$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/906d1094-02f1-42d9-b22e-24f2ee4caa70.roa File: 906d1094-02f1-42d9-b22e-24f2ee4caa70.roa (raw, json) Hash identifier: lA00SOuqdnsMLjrL9v8GE0AHW1Z3Hb+Krv79g4AxRbo= Subject key identifier: 51:13:58:1C:2C:7E:CE:9C:3D:77:20:0C:95:E8:2B:05:27:F4:1C:D0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63DE5A2B9CA5B6EFE80FCAA26E47CB309234D419 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/906d1094-02f1-42d9-b22e-24f2ee4caa70.roa Signing time: Wed 13 May 2026 00:30:31 +0000 ROA not before: Wed 13 May 2026 00:30:31 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:de:5a:2b:9c:a5:b6:ef:e8:0f:ca:a2:6e:47:cb:30:92:34:d4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:30:31 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=8af18b8ab11079970b6a3e9d74065eba581067964c3c2bc1c88d50ba10835ff1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ce:f1:7e:a9:55:45:cc:f4:d3:b2:9f:b8:3b: 6a:56:70:bf:c1:e0:ba:22:4e:5d:3d:7e:3a:57:6c: c3:ae:03:21:68:7a:2f:5a:64:67:d4:25:88:39:a9: 67:8c:75:04:b2:5f:ba:22:6c:14:a2:02:ad:7a:eb: a9:ac:99:3c:3a:e7:f8:1d:25:a1:3b:47:89:96:d8: c0:ed:58:ce:4e:fd:62:d0:d2:3c:5a:e3:68:2f:eb: d6:84:d9:a7:50:fa:54:be:cc:81:c6:77:3b:17:d1: cc:7e:96:56:fc:db:a6:01:31:19:14:59:64:0b:94: b5:90:8d:a8:01:93:05:79:47:80:0c:2a:c3:d4:a0: 7c:96:71:6b:7a:f8:15:b4:4b:cf:1e:79:5b:4d:07: 9b:89:b2:ce:15:8a:f7:b5:2f:66:69:c2:0b:2c:de: e0:1a:31:71:77:25:dd:a0:55:16:88:a7:72:eb:0e: 53:27:33:e0:70:b2:57:5b:88:9b:f2:88:5e:3d:b8: 8b:74:02:50:69:b2:e4:5c:2b:ef:d7:70:f0:63:1d: 0f:9c:16:93:57:1a:f0:d4:0f:61:fc:da:b6:14:77: 00:cb:28:65:47:b5:5e:63:a7:d6:50:4a:33:51:55: 69:6c:6a:2b:73:16:f5:20:75:10:d4:87:18:69:1d: 8f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:13:58:1C:2C:7E:CE:9C:3D:77:20:0C:95:E8:2B:05:27:F4:1C:D0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/906d1094-02f1-42d9-b22e-24f2ee4caa70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:1000::/40 Signature Algorithm: sha256WithRSAEncryption 19:1a:96:36:5f:a9:ac:ca:7b:a2:06:9f:25:3a:09:4b:7a:fe: ca:01:fb:e4:a0:8a:17:06:51:28:1a:4c:67:72:41:74:53:ec: 09:b5:e8:3e:d0:ad:2c:b5:55:5f:03:91:48:a5:ef:c6:16:6a: 08:fb:61:8e:c2:ef:fc:8f:6c:54:e7:55:39:55:73:d3:63:40: d7:fa:a8:f3:31:43:4e:f5:37:4a:5f:9d:10:96:ce:c0:9f:e2: d7:89:17:8c:a5:f4:96:7e:da:75:2c:a2:04:9f:65:b3:ed:00: b4:cd:1d:68:48:50:dd:47:b2:36:3e:31:74:9b:2c:32:50:30: f6:77:eb:7e:ed:3f:44:bd:b5:5a:85:68:6c:ef:b6:6c:46:e5: fe:47:55:04:32:b3:41:fe:66:df:9d:f0:df:bb:94:d5:d1:b1: f1:ea:25:93:f9:10:ac:10:a9:59:ab:15:b3:a6:a1:66:2d:b5: 72:7a:25:25:0c:d0:3d:c3:bd:c1:36:a7:d2:a9:5c:fd:90:fe: dc:5e:7d:74:9f:54:63:43:73:68:d6:8e:a9:19:4c:05:62:48: 50:5a:0d:63:8b:88:5c:76:e3:dc:35:cf:d3:a9:38:cb:ca:2c: 56:b3:0f:48:47:c4:9f:16:17:05:0e:8a:3a:ec:4d:d9:f3:a6: 7d:91:13:20 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUY95aK5yltu/oD8qibkfLMJI01BkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMzAzMVoX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAOGFmMThiOGFiMTEwNzk5NzBiNmEz ZTlkNzQwNjVlYmE1ODEwNjc5NjRjM2MyYmMxYzg4ZDUwYmExMDgzNWZmMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM7xfqlVRcz007KfuDtqVnC/weC6 Ik5dPX46V2zDrgMhaHovWmRn1CWIOalnjHUEsl+6ImwUogKteuuprJk8Ouf4HSWh O0eJltjA7VjOTv1i0NI8WuNoL+vWhNmnUPpUvsyBxnc7F9HMfpZW/NumATEZFFlk C5S1kI2oAZMFeUeADCrD1KB8lnFrevgVtEvPHnlbTQebibLOFYr3tS9macILLN7g GjFxdyXdoFUWiKdy6w5TJzPgcLJXW4ib8ohePbiLdAJQabLkXCvv13DwYx0PnBaT Vxrw1A9h/Nq2FHcAyyhlR7VeY6fWUEozUVVpbGorcxb1IHUQ1IcYaR2PGQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFETWBwsfs6cPXcgDJXoKwUn9BzQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkwNmQxMDk0LTAyZjEtNDJkOS1iMjJlLTI0ZjJlZTRjYWE3MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOBAwDQYJKoZIhvcNAQELBQADggEBABkaljZfqazKe6IGnyU6 CUt6/soB++SgihcGUSgaTGdyQXRT7Am16D7QrSy1VV8DkUil78YWagj7YY7C7/yP bFTnVTlVc9NjQNf6qPMxQ071N0pfnRCWzsCf4teJF4yl9JZ+2nUsogSfZbPtALTN HWhIUN1HsjY+MXSbLDJQMPZ3637tP0S9tVqFaGzvtmxG5f5HVQQys0H+Zt+d8N+7 lNXRsfHqJZP5EKwQqVmrFbOmoWYttXJ6JSUM0D3DvcE2p9KpXP2Q/txefXSfVGND c2jWjqkZTAViSFBaDWOLiFx249w1z9OpOMvKLFazD0hHxJ8WFwUOijrsTdnzpn2R EyA= -----END CERTIFICATE-----Generated at Wed Jun 17 08:59:10 2026 by rpki-client