$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfd0398f-9f8a-423b-81aa-122fc571f9ea.roa File: dfd0398f-9f8a-423b-81aa-122fc571f9ea.roa (raw, json) Hash identifier: m7lEw66u6UToQntNbsWHEGGHYYaPF5SoxuXFJWZ+BPs= Subject key identifier: 42:32:1B:F9:86:40:11:25:5F:5F:C6:0E:86:EC:07:78:CD:7E:B7:0E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 336ECA52273EA58A387A2C20DC43A6069AA1A71C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfd0398f-9f8a-423b-81aa-122fc571f9ea.roa Signing time: Sat 18 Jul 2026 00:00:05 +0000 ROA not before: Sat 18 Jul 2026 00:00:05 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:6e:ca:52:27:3e:a5:8a:38:7a:2c:20:dc:43:a6:06:9a:a1:a7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 18 00:00:05 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=b990aa608f07fdd3bbf545a1025419db16ffa631850a809f3c66cae078026b12, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:2e:cc:24:c2:47:eb:25:15:6e:20:93:07: 73:c2:51:5d:57:4f:2d:b2:f1:86:86:c5:dc:6d:63: 6f:ce:8c:05:d0:9a:4b:66:7d:6e:85:99:c6:93:fa: f0:55:6c:aa:e9:7c:34:59:bc:46:d6:c6:74:0e:2f: c2:4d:d5:1c:22:25:92:9d:28:31:70:6d:26:c6:bd: 15:63:46:3f:22:ea:32:8e:57:5b:b8:fc:8d:a5:0d: 20:70:a2:4f:e1:f9:e4:b9:92:a3:2f:18:65:7e:f8: e6:5c:be:83:e9:43:5a:86:59:60:50:f8:c9:3d:55: 63:1a:8b:3a:06:ef:99:c9:6b:85:8f:02:a1:9c:c3: d8:83:5a:6d:b8:07:f2:d4:1d:04:14:3d:bf:47:cd: f7:a4:8c:51:5b:dc:58:6a:ac:64:86:21:fc:ef:46: d4:9e:14:3a:03:59:fe:c2:03:66:1d:19:e1:13:91: e4:95:62:13:3a:40:ff:64:45:d4:58:81:fa:19:9b: 4f:00:31:80:e3:9f:ea:fa:5d:cd:22:90:0d:77:ad: 32:9f:c8:56:05:1c:00:6f:0d:ff:d1:8f:47:fa:79: ff:51:08:dd:74:78:74:1e:c8:07:f6:47:19:36:ed: f3:0e:d9:90:14:78:dd:19:43:c4:67:9e:81:f6:0d: dd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:32:1B:F9:86:40:11:25:5F:5F:C6:0E:86:EC:07:78:CD:7E:B7:0E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfd0398f-9f8a-423b-81aa-122fc571f9ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da30::/32 Signature Algorithm: sha256WithRSAEncryption 98:ae:52:e9:5b:dd:b1:09:e3:e9:0a:87:b8:b7:96:f3:bc:16: 9d:9e:70:15:48:33:71:b7:eb:42:e6:ce:92:ad:57:0a:60:8d: b2:6b:45:a3:d0:fc:c3:7b:db:af:09:2e:01:dd:ff:cf:0a:71: 5d:4b:e0:94:b6:ea:32:5a:a3:b4:db:71:7c:7b:f3:a5:fc:96: 30:6b:71:e4:39:f1:02:34:1e:67:77:ae:c6:bc:57:90:15:a3: 32:79:08:b2:6e:47:e1:6a:dc:fd:a5:c3:b2:f1:ef:f6:16:54: 6a:88:ae:12:6d:19:c7:83:e9:05:73:50:58:48:82:12:13:b5: dd:07:fa:40:da:97:07:79:d4:99:4b:a0:56:93:15:3c:b9:32: 29:8e:0a:5b:99:fa:a9:3e:d0:1b:d2:c7:0c:d9:87:a6:13:24: 62:2b:75:46:ae:b3:bb:0f:d6:a0:90:c5:46:7d:e7:c6:f0:6c: dd:53:ee:32:48:22:c5:80:db:60:96:75:43:4d:7f:0e:9f:3b: 55:1b:93:86:3d:95:42:d6:7d:0d:bb:94:93:ad:fe:2b:4f:72: 32:e6:21:97:ff:58:a8:45:6b:14:bf:d6:72:62:04:3b:f7:57: ea:ed:b9:8a:6e:d2:d4:02:c4:86:ad:2d:14:62:e7:0c:d6:3c: e8:d0:d2:83 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUM27KUic+pYo4eiwg3EOmBpqhpxwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcxODAwMDAwNVoX DTI2MTAxNjIzNTk1OVowejFJMEcGA1UEBRNAYjk5MGFhNjA4ZjA3ZmRkM2JiZjU0 NWExMDI1NDE5ZGIxNmZmYTYzMTg1MGE4MDlmM2M2NmNhZTA3ODAyNmIxMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUguzCTCR+slFW4gkwdzwlFdV08t svGGhsXcbWNvzowF0JpLZn1uhZnGk/rwVWyq6Xw0WbxG1sZ0Di/CTdUcIiWSnSgx cG0mxr0VY0Y/IuoyjldbuPyNpQ0gcKJP4fnkuZKjLxhlfvjmXL6D6UNahllgUPjJ PVVjGos6Bu+ZyWuFjwKhnMPYg1ptuAfy1B0EFD2/R833pIxRW9xYaqxkhiH870bU nhQ6A1n+wgNmHRnhE5HklWITOkD/ZEXUWIH6GZtPADGA45/q+l3NIpANd60yn8hW BRwAbw3/0Y9H+nn/UQjddHh0HsgH9kcZNu3zDtmQFHjdGUPEZ56B9g3ddwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFEIyG/mGQBElX1/GDobsB3jNfrcOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmZDAzOThmLTlmOGEtNDIzYi04MWFhLTEyMmZjNTcxZjllYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaMDANBgkqhkiG9w0BAQsFAAOCAQEAmK5S6VvdsQnj6QqHuLeW 87wWnZ5wFUgzcbfrQubOkq1XCmCNsmtFo9D8w3vbrwkuAd3/zwpxXUvglLbqMlqj tNtxfHvzpfyWMGtx5DnxAjQeZ3euxrxXkBWjMnkIsm5H4Wrc/aXDsvHv9hZUaoiu Em0Zx4PpBXNQWEiCEhO13Qf6QNqXB3nUmUugVpMVPLkyKY4KW5n6qT7QG9LHDNmH phMkYit1Rq6zuw/WoJDFRn3nxvBs3VPuMkgixYDbYJZ1Q01/Dp87VRuThj2VQtZ9 DbuUk63+K09yMuYhl/9YqEVrFL/WcmIEO/dX6u25im7S1ALEhq0tFGLnDNY86NDS gw== -----END CERTIFICATE-----Generated at Thu Jul 23 23:42:48 2026 by rpki-client