$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b772f459-72fe-4c7d-8f8c-61cce5a944c0.roa File: b772f459-72fe-4c7d-8f8c-61cce5a944c0.roa (raw, json) Hash identifier: xyExFepc79FX0owPZY4tk8rUyZV41fk+ZnQNUWnweHo= Subject key identifier: B2:3C:BC:EC:C9:9B:B2:A6:69:70:4B:2F:5C:B6:5F:38:C6:7B:97:A8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6D1A147E04455B046B61801541DEDF6BEB612664 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b772f459-72fe-4c7d-8f8c-61cce5a944c0.roa Signing time: Sat 25 Jul 2026 00:00:45 +0000 ROA not before: Sat 25 Jul 2026 00:00:45 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 00:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:1a:14:7e:04:45:5b:04:6b:61:80:15:41:de:df:6b:eb:61:26:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 25 00:00:45 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=a50cf910e5dbff4772fb9c6e1c88091774e480c987f68cb21f48673980722145, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:29:7f:19:bb:4f:ba:aa:ee:cd:ea:b2:1a: ff:76:51:1c:90:83:ac:25:79:6e:dc:72:fb:e8:de: a7:47:dd:c5:1c:56:2b:e1:ae:b8:2e:23:e8:6c:e8: 93:77:0e:2c:d1:61:40:66:f9:08:cd:37:15:5f:96: dd:90:d5:73:68:89:8c:34:6f:c1:1f:39:06:ff:9f: d8:13:b8:2b:e2:74:49:06:34:0d:d6:fe:d9:78:c1: d2:42:57:6f:63:73:c0:b6:1e:a8:99:e1:e8:08:c8: f1:d8:5e:1f:80:91:37:0e:26:f2:9b:70:84:a4:91: ed:c9:ac:2f:d4:67:ba:aa:a0:6c:11:76:c7:9b:76: 19:68:2e:cd:ca:5e:59:3a:60:4d:75:36:4a:4e:cb: 37:25:3f:bd:2b:d3:a0:9a:aa:19:e8:cd:91:a4:a9: 99:d4:1a:e4:63:e9:98:48:18:c8:3d:44:85:bc:cf: 07:1e:97:e0:c2:69:d2:fd:fb:a4:f9:fb:8f:33:71: bd:66:cf:f4:77:ac:eb:84:ca:42:bd:eb:9e:c3:0b: 79:38:5f:88:37:84:ad:c3:16:56:1d:7a:c5:68:19: 74:e6:ed:4e:5b:7c:d6:b9:d1:98:79:0b:00:b6:31: 01:f9:9a:7a:d7:5e:b3:8f:01:7c:13:13:ef:98:b2: 34:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3C:BC:EC:C9:9B:B2:A6:69:70:4B:2F:5C:B6:5F:38:C6:7B:97:A8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b772f459-72fe-4c7d-8f8c-61cce5a944c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:7000::/48 Signature Algorithm: sha256WithRSAEncryption 4c:cc:96:ed:45:cf:87:94:bc:6a:19:57:6f:f9:3e:33:47:65: 29:8d:9e:8f:23:b5:f3:63:af:5b:f9:39:c6:5a:68:6e:19:ed: 61:5c:13:cd:97:61:b5:0a:28:5b:e1:e2:86:bc:85:9e:c0:dd: c0:2c:9a:91:a7:85:ac:08:9c:62:df:87:7e:1a:96:11:e8:38: c4:75:6a:37:c0:38:91:2b:eb:7a:3d:15:30:6e:99:da:1e:34: 01:c6:51:79:fa:5e:4a:c1:22:94:ad:8c:5d:f6:12:20:ed:f1: 05:b4:b8:ad:64:9f:d3:e5:38:1a:27:fd:e4:c9:80:66:fc:b4: 10:43:ee:61:bd:2b:81:1a:cf:1f:58:cc:9a:a8:b8:ee:09:5d: a2:fe:a2:b5:f4:f1:5b:2a:e3:0d:d6:e2:35:63:0b:e0:8d:33: c6:20:91:a4:d3:21:ea:99:e3:74:e0:64:41:3b:fe:4d:91:cb: 22:86:e8:bb:77:ff:4d:a5:f8:e2:15:df:18:2c:0a:f7:c3:22: d8:2d:e9:65:4e:08:58:dd:4d:e3:ea:30:6a:22:d1:44:e6:ff: 44:6c:2e:22:35:b0:ce:aa:63:68:27:15:0e:04:74:3b:89:74: 4c:9e:aa:ed:95:8d:08:ec:f3:3e:24:9c:2a:3f:9c:63:f0:f7: a7:2b:76:ba -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbRoUfgRFWwRrYYAVQd7fa+thJmQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNTAwMDA0NVoX DTI2MTAyMzIzNTk1OVowejFJMEcGA1UEBRNAYTUwY2Y5MTBlNWRiZmY0NzcyZmI5 YzZlMWM4ODA5MTc3NGU0ODBjOTg3ZjY4Y2IyMWY0ODY3Mzk4MDcyMjE0NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo4pfxm7T7qq7s3qshr/dlEckIOs JXlu3HL76N6nR93FHFYr4a64LiPobOiTdw4s0WFAZvkIzTcVX5bdkNVzaImMNG/B HzkG/5/YE7gr4nRJBjQN1v7ZeMHSQldvY3PAth6omeHoCMjx2F4fgJE3Dibym3CE pJHtyawv1Ge6qqBsEXbHm3YZaC7Nyl5ZOmBNdTZKTss3JT+9K9OgmqoZ6M2RpKmZ 1BrkY+mYSBjIPUSFvM8HHpfgwmnS/fuk+fuPM3G9Zs/0d6zrhMpCveuewwt5OF+I N4StwxZWHXrFaBl05u1OW3zWudGYeQsAtjEB+Zp6116zjwF8ExPvmLI0iQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLI8vOzJm7KmaXBLL1y2XzjGe5eoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3NzJmNDU5LTcyZmUtNGM3ZC04ZjhjLTYxY2NlNWE5NDRjMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9nAAMA0GCSqGSIb3DQEBCwUAA4IBAQBMzJbtRc+HlLxqGVdv +T4zR2UpjZ6PI7XzY69b+TnGWmhuGe1hXBPNl2G1Cihb4eKGvIWewN3ALJqRp4Ws CJxi34d+GpYR6DjEdWo3wDiRK+t6PRUwbpnaHjQBxlF5+l5KwSKUrYxd9hIg7fEF tLitZJ/T5TgaJ/3kyYBm/LQQQ+5hvSuBGs8fWMyaqLjuCV2i/qK19PFbKuMN1uI1 YwvgjTPGIJGk0yHqmeN04GRBO/5Nkcsihui7d/9NpfjiFd8YLAr3wyLYLellTghY 3U3j6jBqItFE5v9EbC4iNbDOqmNoJxUOBHQ7iXRMnqrtlY0I7PM+JJwqP5xj8Pen K3a6 -----END CERTIFICATE-----Generated at Wed Jul 29 04:25:33 2026 by rpki-client