$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f1effb4-ca8a-40a4-896e-98e367faa742.roa File: 7f1effb4-ca8a-40a4-896e-98e367faa742.roa (raw, json) Hash identifier: Cxyb5gPqWKGCUgAqhUp351LKkOBuUL1XNBt80l+/5qE= Subject key identifier: 94:1A:2A:C8:39:F6:2E:30:D3:47:42:21:74:F4:B4:61:77:1B:66:EF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 72D42B3C7764043C9119D33AEF66FABD2720BD6C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f1effb4-ca8a-40a4-896e-98e367faa742.roa Signing time: Thu 10 Sep 2026 00:00:59 +0000 ROA not before: Thu 10 Sep 2026 00:00:59 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d4:2b:3c:77:64:04:3c:91:19:d3:3a:ef:66:fa:bd:27:20:bd:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 10 00:00:59 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=d47d2516f6d4d0f25a1b1c25099907d5a1251bbcab9e99235bed222316d78eb0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:08:a0:44:ba:a1:8b:78:09:da:63:4b:9a:e6: c6:53:af:78:e4:a1:fa:95:06:12:36:3f:f8:18:81: 99:d8:64:c5:16:30:3e:56:ca:31:10:c5:86:ff:35: f2:0a:6b:d5:e6:09:a2:ff:13:70:c3:f5:7c:d2:65: 24:42:33:b8:39:9d:30:3f:12:12:b0:1f:6a:68:90: 52:7d:69:a8:66:4a:e6:0d:b6:35:ef:d5:7f:39:a5: 6f:92:be:ad:42:0f:5c:c4:3b:3c:37:d3:96:e4:0c: 28:b0:d4:68:d7:fa:9e:ae:51:18:88:ac:1c:d1:6c: 2a:ac:1e:41:eb:3d:3f:42:be:6e:a0:6f:4b:c8:e5: b1:c5:35:b1:93:98:3c:26:bf:1b:ae:63:27:4f:11: e9:37:41:46:02:40:de:3d:1f:54:b3:de:a8:87:67: 38:66:67:29:3b:bc:e7:0a:08:7a:a8:75:87:c7:ac: c1:21:3f:fa:9d:cc:fe:0d:35:18:10:98:88:57:6f: 70:04:b2:90:d2:ee:52:24:11:44:77:31:34:e0:6e: b2:ba:1e:ba:77:bd:10:b5:b4:e1:de:63:e7:0b:2d: 7f:dc:c6:28:68:46:3b:25:5c:73:9e:44:7a:67:40: 0e:e3:95:be:ab:ec:13:45:6e:fa:e8:d6:94:19:5e: 80:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1A:2A:C8:39:F6:2E:30:D3:47:42:21:74:F4:B4:61:77:1B:66:EF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f1effb4-ca8a-40a4-896e-98e367faa742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:8840::/48 Signature Algorithm: sha256WithRSAEncryption 7a:82:88:2a:11:79:1c:ce:54:75:fb:1f:04:74:5a:72:82:18: c1:ac:fe:e8:7f:71:8e:d5:d6:87:ed:29:f3:b4:2c:81:38:c3: 6e:fa:76:53:25:2d:ec:4b:00:a0:35:8f:43:c4:ca:14:fd:de: 3f:74:8c:db:af:74:82:75:c9:7d:b9:20:11:bd:6f:7e:b9:a4: 3a:15:9b:85:57:d3:ee:8a:15:c5:43:2d:40:14:15:ca:92:57: 4d:60:b0:33:d5:19:c7:93:01:10:26:60:4d:ae:02:8a:b0:66: 8b:d0:6f:0d:44:81:48:65:37:9b:b5:af:a5:f5:8c:d6:a6:0b: 76:1e:bc:1d:4c:84:48:73:8c:67:24:55:8d:d6:72:1c:d0:84: 4b:8f:04:67:e3:36:ba:35:0d:c4:c2:2b:7e:27:f8:04:5c:32: a5:8a:ed:59:7d:96:c0:d3:2a:25:3c:da:1c:70:1b:a2:07:57: 96:4b:9b:9d:9f:a1:96:1e:aa:1b:79:88:8c:0b:14:f5:40:ca: dc:94:ef:72:cc:36:f6:f5:a6:d0:b9:19:f2:2f:ed:1f:c8:32: d8:06:36:1d:e3:00:a9:78:38:b3:35:cd:5f:5f:44:5f:19:f5: 67:b0:70:77:43:39:42:3d:4b:9d:4a:e6:31:c8:e3:0e:03:2b: 1d:69:80:c4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUctQrPHdkBDyRGdM672b6vScgvWwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDkxMDAwMDA1OVoX DTI2MTIwOTIzNTk1OVowejFJMEcGA1UEBRNAZDQ3ZDI1MTZmNmQ0ZDBmMjVhMWIx YzI1MDk5OTA3ZDVhMTI1MWJiY2FiOWU5OTIzNWJlZDIyMjMxNmQ3OGViMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwigRLqhi3gJ2mNLmubGU6945KH6 lQYSNj/4GIGZ2GTFFjA+VsoxEMWG/zXyCmvV5gmi/xNww/V80mUkQjO4OZ0wPxIS sB9qaJBSfWmoZkrmDbY179V/OaVvkr6tQg9cxDs8N9OW5AwosNRo1/qerlEYiKwc 0WwqrB5B6z0/Qr5uoG9LyOWxxTWxk5g8Jr8brmMnTxHpN0FGAkDePR9Us96oh2c4 ZmcpO7znCgh6qHWHx6zBIT/6ncz+DTUYEJiIV29wBLKQ0u5SJBFEdzE04G6yuh66 d70QtbTh3mPnCy1/3MYoaEY7JVxznkR6Z0AO45W+q+wTRW766NaUGV6AvwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJQaKsg59i4w00dCIXT0tGF3G2bvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdmMWVmZmI0LWNhOGEtNDBhNC04OTZlLTk4ZTM2N2ZhYTc0Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba64hAMA0GCSqGSIb3DQEBCwUAA4IBAQB6gogqEXkczlR1+x8E dFpyghjBrP7of3GO1daH7SnztCyBOMNu+nZTJS3sSwCgNY9DxMoU/d4/dIzbr3SC dcl9uSARvW9+uaQ6FZuFV9PuihXFQy1AFBXKkldNYLAz1RnHkwEQJmBNrgKKsGaL 0G8NRIFIZTebta+l9YzWpgt2HrwdTIRIc4xnJFWN1nIc0IRLjwRn4za6NQ3Ewit+ J/gEXDKliu1ZfZbA0yolPNoccBuiB1eWS5udn6GWHqobeYiMCxT1QMrclO9yzDb2 9abQuRnyL+0fyDLYBjYd4wCpeDizNc1fX0RfGfVnsHB3QzlCPUudSuYxyOMOAysd aYDE -----END CERTIFICATE-----Generated at Mon Sep 21 19:59:05 2026 by rpki-client