$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/999295ac-d636-4755-94c3-3c615012f6dd.roa File: 999295ac-d636-4755-94c3-3c615012f6dd.roa (raw, json) Hash identifier: /uNafXL+i/qm/BLnx99i5IWdOTwFS3WptGyU/NVRA7Y= Subject key identifier: 25:3F:16:52:8C:C0:D3:9F:6E:7A:DE:BE:F6:73:02:17:9C:68:1B:5D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6268F0DAE722450888D7C83C22F95035C8C2F235 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/999295ac-d636-4755-94c3-3c615012f6dd.roa Signing time: Wed 13 May 2026 00:30:27 +0000 ROA not before: Wed 13 May 2026 00:30:27 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:68:f0:da:e7:22:45:08:88:d7:c8:3c:22:f9:50:35:c8:c2:f2:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:30:27 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=62c537b2c39ecc6695efde4706e0a53b7c54a0478de45cbb4f0b6f993670aa3a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:e7:f2:98:ec:23:c1:64:5a:f8:89:4e:4b: e5:1b:83:6d:66:bd:2d:25:1d:c5:c8:20:9e:70:af: 28:56:5a:0d:c4:15:83:41:3e:6f:4d:4f:47:d5:6d: 41:38:8a:52:93:78:6e:74:f2:25:04:26:9f:a9:43: 52:66:41:04:e9:03:ce:9c:aa:e3:c5:5f:48:82:a3: e3:9b:a6:78:44:2c:72:9c:cd:6f:41:27:ce:47:88: 8d:bf:19:6f:93:a5:74:3f:78:bc:73:de:83:c7:a6: bb:eb:65:56:0e:91:79:2d:59:36:cd:db:80:08:fb: 9c:16:67:70:1b:df:70:21:c3:a7:89:29:50:97:da: 9f:28:21:9e:35:42:c4:7b:3d:17:07:60:75:8c:51: b1:46:f4:6e:d5:e7:17:c3:b9:53:54:6c:91:ba:a6: ef:75:41:d1:1a:17:4a:1f:23:13:58:13:cd:1a:18: f0:ab:74:4c:35:5b:f8:21:25:78:66:41:6d:0a:d7: 91:d2:0a:95:f4:23:a6:f7:cd:c6:fe:dd:e4:6c:94: 5f:4d:a8:c0:38:13:c1:71:70:8a:ce:22:97:52:2b: d6:83:4a:dc:f9:60:0e:a9:05:43:56:d2:b8:06:c7: b4:a6:d7:ab:45:c8:12:ec:1a:98:cf:3f:7b:40:f6: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3F:16:52:8C:C0:D3:9F:6E:7A:DE:BE:F6:73:02:17:9C:68:1B:5D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/999295ac-d636-4755-94c3-3c615012f6dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:f000::/40 Signature Algorithm: sha256WithRSAEncryption 98:97:62:0b:16:f4:67:c2:37:18:15:33:c9:64:26:48:db:8a: e2:01:26:57:49:f7:05:ca:5a:d6:4c:15:47:7f:3a:f1:e2:64: 69:b3:b3:e2:cd:37:2a:e4:42:e0:5f:bf:2e:3b:82:41:67:ac: af:26:b1:a0:ed:49:3f:b3:9b:c5:88:cb:1c:c4:4c:ae:7c:91: 42:76:bf:be:1d:74:ee:9e:d7:14:ce:0b:e8:05:7c:4d:9b:18: e7:8c:40:39:d1:26:e8:c8:25:7d:81:e9:dc:f3:7d:c0:c9:58: 7f:a1:e8:2a:90:34:e6:fe:78:c2:2a:6f:03:c0:2c:57:4a:9f: 10:e2:6c:39:42:79:f5:8c:25:cf:3d:aa:9e:05:b6:f5:a6:20: eb:0a:f3:15:72:bc:bf:4c:ba:84:0b:2d:21:c7:12:8c:37:d4: fd:28:f5:8a:9c:f2:fa:2a:97:e0:5f:88:8f:1d:9f:fa:c4:cc: 68:58:32:bf:58:57:82:1a:da:e9:53:24:b1:6e:47:8b:fa:89: ef:ea:37:7a:63:72:b7:56:34:6c:fb:35:e3:60:24:25:5e:06: 90:62:33:cc:f9:55:a4:b7:cf:fe:c7:75:71:5b:d8:0b:6b:9e: e7:f4:1f:a2:08:2b:f2:77:39:2e:94:9e:e2:8c:2b:63:95:2d: 61:d9:97:6a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYmjw2uciRQiI18g8IvlQNcjC8jUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMzAyN1oX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNANjJjNTM3YjJjMzllY2M2Njk1ZWZk ZTQ3MDZlMGE1M2I3YzU0YTA0NzhkZTQ1Y2JiNGYwYjZmOTkzNjcwYWEzYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysnn8pjsI8FkWviJTkvlG4NtZr0t JR3FyCCecK8oVloNxBWDQT5vTU9H1W1BOIpSk3hudPIlBCafqUNSZkEE6QPOnKrj xV9IgqPjm6Z4RCxynM1vQSfOR4iNvxlvk6V0P3i8c96Dx6a762VWDpF5LVk2zduA CPucFmdwG99wIcOniSlQl9qfKCGeNULEez0XB2B1jFGxRvRu1ecXw7lTVGyRuqbv dUHRGhdKHyMTWBPNGhjwq3RMNVv4ISV4ZkFtCteR0gqV9COm983G/t3kbJRfTajA OBPBcXCKziKXUivWg0rc+WAOqQVDVtK4Bse0pterRcgS7BqYzz97QPZbawIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCU/FlKMwNOfbnrevvZzAhecaBtdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5OTI5NWFjLWQ2MzYtNDc1NS05NGMzLTNjNjE1MDEyZjZkZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoPAwDQYJKoZIhvcNAQELBQADggEBAJiXYgsW9GfCNxgVM8lk JkjbiuIBJldJ9wXKWtZMFUd/OvHiZGmzs+LNNyrkQuBfvy47gkFnrK8msaDtST+z m8WIyxzETK58kUJ2v74ddO6e1xTOC+gFfE2bGOeMQDnRJujIJX2B6dzzfcDJWH+h 6CqQNOb+eMIqbwPALFdKnxDibDlCefWMJc89qp4FtvWmIOsK8xVyvL9MuoQLLSHH Eow31P0o9Yqc8voql+BfiI8dn/rEzGhYMr9YV4Ia2ulTJLFuR4v6ie/qN3pjcrdW NGz7NeNgJCVeBpBiM8z5VaS3z/7HdXFb2Atrnuf0H6IIK/J3OS6UnuKMK2OVLWHZ l2o= -----END CERTIFICATE-----Generated at Sat Jun 13 10:30:40 2026 by rpki-client