$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83deaaaf-ec15-40fe-9a98-71b9bcc1ae87.roa File: 83deaaaf-ec15-40fe-9a98-71b9bcc1ae87.roa (raw, json) Hash identifier: AwR383O6yATSQYOI8UA3UFlvh3phWSQGwZZAbKex3hQ= Subject key identifier: 6E:23:E7:3F:BE:51:69:92:18:00:FD:19:17:FC:31:9E:CE:1D:4F:42 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2F812BFDBBED1EC8BD4C20915EE2F9E80062EA47 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83deaaaf-ec15-40fe-9a98-71b9bcc1ae87.roa Signing time: Tue 28 Jul 2026 00:00:07 +0000 ROA not before: Tue 28 Jul 2026 00:00:07 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 00:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:81:2b:fd:bb:ed:1e:c8:bd:4c:20:91:5e:e2:f9:e8:00:62:ea:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 28 00:00:07 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=0ec98230d1b6f65911552ede2b2f574075705f399e4665db16d3aba20300d48e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:ab:46:2e:c6:a1:32:cf:bc:58:39:be:50: e1:a3:02:84:c1:8d:5e:f6:7e:8a:c9:ec:be:70:9d: d4:ef:32:16:49:e1:cb:54:1e:f2:d1:c7:51:9b:2c: d9:fc:c3:36:7c:5e:16:c1:51:41:b3:9f:4c:14:df: 47:6f:3b:09:2e:ae:f9:f9:7b:0e:2c:b8:03:70:c8: 09:37:91:77:f4:70:48:6d:e9:79:58:67:4c:ff:a0: fc:94:4f:e7:05:3f:73:16:8f:f2:25:6f:df:ab:0c: bf:51:88:02:97:2f:aa:87:c5:31:e8:d1:3d:5c:29: 78:11:37:31:b4:aa:f4:8a:b7:2e:56:1b:04:b4:26: dc:42:fd:7d:9c:09:84:43:39:34:0d:82:b8:85:4c: 37:ec:44:29:73:c9:f8:2d:7c:82:2c:dc:04:3d:ee: d0:22:cb:6c:bc:b5:f7:a8:48:99:92:93:98:e2:61: c9:46:7e:68:53:41:a8:27:2b:30:f7:40:b3:b6:7c: 0d:62:a2:24:2b:5d:ca:88:53:0e:dc:ef:87:5c:9c: 35:ef:45:c1:89:96:07:bf:ea:d8:03:03:55:c4:f8: 95:61:91:d2:c3:5e:f8:8d:7c:29:08:30:5c:68:e6: 82:55:83:a7:e1:d2:ae:dd:fa:6f:2d:bb:54:aa:2d: a7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:23:E7:3F:BE:51:69:92:18:00:FD:19:17:FC:31:9E:CE:1D:4F:42 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83deaaaf-ec15-40fe-9a98-71b9bcc1ae87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8020::/48 Signature Algorithm: sha256WithRSAEncryption 85:72:24:c2:31:9b:88:92:39:1a:69:2d:2d:6e:4f:94:34:ce: ef:5a:f8:61:c9:b4:31:f3:70:fd:81:43:e3:77:51:01:7b:b2: 76:f2:df:ec:df:bd:c2:fd:42:f0:79:11:19:33:67:a2:9e:41: 6d:02:22:c5:fd:bd:f6:8c:c4:da:24:3d:b0:6c:58:a0:78:34: ef:ee:f2:9a:04:b7:b4:67:c4:0e:f7:42:bb:4d:55:3f:57:2e: 1b:e8:ae:ce:ee:f8:40:b0:2d:38:ca:04:c6:5a:22:26:62:ad: a8:68:c2:4c:d5:cf:1a:3b:d8:0d:54:76:e4:a4:69:cc:5a:06: 0b:4e:96:c9:ee:9d:6b:7f:c0:9e:b7:e2:73:da:59:c0:20:1f: 9d:40:a1:7a:78:3c:27:78:df:55:a4:cd:e1:07:48:96:fa:60: 76:f7:b8:59:b4:23:d7:ad:e6:83:9b:29:8f:b2:06:5e:c1:80: 34:e8:84:43:0c:ee:7d:86:ac:8e:e9:56:d0:fe:89:4b:df:43: be:b2:bb:7a:2a:ee:81:08:d0:80:8f:d0:d6:82:1f:e3:2a:02: 3b:b4:eb:9c:2f:06:65:db:d4:cd:48:da:9a:eb:0c:ea:9f:3d: a7:a7:63:1d:b9:c7:4e:f6:52:47:11:62:2e:5d:40:f1:d4:a8: d7:e2:f7:fd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUL4Er/bvtHsi9TCCRXuL56ABi6kcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyODAwMDAwN1oX DTI2MTAyNjIzNTk1OVowejFJMEcGA1UEBRNAMGVjOTgyMzBkMWI2ZjY1OTExNTUy ZWRlMmIyZjU3NDA3NTcwNWYzOTllNDY2NWRiMTZkM2FiYTIwMzAwZDQ4ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN6rRi7GoTLPvFg5vlDhowKEwY1e 9n6Kyey+cJ3U7zIWSeHLVB7y0cdRmyzZ/MM2fF4WwVFBs59MFN9HbzsJLq75+XsO LLgDcMgJN5F39HBIbel5WGdM/6D8lE/nBT9zFo/yJW/fqwy/UYgCly+qh8Ux6NE9 XCl4ETcxtKr0ircuVhsEtCbcQv19nAmEQzk0DYK4hUw37EQpc8n4LXyCLNwEPe7Q IstsvLX3qEiZkpOY4mHJRn5oU0GoJysw90CztnwNYqIkK13KiFMO3O+HXJw170XB iZYHv+rYAwNVxPiVYZHSw174jXwpCDBcaOaCVYOn4dKu3fpvLbtUqi2nNQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFG4j5z++UWmSGAD9GRf8MZ7OHU9CMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzZGVhYWFmLWVjMTUtNDBmZS05YTk4LTcxYjliY2MxYWU4Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/4AgMA0GCSqGSIb3DQEBCwUAA4IBAQCFciTCMZuIkjkaaS0t bk+UNM7vWvhhybQx83D9gUPjd1EBe7J28t/s373C/ULweREZM2einkFtAiLF/b32 jMTaJD2wbFigeDTv7vKaBLe0Z8QO90K7TVU/Vy4b6K7O7vhAsC04ygTGWiImYq2o aMJM1c8aO9gNVHbkpGnMWgYLTpbJ7p1rf8Cet+Jz2lnAIB+dQKF6eDwneN9VpM3h B0iW+mB297hZtCPXreaDmymPsgZewYA06IRDDO59hqyO6VbQ/olL30O+srt6Ku6B CNCAj9DWgh/jKgI7tOucLwZl29TNSNqa6wzqnz2np2MducdO9lJHEWIuXUDx1KjX 4vf9 -----END CERTIFICATE-----Generated at Wed Jul 29 07:47:35 2026 by rpki-client