$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91d6523c-4ab1-4850-a8cf-025e394ee348.roa File: 91d6523c-4ab1-4850-a8cf-025e394ee348.roa (raw, json) Hash identifier: Fb7HODMK/YazRk0HvZQv7gmyb+qBCgXc/vjy6b+dL1I= Subject key identifier: 32:0F:A2:FA:C7:06:29:8E:46:AC:E0:C3:C3:06:C8:04:77:05:77:31 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2F8E09A9EC29166710F2030B770F297C586CD8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91d6523c-4ab1-4850-a8cf-025e394ee348.roa Signing time: Sat 25 Jul 2026 00:00:56 +0000 ROA not before: Sat 25 Jul 2026 00:00:56 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:8e:09:a9:ec:29:16:67:10:f2:03:0b:77:0f:29:7c:58:6c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 25 00:00:56 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=868f1105014f7e2779247a530036886de3840564501cffc6067f757e735cf28b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ef:7e:e9:cb:1b:36:20:3c:88:25:0b:71:78: 8f:87:0b:cc:b9:04:b9:a1:e4:af:02:a4:66:8e:b6: 60:a7:92:8a:b2:13:6b:08:36:ab:58:03:ce:a2:67: eb:25:af:18:c6:03:fb:80:26:d2:e3:a4:48:02:22: 28:f8:1e:87:f3:d1:dc:0c:66:83:42:23:d8:08:ed: 18:3d:68:33:91:08:43:44:c9:c3:ff:a1:ea:4d:15: 9d:87:01:3b:d2:83:a1:7d:3e:98:37:f2:41:bf:76: ec:9b:27:08:19:13:2b:e4:96:da:83:2f:cb:9e:98: dd:a4:23:d6:3b:ee:41:91:b3:47:02:5c:b4:c0:ab: 48:f4:7c:ce:5e:37:35:0e:3a:3f:cb:98:ce:d0:85: f3:f5:d0:40:a7:f4:be:c0:e7:a4:aa:1e:c8:31:a7: 7c:6b:6f:44:c3:eb:1d:08:5d:4b:24:dd:f0:c5:16: e7:3a:bf:08:b6:b3:3b:5a:ed:f0:0e:96:c6:ae:7f: 65:b2:67:1f:5c:26:a6:ce:61:73:d9:f3:07:22:a9: 28:f7:bb:63:8a:c6:0c:04:84:f6:3d:2b:84:43:09: 3b:5f:48:b6:6b:5d:d9:3e:fb:d4:55:f3:64:80:e8: 44:85:ab:b1:c6:92:51:6e:3f:aa:14:c2:63:82:91: 78:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0F:A2:FA:C7:06:29:8E:46:AC:E0:C3:C3:06:C8:04:77:05:77:31 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91d6523c-4ab1-4850-a8cf-025e394ee348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:6000::/40 Signature Algorithm: sha256WithRSAEncryption 7b:02:71:82:74:db:0f:df:23:78:ce:5e:2f:42:f0:76:da:fa: 00:cc:50:eb:0d:bf:c9:c2:1f:a7:b9:97:75:f1:cf:71:23:6a: 0f:6e:b2:c4:31:dc:af:ab:06:42:1f:a4:3f:86:a3:96:bc:f4: 3b:78:3b:cd:77:db:67:e0:c7:64:9b:1e:08:70:16:b1:d8:fd: 2f:c2:e5:ac:bd:ed:9d:19:95:f0:86:07:8c:40:4a:77:dd:e8: 2c:c3:cd:9d:d8:b0:c1:d6:60:45:48:fb:9c:3b:92:12:da:e7: bd:2d:65:1b:82:3f:9f:d0:10:1c:7a:c1:ea:24:b6:a1:c5:5a: 7a:c0:cc:d0:5a:d1:64:a4:d7:4c:b8:9d:0d:a0:0e:9f:34:ae: 7b:a8:f7:ac:27:f4:9b:3f:59:ad:00:ae:17:b5:23:f6:b6:af: 73:f7:56:37:05:e7:cb:92:ba:2b:f4:ad:fd:1e:da:37:c8:a0: fe:45:57:68:c3:6c:d3:b5:9d:d4:4f:26:d9:a8:dd:3f:86:99: a3:d3:0d:c2:4e:43:90:df:4b:87:68:59:2a:88:fc:67:e8:31: ee:88:d3:e2:68:0a:05:ab:d7:30:29:e3:e7:af:97:54:91:1a: ff:2a:b0:2f:28:f9:d4:26:c9:60:01:a5:49:b9:cf:0a:e9:9d: c3:4f:63:28 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgITL44JqewpFmcQ8gMLdw8pfFhs2DANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjYwNzI1MDAwMDU2WhcN MjYxMDIzMjM1OTU5WjB6MUkwRwYDVQQFE0A4NjhmMTEwNTAxNGY3ZTI3NzkyNDdh NTMwMDM2ODg2ZGUzODQwNTY0NTAxY2ZmYzYwNjdmNzU3ZTczNWNmMjhiMS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM737pyxs2IDyIJQtxeI+HC8y5BLmh 5K8CpGaOtmCnkoqyE2sINqtYA86iZ+slrxjGA/uAJtLjpEgCIij4Hofz0dwMZoNC I9gI7Rg9aDORCENEycP/oepNFZ2HATvSg6F9Ppg38kG/duybJwgZEyvkltqDL8ue mN2kI9Y77kGRs0cCXLTAq0j0fM5eNzUOOj/LmM7QhfP10ECn9L7A56SqHsgxp3xr b0TD6x0IXUsk3fDFFuc6vwi2szta7fAOlsauf2WyZx9cJqbOYXPZ8wciqSj3u2OK xgwEhPY9K4RDCTtfSLZrXdk++9RV82SA6ESFq7HGklFuP6oUwmOCkXjlAgMBAAGj ggJKMIICRjAdBgNVHQ4EFgQUMg+i+scGKY5GrODDwwbIBHcFdzEwHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv OTFkNjUyM2MtNGFiMS00ODUwLWE4Y2YtMDI1ZTM5NGVlMzQ4LnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkBtpgYDANBgkqhkiG9w0BAQsFAAOCAQEAewJxgnTbD98jeM5eL0Lw dtr6AMxQ6w2/ycIfp7mXdfHPcSNqD26yxDHcr6sGQh+kP4ajlrz0O3g7zXfbZ+DH ZJseCHAWsdj9L8LlrL3tnRmV8IYHjEBKd93oLMPNndiwwdZgRUj7nDuSEtrnvS1l G4I/n9AQHHrB6iS2ocVaesDM0FrRZKTXTLidDaAOnzSue6j3rCf0mz9ZrQCuF7Uj 9ravc/dWNwXny5K6K/St/R7aN8ig/kVXaMNs07Wd1E8m2ajdP4aZo9MNwk5DkN9L h2hZKoj8Z+gx7ojT4mgKBavXMCnj56+XVJEa/yqwLyj51CbJYAGlSbnPCumdw09j KA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:14:39 2026 by rpki-client