$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dde6bd47-d79f-4763-a35f-83903ab766d0.roa File: dde6bd47-d79f-4763-a35f-83903ab766d0.roa (raw, json) Hash identifier: OLQ0e7XmG6C/PEbmaPnChuTiIoCMGkCT57JlcxeVQfw= Subject key identifier: F3:0F:94:29:8A:7F:E4:A0:C1:12:19:09:EC:21:03:BB:01:60:B9:18 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 102ECF3F6FE5BDF7E1BED0A75B45E5B0DDD59BD8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dde6bd47-d79f-4763-a35f-83903ab766d0.roa Signing time: Tue 21 Jul 2026 00:10:29 +0000 ROA not before: Tue 21 Jul 2026 00:10:29 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:2e:cf:3f:6f:e5:bd:f7:e1:be:d0:a7:5b:45:e5:b0:dd:d5:9b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:10:29 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=ae48817291b7d1a7045e0402d0fb2d9072b19b6c9551da02932f98f7700bf9f8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cd:3e:35:4d:ef:fb:e2:2a:dc:fd:f2:ca:62: cd:70:c2:00:07:de:9f:d4:f3:e1:65:76:ab:03:e1: b7:18:d6:70:60:48:9a:b9:05:a8:5b:87:f5:d7:9e: 9a:18:d1:88:16:1a:25:02:08:68:ff:c6:90:f6:98: 91:29:8d:24:1b:9c:96:23:ae:3f:b7:b8:fb:be:de: 1e:fe:dc:76:fa:d6:7b:63:e0:d6:40:cc:9f:be:44: f5:c4:21:30:b1:91:50:2a:d3:71:3b:7e:00:62:61: 1c:06:4c:2e:46:02:59:8d:88:57:e9:c2:a9:d6:a1: 7c:fa:1b:ec:4c:74:de:5b:62:3f:f7:c8:7c:e4:e0: c8:8d:44:de:6a:a9:f4:a0:54:25:73:56:9b:db:ea: 25:f8:b2:c6:f2:81:ca:78:a1:27:f2:75:26:f2:be: fa:f1:4e:63:98:5c:af:28:26:a8:65:c5:02:17:40: 4c:57:75:dc:f9:fc:c6:53:89:13:a4:69:19:10:26: 2a:59:2d:c9:5d:9b:5b:f6:a3:e8:92:6b:66:6c:3c: 34:10:87:1e:c7:58:c2:29:08:d3:dd:f9:74:c7:22: fa:61:b2:8a:cc:09:a4:01:d1:22:95:19:7b:cb:e6: 4b:77:f7:14:2b:48:57:b7:3c:e0:88:2e:c7:4d:1b: 31:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0F:94:29:8A:7F:E4:A0:C1:12:19:09:EC:21:03:BB:01:60:B9:18 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dde6bd47-d79f-4763-a35f-83903ab766d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:c000::/40 Signature Algorithm: sha256WithRSAEncryption 3b:b1:82:3f:98:55:d5:1e:9b:a2:62:0e:d3:53:13:27:93:83: 6b:a6:2d:d4:7c:67:6a:d1:72:42:3e:3f:e1:54:22:bc:00:ce: ca:81:b5:31:b3:a9:be:05:50:77:cc:33:b8:6e:8f:63:5c:28: 21:6e:28:b6:5d:8f:98:cf:cd:de:5a:6c:94:82:51:b6:1d:d9: 69:fb:11:33:7e:bb:c4:5c:b5:12:e2:44:c2:ba:f2:b9:09:56: f0:71:5e:f8:98:26:85:7a:05:6b:2b:1d:65:80:1a:a9:0c:6a: db:e5:bc:25:6f:d5:68:9d:83:ae:d4:55:c8:b0:ed:84:e0:a1: 25:6a:86:55:f6:b9:a4:a8:eb:74:45:ae:03:2f:4c:e9:3d:2b: f4:92:2f:67:58:37:13:0d:62:4f:15:27:01:19:d1:29:15:09: 17:ed:56:6e:2a:be:f3:7a:78:2f:28:cc:ec:02:b4:0d:95:4e: 39:99:ec:1c:ff:4b:bd:0b:7a:17:c0:1d:7b:62:f7:82:69:37: 79:78:9d:fe:26:b3:96:f4:f6:23:2e:5a:e2:92:42:c3:4f:ef: 42:40:61:30:4e:71:a6:1f:61:c8:69:52:45:d9:bf:ac:ff:be: a6:a6:4c:21:09:ce:0b:9b:ef:15:ed:d6:41:7d:d1:87:eb:6f: f9:74:9b:43 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEC7PP2/lvffhvtCnW0XlsN3Vm9gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMTAyOVoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAYWU0ODgxNzI5MWI3ZDFhNzA0NWUw NDAyZDBmYjJkOTA3MmIxOWI2Yzk1NTFkYTAyOTMyZjk4Zjc3MDBiZjlmODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus0+NU3v++Iq3P3yymLNcMIAB96f 1PPhZXarA+G3GNZwYEiauQWoW4f1156aGNGIFholAgho/8aQ9piRKY0kG5yWI64/ t7j7vt4e/tx2+tZ7Y+DWQMyfvkT1xCEwsZFQKtNxO34AYmEcBkwuRgJZjYhX6cKp 1qF8+hvsTHTeW2I/98h85ODIjUTeaqn0oFQlc1ab2+ol+LLG8oHKeKEn8nUm8r76 8U5jmFyvKCaoZcUCF0BMV3Xc+fzGU4kTpGkZECYqWS3JXZtb9qPokmtmbDw0EIce x1jCKQjT3fl0xyL6YbKKzAmkAdEilRl7y+ZLd/cUK0hXtzzgiC7HTRsx2wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPMPlCmKf+SgwRIZCewhA7sBYLkYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RkZTZiZDQ3LWQ3OWYtNDc2My1hMzVmLTgzOTAzYWI3NjZkMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6sAwDQYJKoZIhvcNAQELBQADggEBADuxgj+YVdUem6JiDtNT EyeTg2umLdR8Z2rRckI+P+FUIrwAzsqBtTGzqb4FUHfMM7huj2NcKCFuKLZdj5jP zd5abJSCUbYd2Wn7ETN+u8RctRLiRMK68rkJVvBxXviYJoV6BWsrHWWAGqkMatvl vCVv1Widg67UVciw7YTgoSVqhlX2uaSo63RFrgMvTOk9K/SSL2dYNxMNYk8VJwEZ 0SkVCRftVm4qvvN6eC8ozOwCtA2VTjmZ7Bz/S70LehfAHXti94JpN3l4nf4ms5b0 9iMuWuKSQsNP70JAYTBOcaYfYchpUkXZv6z/vqamTCEJzgub7xXt1kF90Yfrb/l0 m0M= -----END CERTIFICATE-----Generated at Fri Jul 24 01:15:20 2026 by rpki-client