$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b424c862-bbee-4123-87b5-a8a734d27574.roa File: b424c862-bbee-4123-87b5-a8a734d27574.roa (raw, json) Hash identifier: B5GLqeHOae5FvZ6MRCiAlHo9FbpxC4VarRsaVEZ4IlE= Subject key identifier: 4C:29:4B:47:8A:BC:7A:AC:C8:F9:37:A6:93:0D:16:27:BB:1C:7F:71 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 11A6D1BB4CE64484541C770687F6A4B622EE547D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b424c862-bbee-4123-87b5-a8a734d27574.roa Signing time: Wed 13 May 2026 00:31:03 +0000 ROA not before: Wed 13 May 2026 00:31:03 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a6:d1:bb:4c:e6:44:84:54:1c:77:06:87:f6:a4:b6:22:ee:54:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:31:03 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=a7721b73bb7af1014a80464e946f8153a9aeec5456f399c97aa6d88d99f09cd5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f1:5b:cb:ff:b7:74:d2:24:35:8f:70:12:ce: c2:56:0d:39:00:0c:0a:b2:38:44:48:1b:05:25:d3: 72:61:c7:98:4f:a9:43:10:81:00:ef:5d:29:2c:c3: 7a:37:3c:a6:59:b9:4d:14:a8:96:86:5b:0a:5b:d2: 42:4e:57:19:3c:af:72:61:f4:42:df:13:61:04:30: 07:ee:70:d5:60:bc:50:42:a9:39:08:33:ef:9e:be: 9d:10:7e:65:bb:e9:25:7e:36:ef:62:9f:ab:f7:01: 51:ff:9f:14:3e:6e:ff:43:26:d4:67:86:fe:8c:97: f6:ed:66:05:ec:26:7b:7e:1b:c0:91:79:dd:73:fb: 63:87:f5:7c:d7:76:7f:0e:b6:2b:40:28:00:e1:51: 1a:5f:35:8e:06:4b:f9:7d:2b:34:b7:41:50:59:3f: 2f:71:77:5b:20:63:35:ef:44:36:02:b6:9f:3f:a7: 13:73:d5:aa:a2:17:60:e7:a2:08:0a:5b:1a:0c:86: 35:b8:ec:d3:19:27:fa:e6:e0:c4:36:51:b4:bd:65: 65:6a:a7:f4:be:a5:dd:85:65:8b:b5:46:68:fa:11: 97:7a:61:05:85:7c:6a:45:a8:2f:47:bc:2a:f2:87: 06:6b:11:1b:b6:be:b9:2b:32:f2:82:af:cc:61:e2: e7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:29:4B:47:8A:BC:7A:AC:C8:F9:37:A6:93:0D:16:27:BB:1C:7F:71 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b424c862-bbee-4123-87b5-a8a734d27574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 62:06:f2:09:d5:fd:bf:de:bb:c5:48:89:97:0e:15:68:1a:21: c1:c1:b3:ea:7f:54:fa:58:8a:54:f3:ad:97:99:60:98:09:20: f1:47:23:72:60:f3:9a:fc:c0:a6:08:93:db:d3:8f:ce:e8:de: 9c:e7:d2:0b:0e:1a:9c:36:bd:04:db:58:6d:15:e7:fa:49:93: 81:54:ac:23:48:78:c3:80:b9:32:13:ca:33:68:0d:17:d9:66: d0:26:e9:da:4b:21:b7:49:ae:eb:3b:be:6a:af:db:14:36:64: 97:ad:f6:65:11:ab:c7:6e:05:cf:3c:1d:4e:4e:c9:a9:17:05: eb:d8:9a:f9:94:ad:70:37:9c:79:11:c6:0c:9b:fd:19:c1:35: 6f:03:df:2a:a6:a5:bf:ce:4f:7c:04:a8:5a:69:49:f9:45:dd: 1e:f2:69:b0:59:04:4e:c3:20:25:16:bb:23:95:1f:59:a6:70: 02:2a:a5:fa:49:f7:52:6f:1b:40:f1:16:09:dd:fe:ce:19:d3: c6:a4:99:4c:a3:62:9a:1f:9c:37:81:5b:2e:f0:19:3f:40:ee: 97:0c:b4:6b:ba:49:ae:a2:50:a9:13:53:04:9a:42:b4:91:11: 10:64:eb:f6:f3:0a:65:b0:5a:8b:49:e9:64:d1:8c:77:9a:59: 38:f2:a1:eb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEabRu0zmRIRUHHcGh/aktiLuVH0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMzEwM1oX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAYTc3MjFiNzNiYjdhZjEwMTRhODA0 NjRlOTQ2ZjgxNTNhOWFlZWM1NDU2ZjM5OWM5N2FhNmQ4OGQ5OWYwOWNkNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PFby/+3dNIkNY9wEs7CVg05AAwK sjhESBsFJdNyYceYT6lDEIEA710pLMN6NzymWblNFKiWhlsKW9JCTlcZPK9yYfRC 3xNhBDAH7nDVYLxQQqk5CDPvnr6dEH5lu+klfjbvYp+r9wFR/58UPm7/QybUZ4b+ jJf27WYF7CZ7fhvAkXndc/tjh/V813Z/DrYrQCgA4VEaXzWOBkv5fSs0t0FQWT8v cXdbIGM170Q2ArafP6cTc9Wqohdg56IIClsaDIY1uOzTGSf65uDENlG0vWVlaqf0 vqXdhWWLtUZo+hGXemEFhXxqRagvR7wq8ocGaxEbtr65KzLygq/MYeLnrwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEwpS0eKvHqsyPk3ppMNFie7HH9xMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I0MjRjODYyLWJiZWUtNDEyMy04N2I1LWE4YTczNGQyNzU3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/wjAMA0GCSqGSIb3DQEBCwUAA4IBAQBiBvIJ1f2/3rvFSImX DhVoGiHBwbPqf1T6WIpU862XmWCYCSDxRyNyYPOa/MCmCJPb04/O6N6c59ILDhqc Nr0E21htFef6SZOBVKwjSHjDgLkyE8ozaA0X2WbQJunaSyG3Sa7rO75qr9sUNmSX rfZlEavHbgXPPB1OTsmpFwXr2Jr5lK1wN5x5EcYMm/0ZwTVvA98qpqW/zk98BKha aUn5Rd0e8mmwWQROwyAlFrsjlR9ZpnACKqX6SfdSbxtA8RYJ3f7OGdPGpJlMo2Ka H5w3gVsu8Bk/QO6XDLRrukmuolCpE1MEmkK0kREQZOv28wplsFqLSelk0Yx3mlk4 8qHr -----END CERTIFICATE-----Generated at Sat Jun 13 09:14:06 2026 by rpki-client