$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32da8c16-2b7a-48e4-8260-08677c46863d.roa File: 32da8c16-2b7a-48e4-8260-08677c46863d.roa (raw, json) Hash identifier: Cr6P20TxF1zBRx4QPtBswzwND0EdaZS2ce2lQMjFn68= Subject key identifier: 34:ED:FB:FF:32:85:F8:AA:DD:B6:92:E3:18:3E:85:06:BA:D9:C4:0B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6831D8A05629C6510AD93BBB17AD06CEEB0594E5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32da8c16-2b7a-48e4-8260-08677c46863d.roa Signing time: Mon 22 Jun 2026 00:00:42 +0000 ROA not before: Mon 22 Jun 2026 00:00:42 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:31:d8:a0:56:29:c6:51:0a:d9:3b:bb:17:ad:06:ce:eb:05:94:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:00:42 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=92e997fb91dbc08fd5d2789d6369d21152a0723efa6be4f2041c137a49e73515, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cf:17:6f:f6:1f:75:80:99:23:8b:5b:ca:f9: f8:74:c6:9a:50:92:f5:65:8f:55:fc:c5:cf:41:6f: 0f:c6:d5:10:62:57:08:78:e2:67:b9:d5:f9:4f:36: 8a:e0:de:22:09:83:4c:9a:99:8a:a8:b4:17:f5:aa: 3c:91:5d:87:da:90:a4:16:75:18:e1:e4:73:5b:c5: 51:27:c4:b9:ba:26:16:59:89:f8:60:63:02:a2:8e: 66:5e:08:b5:4d:ad:b7:fc:65:d1:71:93:ad:e8:59: 60:67:7c:1f:d0:4d:cb:5c:63:be:48:c7:77:5c:b0: 6e:eb:a5:42:db:9e:02:81:bb:b6:a4:ea:ba:53:29: f4:d1:15:b3:32:ea:c9:df:43:13:83:6c:2d:48:05: 41:76:fe:d9:9a:45:4b:5f:6b:99:77:18:07:4f:46: 33:d5:37:87:c6:8b:5b:05:b5:9b:ff:41:99:c3:0d: 8b:98:d2:3b:a9:ea:d8:f3:d3:6c:35:79:6d:f5:bc: 3c:dc:bb:da:8f:3b:2b:93:7d:2b:61:9d:c3:c3:c1: ec:ba:d8:b3:a3:33:f4:3c:1f:fa:fa:00:b1:81:a4: 3b:b3:ef:fa:1d:25:d9:e1:da:a0:6b:4c:bf:19:b3: 06:a4:d1:f0:e9:91:ac:09:1d:0d:a5:eb:13:e1:da: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:ED:FB:FF:32:85:F8:AA:DD:B6:92:E3:18:3E:85:06:BA:D9:C4:0B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32da8c16-2b7a-48e4-8260-08677c46863d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:4800::/40 Signature Algorithm: sha256WithRSAEncryption 27:65:80:97:6d:6e:68:cb:d0:0a:37:f7:4a:fe:4b:f8:31:b0: b1:d4:b9:1e:77:6d:70:0a:83:5f:e0:36:85:58:98:51:4b:07: 52:d4:84:14:50:26:78:b3:d2:d7:54:74:81:4f:e1:85:2a:d6: 59:5d:3d:6f:ce:51:4d:a0:83:a1:81:82:24:ae:98:1e:ec:63: e0:b2:62:5e:0c:db:18:e0:72:3b:9c:56:d1:9b:4e:3d:0a:ab: a5:09:c5:bd:83:1a:cf:f6:97:85:21:cb:55:af:23:bd:ad:be: 8c:b1:35:0f:bd:5c:8a:d5:60:83:d3:4f:73:d6:e5:85:b6:f1: 4c:88:5e:79:e0:b1:84:1f:4d:5b:18:af:ac:f8:ef:29:6f:40: 4f:cf:fe:cb:6f:57:b1:e2:4a:e8:4c:ae:92:d5:f4:a9:c0:66: c0:9c:b6:cc:4e:8d:7d:12:7e:3f:4c:a1:89:2d:1e:5d:fc:03: a1:73:8d:cc:c2:5d:9e:33:a8:a7:11:61:25:15:44:8e:06:7d: 71:51:35:83:58:61:64:23:17:dc:82:5c:57:07:61:fe:05:a3: dc:43:7f:63:a0:83:32:02:0e:8c:49:30:d8:49:87:99:78:67: 09:76:c7:d7:49:e7:f3:26:90:3f:c9:af:4c:99:69:56:88:b9: 9b:90:d7:61 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaDHYoFYpxlEK2Tu7F60GzusFlOUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMDA0MloX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNAOTJlOTk3ZmI5MWRiYzA4ZmQ1ZDI3 ODlkNjM2OWQyMTE1MmEwNzIzZWZhNmJlNGYyMDQxYzEzN2E0OWU3MzUxNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc8Xb/YfdYCZI4tbyvn4dMaaUJL1 ZY9V/MXPQW8PxtUQYlcIeOJnudX5TzaK4N4iCYNMmpmKqLQX9ao8kV2H2pCkFnUY 4eRzW8VRJ8S5uiYWWYn4YGMCoo5mXgi1Ta23/GXRcZOt6FlgZ3wf0E3LXGO+SMd3 XLBu66VC254Cgbu2pOq6Uyn00RWzMurJ30MTg2wtSAVBdv7ZmkVLX2uZdxgHT0Yz 1TeHxotbBbWb/0GZww2LmNI7qerY89NsNXlt9bw83Lvajzsrk30rYZ3Dw8Hsutiz ozP0PB/6+gCxgaQ7s+/6HSXZ4dqga0y/GbMGpNHw6ZGsCR0NpesT4drJyQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDTt+/8yhfiq3baS4xg+hQa62cQLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMyZGE4YzE2LTJiN2EtNDhlNC04MjYwLTA4Njc3YzQ2ODYzZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba60gwDQYJKoZIhvcNAQELBQADggEBACdlgJdtbmjL0Ao390r+ S/gxsLHUuR53bXAKg1/gNoVYmFFLB1LUhBRQJniz0tdUdIFP4YUq1lldPW/OUU2g g6GBgiSumB7sY+CyYl4M2xjgcjucVtGbTj0Kq6UJxb2DGs/2l4Uhy1WvI72tvoyx NQ+9XIrVYIPTT3PW5YW28UyIXnngsYQfTVsYr6z47ylvQE/P/stvV7HiSuhMrpLV 9KnAZsCctsxOjX0Sfj9MoYktHl38A6FzjczCXZ4zqKcRYSUVRI4GfXFRNYNYYWQj F9yCXFcHYf4Fo9xDf2OggzICDoxJMNhJh5l4Zwl2x9dJ5/MmkD/Jr0yZaVaIuZuQ 12E= -----END CERTIFICATE-----Generated at Thu Jul 9 11:05:19 2026 by rpki-client