$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0facaf86-5d86-40aa-a412-a4aef7916580.roa File: 0facaf86-5d86-40aa-a412-a4aef7916580.roa (raw, json) Hash identifier: Br3dONL/tSVeEbu8T8ekHVT2YH87yMbAYypEogUF4iY= Subject key identifier: E7:84:A1:93:CC:DB:FB:49:F5:4A:39:C9:0D:99:B8:1E:60:6F:F0:F9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 77E7A78898088F795752E4F185D77C369CD4DCF5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0facaf86-5d86-40aa-a412-a4aef7916580.roa Signing time: Tue 18 Aug 2026 18:03:39 +0000 ROA not before: Tue 18 Aug 2026 18:03:39 +0000 ROA not after: Mon 16 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da33:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Aug 2026 00:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:e7:a7:88:98:08:8f:79:57:52:e4:f1:85:d7:7c:36:9c:d4:dc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 18:03:39 2026 GMT Not After : Nov 16 23:59:59 2026 GMT Subject: serialNumber=4fec393035cbcebc6e2fecfb8dc789589f751f27aa8b2312be85ce79b531360b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e0:d0:fc:8e:5f:8e:31:ef:51:74:7a:a9:65: 03:e4:35:cc:1b:bb:d3:e2:23:e7:3d:5f:06:e9:5f: ee:a4:7e:a9:a7:a6:ce:04:93:4d:c4:b3:7a:d8:16: b8:87:16:94:ca:5e:3b:da:5f:82:03:8f:2d:9e:68: 70:97:75:67:2a:db:04:b0:5b:65:4a:7c:b0:e3:fd: 1d:e7:a4:cf:7d:32:d1:25:00:24:5a:7f:da:2e:7a: ff:0c:49:2e:35:78:66:ea:0a:a1:7d:30:e2:19:ce: e3:d4:80:7a:ae:3c:8e:3d:e4:25:0f:55:47:18:0d: 62:e8:10:12:b4:1a:b5:56:fe:a0:9f:39:ac:39:e8: 3d:4c:a5:2d:aa:a5:46:cd:c6:98:bc:21:5c:a6:aa: b2:c4:43:98:e3:94:59:78:04:27:92:f1:9a:aa:4f: bd:12:1f:df:ca:8c:d5:48:11:a4:bb:fb:a6:5d:35: 90:b7:3e:5c:66:fd:98:aa:75:18:5d:99:a9:e1:58: 68:30:5b:a2:f8:ec:b7:dc:f0:2b:26:8b:f7:e6:2a: d2:f4:b7:28:2c:72:15:5b:bc:9b:af:05:57:ba:70: 13:0f:b5:25:57:46:84:ed:ca:3c:37:e6:ed:d0:57: 4e:0e:2b:cc:6c:92:14:88:06:ed:7f:21:e4:8d:77: 36:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:84:A1:93:CC:DB:FB:49:F5:4A:39:C9:0D:99:B8:1E:60:6F:F0:F9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0facaf86-5d86-40aa-a412-a4aef7916580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da33:4000::/40 Signature Algorithm: sha256WithRSAEncryption 5b:e0:d8:48:fe:37:8b:25:f5:76:46:55:86:90:6a:8a:4f:f7: 3f:80:40:89:84:ae:4a:d8:0c:57:6e:26:b6:fc:47:e8:03:91: 61:08:2d:21:30:4a:af:59:7e:3b:4f:7f:a2:8d:44:4b:06:30: 39:27:03:ab:ea:27:64:1d:43:4c:db:0d:6b:8d:f0:6d:c0:e9: f6:d9:15:d6:b7:b5:ba:25:43:fc:f0:20:f2:39:74:78:37:1e: 51:26:e1:f0:ba:7b:27:65:89:79:b8:c4:ff:9d:c4:73:e7:c8: 02:33:b4:e9:d6:a9:85:a1:71:89:9f:9e:61:2e:50:71:2b:50: 2d:8b:d6:6e:66:6c:15:7d:57:c1:6d:be:05:5d:e9:d8:33:36: ed:9f:88:94:34:b2:ce:8d:76:a3:ad:25:c8:55:ba:25:fd:23: d8:6d:d9:0a:a4:48:96:c2:cb:36:e7:d1:b0:41:95:c1:0a:19: 7c:23:40:66:d7:90:62:b1:08:1d:b6:99:92:d2:87:5f:69:c6: 84:76:58:e4:b7:fa:8e:7e:1a:e8:c5:19:c2:9d:4c:dd:1b:4a: 45:e7:e8:54:47:6f:52:be:48:06:d8:b1:66:48:ea:b6:14:09: 21:68:e8:bd:1f:b2:70:ce:30:13:9d:3e:d7:08:89:d3:e1:9b: 61:8d:a2:bc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUd+eniJgIj3lXUuTxhdd8NpzU3PUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxODE4MDMzOVoX DTI2MTExNjIzNTk1OVowejFJMEcGA1UEBRNANGZlYzM5MzAzNWNiY2ViYzZlMmZl Y2ZiOGRjNzg5NTg5Zjc1MWYyN2FhOGIyMzEyYmU4NWNlNzliNTMxMzYwYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uDQ/I5fjjHvUXR6qWUD5DXMG7vT 4iPnPV8G6V/upH6pp6bOBJNNxLN62Ba4hxaUyl472l+CA48tnmhwl3VnKtsEsFtl Snyw4/0d56TPfTLRJQAkWn/aLnr/DEkuNXhm6gqhfTDiGc7j1IB6rjyOPeQlD1VH GA1i6BAStBq1Vv6gnzmsOeg9TKUtqqVGzcaYvCFcpqqyxEOY45RZeAQnkvGaqk+9 Eh/fyozVSBGku/umXTWQtz5cZv2YqnUYXZmp4VhoMFui+Oy33PArJov35irS9Lco LHIVW7ybrwVXunATD7UlV0aE7co8N+bt0FdODivMbJIUiAbtfyHkjXc2bwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOeEoZPM2/tJ9Uo5yQ2ZuB5gb/D5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmYWNhZjg2LTVkODYtNDBhYS1hNDEyLWE0YWVmNzkxNjU4MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaM0AwDQYJKoZIhvcNAQELBQADggEBAFvg2Ej+N4sl9XZGVYaQ aopP9z+AQImErkrYDFduJrb8R+gDkWEILSEwSq9ZfjtPf6KNREsGMDknA6vqJ2Qd Q0zbDWuN8G3A6fbZFda3tbolQ/zwIPI5dHg3HlEm4fC6eydliXm4xP+dxHPnyAIz tOnWqYWhcYmfnmEuUHErUC2L1m5mbBV9V8FtvgVd6dgzNu2fiJQ0ss6NdqOtJchV uiX9I9ht2QqkSJbCyzbn0bBBlcEKGXwjQGbXkGKxCB22mZLSh19pxoR2WOS3+o5+ GujFGcKdTN0bSkXn6FRHb1K+SAbYsWZI6rYUCSFo6L0fsnDOMBOdPtcIidPhm2GN orw= -----END CERTIFICATE-----Generated at Thu Aug 20 22:53:09 2026 by rpki-client