$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/762f9af4-6b86-42f6-babd-ee50573eb662.roa File: 762f9af4-6b86-42f6-babd-ee50573eb662.roa (raw, json) Hash identifier: HtBYs12OAogHSo9iLs+oJ9LX25nPhVo1hXIEE6rb5Ng= Subject key identifier: FD:33:99:CF:7D:85:AB:85:9E:EA:C3:F1:B9:98:62:B1:80:FB:AB:DC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F1B0AAD1C9D9C29F3AC68E2FDF36D6052F303D6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/762f9af4-6b86-42f6-babd-ee50573eb662.roa Signing time: Fri 31 Jul 2026 00:10:56 +0000 ROA not before: Fri 31 Jul 2026 00:10:56 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:b0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1b:0a:ad:1c:9d:9c:29:f3:ac:68:e2:fd:f3:6d:60:52:f3:03:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:10:56 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=7aeb13a2c87058efb504ef79efc1d5d28eff2c455ff6371bae7bce53af2fe62e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:05:d9:68:75:70:ad:d7:88:74:c0:3d:6a: 71:e5:8d:43:45:3a:f9:95:29:80:d6:10:1e:df:67: 93:a3:68:ec:c5:1f:5d:dc:50:1d:b3:a5:cc:1b:cb: 0f:61:38:17:6b:e5:58:bc:a7:61:31:e9:ae:a4:66: c3:fd:39:f5:fd:d5:e0:26:2d:e5:15:5d:0c:55:f4: 0c:38:08:47:88:bb:d5:b8:ca:a5:cd:fd:49:76:75: 18:ff:63:0f:a5:c8:08:bb:41:b3:7f:5c:7d:bf:e4: c5:15:f2:d7:07:79:cd:6e:0a:23:29:78:5a:2d:9e: a1:60:57:4c:f4:3b:c5:68:49:45:54:7f:4b:86:8f: 10:f6:5b:59:56:79:f4:f4:6d:5d:48:60:40:ad:17: 0a:c5:16:2c:bc:55:52:ad:a3:6c:d7:95:08:86:9f: 14:f1:84:3f:b8:c6:4f:3f:30:46:6c:aa:84:7e:c3: 32:43:32:af:0e:20:df:20:e1:9d:a2:49:6d:14:9d: 5f:eb:fb:5a:47:45:c6:e9:1e:9d:13:44:68:bb:29: b9:32:d3:93:39:e0:4c:97:87:c2:aa:f3:df:09:b3: c8:0e:9f:21:ff:26:6b:e9:b7:ed:5c:f8:f3:a1:58: 3d:6e:98:40:d0:6c:ea:94:39:1f:c3:e0:30:d3:7f: 19:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:33:99:CF:7D:85:AB:85:9E:EA:C3:F1:B9:98:62:B1:80:FB:AB:DC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/762f9af4-6b86-42f6-babd-ee50573eb662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:b0c0::/48 Signature Algorithm: sha256WithRSAEncryption 4a:c2:63:5e:c8:0e:97:67:d0:1c:99:df:ac:75:ab:05:fb:ed: 70:e4:b0:96:a5:f1:ef:a4:47:c5:04:23:7c:44:33:3d:5a:ad: 2e:77:ed:ec:0a:ca:9d:1e:73:ca:45:e1:13:35:ed:55:21:c2: 95:19:2b:e1:bb:37:87:28:5d:89:0b:17:82:98:d9:b3:99:62: 9d:7a:36:6e:d5:95:49:2d:13:e7:0c:80:ae:15:04:87:bd:4a: 26:0a:5e:c9:4b:3f:3c:54:14:32:2b:9d:a4:d2:35:c4:41:76: fd:7c:86:4c:84:19:77:4b:5a:4a:a0:98:5a:18:79:f3:30:8c: f3:e4:1e:78:69:7b:71:ea:94:79:2a:45:85:59:d2:a0:49:02: c8:c6:95:76:67:c0:0f:12:e4:12:b3:2c:d8:c5:35:6b:1f:8b: 58:91:92:a9:00:dc:db:e9:c7:c5:bd:65:48:31:1d:c4:ba:be: a7:e7:57:61:1d:b5:0c:3a:2f:ad:83:e9:05:d6:16:f2:04:d3: ae:51:69:25:e4:ac:93:a5:33:90:bd:5c:d1:8b:33:3a:e8:c1: 93:1c:f4:43:d5:41:cb:4d:04:9b:a5:35:e1:23:11:4a:ec:f0: 90:f8:80:b7:f8:fd:ca:c8:07:9d:ff:83:0a:fb:c8:c3:d1:e8: 03:93:4b:14 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfxsKrRydnCnzrGji/fNtYFLzA9YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMTA1NloX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNAN2FlYjEzYTJjODcwNThlZmI1MDRl Zjc5ZWZjMWQ1ZDI4ZWZmMmM0NTVmZjYzNzFiYWU3YmNlNTNhZjJmZTYyZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1UF2Wh1cK3XiHTAPWpx5Y1DRTr5 lSmA1hAe32eTo2jsxR9d3FAds6XMG8sPYTgXa+VYvKdhMemupGbD/Tn1/dXgJi3l FV0MVfQMOAhHiLvVuMqlzf1JdnUY/2MPpcgIu0Gzf1x9v+TFFfLXB3nNbgojKXha LZ6hYFdM9DvFaElFVH9Lho8Q9ltZVnn09G1dSGBArRcKxRYsvFVSraNs15UIhp8U 8YQ/uMZPPzBGbKqEfsMyQzKvDiDfIOGdokltFJ1f6/taR0XG6R6dE0Rouym5MtOT OeBMl4fCqvPfCbPIDp8h/yZr6bftXPjzoVg9bphA0GzqlDkfw+Aw038ZKwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP0zmc99hauFnurD8bmYYrGA+6vcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc2MmY5YWY0LTZiODYtNDJmNi1iYWJkLWVlNTA1NzNlYjY2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaALDAMA0GCSqGSIb3DQEBCwUAA4IBAQBKwmNeyA6XZ9Acmd+s dasF++1w5LCWpfHvpEfFBCN8RDM9Wq0ud+3sCsqdHnPKReETNe1VIcKVGSvhuzeH KF2JCxeCmNmzmWKdejZu1ZVJLRPnDICuFQSHvUomCl7JSz88VBQyK52k0jXEQXb9 fIZMhBl3S1pKoJhaGHnzMIzz5B54aXtx6pR5KkWFWdKgSQLIxpV2Z8APEuQSsyzY xTVrH4tYkZKpANzb6cfFvWVIMR3Eur6n51dhHbUMOi+tg+kF1hbyBNOuUWkl5KyT pTOQvVzRizM66MGTHPRD1UHLTQSbpTXhIxFK7PCQ+IC3+P3KyAed/4MK+8jD0egD k0sU -----END CERTIFICATE-----Generated at Wed Aug 26 16:06:39 2026 by rpki-client