$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b56d794-06a2-4803-b98b-e9a84d35ff73.roa File: 1b56d794-06a2-4803-b98b-e9a84d35ff73.roa (raw, json) Hash identifier: ccCp6r/UXEFHxKxT2a3OUR4Td1Oprtgsyn8EorzBmMY= Subject key identifier: 9E:19:6A:8E:BF:04:4C:45:E9:1F:4A:F8:3A:9F:1E:92:E9:1F:88:55 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 77776F92FC202B07EBB97B6BAA003578139E2687 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b56d794-06a2-4803-b98b-e9a84d35ff73.roa Signing time: Thu 30 Jul 2026 00:20:11 +0000 ROA not before: Thu 30 Jul 2026 00:20:11 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:77:6f:92:fc:20:2b:07:eb:b9:7b:6b:aa:00:35:78:13:9e:26:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:20:11 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=50882d9cb2e312fcb12b150fbf27dd8e61a51441417468a6034e03e50833200f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:69:7a:43:48:6a:b1:93:64:15:8d:f0:bf:1e: 49:da:f6:82:24:10:54:64:33:4a:c5:1e:4a:86:e6: ef:01:b0:78:bf:b1:32:d9:23:80:e2:ee:53:04:59: 74:c8:48:77:81:d3:60:d4:78:d1:d0:68:df:75:7b: da:66:d1:5f:62:f4:03:b5:72:be:6b:de:c1:01:1d: 22:cd:a9:12:04:2b:47:ca:8d:3a:3d:87:cf:57:32: 6a:fc:5c:fe:c8:72:6d:f2:54:fb:66:6d:50:2b:38: 56:75:50:70:e2:d8:32:81:bf:8e:f2:50:bb:4f:fa: e8:d3:c4:00:de:b8:ba:f6:d9:31:19:ad:cb:47:3f: 2a:20:d1:ae:0c:6d:fb:b8:ca:2d:75:1d:a0:3d:8e: b1:24:ca:dd:de:42:7f:58:ee:af:d7:73:92:40:2d: 8d:89:80:84:a0:14:88:00:1d:b7:63:db:e0:f1:80: c9:31:e1:1a:cc:c2:0a:f8:ad:8e:d6:19:35:39:2d: 59:41:11:00:66:21:34:2b:09:1f:42:8f:0c:1f:98: c1:ac:55:e9:1f:af:70:2c:eb:b9:57:bb:29:43:fa: 32:26:14:88:c5:dd:e8:f4:5d:00:b4:ea:1f:5b:c0: 87:8e:00:0b:df:fe:ab:da:0a:ca:55:71:b6:4c:26: f3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:19:6A:8E:BF:04:4C:45:E9:1F:4A:F8:3A:9F:1E:92:E9:1F:88:55 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b56d794-06a2-4803-b98b-e9a84d35ff73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8840::/48 Signature Algorithm: sha256WithRSAEncryption c0:38:51:26:92:ae:e3:c9:df:04:b2:b2:82:4b:f7:f5:6e:a1: 8b:6d:44:24:bc:0e:eb:77:83:1b:b7:24:5d:5a:0f:84:f1:ee: 4c:59:4d:d2:17:67:ff:f3:d0:18:e3:74:fd:a0:b2:bf:d2:e0: 62:b6:29:41:02:4f:90:aa:3c:31:f4:b6:14:3c:58:c1:55:bf: d9:5b:ef:6a:4e:fa:fc:43:12:ac:bb:45:20:93:c4:e4:a8:8d: 81:99:b3:8c:fc:57:3a:c9:d7:df:a5:d4:1f:d4:2e:05:07:b6: a7:9f:0f:fd:f3:ac:f9:0b:cc:3f:a0:98:e8:9e:67:5c:7f:36: 26:dc:1d:e7:99:24:4c:cf:97:49:e6:1d:95:45:94:64:09:b6: 2f:b9:21:7e:be:f2:7e:e3:5d:80:4f:2f:bf:fa:21:87:af:bc: 54:19:12:df:c3:09:d4:2e:99:f6:d5:e0:51:69:a3:c9:d2:2d: 5b:cf:df:d8:01:de:e9:4a:35:9a:7c:0e:29:71:28:c2:13:60: c2:a9:bd:6e:1d:89:9f:9a:77:7a:a1:92:86:68:87:11:9d:f8: e4:84:d6:69:f8:38:65:ca:30:b0:b3:2d:ee:c7:9b:40:98:55: f2:4d:39:90:f7:86:34:18:b3:ca:c8:fe:bb:a8:f5:bd:f7:d9: 02:16:81:1a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUd3dvkvwgKwfruXtrqgA1eBOeJocwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMjAxMVoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNANTA4ODJkOWNiMmUzMTJmY2IxMmIx NTBmYmYyN2RkOGU2MWE1MTQ0MTQxNzQ2OGE2MDM0ZTAzZTUwODMzMjAwZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2l6Q0hqsZNkFY3wvx5J2vaCJBBU ZDNKxR5KhubvAbB4v7Ey2SOA4u5TBFl0yEh3gdNg1HjR0GjfdXvaZtFfYvQDtXK+ a97BAR0izakSBCtHyo06PYfPVzJq/Fz+yHJt8lT7Zm1QKzhWdVBw4tgygb+O8lC7 T/ro08QA3ri69tkxGa3LRz8qINGuDG37uMotdR2gPY6xJMrd3kJ/WO6v13OSQC2N iYCEoBSIAB23Y9vg8YDJMeEazMIK+K2O1hk1OS1ZQREAZiE0KwkfQo8MH5jBrFXp H69wLOu5V7spQ/oyJhSIxd3o9F0AtOofW8CHjgAL3/6r2grKVXG2TCbzMwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJ4Zao6/BExF6R9K+DqfHpLpH4hVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFiNTZkNzk0LTA2YTItNDgwMy1iOThiLWU5YTg0ZDM1ZmY3My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/4hAMA0GCSqGSIb3DQEBCwUAA4IBAQDAOFEmkq7jyd8EsrKC S/f1bqGLbUQkvA7rd4MbtyRdWg+E8e5MWU3SF2f/89AY43T9oLK/0uBitilBAk+Q qjwx9LYUPFjBVb/ZW+9qTvr8QxKsu0Ugk8TkqI2BmbOM/Fc6ydffpdQf1C4FB7an nw/986z5C8w/oJjonmdcfzYm3B3nmSRMz5dJ5h2VRZRkCbYvuSF+vvJ+412ATy+/ +iGHr7xUGRLfwwnULpn21eBRaaPJ0i1bz9/YAd7pSjWafA4pcSjCE2DCqb1uHYmf mnd6oZKGaIcRnfjkhNZp+DhlyjCwsy3ux5tAmFXyTTmQ94Y0GLPKyP67qPW999kC FoEa -----END CERTIFICATE-----Generated at Wed Aug 26 17:35:21 2026 by rpki-client