$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b89e1b5a-6ce4-4b65-931b-a6ec1d72711e.roa File: b89e1b5a-6ce4-4b65-931b-a6ec1d72711e.roa (raw, json) Hash identifier: 0+0U5TAKmF1NmdTIW0LEda72/BIFSt2ZoIyTKtzarx8= Subject key identifier: 65:A0:F4:D3:96:A5:04:FE:BB:D2:02:66:4B:3A:EA:AE:95:7A:84:DA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73A783581FC3B62E20BA762AB11AE6B32D2AFB3F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b89e1b5a-6ce4-4b65-931b-a6ec1d72711e.roa Signing time: Tue 21 Jul 2026 00:10:40 +0000 ROA not before: Tue 21 Jul 2026 00:10:40 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a7:83:58:1f:c3:b6:2e:20:ba:76:2a:b1:1a:e6:b3:2d:2a:fb:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:10:40 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=e49fec65ebbc28c8ea870b91769a107b19cfbef6c31ae92c5f8720b2f40a7d88, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3c:0c:b8:ba:cb:56:f0:3d:7c:06:55:ed:c1: b9:45:53:58:3b:bf:29:f8:cb:b3:eb:f3:e8:99:2d: 07:de:95:f9:82:69:6e:9b:b8:a8:71:99:78:6d:46: 5c:29:ea:95:fd:9f:9b:e3:d3:c6:36:82:b5:ab:97: 3b:fa:35:a0:b4:57:1a:a0:e2:85:26:8c:b8:f3:b4: b9:6b:58:58:fa:91:25:a2:52:4f:ce:d7:6c:3c:c1: 7e:45:f7:13:8f:c6:df:94:35:1c:ad:6e:76:4c:17: f6:3f:2a:6a:28:9c:0f:b9:27:a5:d9:83:56:cf:4f: 54:12:cd:63:b3:3d:0e:a7:86:77:14:b9:ff:90:f1: 25:66:26:4c:0f:90:9b:70:95:8a:95:94:85:d8:dc: e9:8f:29:aa:d3:b1:c0:d4:8f:e1:20:c6:95:56:e0: 83:7f:b5:36:56:b8:17:c6:31:2d:4f:56:6d:e2:c7: f5:bb:28:13:6e:42:73:6e:b4:67:72:8a:a9:ff:be: aa:11:6f:d8:c6:21:86:3f:db:83:af:31:ed:62:ab: ce:56:ee:7e:e4:18:64:f2:52:99:b7:be:32:86:f1: 83:2f:94:f1:d7:d6:84:60:28:cf:73:c3:45:92:c7: 5b:3f:98:83:b4:56:30:38:bf:ce:09:aa:91:5a:f1: 47:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A0:F4:D3:96:A5:04:FE:BB:D2:02:66:4B:3A:EA:AE:95:7A:84:DA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b89e1b5a-6ce4-4b65-931b-a6ec1d72711e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:c800::/40 Signature Algorithm: sha256WithRSAEncryption 84:ea:8e:ac:42:9a:8a:c1:07:1a:7d:5b:98:cd:1e:72:e5:a6: 25:a6:2d:03:27:66:b1:dc:9a:b9:f7:83:bc:4c:5d:f4:5d:9f: f5:1f:a0:b8:46:84:ea:35:85:75:8b:30:5f:a0:99:49:83:60: 49:b3:17:8b:b2:98:30:d1:29:2a:d0:d1:2d:53:4d:bc:d4:74: 1f:49:fb:63:fd:8f:a4:4a:98:83:a9:9b:ea:2e:77:76:61:18: a5:f2:66:21:5d:8f:79:84:b7:c8:27:15:ff:74:9c:22:7c:80: 80:2b:68:91:ec:95:dc:bd:5c:1b:0a:53:5c:1c:d5:d3:59:ca: 98:4b:52:14:2a:a6:56:2b:82:0c:32:7f:07:59:79:34:56:33: 0e:e4:b5:d4:5b:06:65:86:a4:2c:6d:76:f6:3a:1c:91:96:d9: 09:b4:28:49:e6:d8:25:bd:8c:91:59:39:76:99:e4:80:4c:17: 31:43:64:fe:4f:4a:95:72:39:39:14:22:94:52:ed:8e:93:82: 3d:a2:2b:e3:d8:ba:60:94:3e:40:41:2c:ad:4a:27:5d:f2:69: d8:af:55:fa:ce:6f:3b:e9:7e:0c:25:5a:9d:eb:5e:dc:f1:7d: 49:31:a6:33:e1:c8:03:9d:37:02:c9:6f:4e:c3:aa:d2:70:6a: 98:da:42:ad -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUc6eDWB/Dti4gunYqsRrmsy0q+z8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMTA0MFoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAZTQ5ZmVjNjVlYmJjMjhjOGVhODcw YjkxNzY5YTEwN2IxOWNmYmVmNmMzMWFlOTJjNWY4NzIwYjJmNDBhN2Q4ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TwMuLrLVvA9fAZV7cG5RVNYO78p +Muz6/PomS0H3pX5gmlum7iocZl4bUZcKeqV/Z+b49PGNoK1q5c7+jWgtFcaoOKF Joy487S5a1hY+pElolJPztdsPMF+RfcTj8bflDUcrW52TBf2PypqKJwPuSel2YNW z09UEs1jsz0Op4Z3FLn/kPElZiZMD5CbcJWKlZSF2Nzpjymq07HA1I/hIMaVVuCD f7U2VrgXxjEtT1Zt4sf1uygTbkJzbrRncoqp/76qEW/YxiGGP9uDrzHtYqvOVu5+ 5Bhk8lKZt74yhvGDL5Tx19aEYCjPc8NFksdbP5iDtFYwOL/OCaqRWvFHEwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGWg9NOWpQT+u9ICZks66q6VeoTaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I4OWUxYjVhLTZjZTQtNGI2NS05MzFiLWE2ZWMxZDcyNzExZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+MgwDQYJKoZIhvcNAQELBQADggEBAITqjqxCmorBBxp9W5jN HnLlpiWmLQMnZrHcmrn3g7xMXfRdn/UfoLhGhOo1hXWLMF+gmUmDYEmzF4uymDDR KSrQ0S1TTbzUdB9J+2P9j6RKmIOpm+oud3ZhGKXyZiFdj3mEt8gnFf90nCJ8gIAr aJHsldy9XBsKU1wc1dNZyphLUhQqplYrggwyfwdZeTRWMw7ktdRbBmWGpCxtdvY6 HJGW2Qm0KEnm2CW9jJFZOXaZ5IBMFzFDZP5PSpVyOTkUIpRS7Y6Tgj2iK+PYumCU PkBBLK1KJ13yadivVfrObzvpfgwlWp3rXtzxfUkxpjPhyAOdNwLJb07DqtJwapja Qq0= -----END CERTIFICATE-----Generated at Fri Jul 24 09:50:36 2026 by rpki-client