$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56f42d5c-eb43-49bf-b9d7-51747507376d.roa File: 56f42d5c-eb43-49bf-b9d7-51747507376d.roa (raw, json) Hash identifier: ITwko8Uz2Dyz0EOV5FKUDkrTPaG7OKkIfFcyrGc73j0= Subject key identifier: A2:87:21:3B:56:86:8B:BE:C8:49:6B:7D:CB:7D:67:2B:7E:8A:87:53 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73D824253CBE5D9BD8212887FE7B4D4EEEC58CCB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56f42d5c-eb43-49bf-b9d7-51747507376d.roa Signing time: Wed 13 May 2026 00:21:12 +0000 ROA not before: Wed 13 May 2026 00:21:12 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafa:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d8:24:25:3c:be:5d:9b:d8:21:28:87:fe:7b:4d:4e:ee:c5:8c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:21:12 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=3afab59a27ea10f26a17525581fd046bf71a2af8a731beca5208dcceaf990684, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:f4:20:7d:99:2a:1a:dd:01:61:87:42:6d: d4:0a:e7:16:65:a8:e3:04:5c:8d:d3:03:7e:25:43: 1e:93:d2:ae:9b:ec:9a:5f:2b:39:ed:46:1e:c8:41: 24:ca:7d:f3:72:f1:43:86:a8:b2:a4:3f:e1:c6:bf: eb:70:07:3d:47:ee:15:11:b9:9a:a5:f9:ba:72:fb: fe:37:59:b9:1c:14:7c:50:da:1b:4b:bc:2c:c4:5e: 1b:f9:b8:3a:97:a0:8f:0f:74:6d:32:6b:d4:b6:8d: 7a:85:0b:68:30:d7:a2:37:01:05:b4:13:3d:e4:48: 66:6d:78:53:7a:93:f4:cc:70:40:6b:fa:6e:31:5e: 25:60:be:ad:94:74:f6:81:9a:46:12:5d:92:f3:6b: 09:22:cd:e0:2f:d9:2d:84:2c:36:4b:0b:6b:1c:da: 6a:b3:cf:cf:35:a7:5f:1e:95:3b:d5:7a:55:db:76: 9f:4a:0d:77:38:4b:3a:de:f8:e4:55:27:0f:28:03: cf:f1:bd:f1:63:a1:a3:67:12:09:f4:75:dc:b6:3c: 26:17:3d:4e:4b:4c:f8:27:39:9c:5a:b4:20:5e:bd: 65:65:0f:1b:9e:fd:87:b3:e3:8d:3d:64:15:dc:16: 37:2b:8d:83:2f:51:1b:9f:80:00:f9:32:fd:be:96: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:87:21:3B:56:86:8B:BE:C8:49:6B:7D:CB:7D:67:2B:7E:8A:87:53 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56f42d5c-eb43-49bf-b9d7-51747507376d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafa:a000::/40 Signature Algorithm: sha256WithRSAEncryption 69:b8:a8:12:34:ad:00:28:81:4f:38:4b:cb:f6:f2:55:88:6d: da:3a:fc:35:a0:b3:d1:3d:be:26:e8:f1:3f:9f:fd:8c:07:78: 33:d3:b2:45:47:34:0a:24:bb:81:aa:55:3f:b2:ca:6b:57:e9: 2b:65:f4:fa:e0:50:6d:fe:4f:82:ef:d3:22:5d:20:69:ec:69: 00:c5:58:a8:f4:8d:9a:3b:45:52:f0:c4:f1:65:47:d5:72:e6: 13:24:00:d6:77:e7:c0:ba:2f:4b:e2:e9:8b:bf:a9:9a:f6:51: 0c:94:ec:83:da:56:5b:fb:f8:e9:17:69:34:45:1d:c2:7c:2c: 9e:d0:77:77:2e:54:59:81:31:15:0a:4e:48:69:6f:bc:89:06: 31:84:1e:67:11:ad:e2:bd:0a:12:af:5d:e7:30:d4:cf:62:a1: 49:d5:82:8c:e6:59:58:dd:32:97:e4:de:a2:16:6c:7e:7a:6b: ca:61:09:71:86:43:20:a6:fa:d8:47:ac:93:9e:eb:a0:76:47: 57:a2:17:97:02:d6:03:c2:f7:2c:0a:f4:54:13:f2:62:83:fd: 1f:93:62:0a:02:d7:5a:b3:51:f8:d8:8d:8a:8b:49:3d:6a:bc: a9:82:6a:c0:31:b7:61:75:e7:4c:77:3c:be:17:f4:3f:1d:3f: d2:9f:c9:6a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUc9gkJTy+XZvYISiH/ntNTu7FjMswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMjExMloX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAM2FmYWI1OWEyN2VhMTBmMjZhMTc1 MjU1ODFmZDA0NmJmNzFhMmFmOGE3MzFiZWNhNTIwOGRjY2VhZjk5MDY4NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzn0IH2ZKhrdAWGHQm3UCucWZajj BFyN0wN+JUMek9Kum+yaXys57UYeyEEkyn3zcvFDhqiypD/hxr/rcAc9R+4VEbma pfm6cvv+N1m5HBR8UNobS7wsxF4b+bg6l6CPD3RtMmvUto16hQtoMNeiNwEFtBM9 5EhmbXhTepP0zHBAa/puMV4lYL6tlHT2gZpGEl2S82sJIs3gL9kthCw2SwtrHNpq s8/PNadfHpU71XpV23afSg13OEs63vjkVScPKAPP8b3xY6GjZxIJ9HXctjwmFz1O S0z4JzmcWrQgXr1lZQ8bnv2Hs+ONPWQV3BY3K42DL1Ebn4AA+TL9vpbnEwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKKHITtWhou+yElrfct9Zyt+iodTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2ZjQyZDVjLWViNDMtNDliZi1iOWQ3LTUxNzQ3NTA3Mzc2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+qAwDQYJKoZIhvcNAQELBQADggEBAGm4qBI0rQAogU84S8v2 8lWIbdo6/DWgs9E9vibo8T+f/YwHeDPTskVHNAoku4GqVT+yymtX6Stl9PrgUG3+ T4Lv0yJdIGnsaQDFWKj0jZo7RVLwxPFlR9Vy5hMkANZ358C6L0vi6Yu/qZr2UQyU 7IPaVlv7+OkXaTRFHcJ8LJ7Qd3cuVFmBMRUKTkhpb7yJBjGEHmcRreK9ChKvXecw 1M9ioUnVgozmWVjdMpfk3qIWbH56a8phCXGGQyCm+thHrJOe66B2R1eiF5cC1gPC 9ywK9FQT8mKD/R+TYgoC11qzUfjYjYqLST1qvKmCasAxt2F150x3PL4X9D8dP9Kf yWo= -----END CERTIFICATE-----Generated at Sat Jun 13 08:07:31 2026 by rpki-client