$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff6d0825-64c9-42eb-979c-d2252693e691.roa File: ff6d0825-64c9-42eb-979c-d2252693e691.roa (raw, json) Hash identifier: epepmKwRSaQArcKVAoe1G3nZmxclwwNgssbjQrgdljE= Subject key identifier: 50:3C:54:D4:A1:0F:54:22:49:1A:2A:4C:D8:B3:42:56:60:72:AC:97 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7509D9BE770268CD0A3F2572DE3A28B030238DCF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff6d0825-64c9-42eb-979c-d2252693e691.roa Signing time: Fri 31 Jul 2026 00:10:59 +0000 ROA not before: Fri 31 Jul 2026 00:10:59 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:09:d9:be:77:02:68:cd:0a:3f:25:72:de:3a:28:b0:30:23:8d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:10:59 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=e87f6d0b22b9608a88c19ae43cd3a49045ac401b4e3693aff9ec882e0baae431, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:fb:6f:2d:4a:ae:6f:0e:ce:60:11:55:f2: d3:86:cc:21:bb:af:c1:ec:3c:f9:50:ca:0d:52:21: 23:08:36:b5:72:69:6a:79:15:4d:4c:25:86:1e:47: 3a:c4:75:5d:bc:0f:2f:e1:2e:be:5e:4b:e0:af:a3: 05:53:21:1a:c9:e1:99:1a:41:5f:7d:60:ae:8d:76: 32:ea:db:09:2f:e1:72:48:db:54:a0:07:f1:b9:2e: fb:25:96:5f:08:8d:4f:25:67:c6:68:a8:d6:90:89: eb:c0:90:27:66:c6:45:69:f5:35:4a:63:19:05:ae: aa:b8:25:6f:22:2c:fe:99:e8:df:9b:e4:be:37:10: fc:4a:bb:b4:41:6c:02:23:e1:2c:fc:1f:8c:ee:59: c5:84:0b:cd:ce:5b:86:d4:c1:cb:1b:8a:db:a7:99: a5:e4:e8:3d:3e:8c:ad:99:4c:99:54:cc:3a:b8:2d: e3:72:fa:9f:56:c3:39:20:d7:71:13:9b:8c:22:92: c3:26:d9:4a:19:66:79:d6:a5:a6:3d:b2:a9:ef:43: ca:6e:3d:f2:f9:d8:91:bb:9a:0f:c8:ac:f7:fe:23: db:76:74:83:54:c7:e6:ec:8d:3a:74:3a:f4:f0:b3: 49:93:0c:9a:f9:5c:40:ab:97:b6:b3:ea:42:59:8c: a9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3C:54:D4:A1:0F:54:22:49:1A:2A:4C:D8:B3:42:56:60:72:AC:97 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff6d0825-64c9-42eb-979c-d2252693e691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4010::/48 Signature Algorithm: sha256WithRSAEncryption 78:95:7c:69:28:4f:f1:77:07:1c:70:9b:89:49:3f:cb:78:51: 3b:94:55:7e:f7:44:0d:25:9e:6c:ba:16:f7:84:e7:7a:bc:fd: 9c:93:4b:ec:e2:67:22:95:00:97:f2:d2:24:79:5a:da:f9:01: 6a:df:f5:71:c0:1a:60:ea:fd:69:31:ea:54:4e:43:99:21:91: 79:05:55:1c:02:4c:62:7c:44:e6:0a:ba:b2:df:96:fb:eb:60: da:76:58:c8:a4:a0:2c:3e:a4:d2:78:cc:59:8e:ac:a7:01:90: e5:8f:80:42:56:46:6f:e1:8e:6f:cd:65:cf:93:99:3b:69:83: 16:98:1a:ed:7c:ae:9b:7b:c5:2d:18:8b:9a:26:72:e3:85:92: 55:f8:d6:fd:a1:e9:db:a9:f8:89:92:c1:7e:c0:f0:14:f5:b1: 62:be:85:6a:df:af:c5:ed:a6:4a:62:00:59:db:30:00:04:1a: 38:b0:c7:33:4f:27:a7:fe:25:e7:89:38:c3:14:31:f6:f0:90: 3e:1d:fa:a7:5f:24:89:a0:c7:21:91:c9:ff:89:23:e7:87:3a: 68:42:c7:bf:5f:e9:50:ea:1c:65:93:2c:e3:88:42:2b:03:60: ce:28:f5:c3:8d:3e:ad:8a:59:d8:8e:ad:59:23:06:b1:8f:03: 50:ed:44:cb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdQnZvncCaM0KPyVy3joosDAjjc8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMTA1OVoX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNAZTg3ZjZkMGIyMmI5NjA4YTg4YzE5 YWU0M2NkM2E0OTA0NWFjNDAxYjRlMzY5M2FmZjllYzg4MmUwYmFhZTQzMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD37by1Krm8OzmARVfLThswhu6/B 7Dz5UMoNUiEjCDa1cmlqeRVNTCWGHkc6xHVdvA8v4S6+Xkvgr6MFUyEayeGZGkFf fWCujXYy6tsJL+FySNtUoAfxuS77JZZfCI1PJWfGaKjWkInrwJAnZsZFafU1SmMZ Ba6quCVvIiz+mejfm+S+NxD8Sru0QWwCI+Es/B+M7lnFhAvNzluG1MHLG4rbp5ml 5Og9PoytmUyZVMw6uC3jcvqfVsM5INdxE5uMIpLDJtlKGWZ51qWmPbKp70PKbj3y +diRu5oPyKz3/iPbdnSDVMfm7I06dDr08LNJkwya+VxAq5e2s+pCWYyppwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFA8VNShD1QiSRoqTNizQlZgcqyXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZmNmQwODI1LTY0YzktNDJlYi05NzljLWQyMjUyNjkzZTY5MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0AQMA0GCSqGSIb3DQEBCwUAA4IBAQB4lXxpKE/xdwcccJuJ ST/LeFE7lFV+90QNJZ5suhb3hOd6vP2ck0vs4mcilQCX8tIkeVra+QFq3/VxwBpg 6v1pMepUTkOZIZF5BVUcAkxifETmCrqy35b762DadljIpKAsPqTSeMxZjqynAZDl j4BCVkZv4Y5vzWXPk5k7aYMWmBrtfK6be8UtGIuaJnLjhZJV+Nb9oenbqfiJksF+ wPAU9bFivoVq36/F7aZKYgBZ2zAABBo4sMczTyen/iXniTjDFDH28JA+HfqnXySJ oMchkcn/iSPnhzpoQse/X+lQ6hxlkyzjiEIrA2DOKPXDjT6tilnYjq1ZIwaxjwNQ 7UTL -----END CERTIFICATE-----Generated at Wed Aug 26 16:09:34 2026 by rpki-client