$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa File: 77745ad7-44b5-44a8-9e13-4096720b7c90.roa (raw, json) Hash identifier: istMdieKpJFPM578DRMXOsyTUeRRRwybORkW9/I6C24= Subject key identifier: 35:BC:FD:4A:3E:03:69:8D:EA:7F:AE:DB:5D:BA:5E:2D:1E:30:AE:E5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6DFAA985A4403E06E8DA0251843797316E5F8AA9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa Signing time: Thu 30 Jul 2026 00:10:11 +0000 ROA not before: Thu 30 Jul 2026 00:10:11 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:fa:a9:85:a4:40:3e:06:e8:da:02:51:84:37:97:31:6e:5f:8a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:10:11 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=891c879076d39f0f34417c766921d628397c4dd2f5bb0b26d98c7207ddf6032b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f6:ca:a3:12:34:6f:8f:b0:5a:6e:1b:0d:12: 52:e9:e0:46:3b:66:df:79:f8:f6:16:1a:ff:22:ac: 36:e9:44:d6:28:50:de:a2:7b:c0:64:7d:85:29:1d: 48:d2:4a:25:b7:d0:99:ae:48:01:c1:84:8f:31:b2: dc:80:f0:b1:60:88:f8:e3:17:64:a5:c5:df:2e:64: a4:db:a7:99:2e:76:91:b5:94:1c:79:be:79:11:75: 9e:e9:a9:b8:31:f1:a7:c9:96:59:61:0f:37:6f:1b: 50:68:bf:0a:a7:1a:a4:f6:85:ce:1b:7c:ee:fb:97: 52:a2:88:94:f5:d6:b4:b7:67:19:18:8d:dc:96:b4: f0:09:8d:9b:fd:45:89:de:be:c9:27:45:28:6b:58: 5a:bb:e8:8d:cd:5d:84:96:33:08:e8:7c:60:04:10: 89:75:59:68:8d:2f:62:68:61:d7:e5:a3:2c:77:7d: b6:bc:cf:ea:b8:ee:f2:46:48:b5:92:62:bb:34:70: cb:54:0c:d7:2f:7f:bb:c3:ce:97:88:6b:63:35:34: 3b:cc:7a:fd:d3:d5:98:f4:9b:69:fc:0f:94:5a:15: c1:55:43:96:09:50:5e:b1:93:d2:89:c0:1e:8a:25: fc:3a:00:d6:56:c0:78:26:d1:7f:2f:57:b0:2e:64: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BC:FD:4A:3E:03:69:8D:EA:7F:AE:DB:5D:BA:5E:2D:1E:30:AE:E5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:9080::/48 Signature Algorithm: sha256WithRSAEncryption 71:4a:8e:22:51:15:63:8d:7a:bb:44:f5:5c:03:51:6b:df:11: 67:b8:79:90:7b:df:51:54:41:94:6e:31:1e:3c:00:94:a4:16: 10:0a:03:52:c1:8e:d2:a6:fd:4d:56:56:4b:86:f1:ac:06:72: 33:50:59:52:f4:f0:91:79:a3:46:3f:c1:0b:68:21:8b:00:a0: 36:db:b9:7b:96:85:ec:e0:7e:63:47:8e:a0:ec:f9:93:90:e0: c1:29:29:f7:f5:30:e0:85:90:ba:b1:d0:10:54:e2:b6:df:b8: d7:ce:e6:0b:dd:1a:a9:3c:c4:e2:6a:19:cd:36:37:cb:93:9b: 7a:e4:2e:04:36:c2:c8:6d:7f:8a:14:7d:20:44:9b:8c:72:1b: c0:7d:32:7b:e1:61:20:08:85:8f:c8:e0:ff:8b:51:7f:9a:b2: f4:55:f2:1f:a0:fb:5a:85:e3:62:6b:49:17:f3:4a:84:6e:b1: 35:ac:48:13:80:60:a9:4e:d6:1f:b5:5a:d8:ff:69:95:61:2d: 97:58:91:bf:d9:ad:17:75:40:a3:26:09:0c:f8:4c:2f:bf:15: 95:d6:37:15:93:10:0d:3d:af:a1:53:90:14:7e:23:8d:58:27: 85:e6:27:7a:70:8d:1c:b0:fe:20:7a:2c:41:87:5b:e6:f8:39: e8:53:c3:91 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbfqphaRAPgbo2gJRhDeXMW5fiqkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMTAxMVoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAODkxYzg3OTA3NmQzOWYwZjM0NDE3 Yzc2NjkyMWQ2MjgzOTdjNGRkMmY1YmIwYjI2ZDk4YzcyMDdkZGY2MDMyYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/bKoxI0b4+wWm4bDRJS6eBGO2bf efj2Fhr/Iqw26UTWKFDeonvAZH2FKR1I0kolt9CZrkgBwYSPMbLcgPCxYIj44xdk pcXfLmSk26eZLnaRtZQceb55EXWe6am4MfGnyZZZYQ83bxtQaL8Kpxqk9oXOG3zu +5dSooiU9da0t2cZGI3clrTwCY2b/UWJ3r7JJ0Uoa1hau+iNzV2EljMI6HxgBBCJ dVlojS9iaGHX5aMsd322vM/quO7yRki1kmK7NHDLVAzXL3+7w86XiGtjNTQ7zHr9 09WY9Jtp/A+UWhXBVUOWCVBesZPSicAeiiX8OgDWVsB4JtF/L1ewLmR4qwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDW8/Uo+A2mN6n+u2126Xi0eMK7lMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3NzQ1YWQ3LTQ0YjUtNDRhOC05ZTEzLTQwOTY3MjBiN2M5MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/5CAMA0GCSqGSIb3DQEBCwUAA4IBAQBxSo4iURVjjXq7RPVc A1Fr3xFnuHmQe99RVEGUbjEePACUpBYQCgNSwY7Spv1NVlZLhvGsBnIzUFlS9PCR eaNGP8ELaCGLAKA227l7loXs4H5jR46g7PmTkODBKSn39TDghZC6sdAQVOK237jX zuYL3RqpPMTiahnNNjfLk5t65C4ENsLIbX+KFH0gRJuMchvAfTJ74WEgCIWPyOD/ i1F/mrL0VfIfoPtaheNia0kX80qEbrE1rEgTgGCpTtYftVrY/2mVYS2XWJG/2a0X dUCjJgkM+EwvvxWV1jcVkxANPa+hU5AUfiONWCeF5id6cI0csP4geixBh1vm+Dno U8OR -----END CERTIFICATE-----Generated at Wed Aug 26 00:38:38 2026 by rpki-client