$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b04ab6cc-e646-42b2-b8a0-75a22e4744ea.roa File: b04ab6cc-e646-42b2-b8a0-75a22e4744ea.roa (raw, json) Hash identifier: FUiZI1CBpSo8QmhaUD5sEP5v2Kv0zmBzs+FbWw6z7NY= Subject key identifier: 60:BE:D3:B9:19:E0:D1:F3:BB:BD:AA:94:0B:05:E2:AC:05:70:08:1A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3DDEDBA1EFBC7E68B087CE80D05DD2B1C7605B05 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b04ab6cc-e646-42b2-b8a0-75a22e4744ea.roa Signing time: Mon 20 Jul 2026 00:00:06 +0000 ROA not before: Mon 20 Jul 2026 00:00:06 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:de:db:a1:ef:bc:7e:68:b0:87:ce:80:d0:5d:d2:b1:c7:60:5b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 20 00:00:06 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=2edd944230c1f089eea9642e6bdd84f081f1f11ad053efa7048a95ad57785d42, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:eb:7f:36:6a:8b:40:8b:a3:68:ae:14:ef: 46:ea:87:52:bf:c4:02:b2:4f:27:c2:60:24:8f:40: f9:f2:cf:02:4c:db:93:c2:55:46:5a:8c:b7:f4:43: 11:53:d0:d5:3c:13:02:13:0a:89:14:af:94:38:75: 81:4d:a7:50:91:57:2a:c0:97:23:d7:6b:c7:26:9f: 2f:6e:6d:49:e2:e3:f5:32:cd:b3:2e:28:45:e3:d6: e4:27:ff:94:89:8b:40:4f:19:e5:8a:90:94:4c:1f: bd:87:30:d6:1b:c9:b8:88:50:c1:90:bf:9f:b3:b7: e3:43:69:84:61:47:34:ab:87:00:8c:f5:11:04:88: b9:f8:24:15:c5:2d:15:43:0c:91:a9:4a:81:86:82: 65:a9:44:9e:f5:e3:53:d5:1d:3f:c6:5d:ba:6a:04: d7:c0:7c:c6:e4:9b:b6:81:58:d2:cb:f2:d3:c6:3b: ef:cc:2a:9e:2e:ce:57:52:7f:72:00:2c:b3:0e:71: 44:78:b5:c0:01:f4:12:a4:61:2e:a8:59:68:3d:d1: 91:92:17:70:12:c1:49:66:2f:6c:a8:f7:7c:98:61: 22:e9:3f:09:d1:a1:6a:72:b2:00:4b:c3:34:fa:9f: 3e:2d:99:59:a1:cf:bc:33:45:e3:9a:24:30:1e:aa: fc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BE:D3:B9:19:E0:D1:F3:BB:BD:AA:94:0B:05:E2:AC:05:70:08:1A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b04ab6cc-e646-42b2-b8a0-75a22e4744ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:1000::/40 Signature Algorithm: sha256WithRSAEncryption 90:fc:54:34:65:ae:d7:99:70:e1:f8:b8:c1:ce:ac:72:f9:0d: bf:93:fc:7e:05:36:f7:a0:86:2b:a7:f2:06:7c:c1:06:ef:c8: f1:10:02:b8:c2:3c:78:1b:fb:d8:d3:10:a3:03:02:16:a9:ae: b6:15:e0:53:bf:33:5d:a3:cc:14:5f:9a:37:0a:e1:5b:a7:59: e1:72:2f:76:fd:02:d4:15:40:30:05:7a:6c:9a:07:99:5d:44: 3e:60:7c:f7:ea:49:b5:df:b9:e4:7a:20:8c:81:53:26:bd:91: b9:3a:ab:4f:2c:08:7f:9a:dd:29:34:84:e8:fc:a8:8b:59:0d: da:2b:63:9e:c2:0c:21:07:46:89:3e:77:93:91:0d:ad:c2:18: 24:07:18:77:b0:7b:bb:42:ac:8c:e4:9b:3e:1f:1a:96:c8:95: 75:eb:6a:ac:e9:0d:dc:01:9a:90:a2:19:d5:65:2e:1e:a3:31: 43:95:55:9e:c0:c0:b6:40:18:cd:fb:7b:a9:2b:93:c4:de:04: 88:70:3d:34:b6:ef:a0:a7:7a:3d:42:8a:08:01:1a:cf:a8:a3: fb:ac:50:74:39:92:05:1d:a9:71:64:85:cc:62:02:9d:fd:d0: da:e8:9a:5b:53:bc:a4:36:08:9f:8e:8e:d6:70:e9:4b:33:29: 61:6d:9a:8d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPd7boe+8fmiwh86A0F3SscdgWwUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMDAwMDAwNloX DTI2MTAxODIzNTk1OVowejFJMEcGA1UEBRNAMmVkZDk0NDIzMGMxZjA4OWVlYTk2 NDJlNmJkZDg0ZjA4MWYxZjExYWQwNTNlZmE3MDQ4YTk1YWQ1Nzc4NWQ0MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuunrfzZqi0CLo2iuFO9G6odSv8QC sk8nwmAkj0D58s8CTNuTwlVGWoy39EMRU9DVPBMCEwqJFK+UOHWBTadQkVcqwJcj 12vHJp8vbm1J4uP1Ms2zLihF49bkJ/+UiYtATxnlipCUTB+9hzDWG8m4iFDBkL+f s7fjQ2mEYUc0q4cAjPURBIi5+CQVxS0VQwyRqUqBhoJlqUSe9eNT1R0/xl26agTX wHzG5Ju2gVjSy/LTxjvvzCqeLs5XUn9yACyzDnFEeLXAAfQSpGEuqFloPdGRkhdw EsFJZi9sqPd8mGEi6T8J0aFqcrIAS8M0+p8+LZlZoc+8M0XjmiQwHqr88QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGC+07kZ4NHzu72qlAsF4qwFcAgaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IwNGFiNmNjLWU2NDYtNDJiMi1iOGEwLTc1YTIyZTQ3NDRlYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMhAwDQYJKoZIhvcNAQELBQADggEBAJD8VDRlrteZcOH4uMHO rHL5Db+T/H4FNveghiun8gZ8wQbvyPEQArjCPHgb+9jTEKMDAhaprrYV4FO/M12j zBRfmjcK4VunWeFyL3b9AtQVQDAFemyaB5ldRD5gfPfqSbXfueR6IIyBUya9kbk6 q08sCH+a3Sk0hOj8qItZDdorY57CDCEHRok+d5ORDa3CGCQHGHewe7tCrIzkmz4f GpbIlXXraqzpDdwBmpCiGdVlLh6jMUOVVZ7AwLZAGM37e6krk8TeBIhwPTS276Cn ej1CiggBGs+oo/usUHQ5kgUdqXFkhcxiAp390NromltTvKQ2CJ+OjtZw6UszKWFt mo0= -----END CERTIFICATE-----Generated at Fri Jul 24 02:28:33 2026 by rpki-client