$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7310f55-3b12-4798-80ca-47e95f2e091c.roa File: c7310f55-3b12-4798-80ca-47e95f2e091c.roa (raw, json) Hash identifier: RPNkJirxP265kMiqv82PAvubMOnSgaL43mQsj+MLVzw= Subject key identifier: 21:89:5E:B4:19:6B:7D:8D:AA:CA:AB:75:83:40:84:98:D8:37:AA:15 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 16CACA11F195C56190E8DD2F98EA148E6EB6879B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7310f55-3b12-4798-80ca-47e95f2e091c.roa Signing time: Fri 31 Jul 2026 00:11:15 +0000 ROA not before: Fri 31 Jul 2026 00:11:15 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ca:ca:11:f1:95:c5:61:90:e8:dd:2f:98:ea:14:8e:6e:b6:87:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:11:15 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=57dcf4126f390d149d621f3454cba8ef7b71823a9d282a76924fab49c2cba9cb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cb:cd:c3:ef:7c:0d:a6:66:40:0f:ea:0f:83: 48:ca:e5:52:50:10:16:ae:0b:a1:bd:87:6d:9c:a5: 9f:da:c2:5f:b4:ad:bd:e0:cd:a3:aa:4e:69:c9:75: 0b:fc:42:9b:4f:d7:21:17:56:94:f8:f2:b5:e7:36: f6:e8:85:74:e4:a2:ce:a6:ac:71:d9:f6:45:7a:f6: 21:1b:9b:9f:f9:46:19:f8:90:40:8a:91:1f:15:24: 0b:fc:93:85:09:ad:38:ca:5a:54:93:ea:b6:7b:91: 83:81:ab:cf:c2:47:bd:f5:99:5d:8f:cd:30:6f:f5: b2:99:88:b3:37:71:93:30:48:6a:10:38:65:af:a8: 0f:15:41:ea:97:44:cd:a4:96:2e:73:f2:39:27:cd: f2:7c:41:3c:c7:80:f1:16:16:66:c2:81:36:ae:1f: 4d:00:3b:30:02:2a:9d:61:dd:6a:ae:14:e5:44:14: 35:6c:50:db:1c:13:f2:5a:ca:fd:2c:95:38:9a:11: da:00:70:00:9c:ca:dd:f5:01:73:52:bc:9b:4d:1f: 40:cb:21:d9:55:2d:07:29:eb:02:71:7e:d1:f0:09: 88:aa:a2:b0:9b:3e:17:04:29:80:c6:ca:14:4f:52: 3d:f5:1c:15:c9:3a:7d:13:5a:99:ca:34:03:bf:c4: 94:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:89:5E:B4:19:6B:7D:8D:AA:CA:AB:75:83:40:84:98:D8:37:AA:15 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7310f55-3b12-4798-80ca-47e95f2e091c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:e000::/40 Signature Algorithm: sha256WithRSAEncryption 0a:c3:81:ea:75:d6:28:54:aa:4e:fe:2a:ba:1c:6f:40:a7:39: a5:8a:b9:84:eb:cc:30:f8:f4:db:3b:9b:bd:84:da:81:38:70: f9:50:30:93:4a:8c:45:16:47:eb:19:5d:99:4c:2b:ca:2b:f6: f6:2a:69:0c:a7:c6:1a:99:b4:72:14:5f:2d:a4:1e:26:f0:79: fd:15:e5:35:87:7f:0a:d6:c3:24:43:2e:61:2b:81:03:4b:18: ce:10:14:48:f9:67:45:48:f9:ab:28:e8:23:0a:1b:53:cd:d8: 83:88:bc:0f:94:1c:3c:20:09:de:3d:9c:57:63:d6:52:10:c0: 48:f1:16:7b:f7:73:bc:32:67:f9:d1:c0:48:68:d5:0d:b6:78: bc:fd:ba:0e:c1:f6:91:7e:b1:a5:50:bc:94:1c:6b:bc:3c:26: c0:d5:56:6a:85:0c:4c:23:5c:63:f3:18:cd:8b:5d:f1:4d:78: 99:36:da:4a:f4:d0:28:09:a3:64:b7:48:d5:8f:92:38:d3:06: 6a:3f:b4:c3:58:d8:29:a5:ce:e8:26:bc:97:c8:ea:ad:cf:2d: 6b:52:e8:b5:42:e0:84:6c:05:0d:86:6d:c0:52:c1:e5:f7:c2: cf:2e:4e:9c:e5:7c:81:e1:bb:3f:ac:51:9e:0f:1b:f2:c1:b8: 80:9f:fd:8d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFsrKEfGVxWGQ6N0vmOoUjm62h5swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMTExNVoX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNANTdkY2Y0MTI2ZjM5MGQxNDlkNjIx ZjM0NTRjYmE4ZWY3YjcxODIzYTlkMjgyYTc2OTI0ZmFiNDljMmNiYTljYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsvNw+98DaZmQA/qD4NIyuVSUBAW rguhvYdtnKWf2sJftK294M2jqk5pyXUL/EKbT9chF1aU+PK15zb26IV05KLOpqxx 2fZFevYhG5uf+UYZ+JBAipEfFSQL/JOFCa04ylpUk+q2e5GDgavPwke99Zldj80w b/WymYizN3GTMEhqEDhlr6gPFUHql0TNpJYuc/I5J83yfEE8x4DxFhZmwoE2rh9N ADswAiqdYd1qrhTlRBQ1bFDbHBPyWsr9LJU4mhHaAHAAnMrd9QFzUrybTR9AyyHZ VS0HKesCcX7R8AmIqqKwmz4XBCmAxsoUT1I99RwVyTp9E1qZyjQDv8SUwQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCGJXrQZa32NqsqrdYNAhJjYN6oVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M3MzEwZjU1LTNiMTItNDc5OC04MGNhLTQ3ZTk1ZjJlMDkxYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaeAwDQYJKoZIhvcNAQELBQADggEBAArDgep11ihUqk7+Kroc b0CnOaWKuYTrzDD49Ns7m72E2oE4cPlQMJNKjEUWR+sZXZlMK8or9vYqaQynxhqZ tHIUXy2kHibwef0V5TWHfwrWwyRDLmErgQNLGM4QFEj5Z0VI+aso6CMKG1PN2IOI vA+UHDwgCd49nFdj1lIQwEjxFnv3c7wyZ/nRwEho1Q22eLz9ug7B9pF+saVQvJQc a7w8JsDVVmqFDEwjXGPzGM2LXfFNeJk22kr00CgJo2S3SNWPkjjTBmo/tMNY2Cml zugmvJfI6q3PLWtS6LVC4IRsBQ2GbcBSweX3ws8uTpzlfIHhuz+sUZ4PG/LBuICf /Y0= -----END CERTIFICATE-----Generated at Wed Aug 26 08:04:43 2026 by rpki-client