a4:eb:4a:20:4d:12:de:32:d7:36:2b: 58:d4:bd:2a:e7:de:5b:8e:a2:d8:38:32:be:ac:d0:5b:36:5f: 4c:16:1b:a9:fa:d7:30:04:24:11:87:bf:0b:40:51:c4:d8:e4: cc:f2:46:ff:35:15:77:65:4e:7b:5d:90:36:d2:1e:de:f2:3a: f1:ae:10:a2:a2:19:7a:d5:a7:50:b6:32:00:7b:f7:0d:75:4a: d4:fe:05:5e:18:07:d0:4b:14:56:83:87:7f:f1:e8:5d:69:a3: af:48:a9:b2:d0:5d:d9:13:a2:70:aa:1a:9f:31:19:d3:04:8c: b4:ae:fa:f5:c6:98:ca:1d:22:5a:e4:89:b7:3b:a0:02:7b:00: 95:b2:19:c8:ed:6a:ce:03:09:91:15:2d:60:17:d5:aa:35:3b: 59:bb:cc:37:89:29:16:31:ca:67:5d:e3:d3:ea:3f:4e:e1:1d: d8:df:7e:91:18:ca:05:ce:ef:b3:84:90:97:9f:bb:41:b5:0f: cb:cd:cd:d9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFcZQ5EHVE/W4caK6xwspLyIyirQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMTAyNVoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAN2E0MmMyNjVmN2QzZjRmNjQ5Yzk5 MWM3Njg3ZDg1ZWY0NGExZDQyYjExY2M1ZDgyYzBkOGU0ZWNmNzNkYjAwOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk2vMCTYjOXhX5lP+fMLBew/0Js1 xd9h+7nUQPiNV6cvkfFsIsnUgSqvDvKL3mBkCdgVgYMyboraDL9VpZ1z5tTJf5tc UJzDT1+MlHRQF0qVWKHzEGZoolyv5UZxoqA8kMBjVktb8WKm04f+06kNFqxOs+4Z Pf/z3Uik5OWwEZtxcdkBHhbcueeqtrgX81sM1uc18Zfbe0P2SEYIlG72gq32seuX Ij4wRMWQmlQ1F3TiDdiYayGQ0C23Xb+cYGEGh1/Jaincw911q4Tb5/fYHY43MBDK kRFrcJJCZeAkaIWhq7mp0OcnP7QXFCX/vfqwgXAmpEycze3psBTTgbNBxQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCpJZvwFJAzvBo+6fqDP63yK2FDhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkOTE3NGE3LTM0ZDgtNDEyYy1iMGI5LWQ0YjNkNzhmNTcwNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6kAgMA0GCSqGSIb3DQEBCwUAA4IBAQA9SPmxjGTZvh7LJd2W w3OCee1tlgkl+i/jHQoH5kUk0CxVCsCBhKGSJUPM2gqDjU8ou+NxG3S/u2jJ+kr1 pOtKIE0S3jLXNitY1L0q595bjqLYODK+rNBbNl9MFhup+tcwBCQRh78LQFHE2OTM 8kb/NRV3ZU57XZA20h7e8jrxrhCiohl61adQtjIAe/cNdUrU/gVeGAfQSxRWg4d/ 8ehdaaOvSKmy0F3ZE6JwqhqfMRnTBIy0rvr1xpjKHSJa5Im3O6ACewCVshnI7WrO AwmRFS1gF9WqNTtZu8w3iSkWMcpnXePT6j9O4R3Y336RGMoFzu+zhJCXn7tBtQ/L zc3Z -----END CERTIFICATE-----Generated at Fri Jul 24 01:16:37 2026 by rpki-client