$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77592e13-c5e4-4529-a775-bf5174690bea.roa File: 77592e13-c5e4-4529-a775-bf5174690bea.roa (raw, json) Hash identifier: gYj2kJhOjUVNaBLz4rnE0PkkXr0lccJpRZvTw9Mbfxo= Subject key identifier: D5:15:24:4A:6D:A7:83:1B:8C:D6:83:F7:8E:2B:AC:C0:C9:76:FC:6A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 53725D3F46779396390961A7142640B1AEC052A1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77592e13-c5e4-4529-a775-bf5174690bea.roa Signing time: Wed 09 Sep 2026 15:54:39 +0000 ROA not before: Wed 09 Sep 2026 15:54:39 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae7:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:72:5d:3f:46:77:93:96:39:09:61:a7:14:26:40:b1:ae:c0:52:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 9 15:54:39 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=d3c711cb4cebb72296f5064cca07badb27a174792e9372298f1a65a637d2dbdb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f6:9c:31:88:cc:60:d2:a7:47:eb:b8:cf:d4: 79:be:63:88:4e:ca:02:96:c8:d2:1e:23:51:ee:18: d6:98:4c:fe:56:30:1a:a0:47:bf:1d:7a:d4:58:ea: 54:e7:31:ce:fd:9f:f8:8f:bc:1b:01:26:d8:2e:a2: bf:13:65:50:5b:f6:3a:93:07:36:6c:20:e7:1b:5a: ba:e1:29:bb:9d:9e:0a:ca:79:d2:c7:e9:bd:7d:90: b9:1c:b3:3b:89:7a:df:60:47:85:0a:3f:19:ed:cc: cd:64:d4:83:42:06:e8:a7:ca:64:73:80:65:e8:10: 16:d9:34:d6:cc:c7:a8:76:a9:bd:cc:47:14:a2:06: 8b:b2:4a:e6:d8:5c:45:2d:65:d9:d9:4e:e0:b0:69: 89:92:70:69:62:b8:76:f3:ea:fa:33:13:a7:01:b3: ef:fe:57:ba:4e:22:d1:72:a8:4b:f1:76:d8:54:39: 4f:d6:4b:8a:a3:b4:fa:40:9d:da:26:0d:13:ea:89: 8c:9a:92:be:8b:c9:f6:52:f8:10:16:8a:bc:ed:68: 49:e7:51:67:13:f7:cd:bf:ca:1f:ff:40:ee:44:46: 46:63:a7:5f:5f:47:52:50:ff:f0:b6:40:4f:5b:b1: d4:42:2e:2b:88:43:6e:a0:0f:42:ab:0b:38:17:0e: 77:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:15:24:4A:6D:A7:83:1B:8C:D6:83:F7:8E:2B:AC:C0:C9:76:FC:6A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77592e13-c5e4-4529-a775-bf5174690bea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae7:9000::/40 Signature Algorithm: sha256WithRSAEncryption c9:0b:84:b1:ff:5a:cb:8c:6b:e9:1b:8c:44:20:dd:b3:3b:6d: 80:fe:91:b1:e9:a7:90:18:40:b1:34:ed:10:57:91:7f:52:ae: 60:61:11:5b:3f:65:cb:1e:76:be:02:ed:72:53:f6:db:0f:5d: c3:e1:ad:79:78:e2:1f:d0:64:ff:15:fc:49:27:42:cd:48:23: d5:9b:2d:d1:3e:bb:cd:44:9f:af:1d:f0:f4:cf:a4:f3:9f:cc: e1:1e:36:fe:d2:3d:90:1d:55:33:b8:8d:b6:92:b0:6b:6e:d2: 82:20:ef:02:67:4d:ed:61:48:2b:c1:e2:63:a9:1d:3e:18:01: 7e:f6:61:f4:08:ad:bd:58:9b:3c:ac:7d:dd:da:fa:aa:56:06: 57:36:fd:60:59:b2:fb:97:16:10:45:93:70:de:69:e0:f4:54: cd:e7:22:4e:20:24:a6:3d:ee:c0:36:dd:8c:4e:b6:d6:2f:ed: 27:26:84:e0:14:b2:8d:3b:5c:69:af:41:3d:e2:fe:fe:1c:2a: c7:6b:e5:04:95:c1:e5:21:bc:f0:73:6e:71:3d:17:ca:42:b6: 4d:7b:aa:68:e1:57:cc:4b:d9:3f:df:9e:4b:9a:d2:bc:6d:36: 78:5c:ed:41:66:ac:c2:c4:67:57:ef:61:3c:94:e9:94:cf:7b: d9:d0:fe:aa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUU3JdP0Z3k5Y5CWGnFCZAsa7AUqEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkwOTE1NTQzOVoX DTI2MTIwODIzNTk1OVowejFJMEcGA1UEBRNAZDNjNzExY2I0Y2ViYjcyMjk2ZjUw NjRjY2EwN2JhZGIyN2ExNzQ3OTJlOTM3MjI5OGYxYTY1YTYzN2QyZGJkYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/acMYjMYNKnR+u4z9R5vmOITsoC lsjSHiNR7hjWmEz+VjAaoEe/HXrUWOpU5zHO/Z/4j7wbASbYLqK/E2VQW/Y6kwc2 bCDnG1q64Sm7nZ4KynnSx+m9fZC5HLM7iXrfYEeFCj8Z7czNZNSDQgbop8pkc4Bl 6BAW2TTWzMeodqm9zEcUogaLskrm2FxFLWXZ2U7gsGmJknBpYrh28+r6MxOnAbPv /le6TiLRcqhL8XbYVDlP1kuKo7T6QJ3aJg0T6omMmpK+i8n2UvgQFoq87WhJ51Fn E/fNv8of/0DuREZGY6dfX0dSUP/wtkBPW7HUQi4riENuoA9Cqws4Fw53swIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNUVJEptp4MbjNaD944rrMDJdvxqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3NTkyZTEzLWM1ZTQtNDUyOS1hNzc1LWJmNTE3NDY5MGJlYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba55AwDQYJKoZIhvcNAQELBQADggEBAMkLhLH/WsuMa+kbjEQg 3bM7bYD+kbHpp5AYQLE07RBXkX9SrmBhEVs/Zcsedr4C7XJT9tsPXcPhrXl44h/Q ZP8V/EknQs1II9WbLdE+u81En68d8PTPpPOfzOEeNv7SPZAdVTO4jbaSsGtu0oIg 7wJnTe1hSCvB4mOpHT4YAX72YfQIrb1Ymzysfd3a+qpWBlc2/WBZsvuXFhBFk3De aeD0VM3nIk4gJKY97sA23YxOttYv7ScmhOAUso07XGmvQT3i/v4cKsdr5QSVweUh vPBzbnE9F8pCtk17qmjhV8xL2T/fnkua0rxtNnhc7UFmrMLEZ1fvYTyU6ZTPe9nQ /qo= -----END CERTIFICATE-----Generated at Sun Sep 20 16:37:17 2026 by rpki-client