$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd0ac6ba-e775-4f86-853e-f467879f4e6c.roa File: fd0ac6ba-e775-4f86-853e-f467879f4e6c.roa (raw, json) Hash identifier: oQkOAzcLTmGv0JnC5wEnsG3AEUEBpCcvHAYD21a/kyU= Subject key identifier: E5:04:EA:85:B7:87:CA:10:A5:05:CC:F1:F4:B2:06:5A:E9:52:09:3E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 17D1A46A6C54679BD429A6E839176C8A352BAFCF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd0ac6ba-e775-4f86-853e-f467879f4e6c.roa Signing time: Tue 21 Jul 2026 00:10:07 +0000 ROA not before: Tue 21 Jul 2026 00:10:07 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d1:a4:6a:6c:54:67:9b:d4:29:a6:e8:39:17:6c:8a:35:2b:af:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:10:07 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=8301e9d4e9551aded30dc9be12fa368bad4044f03f83ad84f70aa2662d2f34d6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:10:f4:3c:66:e2:4b:66:43:40:03:0e:a1:f4: d6:5f:f3:71:20:f7:f2:d6:c2:76:77:09:18:64:f3: 79:28:a9:43:61:ab:60:b8:8e:1b:52:6c:92:a8:21: 6e:eb:59:de:d0:ed:b8:49:bf:62:4b:14:58:56:71: c9:f7:e1:88:c3:08:e2:16:c5:ba:8b:84:c3:a6:3a: a6:f7:d3:4e:62:7e:df:18:e2:7e:19:e1:b1:38:30: 7b:e2:fa:77:17:10:10:11:38:a2:a0:61:eb:b0:a1: dc:af:ce:38:93:17:ba:a3:6f:ab:06:e0:b2:6c:bb: 2a:c0:f3:4c:54:be:a3:5d:0a:33:3f:02:62:3f:da: 11:a7:9b:a7:9c:78:11:32:82:54:c7:12:6b:a2:2e: 7b:f7:88:d7:86:b9:4f:99:90:ee:c5:80:fb:d6:aa: 7d:d1:f7:10:13:5e:40:7b:0e:e3:50:f6:4d:97:3f: f4:6e:79:11:c4:81:1d:11:3a:f8:41:ed:c9:d0:4f: b5:9a:36:bf:8f:3c:26:fc:ef:25:4a:23:b3:14:99: 79:4a:e8:80:1f:46:35:d9:05:48:c2:99:55:e3:01: ca:1c:fa:6a:f0:75:75:91:7f:ac:1d:9c:17:41:a8: 1e:50:0b:99:7f:28:ee:c0:2e:0c:7d:7d:03:8a:96: 6f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:04:EA:85:B7:87:CA:10:A5:05:CC:F1:F4:B2:06:5A:E9:52:09:3E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd0ac6ba-e775-4f86-853e-f467879f4e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:9000::/40 Signature Algorithm: sha256WithRSAEncryption bf:70:06:81:c8:d9:41:e7:cc:5a:93:52:b6:6e:82:be:4f:f5: 36:dd:1e:37:01:65:a1:64:0d:18:c6:05:f1:46:25:3a:40:02: bf:01:62:b4:fe:54:5d:aa:16:3f:4a:fd:15:b7:3d:bb:61:53: 90:c1:f5:f3:f5:7b:aa:9d:ff:c0:23:09:d4:a1:69:48:1a:7b: 96:86:50:63:14:f0:69:53:2b:08:0a:96:e1:2c:c9:cd:ca:ca: de:98:be:61:0b:1a:84:81:f5:d8:06:82:31:cd:a9:e5:f1:34: 58:87:9d:0a:dc:74:28:af:0e:d6:f4:83:b6:83:1a:93:c7:df: bf:e1:95:3a:8e:e8:dc:ce:e1:9a:7b:f8:2f:d3:3d:9c:51:5a: 82:c5:90:ef:66:8e:f7:a2:23:98:1a:3e:df:89:33:25:d4:09: 31:6a:83:ba:80:2c:65:41:39:27:3f:dc:2b:34:90:eb:4b:86: ac:ef:b7:ad:ac:63:a4:8b:c9:1b:b7:4e:19:dc:a6:1a:72:4f: 96:6b:93:6b:96:10:68:72:7d:41:71:cc:81:b9:e6:de:70:ea: 0d:6e:8e:4d:ce:87:47:3d:53:57:00:87:41:76:4f:48:d8:8b: b4:aa:a5:d4:42:34:31:f6:81:aa:d2:52:7a:a1:a6:6a:5e:5b: f6:48:b7:6d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUF9GkamxUZ5vUKaboORdsijUrr88wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMTAwN1oX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAODMwMWU5ZDRlOTU1MWFkZWQzMGRj OWJlMTJmYTM2OGJhZDQwNDRmMDNmODNhZDg0ZjcwYWEyNjYyZDJmMzRkNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xD0PGbiS2ZDQAMOofTWX/NxIPfy 1sJ2dwkYZPN5KKlDYatguI4bUmySqCFu61ne0O24Sb9iSxRYVnHJ9+GIwwjiFsW6 i4TDpjqm99NOYn7fGOJ+GeGxODB74vp3FxAQETiioGHrsKHcr844kxe6o2+rBuCy bLsqwPNMVL6jXQozPwJiP9oRp5unnHgRMoJUxxJroi5794jXhrlPmZDuxYD71qp9 0fcQE15Aew7jUPZNlz/0bnkRxIEdETr4Qe3J0E+1mja/jzwm/O8lSiOzFJl5SuiA H0Y12QVIwplV4wHKHPpq8HV1kX+sHZwXQageUAuZfyjuwC4MfX0DipZvhwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOUE6oW3h8oQpQXM8fSyBlrpUgk+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZkMGFjNmJhLWU3NzUtNGY4Ni04NTNlLWY0Njc4NzlmNGU2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauJAwDQYJKoZIhvcNAQELBQADggEBAL9wBoHI2UHnzFqTUrZu gr5P9TbdHjcBZaFkDRjGBfFGJTpAAr8BYrT+VF2qFj9K/RW3PbthU5DB9fP1e6qd /8AjCdShaUgae5aGUGMU8GlTKwgKluEsyc3Kyt6YvmELGoSB9dgGgjHNqeXxNFiH nQrcdCivDtb0g7aDGpPH37/hlTqO6NzO4Zp7+C/TPZxRWoLFkO9mjveiI5gaPt+J MyXUCTFqg7qALGVBOSc/3Cs0kOtLhqzvt62sY6SLyRu3ThncphpyT5Zrk2uWEGhy fUFxzIG55t5w6g1ujk3Oh0c9U1cAh0F2T0jYi7SqpdRCNDH2garSUnqhpmpeW/ZI t20= -----END CERTIFICATE-----Generated at Fri Jul 24 07:27:53 2026 by rpki-client