$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/768a1d35-dcb0-4972-b5ee-33708b8e02d0.roa File: 768a1d35-dcb0-4972-b5ee-33708b8e02d0.roa (raw, json) Hash identifier: tV+yFcG2LpvSDWrRkMatitDpedBDagOVMg0QyuojFv4= Subject key identifier: 4A:69:C7:B6:B9:10:CC:94:79:80:20:92:E2:C0:0C:47:61:1C:F1:54 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3A60828706E0C731E93734A8F3F5677E5A5F70 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/768a1d35-dcb0-4972-b5ee-33708b8e02d0.roa Signing time: Fri 31 Jul 2026 00:11:17 +0000 ROA not before: Fri 31 Jul 2026 00:11:17 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:b0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:60:82:87:06:e0:c7:31:e9:37:34:a8:f3:f5:67:7e:5a:5f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:11:17 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=de445beea2b24f666b8b12f47620b18b9b67b92a05b8fee83eb1dea7e00c36bf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:03:08:68:04:0d:f5:19:c4:2d:80:c5:f0: 05:e4:af:82:f8:9a:16:ed:29:09:91:00:ab:e2:5b: a4:b2:47:3a:82:d5:d3:c8:94:b4:06:38:49:3a:cf: 57:d8:be:92:11:54:f3:f6:76:72:82:83:8b:32:c2: 5d:8f:d8:64:b3:80:6f:6a:c0:e8:57:43:88:e6:32: ca:c4:19:72:23:21:e7:2b:da:03:57:46:42:7a:2d: 46:01:93:b0:a3:4d:f6:02:a8:e4:2e:9f:ff:d2:ed: cf:55:55:5c:ed:35:45:23:43:64:b7:61:9b:89:fb: c3:eb:fa:9e:51:f3:22:77:e8:34:76:f0:8f:db:76: 12:17:a6:ff:95:4b:07:ec:b0:16:d5:62:0e:18:14: af:73:e9:36:eb:f1:15:a1:c1:e3:61:13:cd:88:36: 7b:99:2c:55:b4:94:8f:06:46:d1:e4:ab:a5:9f:00: b2:8c:cc:da:a2:0a:1c:96:e2:b3:a0:71:c9:78:3f: 0c:7b:36:cf:94:b4:3e:83:cf:cb:23:b0:1c:54:69: 33:7d:10:bf:24:58:24:ab:3c:33:a1:22:4b:9b:8d: fd:dd:13:06:65:97:e7:52:dc:25:95:86:4f:17:8d: 43:55:d6:d1:5c:c6:06:69:fb:d4:d1:37:09:b2:2a: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:69:C7:B6:B9:10:CC:94:79:80:20:92:E2:C0:0C:47:61:1C:F1:54 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/768a1d35-dcb0-4972-b5ee-33708b8e02d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:b0c0::/48 Signature Algorithm: sha256WithRSAEncryption 55:1c:47:25:50:38:95:e5:94:6c:f2:a0:9b:42:68:99:b6:cf: 43:06:ed:b0:11:c3:20:26:97:5b:b5:a5:ab:c2:78:3f:68:28: 6e:5b:1c:17:f9:1d:8a:79:9e:ec:8f:24:b4:05:c1:23:fc:2f: 1b:8c:ba:6d:56:78:8a:e9:5d:36:75:f5:76:2d:13:8f:cc:00: d2:b6:85:4f:c9:d8:c3:c9:0f:dd:d9:9b:bb:9b:2d:e2:5a:04: 1c:6b:b4:ba:f9:c1:30:ea:62:ff:7d:97:25:81:88:71:09:24: 30:d4:9f:63:af:91:5c:40:dc:65:d6:da:3b:78:cf:ac:d7:7e: 37:08:79:0b:a6:40:60:de:d0:01:ee:12:de:eb:7e:94:e0:a5: 02:77:ec:f2:5c:ba:50:dd:75:21:f8:81:47:9b:b7:4a:f2:19: ad:8f:e3:51:ed:eb:38:74:db:91:bd:4c:74:b3:3b:d5:3b:43: a6:e5:17:7c:12:f6:cb:02:ac:ff:3c:b4:d6:7e:df:15:1e:cc: 8b:e1:e5:f9:ad:b6:5f:5e:57:89:ac:3d:1e:f3:74:15:25:1b: c0:f1:b6:4e:b7:53:97:8a:4e:48:4c:e0:b9:ee:90:2d:ef:81: e2:c1:4c:7e:42:3c:75:6c:74:9d:24:88:ed:98:f8:44:95:da: 79:2d:6c:8a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgITOmCChwbgxzHpNzSo8/VnflpfcDANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjYwNzMxMDAxMTE3WhcN MjYxMDI5MjM1OTU5WjB6MUkwRwYDVQQFE0BkZTQ0NWJlZWEyYjI0ZjY2NmI4YjEy ZjQ3NjIwYjE4YjliNjdiOTJhMDViOGZlZTgzZWIxZGVhN2UwMGMzNmJmMS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiZQMIaAQN9RnELYDF8AXkr4L4mhbt KQmRAKviW6SyRzqC1dPIlLQGOEk6z1fYvpIRVPP2dnKCg4sywl2P2GSzgG9qwOhX Q4jmMsrEGXIjIecr2gNXRkJ6LUYBk7CjTfYCqOQun//S7c9VVVztNUUjQ2S3YZuJ +8Pr+p5R8yJ36DR28I/bdhIXpv+VSwfssBbVYg4YFK9z6Tbr8RWhweNhE82INnuZ LFW0lI8GRtHkq6WfALKMzNqiChyW4rOgccl4Pwx7Ns+UtD6Dz8sjsBxUaTN9EL8k WCSrPDOhIkubjf3dEwZll+dS3CWVhk8XjUNV1tFcxgZp+9TRNwmyKvW3AgMBAAGj ggJLMIICRzAdBgNVHQ4EFgQUSmnHtrkQzJR5gCCS4sAMR2Ec8VQwHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv NzY4YTFkMzUtZGNiMC00OTcyLWI1ZWUtMzM3MDhiOGUwMmQwLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkBtrysMAwDQYJKoZIhvcNAQELBQADggEBAFUcRyVQOJXllGzyoJtC aJm2z0MG7bARwyAml1u1pavCeD9oKG5bHBf5HYp5nuyPJLQFwSP8LxuMum1WeIrp XTZ19XYtE4/MANK2hU/J2MPJD93Zm7ubLeJaBBxrtLr5wTDqYv99lyWBiHEJJDDU n2OvkVxA3GXW2jt4z6zXfjcIeQumQGDe0AHuEt7rfpTgpQJ37PJculDddSH4gUeb t0ryGa2P41Ht6zh025G9THSzO9U7Q6blF3wS9ssCrP88tNZ+3xUezIvh5fmttl9e V4msPR7zdBUlG8Dxtk63U5eKTkhM4LnukC3vgeLBTH5CPHVsdJ0kiO2Y+ESV2nkt bIo= -----END CERTIFICATE-----Generated at Wed Aug 26 08:06:22 2026 by rpki-client