$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/964875b1-60c6-4631-a709-ba5faa0c06e7.roa File: 964875b1-60c6-4631-a709-ba5faa0c06e7.roa (raw, json) Hash identifier: D40QdS/8H2X5Mu7zqLZfwe0g8l5KsrKT1SLfu8UDT4Q= Subject key identifier: F0:BC:0D:AD:F3:98:C8:23:05:AF:95:96:0E:F4:5A:B9:2B:32:56:0B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4A346BCB10D0C87C47E6B823DA16275025866FC6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/964875b1-60c6-4631-a709-ba5faa0c06e7.roa Signing time: Fri 31 Jul 2026 00:01:18 +0000 ROA not before: Fri 31 Jul 2026 00:01:18 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:34:6b:cb:10:d0:c8:7c:47:e6:b8:23:da:16:27:50:25:86:6f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:01:18 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=78d57e05dfe4b9ce98fd77962a8db5228fb949f185cbab1769cb633cc65f2d92, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:fd:2c:d5:2e:3a:14:28:ca:fc:54:2b:8c: 7e:21:33:18:a1:6d:65:cf:68:20:92:48:75:4c:01: e4:52:ea:8c:ef:59:82:09:a1:54:48:20:73:b9:74: 5b:c8:f8:05:2f:ce:10:05:f0:07:47:f9:ba:d9:00: 72:a6:bf:ff:7a:b9:58:0f:f1:43:43:7e:b3:a7:b9: d4:3b:24:31:b7:bb:c7:2b:13:d3:40:ad:47:20:81: 66:11:7f:80:4d:74:82:f6:7c:39:bf:62:02:55:9e: df:ed:21:81:80:8d:c8:bb:de:84:e8:c6:60:4d:a4: 46:7d:7f:c0:83:e5:dd:e6:11:b4:26:3f:4a:1f:31: 1f:b1:a2:bb:41:84:7d:1e:eb:8c:77:8e:b3:4d:75: d4:87:f8:9e:0e:78:a4:4b:70:e9:70:e4:ac:bb:3c: 51:cf:5d:e8:4c:f1:ee:c6:8e:52:07:7a:07:bb:9e: be:78:af:0f:b6:16:4a:85:e1:7b:f2:e6:09:c7:cd: 03:12:02:5b:b8:d2:06:3e:02:08:51:47:df:84:1a: d4:22:13:df:8b:7d:7c:e7:92:c3:b4:7c:dd:1a:69: d5:91:af:f7:65:72:44:30:cc:75:72:6d:d8:65:d0: d4:df:6e:ca:de:a1:d1:33:9a:d0:f1:6b:44:c1:9e: ff:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BC:0D:AD:F3:98:C8:23:05:AF:95:96:0E:F4:5A:B9:2B:32:56:0B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/964875b1-60c6-4631-a709-ba5faa0c06e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:2000::/40 Signature Algorithm: sha256WithRSAEncryption 49:14:ee:be:bc:07:e0:90:a1:43:53:b5:ca:ca:64:91:f6:73: 93:34:fb:43:1e:39:f7:db:f8:2f:67:90:cb:fc:98:60:22:73: 06:7a:28:99:47:56:15:38:c1:c1:0c:2e:60:0e:0e:73:ed:6b: aa:cc:c9:7c:39:33:ed:d3:bf:dd:16:0c:c1:3d:00:19:43:67: 52:90:bc:ba:11:0e:f6:d8:91:eb:6a:cf:40:64:02:09:fb:5c: 7f:df:8a:31:a5:81:8c:b1:09:23:26:56:c4:7b:f5:ef:be:f8: 45:89:af:5e:9e:c3:d9:3a:ca:d6:9c:eb:9b:04:72:61:42:40: 2a:c6:25:90:41:69:7d:10:59:91:34:70:46:f7:07:d4:d7:32: 7c:a5:ac:7a:7b:54:17:c9:97:bc:48:37:01:77:9d:2f:99:9c: f4:6e:72:65:cd:5e:ce:40:10:25:86:e3:bc:67:74:7d:dd:5d: e7:29:ab:11:7d:55:b5:c7:4d:8f:45:34:0b:48:28:b0:c1:38: e3:3f:91:23:42:43:40:ce:d5:9e:cb:4a:84:bc:53:7a:39:bc: 12:de:e5:7d:bf:c6:19:da:2f:be:b9:5f:70:43:52:2f:3f:8e: aa:bf:38:8d:75:bb:85:c7:60:bb:09:30:d7:95:ad:a5:b7:33: fa:93:62:f7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSjRryxDQyHxH5rgj2hYnUCWGb8YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMDExOFoX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNANzhkNTdlMDVkZmU0YjljZTk4ZmQ3 Nzk2MmE4ZGI1MjI4ZmI5NDlmMTg1Y2JhYjE3NjljYjYzM2NjNjVmMmQ5MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwob9LNUuOhQoyvxUK4x+ITMYoW1l z2ggkkh1TAHkUuqM71mCCaFUSCBzuXRbyPgFL84QBfAHR/m62QBypr//erlYD/FD Q36zp7nUOyQxt7vHKxPTQK1HIIFmEX+ATXSC9nw5v2ICVZ7f7SGBgI3Iu96E6MZg TaRGfX/Ag+Xd5hG0Jj9KHzEfsaK7QYR9HuuMd46zTXXUh/ieDnikS3DpcOSsuzxR z13oTPHuxo5SB3oHu56+eK8PthZKheF78uYJx80DEgJbuNIGPgIIUUffhBrUIhPf i31855LDtHzdGmnVka/3ZXJEMMx1cm3YZdDU327K3qHRM5rQ8WtEwZ7/pQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPC8Da3zmMgjBa+Vlg70WrkrMlYLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk2NDg3NWIxLTYwYzYtNDYzMS1hNzA5LWJhNWZhYTBjMDZlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+yAwDQYJKoZIhvcNAQELBQADggEBAEkU7r68B+CQoUNTtcrK ZJH2c5M0+0MeOffb+C9nkMv8mGAicwZ6KJlHVhU4wcEMLmAODnPta6rMyXw5M+3T v90WDME9ABlDZ1KQvLoRDvbYketqz0BkAgn7XH/fijGlgYyxCSMmVsR79e+++EWJ r16ew9k6ytac65sEcmFCQCrGJZBBaX0QWZE0cEb3B9TXMnylrHp7VBfJl7xINwF3 nS+ZnPRucmXNXs5AECWG47xndH3dXecpqxF9VbXHTY9FNAtIKLDBOOM/kSNCQ0DO 1Z7LSoS8U3o5vBLe5X2/xhnaL765X3BDUi8/jqq/OI11u4XHYLsJMNeVraW3M/qT Yvc= -----END CERTIFICATE-----Generated at Wed Aug 26 03:56:54 2026 by rpki-client