$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa File: 0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa (raw, json) Hash identifier: 7p8ITaQuvFkwE/I6L8dzyQhxlUHOMfYoJb8zNSLM96g= Subject key identifier: 7C:0E:F2:3E:7C:7F:02:D0:FD:81:8F:BC:93:BB:A1:81:5C:80:CA:0A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4C4C5ABC4F3B3BE4A5C38539D9DFCD00CD99FF96 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa Signing time: Thu 30 Jul 2026 00:10:47 +0000 ROA not before: Thu 30 Jul 2026 00:10:47 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:4c:5a:bc:4f:3b:3b:e4:a5:c3:85:39:d9:df:cd:00:cd:99:ff:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:10:47 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=8a0e183bca7828a4468ccb4ae1576305cd63ace37614651bc118a60e03ea00fc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0e:f3:4b:21:4b:04:43:4f:30:41:42:f8:26: 81:c3:47:be:09:08:28:eb:02:e6:ce:4b:7b:bd:3a: 3d:9e:d2:cf:92:06:f3:04:18:66:88:2b:33:f9:64: 27:40:dd:02:43:59:fa:07:1a:62:ab:a8:ea:12:ac: 46:55:97:18:10:24:6c:65:29:b9:28:a9:a6:c4:e0: a9:22:50:f9:e9:36:67:f6:cd:57:c5:7d:2e:d3:b7: 81:ec:8a:7e:97:e9:dd:be:d5:14:7c:dc:e1:03:4f: aa:7d:eb:4b:0f:08:cb:60:97:92:0d:a0:fd:41:a9: c5:13:1c:9e:ec:ba:f6:04:aa:75:19:50:34:14:81: e9:06:f7:6f:3a:67:68:ec:62:a2:4e:c3:c8:79:ab: fa:ba:4b:8b:e7:4d:40:52:d9:43:85:f0:9c:f1:62: 26:02:a8:66:b1:80:15:ec:48:aa:84:d7:5f:9e:5f: 99:c3:17:f3:39:ef:33:68:00:97:11:4b:e3:d9:0d: 1f:4d:b6:84:f5:94:1b:89:8d:c1:96:32:26:91:d5: 7c:e5:fc:b9:0b:40:33:ac:dd:20:0c:d4:4a:08:8e: 3f:15:91:83:bf:ad:ee:9d:ef:ba:51:76:5d:8e:cb: 0d:ba:78:9e:83:6f:d1:ed:82:d1:60:71:c9:5c:8e: 9d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0E:F2:3E:7C:7F:02:D0:FD:81:8F:BC:93:BB:A1:81:5C:80:CA:0A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:1080::/48 Signature Algorithm: sha256WithRSAEncryption 6d:03:5c:41:ed:b4:eb:e5:db:1e:1a:a8:14:52:90:d2:38:21: 7f:85:0d:b6:70:a5:24:db:7d:48:30:db:02:66:b2:7a:77:a4: de:07:32:3c:71:e8:ce:d3:87:db:5a:90:9b:65:32:65:b8:6e: 37:cc:a0:99:03:09:ed:06:43:1b:a6:f5:fc:7b:62:d2:8d:f9: c8:dc:ba:84:5c:ac:86:65:89:d2:04:8d:03:91:6d:d6:d9:4e: b9:4f:c3:93:3c:12:02:1c:73:aa:84:b9:d5:64:a1:05:7d:73: 9b:ba:e3:8a:e6:8f:64:ec:28:ee:07:a2:95:5c:0e:31:63:f4: 75:4a:f6:e7:97:74:9b:32:68:dc:78:03:18:71:69:61:d3:c1: 6b:01:5b:ec:e1:91:65:01:5b:44:5c:36:65:91:0d:00:6d:f3: 01:52:a0:3d:95:a4:f6:7c:31:55:30:4a:4e:b1:f2:7f:99:0f: d8:2e:a7:30:fd:71:4e:82:bb:00:a5:3b:5e:34:64:47:e1:56: 26:7e:0c:e6:a1:c0:3c:9a:46:f0:1c:2b:39:0d:df:dd:4d:31: b3:c3:bd:8d:90:d1:93:d9:4d:80:ed:71:17:43:37:dd:40:94: 9e:9b:c9:5f:6e:ef:2e:3b:ec:fb:fa:18:e1:83:43:2c:52:3d: 09:d0:a8:92 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTExavE87O+Slw4U52d/NAM2Z/5YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMTA0N1oX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAOGEwZTE4M2JjYTc4MjhhNDQ2OGNj YjRhZTE1NzYzMDVjZDYzYWNlMzc2MTQ2NTFiYzExOGE2MGUwM2VhMDBmYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg7zSyFLBENPMEFC+CaBw0e+CQgo 6wLmzkt7vTo9ntLPkgbzBBhmiCsz+WQnQN0CQ1n6Bxpiq6jqEqxGVZcYECRsZSm5 KKmmxOCpIlD56TZn9s1XxX0u07eB7Ip+l+ndvtUUfNzhA0+qfetLDwjLYJeSDaD9 QanFExye7Lr2BKp1GVA0FIHpBvdvOmdo7GKiTsPIeav6ukuL501AUtlDhfCc8WIm AqhmsYAV7EiqhNdfnl+ZwxfzOe8zaACXEUvj2Q0fTbaE9ZQbiY3BljImkdV85fy5 C0AzrN0gDNRKCI4/FZGDv63une+6UXZdjssNunieg2/R7YLRYHHJXI6dCwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHwO8j58fwLQ/YGPvJO7oYFcgMoKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBlNzRkNGZhLTI3NjgtNGFhMi1hZDVlLWU2MmVkMmI1MDg1OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8hCAMA0GCSqGSIb3DQEBCwUAA4IBAQBtA1xB7bTr5dseGqgU UpDSOCF/hQ22cKUk231IMNsCZrJ6d6TeBzI8cejO04fbWpCbZTJluG43zKCZAwnt BkMbpvX8e2LSjfnI3LqEXKyGZYnSBI0DkW3W2U65T8OTPBICHHOqhLnVZKEFfXOb uuOK5o9k7CjuB6KVXA4xY/R1Svbnl3SbMmjceAMYcWlh08FrAVvs4ZFlAVtEXDZl kQ0AbfMBUqA9laT2fDFVMEpOsfJ/mQ/YLqcw/XFOgrsApTteNGRH4VYmfgzmocA8 mkbwHCs5Dd/dTTGzw72NkNGT2U2A7XEXQzfdQJSem8lfbu8uO+z7+hjhg0MsUj0J 0KiS -----END CERTIFICATE-----Generated at Wed Aug 26 17:35:26 2026 by rpki-client