$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f1effb4-ca8a-40a4-896e-98e367faa742.roa File: 7f1effb4-ca8a-40a4-896e-98e367faa742.roa (raw, json) Hash identifier: foya3HrhddJgO5PwjDEUtwQ+FJ+1WIXgs94QVZqhqZ4= Subject key identifier: 5D:4D:86:3B:FA:85:2F:2F:E6:68:D6:24:ED:3D:76:EB:53:AB:D4:6C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 52452149AA2E74257C9E05FD8B26F0070DCFC374 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f1effb4-ca8a-40a4-896e-98e367faa742.roa Signing time: Mon 22 Jun 2026 00:01:20 +0000 ROA not before: Mon 22 Jun 2026 00:01:20 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:45:21:49:aa:2e:74:25:7c:9e:05:fd:8b:26:f0:07:0d:cf:c3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:01:20 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=d87200426933e145ea1b27cc8ffedd67f9343236a844c08ba383135940d3e61c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:33:9b:e3:60:1d:75:0a:82:78:4c:2d:8f:1b: 3a:10:0d:a3:55:17:37:44:ba:ea:42:49:2a:10:21: e9:3c:36:33:17:85:98:7d:a9:16:82:8b:41:c6:12: 43:e8:0f:fd:40:82:13:a9:44:45:42:01:02:55:c8: 80:18:b4:90:0e:43:b5:61:aa:a6:49:ac:a9:06:f0: 64:5a:b9:73:b0:66:78:27:a0:02:61:9f:a8:4e:3f: 5d:28:55:fc:f4:bb:5b:23:8e:95:b7:39:f0:3e:09: 37:4a:e4:6c:1f:75:29:9c:f8:82:53:ce:a4:67:1c: f8:a2:18:7b:e3:cf:56:d9:1b:3c:2c:20:bb:7a:41: 78:6c:63:38:45:93:c8:12:e7:a6:b4:ee:10:8d:02: fc:aa:5b:49:85:4b:b1:10:90:36:18:a8:9c:66:44: 04:39:2e:a3:d6:67:54:d6:14:e6:0d:52:94:68:6d: 1d:8d:6a:31:eb:a7:d0:cc:7d:59:91:fd:a3:bb:99: b1:99:1b:8a:0b:49:82:4b:99:e7:fa:bf:e9:22:77: 18:41:0e:06:5d:72:54:e3:1d:82:07:82:7d:68:e6: eb:61:8e:d6:d3:22:36:fe:17:fc:cf:8f:8c:28:a5: b1:f6:7c:dd:9b:4b:55:0d:1a:c9:3d:2a:62:04:29: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4D:86:3B:FA:85:2F:2F:E6:68:D6:24:ED:3D:76:EB:53:AB:D4:6C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f1effb4-ca8a-40a4-896e-98e367faa742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:8840::/48 Signature Algorithm: sha256WithRSAEncryption a8:ea:49:57:46:d9:b7:b1:f4:e3:60:7c:1e:fb:62:69:18:73: 2d:81:68:51:2c:96:02:00:b8:44:33:f8:3f:cf:48:fc:8b:4c: b8:09:06:a9:b2:b4:a1:5a:a8:25:42:78:c2:b6:62:5e:cc:50: a6:58:b0:aa:41:0a:6b:18:a1:2d:6d:06:8e:b9:de:61:d9:ba: 4a:2c:e0:19:33:9b:09:8a:a2:85:1e:e9:19:a6:8f:49:e2:d2: 3c:40:24:19:f7:97:99:ab:c9:07:c1:64:08:92:0f:68:cc:9a: f5:63:82:43:cb:64:89:e9:99:a8:e2:67:2f:a0:42:9c:cb:ad: be:e4:78:1a:6d:d3:5d:c6:16:6d:0d:d7:5f:8a:d6:2f:31:0b: 08:92:6f:7d:76:9d:91:dd:c9:72:e4:32:30:d4:23:cd:9e:46: bf:66:49:ca:fc:ac:f4:04:95:7c:a0:49:9a:33:bb:b8:3f:1e: d0:1d:8d:e7:97:6c:a9:20:26:86:3c:04:c2:d2:b0:c5:5a:28: 9a:d9:d0:4b:54:0d:da:b1:14:71:60:0b:04:53:27:1e:3d:7d: 46:6e:1c:88:ba:fe:0b:42:3f:eb:ed:06:48:64:dc:bf:df:82: 15:1d:5d:97:d4:ca:0b:5b:32:85:6c:83:9c:ab:dd:94:02:8c: 19:d5:f8:6b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUkUhSaoudCV8ngX9iybwBw3Pw3QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMDEyMFoX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNAZDg3MjAwNDI2OTMzZTE0NWVhMWIy N2NjOGZmZWRkNjdmOTM0MzIzNmE4NDRjMDhiYTM4MzEzNTk0MGQzZTYxYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTOb42AddQqCeEwtjxs6EA2jVRc3 RLrqQkkqECHpPDYzF4WYfakWgotBxhJD6A/9QIITqURFQgECVciAGLSQDkO1Yaqm SaypBvBkWrlzsGZ4J6ACYZ+oTj9dKFX89LtbI46VtznwPgk3SuRsH3UpnPiCU86k Zxz4ohh7489W2Rs8LCC7ekF4bGM4RZPIEuemtO4QjQL8qltJhUuxEJA2GKicZkQE OS6j1mdU1hTmDVKUaG0djWox66fQzH1Zkf2ju5mxmRuKC0mCS5nn+r/pIncYQQ4G XXJU4x2CB4J9aObrYY7W0yI2/hf8z4+MKKWx9nzdm0tVDRrJPSpiBCk5KQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFF1Nhjv6hS8v5mjWJO09dutTq9RsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdmMWVmZmI0LWNhOGEtNDBhNC04OTZlLTk4ZTM2N2ZhYTc0Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba64hAMA0GCSqGSIb3DQEBCwUAA4IBAQCo6klXRtm3sfTjYHwe +2JpGHMtgWhRLJYCALhEM/g/z0j8i0y4CQapsrShWqglQnjCtmJezFCmWLCqQQpr GKEtbQaOud5h2bpKLOAZM5sJiqKFHukZpo9J4tI8QCQZ95eZq8kHwWQIkg9ozJr1 Y4JDy2SJ6Zmo4mcvoEKcy62+5HgabdNdxhZtDddfitYvMQsIkm99dp2R3cly5DIw 1CPNnka/ZknK/Kz0BJV8oEmaM7u4Px7QHY3nl2ypICaGPATC0rDFWiia2dBLVA3a sRRxYAsEUycePX1GbhyIuv4LQj/r7QZIZNy/34IVHV2X1MoLWzKFbIOcq92UAowZ 1fhr -----END CERTIFICATE-----Generated at Thu Jul 9 11:02:14 2026 by rpki-client