$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93f3d30c-8a89-447b-b341-5c1150a6a651.roa File: 93f3d30c-8a89-447b-b341-5c1150a6a651.roa (raw, json) Hash identifier: jrvi4JvIOp11GVAgXCRCL+OooEjoUj2r007VVgxWHXk= Subject key identifier: 27:B3:D5:5B:C5:2B:EF:3F:30:5D:97:59:B2:4B:B7:E7:FA:11:FF:F4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 245DA43F6CC8325404DCBDCD872BDC8BCAE29A4D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93f3d30c-8a89-447b-b341-5c1150a6a651.roa Signing time: Sun 31 May 2026 00:01:24 +0000 ROA not before: Sun 31 May 2026 00:01:24 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5d:a4:3f:6c:c8:32:54:04:dc:bd:cd:87:2b:dc:8b:ca:e2:9a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:01:24 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=be47350cf743da679276b34043741615853579e656ac512ba1f1c2d02c933f07, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e3:b6:d0:63:e7:c0:94:68:82:a2:a0:ad:ae: ca:32:b8:a4:30:f1:52:a6:3e:c1:b7:75:1e:33:88: bd:17:8d:24:61:e4:50:00:18:56:d5:4c:d9:eb:09: a3:92:c3:16:db:2b:ca:0e:53:4f:a5:32:74:9e:22: 8f:ea:4d:a8:3c:70:6d:14:87:4f:26:63:f4:20:b8: 06:06:53:55:e5:7d:d4:b9:77:b2:8f:6d:fc:1a:fd: 28:c9:36:cd:8c:ec:f3:58:e7:3b:29:84:b6:78:c8: d4:43:55:f8:34:72:e4:2e:ac:78:30:b9:70:ed:39: 21:62:fe:e6:ab:50:05:ee:f5:fa:79:5c:91:82:fd: ce:66:22:e6:61:a3:4f:f8:da:cf:dd:0b:11:35:aa: cd:6c:c3:40:24:34:2c:48:ca:89:b5:24:6e:e9:28: 9c:8b:74:3a:3c:d4:b3:9f:4b:32:b0:d1:c2:5e:3d: 75:46:c6:0d:bb:46:cc:5e:a6:88:dc:ab:e9:f5:7b: 43:8b:bd:b2:66:27:d2:1b:02:20:2f:b9:67:46:01: f6:de:b3:eb:94:58:c4:30:e8:ca:ca:e0:c0:dd:12: 0e:4a:8d:f9:db:57:0c:ce:b5:32:09:98:a1:7f:46: a9:22:26:56:fb:ab:70:47:f7:a6:d7:9b:96:0f:c7: 1c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B3:D5:5B:C5:2B:EF:3F:30:5D:97:59:B2:4B:B7:E7:FA:11:FF:F4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93f3d30c-8a89-447b-b341-5c1150a6a651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:9040::/48 Signature Algorithm: sha256WithRSAEncryption 69:14:89:a1:a9:88:2a:19:d5:ba:e5:c9:14:cf:e1:a4:c6:f1: 53:4a:63:7a:3f:c3:b2:9d:3b:3f:71:3a:4b:30:b7:4b:7a:b8: 00:ae:8d:3a:05:20:9e:f3:1c:15:c7:4e:36:00:49:00:3b:da: 46:11:db:14:65:e1:36:9a:a9:d5:be:bc:7a:07:64:d9:00:19: 95:aa:ca:41:1d:49:31:10:af:2a:84:2e:c8:87:f8:9b:24:2b: f6:d8:32:ed:13:04:78:68:d9:b7:eb:9e:bb:9a:a6:89:f5:d9: 41:3b:a0:dc:83:68:06:fe:cd:82:4a:71:35:7b:b7:39:6d:8f: bb:bf:9b:d8:5c:a2:5f:5b:8d:27:33:2a:30:f8:84:06:f6:85: 13:9c:25:51:e0:93:6a:45:c1:ea:27:c1:21:8f:71:c9:c5:e3: ff:ce:19:c8:e0:11:d4:c6:bf:66:2b:01:a9:04:ed:97:0e:a1: 3e:07:3b:a1:fc:d9:f9:04:37:13:78:07:13:12:58:d2:d7:b1: 37:f3:55:12:0c:ea:20:5b:c1:b0:7d:86:51:ab:77:9a:aa:d7: 78:bc:4a:e8:7e:e4:4a:14:50:c4:31:b4:86:1b:41:02:fe:b4: 7b:b5:85:c2:98:c5:a9:c4:43:9a:35:67:7d:59:81:3a:6d:40: c2:71:de:b1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJF2kP2zIMlQE3L3Nhyvci8rimk0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMDEyNFoX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAYmU0NzM1MGNmNzQzZGE2NzkyNzZi MzQwNDM3NDE2MTU4NTM1NzllNjU2YWM1MTJiYTFmMWMyZDAyYzkzM2YwNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeO20GPnwJRogqKgra7KMrikMPFS pj7Bt3UeM4i9F40kYeRQABhW1UzZ6wmjksMW2yvKDlNPpTJ0niKP6k2oPHBtFIdP JmP0ILgGBlNV5X3UuXeyj238Gv0oyTbNjOzzWOc7KYS2eMjUQ1X4NHLkLqx4MLlw 7TkhYv7mq1AF7vX6eVyRgv3OZiLmYaNP+NrP3QsRNarNbMNAJDQsSMqJtSRu6Sic i3Q6PNSzn0sysNHCXj11RsYNu0bMXqaI3Kvp9XtDi72yZifSGwIgL7lnRgH23rPr lFjEMOjKyuDA3RIOSo3521cMzrUyCZihf0apIiZW+6twR/em15uWD8cc6QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCez1VvFK+8/MF2XWbJLt+f6Ef/0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkzZjNkMzBjLThhODktNDQ3Yi1iMzQxLTVjMTE1MGE2YTY1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6ZBAMA0GCSqGSIb3DQEBCwUAA4IBAQBpFImhqYgqGdW65ckU z+GkxvFTSmN6P8OynTs/cTpLMLdLergAro06BSCe8xwVx042AEkAO9pGEdsUZeE2 mqnVvrx6B2TZABmVqspBHUkxEK8qhC7Ih/ibJCv22DLtEwR4aNm36567mqaJ9dlB O6Dcg2gG/s2CSnE1e7c5bY+7v5vYXKJfW40nMyow+IQG9oUTnCVR4JNqRcHqJ8Eh j3HJxeP/zhnI4BHUxr9mKwGpBO2XDqE+Bzuh/Nn5BDcTeAcTEljS17E381USDOog W8GwfYZRq3eaqtd4vErofuRKFFDEMbSGG0EC/rR7tYXCmMWpxEOaNWd9WYE6bUDC cd6x -----END CERTIFICATE-----Generated at Sat Jun 13 09:13:38 2026 by rpki-client