$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa File: bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa (raw, json) Hash identifier: DeBjUzGiMeIqF+ox9vM5mGpgDH0l5RLib0MdeAlMWjc= Subject key identifier: 6D:C3:EF:86:17:24:A2:60:37:E7:97:44:C0:DA:BA:41:DF:22:D3:5E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6C6A6360D4718C96D251F28294CC017881B913DD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa Signing time: Tue 21 Jul 2026 00:10:41 +0000 ROA not before: Tue 21 Jul 2026 00:10:41 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6a:63:60:d4:71:8c:96:d2:51:f2:82:94:cc:01:78:81:b9:13:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:10:41 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=1bf0d1af346d7cf0704455869b815cb6505f2e049652b09bf8d11f70f70fceb3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:ae:a0:53:c8:75:7d:14:cd:3c:97:7a:63: 94:41:79:96:15:ec:a3:3b:59:3e:cc:00:23:c7:77: 25:c3:a1:8c:fc:91:2c:e4:6c:aa:f6:31:13:29:4e: ef:a1:e8:13:4c:06:d2:04:49:dc:b4:4b:a3:08:d1: e8:d3:5b:ca:13:a3:e1:cd:31:2b:dd:66:13:38:25: 80:9f:bb:18:3d:54:30:c6:db:46:bb:e8:32:cb:30: 38:af:39:fc:db:c4:48:e2:4b:34:64:bd:d9:18:25: 28:aa:c3:a8:2b:00:08:6d:1c:db:a4:5a:dc:74:8e: 70:a4:7d:8c:d9:1c:e2:4b:bd:b9:1f:1a:99:34:f2: 6d:6c:f7:da:1e:da:0f:13:76:cc:00:a5:18:34:f8: 58:81:43:1d:4f:87:48:99:7a:6d:c1:2d:b9:f3:8b: 5e:fb:85:3f:b0:49:a7:b1:d0:c4:ff:f7:36:4f:9b: 6b:45:2c:b3:0d:10:00:ab:6a:95:ea:17:65:e4:df: 3f:e5:a9:0a:1f:b4:c7:12:c2:95:85:c5:ff:8d:0c: 0c:d3:1e:c7:eb:d3:63:70:5a:c4:32:56:54:d4:27: 9f:34:2f:86:bc:b0:d5:f7:96:df:f2:f6:a0:27:5d: e8:ef:3f:c7:a9:20:38:1c:30:5d:22:d4:6e:71:0c: e0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C3:EF:86:17:24:A2:60:37:E7:97:44:C0:DA:BA:41:DF:22:D3:5E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:c800::/40 Signature Algorithm: sha256WithRSAEncryption ae:cf:7b:10:02:b5:a7:fe:68:8a:1c:df:e3:cc:0c:5e:4c:d6: b3:2f:83:fb:f0:82:9c:e4:ff:12:72:80:97:af:f9:0d:0a:16: f4:25:58:71:51:0a:a0:e7:fe:41:9f:62:79:1a:56:b3:a5:ec: 93:a0:3c:2f:de:58:4c:3c:ce:5c:37:13:95:b8:ed:25:98:89: 5f:68:b6:f2:c9:cc:20:8f:14:56:c9:41:11:62:71:5f:22:51: 8b:f3:f8:f4:26:36:70:87:e9:aa:9e:e9:b2:99:fc:00:6e:e1: 4c:ad:72:95:5d:4c:b9:f7:53:12:df:cb:8d:84:58:e4:78:90: d0:41:bc:5d:3b:6c:04:8b:14:d4:9b:20:da:d4:02:c8:18:98: 0b:91:76:6f:11:0e:17:bd:17:ff:a5:8c:2f:89:5b:7f:ba:f5: 49:a6:f9:a2:c9:97:2a:ec:a9:26:b1:92:45:3d:ce:fe:ae:d5: 00:d9:1f:77:0c:95:67:f7:59:37:eb:cf:a9:7b:04:7e:02:9c: ff:8b:5d:d8:e0:d6:60:d3:29:64:69:56:33:98:c6:07:be:e3: 69:b3:b7:37:64:a3:4b:0f:1a:ff:d4:05:8d:c1:d7:29:5a:b6: 8b:df:33:ef:ef:80:f5:9b:d4:8a:7e:fe:22:c4:58:15:c8:42: b1:d4:bc:7f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbGpjYNRxjJbSUfKClMwBeIG5E90wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMTA0MVoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAMWJmMGQxYWYzNDZkN2NmMDcwNDQ1 NTg2OWI4MTVjYjY1MDVmMmUwNDk2NTJiMDliZjhkMTFmNzBmNzBmY2ViMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn+uoFPIdX0UzTyXemOUQXmWFeyj O1k+zAAjx3clw6GM/JEs5Gyq9jETKU7voegTTAbSBEnctEujCNHo01vKE6PhzTEr 3WYTOCWAn7sYPVQwxttGu+gyyzA4rzn828RI4ks0ZL3ZGCUoqsOoKwAIbRzbpFrc dI5wpH2M2RziS725HxqZNPJtbPfaHtoPE3bMAKUYNPhYgUMdT4dImXptwS2584te +4U/sEmnsdDE//c2T5trRSyzDRAAq2qV6hdl5N8/5akKH7THEsKVhcX/jQwM0x7H 69NjcFrEMlZU1CefNC+GvLDV95bf8vagJ13o7z/HqSA4HDBdItRucQzg8QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG3D74YXJKJgN+eXRMDaukHfItNeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmN2RmY2Y4LWJhMGMtNDdlOS04ZGRiLTZhNmQ4ZWM3MDQxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoMgwDQYJKoZIhvcNAQELBQADggEBAK7PexACtaf+aIoc3+PM DF5M1rMvg/vwgpzk/xJygJev+Q0KFvQlWHFRCqDn/kGfYnkaVrOl7JOgPC/eWEw8 zlw3E5W47SWYiV9otvLJzCCPFFbJQRFicV8iUYvz+PQmNnCH6aqe6bKZ/ABu4Uyt cpVdTLn3UxLfy42EWOR4kNBBvF07bASLFNSbINrUAsgYmAuRdm8RDhe9F/+ljC+J W3+69Umm+aLJlyrsqSaxkkU9zv6u1QDZH3cMlWf3WTfrz6l7BH4CnP+LXdjg1mDT KWRpVjOYxge+42mztzdko0sPGv/UBY3B1ylatovfM+/vgPWb1Ip+/iLEWBXIQrHU vH8= -----END CERTIFICATE-----Generated at Fri Jul 24 02:30:29 2026 by rpki-client