$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bcf07491-4148-4ad5-82e1-58df8b2e226c.roa File: bcf07491-4148-4ad5-82e1-58df8b2e226c.roa (raw, json) Hash identifier: XEUJXqMVkp1xcCVHPKs/8VkXidFKjotxbWODM+2bbbs= Subject key identifier: 1F:28:89:3D:C3:BD:C9:40:B9:16:9E:0C:68:C1:7E:A7:1B:88:FF:D9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4648E505E23EAFBDEA533672A5342C2046AFA281 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bcf07491-4148-4ad5-82e1-58df8b2e226c.roa Signing time: Tue 21 Jul 2026 00:10:38 +0000 ROA not before: Tue 21 Jul 2026 00:10:38 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:48:e5:05:e2:3e:af:bd:ea:53:36:72:a5:34:2c:20:46:af:a2:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:10:38 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=7e5d02b8138a3752ff4f1a08ea1b2ea66a46714a0f3d1ba0dff710870f942c3c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f1:99:6e:50:cb:4b:da:b3:a7:0f:8e:5b:1a: d9:08:60:11:f0:7a:0e:a1:5c:2b:38:45:b3:0c:77: 64:18:d5:0d:ec:d7:9c:d3:10:85:17:9f:56:b8:bd: fe:ad:a5:8c:4e:31:22:57:f1:05:e7:9a:71:9b:41: 24:49:97:ae:5b:fc:a3:a2:c6:ee:38:4e:20:12:0e: da:2f:af:76:b4:15:93:c8:58:51:21:1f:51:85:f2: 21:ae:6e:51:7e:dc:b4:bc:09:9f:fb:bb:2a:49:de: 47:7d:0b:cb:76:7e:c3:89:7f:d2:f9:ea:98:74:72: eb:54:8f:7a:81:d9:a9:47:32:f0:60:4e:9e:ec:80: d8:07:d2:0f:ca:77:b2:79:cf:1e:fa:f1:14:66:ec: fc:b0:ee:f6:8d:91:bd:80:6c:6d:fe:b9:48:30:37: 3b:f4:65:83:4e:2c:a5:6e:49:57:07:df:9c:6a:1f: da:b2:04:09:85:80:55:9f:1e:fb:ce:a2:fd:f6:a3: 1f:ee:49:d6:8d:d9:c7:25:f9:1e:74:1d:f8:22:1a: 8b:8b:6d:59:ca:7a:24:dd:12:a2:79:21:f7:a5:d1: 0e:a5:7b:44:14:6a:d5:a0:af:ca:c8:01:77:5a:c7: 06:c3:d9:55:b5:e1:27:27:49:3a:08:cf:24:ed:02: 4a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:28:89:3D:C3:BD:C9:40:B9:16:9E:0C:68:C1:7E:A7:1B:88:FF:D9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bcf07491-4148-4ad5-82e1-58df8b2e226c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 62:6e:d7:dd:1a:43:2c:85:e7:c2:1d:f3:8a:2d:9d:a3:2c:d0: 92:33:93:83:3e:22:2d:14:ed:13:45:16:03:82:07:98:be:3c: 5e:64:70:a9:0c:c2:62:15:c3:da:e3:27:d0:67:48:01:23:b9: 70:7d:aa:70:b2:2d:5d:b0:89:37:97:61:c9:8b:47:a4:f0:cc: c9:13:51:fa:6f:59:3d:4d:01:07:00:73:b6:97:09:aa:f6:1e: c0:68:69:dc:44:6b:96:cb:15:0c:ed:5f:d1:f6:0d:1e:88:33: 4c:c2:ed:d0:07:61:d2:74:82:1c:cc:da:73:17:30:cf:34:18: 78:b2:83:a7:fc:f0:57:af:3c:3f:5d:ad:f2:f1:9b:14:78:15: 83:2a:ca:e6:4d:ba:ed:f2:69:64:c8:75:cb:80:29:6b:1e:9c: de:e1:39:3f:6a:69:16:27:81:76:b0:8e:d4:82:24:3d:28:f8: b5:97:4e:9f:b4:c7:4d:43:f3:9d:77:f9:d7:4c:16:68:13:13: 26:e2:d8:fb:3d:b1:e5:b7:be:58:f8:14:fc:02:d4:1b:d3:62: e2:6d:49:c0:62:d6:ec:b7:03:2c:72:e3:a8:87:46:e7:b5:67: d4:28:56:89:86:5b:ba:30:14:5b:61:bb:0a:c1:bd:bb:60:6e: 9a:b3:ef:74 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURkjlBeI+r73qUzZypTQsIEavooEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMTAzOFoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAN2U1ZDAyYjgxMzhhMzc1MmZmNGYx YTA4ZWExYjJlYTY2YTQ2NzE0YTBmM2QxYmEwZGZmNzEwODcwZjk0MmMzYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfGZblDLS9qzpw+OWxrZCGAR8HoO oVwrOEWzDHdkGNUN7Nec0xCFF59WuL3+raWMTjEiV/EF55pxm0EkSZeuW/yjosbu OE4gEg7aL692tBWTyFhRIR9RhfIhrm5Rfty0vAmf+7sqSd5HfQvLdn7DiX/S+eqY dHLrVI96gdmpRzLwYE6e7IDYB9IPyneyec8e+vEUZuz8sO72jZG9gGxt/rlIMDc7 9GWDTiylbklXB9+cah/asgQJhYBVnx77zqL99qMf7knWjdnHJfkedB34IhqLi21Z ynok3RKieSH3pdEOpXtEFGrVoK/KyAF3WscGw9lVteEnJ0k6CM8k7QJK1wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFB8oiT3DvclAuRaeDGjBfqcbiP/ZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JjZjA3NDkxLTQxNDgtNGFkNS04MmUxLTU4ZGY4YjJlMjI2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6kDAMA0GCSqGSIb3DQEBCwUAA4IBAQBibtfdGkMshefCHfOK LZ2jLNCSM5ODPiItFO0TRRYDggeYvjxeZHCpDMJiFcPa4yfQZ0gBI7lwfapwsi1d sIk3l2HJi0ek8MzJE1H6b1k9TQEHAHO2lwmq9h7AaGncRGuWyxUM7V/R9g0eiDNM wu3QB2HSdIIczNpzFzDPNBh4soOn/PBXrzw/Xa3y8ZsUeBWDKsrmTbrt8mlkyHXL gClrHpze4Tk/amkWJ4F2sI7UgiQ9KPi1l06ftMdNQ/Odd/nXTBZoExMm4tj7PbHl t75Y+BT8AtQb02LibUnAYtbstwMscuOoh0bntWfUKFaJhlu6MBRbYbsKwb27YG6a s+90 -----END CERTIFICATE-----Generated at Fri Jul 24 10:45:19 2026 by rpki-client