$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0fd6073f-de4a-40ca-a45c-593a1364a858.roa File: 0fd6073f-de4a-40ca-a45c-593a1364a858.roa (raw, json) Hash identifier: ADb8vbeooXvcJvcpEyrkAPXbZYP4gF9YnRe96h+EIzI= Subject key identifier: 4F:4A:F6:7E:78:97:99:39:75:20:AE:BE:70:B4:A5:BB:8F:37:03:51 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 12C13AA18F581FE3AC1754DC1152B3DDE70A02B5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0fd6073f-de4a-40ca-a45c-593a1364a858.roa Signing time: Wed 13 May 2026 00:20:37 +0000 ROA not before: Wed 13 May 2026 00:20:37 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c1:3a:a1:8f:58:1f:e3:ac:17:54:dc:11:52:b3:dd:e7:0a:02:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:20:37 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=6a65bef3062f88612d8e2fa02f1209717954e2b7aa39eb36cc1374feb15e3aac, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:18:f2:0b:6e:b5:26:2b:e0:5f:83:c8:14: 06:ce:a7:9f:a5:04:71:1b:1f:eb:41:3e:2a:40:c5: e6:1b:d5:62:b6:54:cc:a4:a0:8d:1d:58:c9:6b:9d: 40:f5:1a:f0:3d:a5:51:da:d1:c1:c2:16:fb:30:83: e6:04:ef:89:14:71:eb:2e:35:a8:0c:c3:12:8a:59: 84:8f:6e:71:9c:07:dc:f2:a3:0e:9d:ac:f5:08:18: fe:12:7e:5e:4a:f9:a9:68:ce:e7:00:3d:d1:17:1f: e0:fa:2e:ce:f5:4b:80:23:e9:ad:fa:7d:49:35:da: 82:32:af:91:8a:3d:b2:a3:9f:71:41:82:ad:62:a1: f6:a1:c5:6f:b2:6d:2a:61:df:2d:aa:82:45:90:49: 16:fc:7f:b3:81:c5:1e:a8:a2:9c:91:d3:72:7a:09: 58:ba:d9:9a:e8:4d:9a:b0:fc:6b:e8:6a:90:e2:95: bc:e4:47:c5:80:85:4b:f3:f2:d3:1f:3b:59:be:1e: b6:06:e0:1b:9b:97:b8:5d:9b:0c:b9:25:df:60:db: fd:cd:b9:58:a7:9a:34:28:e9:38:ae:e9:2f:14:bb: 76:7d:98:37:be:d9:92:2a:9a:ff:0e:cf:32:13:b0: 5a:a4:f9:59:23:11:61:4a:75:80:a2:cc:6e:1f:5c: 62:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4A:F6:7E:78:97:99:39:75:20:AE:BE:70:B4:A5:BB:8F:37:03:51 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0fd6073f-de4a-40ca-a45c-593a1364a858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:2000::/40 Signature Algorithm: sha256WithRSAEncryption 95:e7:51:0e:e0:e6:7c:09:24:33:c3:1c:4c:8d:11:62:b9:5a: c0:28:5e:b2:eb:d3:8c:04:0d:c4:f0:01:10:6f:d9:21:22:d2: 63:a5:9e:43:f4:83:25:8b:f1:bb:4b:90:66:64:03:c7:aa:00: 87:59:87:f8:49:34:e5:dc:78:d5:61:2d:36:78:34:a6:64:8f: 3c:87:6c:4e:bd:cd:8f:03:43:cf:f5:75:36:d0:7a:f2:8b:a3: 92:97:40:08:6d:53:82:4e:cf:3a:04:55:c3:d9:14:c5:df:f1: 5c:a4:55:49:1f:3f:f0:b9:85:0d:7a:41:d3:42:e6:32:52:c2: 40:0a:f4:db:74:e1:77:8b:a8:a6:b9:6a:b1:d3:46:85:22:9f: 91:a2:c3:83:5f:0b:06:68:f2:cc:c3:ae:26:03:2e:81:a1:79: bf:17:5e:26:1b:53:c7:84:66:fa:94:ee:c1:6a:d1:9c:d2:c6: 9a:29:c7:41:d8:42:77:ab:f4:c6:2e:1b:d9:2f:f0:b4:c7:22: 0c:83:ce:3a:15:2c:7c:6d:e3:e3:2f:8b:b5:83:61:42:96:10: 40:71:4b:b1:af:66:60:67:8a:b5:9b:5e:67:04:8e:d6:70:cc: f4:ad:31:4f:9c:d6:15:36:a2:71:c1:df:4d:e7:94:bf:03:28: 5d:78:35:fe -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEsE6oY9YH+OsF1TcEVKz3ecKArUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMjAzN1oX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNANmE2NWJlZjMwNjJmODg2MTJkOGUy ZmEwMmYxMjA5NzE3OTU0ZTJiN2FhMzllYjM2Y2MxMzc0ZmViMTVlM2FhYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqQY8gtutSYr4F+DyBQGzqefpQRx Gx/rQT4qQMXmG9VitlTMpKCNHVjJa51A9RrwPaVR2tHBwhb7MIPmBO+JFHHrLjWo DMMSilmEj25xnAfc8qMOnaz1CBj+En5eSvmpaM7nAD3RFx/g+i7O9UuAI+mt+n1J NdqCMq+Rij2yo59xQYKtYqH2ocVvsm0qYd8tqoJFkEkW/H+zgcUeqKKckdNyeglY utma6E2asPxr6GqQ4pW85EfFgIVL8/LTHztZvh62BuAbm5e4XZsMuSXfYNv9zblY p5o0KOk4rukvFLt2fZg3vtmSKpr/Ds8yE7BapPlZIxFhSnWAosxuH1xiGQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE9K9n54l5k5dSCuvnC0pbuPNwNRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmZDYwNzNmLWRlNGEtNDBjYS1hNDVjLTU5M2ExMzY0YTg1OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNiAwDQYJKoZIhvcNAQELBQADggEBAJXnUQ7g5nwJJDPDHEyN EWK5WsAoXrLr04wEDcTwARBv2SEi0mOlnkP0gyWL8btLkGZkA8eqAIdZh/hJNOXc eNVhLTZ4NKZkjzyHbE69zY8DQ8/1dTbQevKLo5KXQAhtU4JOzzoEVcPZFMXf8Vyk VUkfP/C5hQ16QdNC5jJSwkAK9Nt04XeLqKa5arHTRoUin5Giw4NfCwZo8szDriYD LoGheb8XXiYbU8eEZvqU7sFq0ZzSxpopx0HYQner9MYuG9kv8LTHIgyDzjoVLHxt 4+Mvi7WDYUKWEEBxS7GvZmBnirWbXmcEjtZwzPStMU+c1hU2onHB303nlL8DKF14 Nf4= -----END CERTIFICATE-----Generated at Sat Jun 13 09:15:30 2026 by rpki-client