$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/5663bf34-10ed-4309-a236-7466afd6f02f.roa File: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (raw, json) Hash identifier: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA= Subject key identifier: FB:89:75:EA:EB:92:3D:C2:82:59:6C:3A:FA:DF:CC:A8:D5:0A:16:3D Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 0650FF897765B0718DCCA56970B3761F53183A9D Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/5663bf34-10ed-4309-a236-7466afd6f02f.roa Signing time: Thu 16 Jul 2026 00:00:34 +0000 ROA not before: Thu 16 Jul 2026 00:00:34 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:50:ff:89:77:65:b0:71:8d:cc:a5:69:70:b3:76:1f:53:18:3a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jul 16 00:00:34 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=b11f7c44f8caaebe77acab45d8da3c96dd3dee0204755ed4d66b452c45377ae6, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:bf:55:46:b6:ba:29:1d:7a:f2:ea:2e:4b:4a: c9:20:01:d9:2b:99:9c:95:6e:b3:d5:59:44:a7:ca: a2:1a:c7:ac:9e:e0:6a:1a:56:8d:6a:2e:ea:a9:af: 6d:fe:cc:c2:67:62:a5:e4:f3:22:f5:01:ef:83:3c: 1f:6d:b2:1e:61:26:2e:c6:50:59:98:37:84:5d:60: d1:fc:0a:00:1e:5e:8d:d2:cb:c4:b4:66:2a:ad:c6: e1:e7:08:43:74:e8:19:92:42:37:81:99:46:4d:12: c9:64:8c:58:41:52:a5:b6:1b:ca:e4:53:7d:0f:b5: f3:23:61:2b:83:08:17:54:59:07:74:96:ea:34:46: 8e:53:ab:c5:58:6e:eb:56:d9:86:c7:21:15:2e:63: d2:d6:7b:df:8e:5c:83:3f:c8:6a:bc:64:b4:5e:2f: 78:57:95:74:77:8a:73:d9:7d:73:ab:c3:bd:b0:f6: c8:79:d8:bf:48:70:05:8f:3c:92:21:e8:30:2a:21: a7:84:62:51:0d:e6:db:02:f6:fb:d5:d4:40:3f:62: 99:88:55:b6:fa:85:bb:85:b9:54:94:49:10:ff:68: f5:ac:b5:8d:bb:58:5b:d3:67:55:27:67:3f:a7:c2: 0c:db:00:00:0a:c1:f2:57:87:db:f7:4a:28:a8:6b: 52:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:89:75:EA:EB:92:3D:C2:82:59:6C:3A:FA:DF:CC:A8:D5:0A:16:3D X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/5663bf34-10ed-4309-a236-7466afd6f02f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:ff00::/48 Signature Algorithm: sha256WithRSAEncryption 69:4a:61:45:66:3a:29:d1:ef:a6:20:e4:fc:57:81:d4:c3:4e: 16:9d:de:a9:62:b9:f0:01:0f:5e:99:35:f6:d5:4a:2a:ee:84: b8:4e:6f:6e:89:9f:01:78:40:f3:cd:e5:55:e5:0a:e3:58:8f: f7:ba:dd:96:77:6b:d6:03:f3:25:ba:0d:7b:fd:e5:13:d5:32: 5f:76:ec:c6:6f:d2:54:d8:8e:ce:f9:09:6e:82:ae:35:a4:df: f3:d0:22:ef:62:c9:f4:be:7c:17:ed:e5:a6:29:93:dd:7d:8b: 54:c8:52:97:c4:81:13:8d:8e:2d:91:58:56:67:4d:18:e6:d9: 92:e3:f7:86:a5:24:9e:47:87:1f:0a:32:32:99:7d:6b:28:b0: c3:27:7a:9a:3c:62:4e:dc:8a:ed:17:b5:e4:3d:58:d9:99:4e: 1b:a0:b7:e4:7c:4b:71:72:2a:de:d3:ac:fb:b5:47:40:5c:3f: 79:a9:14:18:30:ea:e7:fd:ad:60:0d:01:4b:12:95:85:4f:97: 5d:8a:c7:1e:60:d9:13:f9:0b:7a:45:47:ff:c4:ac:60:92:b8: 74:30:a7:ff:3e:7c:ff:c4:99:1f:45:8a:cd:3c:fa:25:15:c7: 55:60:25:02:ff:2e:5d:c2:93:12:87:34:d0:19:b2:da:cc:c5: b5:a2:12:2a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBlD/iXdlsHGNzKVpcLN2H1MYOp0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDcxNjAwMDAzNFoX DTI2MTAxNDIzNTk1OVowejFJMEcGA1UEBRNAYjExZjdjNDRmOGNhYWViZTc3YWNh YjQ1ZDhkYTNjOTZkZDNkZWUwMjA0NzU1ZWQ0ZDY2YjQ1MmM0NTM3N2FlNjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9r9VRra6KR168uouS0rJIAHZK5mc lW6z1VlEp8qiGsesnuBqGlaNai7qqa9t/szCZ2Kl5PMi9QHvgzwfbbIeYSYuxlBZ mDeEXWDR/AoAHl6N0svEtGYqrcbh5whDdOgZkkI3gZlGTRLJZIxYQVKlthvK5FN9 D7XzI2ErgwgXVFkHdJbqNEaOU6vFWG7rVtmGxyEVLmPS1nvfjlyDP8hqvGS0Xi94 V5V0d4pz2X1zq8O9sPbIedi/SHAFjzySIegwKiGnhGJRDebbAvb71dRAP2KZiFW2 +oW7hblUlEkQ/2j1rLWNu1hb02dVJ2c/p8IM2wAACsHyV4fb90ooqGtSlQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPuJderrkj3CgllsOvrfzKjVChY9MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzU2NjNiZjM0LTEwZWQtNDMwOS1hMjM2LTc0NjZhZmQ2ZjAyZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzAP8AMA0GCSqGSIb3DQEBCwUAA4IBAQBpSmFFZjop0e+mIOT8 V4HUw04Wnd6pYrnwAQ9emTX21Uoq7oS4Tm9uiZ8BeEDzzeVV5QrjWI/3ut2Wd2vW A/Mlug17/eUT1TJfduzGb9JU2I7O+Qlugq41pN/z0CLvYsn0vnwX7eWmKZPdfYtU yFKXxIETjY4tkVhWZ00Y5tmS4/eGpSSeR4cfCjIymX1rKLDDJ3qaPGJO3IrtF7Xk PVjZmU4boLfkfEtxcire06z7tUdAXD95qRQYMOrn/a1gDQFLEpWFT5ddisceYNkT +Qt6RUf/xKxgkrh0MKf/Pnz/xJkfRYrNPPolFcdVYCUC/y5dwpMShzTQGbLazMW1 ohIq -----END CERTIFICATE-----Generated at Fri Jul 24 07:28:39 2026 by rpki-client