$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77b66450-4698-44c5-9f99-8e8f76945e37.roa File: 77b66450-4698-44c5-9f99-8e8f76945e37.roa (raw, json) Hash identifier: BQTJ4Orkx2D7l37HCmDtaw0bvNgTaDUQH2MftyPnmOU= Subject key identifier: 49:AA:4A:EF:AB:81:A5:4D:1D:AE:69:7B:99:D6:25:BC:86:5C:AB:F6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 31B442D30B7E47F876D2094FDAA9EBEAEAACF037 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77b66450-4698-44c5-9f99-8e8f76945e37.roa Signing time: Fri 31 Jul 2026 00:10:39 +0000 ROA not before: Fri 31 Jul 2026 00:10:39 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b4:42:d3:0b:7e:47:f8:76:d2:09:4f:da:a9:eb:ea:ea:ac:f0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:10:39 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=52c3c5795fbdb1ecbf9aa3cb2f1a828548e19e905bebd223d03e74d30ee150fc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:c1:0c:ee:d2:ca:5a:33:fd:6f:2a:d0:95: 8f:b4:d3:23:89:dd:2d:be:39:ef:66:bb:9a:e1:c3: b0:f3:59:60:34:0d:b2:f1:47:fb:8f:14:f4:b7:a7: 04:6b:41:f4:7b:9f:98:a3:00:a4:96:89:57:48:0c: e8:63:66:cc:e3:2d:2c:5b:96:72:01:8f:83:56:f3: 85:47:ba:68:32:c4:27:5b:a4:d3:66:81:d3:36:ea: 8d:e4:e5:74:29:c1:57:a6:fa:fe:2e:29:5c:6d:92: 68:33:0c:0d:b7:fa:4f:09:e4:53:76:2f:a7:c9:32: de:30:b6:2c:8b:47:f2:6a:e5:31:01:96:be:97:bc: 81:6b:5b:12:d5:d7:15:80:e8:aa:0d:5f:09:ef:68: e4:7f:8a:09:a1:f8:20:c3:f9:0c:aa:30:6b:0d:ea: 79:e4:b4:95:71:e7:10:0e:b6:5a:4e:73:91:aa:e6: 0e:69:4a:a4:5a:76:6d:50:62:fc:d4:eb:d6:a3:24: 71:ab:64:16:68:16:2b:2d:45:d8:75:6a:76:9f:98: a8:1e:20:d7:57:73:a4:17:20:44:6e:52:fc:e6:e3: a2:68:aa:3d:5f:61:66:f7:ed:a1:d6:45:d7:ac:47: c7:5e:72:8c:42:6d:1e:c2:aa:0d:77:9d:26:2f:62: db:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AA:4A:EF:AB:81:A5:4D:1D:AE:69:7B:99:D6:25:BC:86:5C:AB:F6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77b66450-4698-44c5-9f99-8e8f76945e37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:1000::/40 Signature Algorithm: sha256WithRSAEncryption 6a:01:4d:c8:59:4b:ac:8f:c9:a3:6a:1a:b7:c7:ab:9b:3a:c5: f4:c3:8f:31:44:2e:b4:51:4a:9a:6c:e9:c0:5c:0c:2a:bc:13: 77:f7:3c:9d:b3:72:b7:7a:57:eb:b5:d6:12:69:c0:f4:8c:07: 1b:ac:3b:23:aa:ad:6d:48:81:b3:f4:19:5d:27:9c:7c:51:25: 24:39:7c:08:17:b7:61:63:36:ce:c1:28:36:7d:1d:90:7a:8c: c2:d4:bb:52:69:1e:cf:5b:d1:26:79:c6:de:0e:74:a6:82:94: d1:9d:11:54:c7:f7:5b:44:cf:d9:14:bc:2b:93:45:e6:3c:18: 1d:27:1c:c2:a3:be:c2:a9:bb:42:3f:b5:77:56:5a:87:d9:6c: 57:de:04:7a:22:2d:2c:95:8e:f0:b8:46:ab:bc:f0:81:2f:c6: 5a:2c:99:33:4b:6b:82:c8:a7:c2:02:43:00:43:cc:0d:c1:f6: bb:8f:b2:cc:db:79:a0:d9:e0:26:af:52:14:36:39:d6:84:e4: 59:7d:d1:7e:2d:af:b2:bd:04:47:d1:85:d1:4b:52:55:a4:ba: a5:4b:e4:5d:c1:46:0f:b5:6c:48:c6:ae:16:58:43:6c:14:5a: 18:0d:64:36:ec:2a:ff:3a:c4:0e:21:5b:97:03:e0:57:7c:34: 00:1b:48:d9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMbRC0wt+R/h20glP2qnr6uqs8DcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMTAzOVoX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNANTJjM2M1Nzk1ZmJkYjFlY2JmOWFh M2NiMmYxYTgyODU0OGUxOWU5MDViZWJkMjIzZDAzZTc0ZDMwZWUxNTBmYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNPBDO7Syloz/W8q0JWPtNMjid0t vjnvZrua4cOw81lgNA2y8Uf7jxT0t6cEa0H0e5+YowCklolXSAzoY2bM4y0sW5Zy AY+DVvOFR7poMsQnW6TTZoHTNuqN5OV0KcFXpvr+LilcbZJoMwwNt/pPCeRTdi+n yTLeMLYsi0fyauUxAZa+l7yBa1sS1dcVgOiqDV8J72jkf4oJofggw/kMqjBrDep5 5LSVcecQDrZaTnORquYOaUqkWnZtUGL81OvWoyRxq2QWaBYrLUXYdWp2n5ioHiDX V3OkFyBEblL85uOiaKo9X2Fm9+2h1kXXrEfHXnKMQm0ewqoNd50mL2LbfwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEmqSu+rgaVNHa5pe5nWJbyGXKv2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3YjY2NDUwLTQ2OTgtNDRjNS05Zjk5LThlOGY3Njk0NWUzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+xAwDQYJKoZIhvcNAQELBQADggEBAGoBTchZS6yPyaNqGrfH q5s6xfTDjzFELrRRSpps6cBcDCq8E3f3PJ2zcrd6V+u11hJpwPSMBxusOyOqrW1I gbP0GV0nnHxRJSQ5fAgXt2FjNs7BKDZ9HZB6jMLUu1JpHs9b0SZ5xt4OdKaClNGd EVTH91tEz9kUvCuTReY8GB0nHMKjvsKpu0I/tXdWWofZbFfeBHoiLSyVjvC4Rqu8 8IEvxlosmTNLa4LIp8ICQwBDzA3B9ruPsszbeaDZ4CavUhQ2OdaE5Fl90X4tr7K9 BEfRhdFLUlWkuqVL5F3BRg+1bEjGrhZYQ2wUWhgNZDbsKv86xA4hW5cD4Fd8NAAb SNk= -----END CERTIFICATE-----Generated at Wed Aug 26 02:15:56 2026 by rpki-client