$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/189571c3-0cb6-4488-b76c-acb8f0674d22.roa File: 189571c3-0cb6-4488-b76c-acb8f0674d22.roa (raw, json) Hash identifier: 76zZPm4r68v6GXY5b+vzozd6l6pntXvXYDOI8oMLmmU= Subject key identifier: 85:50:1A:4A:20:F6:8A:D8:68:7A:40:23:0F:36:5F:AC:3A:FE:51:4B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 78EECD0EBDCF70380594DE61DC330047A56FA7BC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/189571c3-0cb6-4488-b76c-acb8f0674d22.roa Signing time: Sun 31 May 2026 00:00:04 +0000 ROA not before: Sun 31 May 2026 00:00:04 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ee:cd:0e:bd:cf:70:38:05:94:de:61:dc:33:00:47:a5:6f:a7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:00:04 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=b9cc700e27dc17572a5d466476457b14be18904e147e11f2d4477434648e7886, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0a:f5:1c:bf:56:a5:76:1d:a5:bd:eb:23:68: 12:05:2b:16:be:4f:d3:5a:4e:9e:9c:3a:23:46:18: 2e:87:aa:09:3e:e5:9e:59:3d:ba:f5:d9:c0:18:98: 45:86:eb:46:63:d4:f4:86:ce:7b:09:7f:06:a3:33: fc:8b:66:95:9a:59:bb:0d:b3:7e:5b:18:80:e7:81: ac:03:90:37:1c:60:9a:17:52:c3:cc:17:0d:61:4a: 0f:7c:af:ca:61:b0:34:8a:cc:76:4d:df:52:06:cf: ec:09:11:b8:98:0c:9e:8a:c0:54:90:ee:d7:18:c9: 3c:96:b5:ec:b7:4a:60:49:3e:cd:b2:28:6d:33:9b: ac:43:0c:e6:30:0a:ca:80:30:d9:7d:b1:df:7c:8a: 0c:7d:45:61:ac:17:b6:4a:81:b9:ff:77:d2:07:35: e1:64:ed:73:4b:a4:e6:ca:3f:cc:99:23:30:bb:9e: 66:d9:ff:78:df:0e:23:11:b2:f8:8f:a8:35:2c:91: d9:32:97:de:2d:f8:45:3a:3a:a1:dc:36:9c:f1:b0: 9f:72:3d:d7:d7:f3:f5:22:db:af:ad:28:be:2a:1e: 5c:0e:dd:d1:6f:88:bb:36:de:16:92:16:1a:6d:22: 56:8d:1e:6f:c5:db:3c:ff:31:d5:b3:34:e9:06:26: 27:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:50:1A:4A:20:F6:8A:D8:68:7A:40:23:0F:36:5F:AC:3A:FE:51:4B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/189571c3-0cb6-4488-b76c-acb8f0674d22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:6040::/48 Signature Algorithm: sha256WithRSAEncryption 41:60:0f:a2:7f:b7:2c:23:77:2b:97:6b:73:e7:dc:e5:f0:74: 81:07:fa:e0:5c:0e:bf:f9:e0:63:17:8c:90:00:57:09:a9:f3: 69:af:22:18:66:aa:c7:bf:d3:df:a9:92:b6:e0:63:2d:cd:9b: db:38:ae:7a:6f:01:aa:6e:62:db:18:36:c7:11:41:a1:f8:97: ba:1d:93:8d:cf:94:74:bc:d3:92:ce:62:91:14:9d:f1:3e:3e: 1a:6e:8d:37:d2:39:4e:0d:1e:1e:21:a2:fd:c1:e6:1b:ac:61: c6:dc:69:69:35:54:aa:21:ed:1b:77:9c:4f:d9:f8:78:72:68: d1:8c:42:2f:9d:04:73:94:a6:9c:ae:bf:62:84:91:6e:02:ff: 57:ba:d0:84:4e:29:b4:f2:5e:95:04:f9:65:69:9f:fd:24:d1: 86:a2:7a:29:fb:a6:af:3a:cf:ed:c7:52:a4:b6:8e:f4:1c:60: ab:50:a3:32:79:79:49:4d:52:3d:46:aa:81:8c:41:05:11:b1: 2c:89:ec:d2:c5:29:81:c7:a3:27:e1:65:d6:e5:5b:d5:92:be: 82:8c:26:2b:e8:e8:de:ff:48:74:67:fe:55:df:74:d9:b3:3f: e0:e0:81:bc:12:fe:b0:ed:cc:d6:c0:fc:ae:0b:0f:5d:10:54: f3:3a:f4:78 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUeO7NDr3PcDgFlN5h3DMAR6Vvp7wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMDAwNFoX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAYjljYzcwMGUyN2RjMTc1NzJhNWQ0 NjY0NzY0NTdiMTRiZTE4OTA0ZTE0N2UxMWYyZDQ0Nzc0MzQ2NDhlNzg4NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ar1HL9WpXYdpb3rI2gSBSsWvk/T Wk6enDojRhguh6oJPuWeWT269dnAGJhFhutGY9T0hs57CX8GozP8i2aVmlm7DbN+ WxiA54GsA5A3HGCaF1LDzBcNYUoPfK/KYbA0isx2Td9SBs/sCRG4mAyeisBUkO7X GMk8lrXst0pgST7NsihtM5usQwzmMArKgDDZfbHffIoMfUVhrBe2SoG5/3fSBzXh ZO1zS6Tmyj/MmSMwu55m2f943w4jEbL4j6g1LJHZMpfeLfhFOjqh3Dac8bCfcj3X 1/P1ItuvrSi+Kh5cDt3Rb4i7Nt4WkhYabSJWjR5vxds8/zHVszTpBiYncQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIVQGkog9orYaHpAIw82X6w6/lFLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE4OTU3MWMzLTBjYjYtNDQ4OC1iNzZjLWFjYjhmMDY3NGQyMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaumBAMA0GCSqGSIb3DQEBCwUAA4IBAQBBYA+if7csI3crl2tz 59zl8HSBB/rgXA6/+eBjF4yQAFcJqfNpryIYZqrHv9PfqZK24GMtzZvbOK56bwGq bmLbGDbHEUGh+Je6HZONz5R0vNOSzmKRFJ3xPj4abo030jlODR4eIaL9weYbrGHG 3GlpNVSqIe0bd5xP2fh4cmjRjEIvnQRzlKacrr9ihJFuAv9XutCETim08l6VBPll aZ/9JNGGonop+6avOs/tx1Kkto70HGCrUKMyeXlJTVI9RqqBjEEFEbEsiezSxSmB x6Mn4WXW5VvVkr6CjCYr6Oje/0h0Z/5V33TZsz/g4IG8Ev6w7czWwPyuCw9dEFTz OvR4 -----END CERTIFICATE-----Generated at Sat Jun 13 09:18:03 2026 by rpki-client