$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa File: b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa (raw, json) Hash identifier: JIhaIRmtW3YWb1sXO/vfSDMahrE3F5jddUbLjzjZCHs= Subject key identifier: 76:8A:33:3E:FD:9B:4C:5D:DC:D3:38:55:DC:F5:93:09:88:31:56:40 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 752953D78937D954CA37057EFD950AAC021CE14A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa Signing time: Thu 30 Jul 2026 00:11:05 +0000 ROA not before: Thu 30 Jul 2026 00:11:05 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:29:53:d7:89:37:d9:54:ca:37:05:7e:fd:95:0a:ac:02:1c:e1:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:11:05 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=eab108f54dbf92f27d08f40eede04c05b53053050c7f5ebeaeb8aad459a9bb1e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:95:40:d0:e3:11:3f:10:51:89:21:de:77: 9d:2a:bb:a4:7d:de:52:20:40:1b:53:44:eb:5a:83: 71:29:46:f1:7a:51:3f:69:35:55:3d:10:ef:a3:a8: f8:84:62:01:b7:17:9d:a4:b0:7d:67:30:d4:70:02: ea:ab:3a:76:0b:29:88:7b:43:e5:54:4b:47:70:5e: 1f:41:03:f4:05:3d:a4:07:b1:55:14:06:dc:a7:3a: 62:5f:22:16:89:29:4d:14:c2:af:39:6b:c8:bf:fd: 32:27:d9:74:9f:09:9e:25:09:36:f9:1c:88:14:c7: a8:e2:ad:8a:ff:ff:10:03:01:11:5c:22:9d:85:0f: 50:bd:82:2d:29:e2:53:36:d5:80:8c:84:c8:cf:c8: 27:0f:f1:42:6a:de:7e:10:04:eb:1b:31:36:14:2a: 81:ea:2d:18:cd:c8:f1:ff:29:2c:ac:1e:51:0a:5f: 29:36:fc:ef:7a:e6:9d:4d:45:cb:80:b5:5b:eb:c9: 14:de:f5:95:5e:02:7c:65:b6:4b:df:b4:34:b0:88: eb:98:7b:5b:64:9f:5b:0f:f8:58:80:c5:ae:c0:5c: 6e:d3:95:42:46:1f:69:32:f9:08:97:cc:a1:44:39: 5b:9f:0f:22:3f:d3:d6:b4:78:7b:da:b5:b2:b4:91: 97:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8A:33:3E:FD:9B:4C:5D:DC:D3:38:55:DC:F5:93:09:88:31:56:40 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:8040::/48 Signature Algorithm: sha256WithRSAEncryption af:0a:5d:c5:e2:59:cd:55:b5:01:b4:f7:18:01:40:5a:71:2e: 36:67:f0:13:13:6a:19:dc:ed:53:d2:11:88:e6:ac:c3:c7:d5: 7f:6f:01:69:d4:58:43:f6:57:75:a3:74:f8:72:25:20:b2:49: ea:78:64:94:52:4b:1e:55:dd:bc:a4:8d:01:2a:11:86:a3:48: c9:d4:eb:a3:98:04:8a:9c:8a:6d:71:44:72:c1:e5:db:51:73: 0a:4f:88:c4:b3:4b:22:13:cf:da:e5:cc:a0:90:fd:04:74:24: f8:26:2a:f5:e7:81:e4:d0:0d:74:db:24:4f:df:d7:c5:be:01: bf:1a:e9:b0:77:f8:3a:ea:74:3a:43:b4:04:01:2c:28:ba:b2: 2d:a3:10:62:aa:20:56:79:52:c9:8d:4a:33:4c:a7:67:e7:39: d5:1e:79:26:cd:6e:0d:a2:bb:2c:4a:d5:b9:d2:f4:e8:37:20: 4f:0d:9d:72:8c:4a:bd:59:38:db:4f:f2:0e:1f:a6:d5:5d:f7: e5:ec:ff:c0:46:54:80:26:69:79:90:0e:17:96:b3:c3:2c:6e: 0e:a1:be:95:41:c9:44:7e:c8:96:14:0c:30:1e:a5:29:9d:00: b5:9b:31:c5:cd:4b:49:15:e3:74:a6:15:8b:44:dc:b5:bf:f8: 5d:f5:47:14 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdSlT14k32VTKNwV+/ZUKrAIc4UowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMTEwNVoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAZWFiMTA4ZjU0ZGJmOTJmMjdkMDhm NDBlZWRlMDRjMDViNTMwNTMwNTBjN2Y1ZWJlYWViOGFhZDQ1OWE5YmIxZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf+VQNDjET8QUYkh3nedKrukfd5S IEAbU0TrWoNxKUbxelE/aTVVPRDvo6j4hGIBtxedpLB9ZzDUcALqqzp2CymIe0Pl VEtHcF4fQQP0BT2kB7FVFAbcpzpiXyIWiSlNFMKvOWvIv/0yJ9l0nwmeJQk2+RyI FMeo4q2K//8QAwERXCKdhQ9QvYItKeJTNtWAjITIz8gnD/FCat5+EATrGzE2FCqB 6i0Yzcjx/yksrB5RCl8pNvzveuadTUXLgLVb68kU3vWVXgJ8ZbZL37Q0sIjrmHtb ZJ9bD/hYgMWuwFxu05VCRh9pMvkIl8yhRDlbnw8iP9PWtHh72rWytJGX0wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHaKMz79m0xd3NM4Vdz1kwmIMVZAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3MTZkNmQwLTBlNzQtNDcxZi1hODAyLTNmMjJiY2VlYWE1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOIBAMA0GCSqGSIb3DQEBCwUAA4IBAQCvCl3F4lnNVbUBtPcY AUBacS42Z/ATE2oZ3O1T0hGI5qzDx9V/bwFp1FhD9ld1o3T4ciUgsknqeGSUUkse Vd28pI0BKhGGo0jJ1OujmASKnIptcURyweXbUXMKT4jEs0siE8/a5cygkP0EdCT4 Jir154Hk0A102yRP39fFvgG/Gumwd/g66nQ6Q7QEASwourItoxBiqiBWeVLJjUoz TKdn5znVHnkmzW4NorssStW50vToNyBPDZ1yjEq9WTjbT/IOH6bVXffl7P/ARlSA Jml5kA4XlrPDLG4Oob6VQclEfsiWFAwwHqUpnQC1mzHFzUtJFeN0phWLRNy1v/hd 9UcU -----END CERTIFICATE-----Generated at Wed Aug 26 08:03:16 2026 by rpki-client