$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f20bf618-ebec-45de-8f99-118b6505e5b4.roa File: f20bf618-ebec-45de-8f99-118b6505e5b4.roa (raw, json) Hash identifier: BBKjMdJTDFCSZvmDWELy6MXDUWCiBJ+b/+/uCI+aYB8= Subject key identifier: 55:48:42:01:E6:DF:38:18:CC:B7:2F:8A:99:0C:D4:3F:AE:4D:3D:1F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 10E9B45153BFFE1D4D4DFC2071704ED888CD3119 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f20bf618-ebec-45de-8f99-118b6505e5b4.roa Signing time: Sun 31 May 2026 00:20:30 +0000 ROA not before: Sun 31 May 2026 00:20:30 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:48c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e9:b4:51:53:bf:fe:1d:4d:4d:fc:20:71:70:4e:d8:88:cd:31:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:20:30 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=9a1b16061d13db95b3f3be50b5690dba974cd1161279c9ede435747807a7633f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:70:a9:ac:dc:17:28:90:dc:0e:a4:a2:ae:75: 32:77:89:5f:59:c5:bb:01:a7:85:79:a6:e6:5b:d5: ba:0c:52:a5:f4:23:14:23:95:af:bf:c5:96:70:82: ee:77:39:fb:27:c6:52:35:27:76:a7:62:be:11:8c: 79:b1:8c:de:79:36:9b:a1:86:41:65:26:83:b2:b6: b3:67:94:a5:61:97:0b:f3:a7:9f:8f:6c:29:70:fb: 69:65:4b:0a:fd:22:26:cc:81:66:28:50:e4:5a:e5: 42:34:49:25:ed:82:ee:0a:82:38:74:f4:72:a1:41: e7:92:93:4c:a7:e4:bd:cd:7a:a7:30:9b:58:37:a2: 50:bc:3f:70:92:af:1f:b3:35:01:73:49:88:53:b4: 7b:9a:f0:70:3c:64:e5:a0:c1:d8:8c:db:dd:b2:31: d1:8d:eb:bb:b3:ae:46:64:f8:89:f3:bf:ce:74:b9: e6:ec:29:02:77:84:48:3a:0f:6a:ae:01:16:f5:ce: 28:83:db:22:24:10:d3:0c:6b:23:5d:99:4c:ea:1a: 22:4d:a1:0a:e4:e9:bd:c8:c4:b5:9c:17:b4:67:70: 33:4f:17:c6:6d:27:d0:d0:63:08:d0:83:5d:36:46: f6:fb:f3:b1:3f:ca:79:12:93:61:dc:31:98:54:58: f7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:48:42:01:E6:DF:38:18:CC:B7:2F:8A:99:0C:D4:3F:AE:4D:3D:1F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f20bf618-ebec-45de-8f99-118b6505e5b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:48c0::/48 Signature Algorithm: sha256WithRSAEncryption 50:a3:6e:d8:fb:f3:d2:96:ca:bf:e7:1e:10:fa:fb:30:fc:d9: 94:87:3a:4a:e6:1e:a4:82:30:f2:9d:71:36:dc:24:ab:b0:64: ac:65:02:eb:51:bf:7b:ec:6c:39:50:67:fe:1f:e7:10:fa:a8: ff:b6:fe:b2:d5:3d:1e:1b:80:99:47:ef:d0:62:c2:2c:79:63: bf:bb:bc:c7:c8:f6:8c:01:51:db:09:06:2a:0d:e2:e1:d4:62: 09:4f:5b:b8:89:0c:13:a1:68:92:a2:85:6b:bc:5f:65:31:3a: f3:d3:bf:80:25:29:54:71:3f:4e:20:8b:d6:7a:75:92:3e:07: a1:80:00:45:ae:47:42:f9:ab:69:5a:c4:5f:f7:ee:46:2f:5d: 4f:db:9a:48:9f:a3:55:eb:d8:15:e8:a2:15:3c:79:24:e2:60: 6c:4c:fb:15:83:af:61:8f:03:39:ea:0c:94:cb:09:68:a6:b7: 9f:64:e8:c9:40:74:b6:d8:77:5d:0a:a4:2d:c1:20:20:21:17: bb:67:f4:c2:58:dc:a7:01:20:4f:2a:07:1c:ef:e0:3b:ab:1f: 4d:a9:b4:67:a3:01:ac:dc:ab:f2:e7:95:26:54:a5:97:2d:11: bd:33:50:9e:d3:1c:12:ed:68:c0:78:b1:12:f7:cd:10:dc:6f: f6:8f:35:5a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEOm0UVO//h1NTfwgcXBO2IjNMRkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMjAzMFoX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAOWExYjE2MDYxZDEzZGI5NWIzZjNi ZTUwYjU2OTBkYmE5NzRjZDExNjEyNzljOWVkZTQzNTc0NzgwN2E3NjMzZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonCprNwXKJDcDqSirnUyd4lfWcW7 AaeFeabmW9W6DFKl9CMUI5Wvv8WWcILudzn7J8ZSNSd2p2K+EYx5sYzeeTaboYZB ZSaDsrazZ5SlYZcL86efj2wpcPtpZUsK/SImzIFmKFDkWuVCNEkl7YLuCoI4dPRy oUHnkpNMp+S9zXqnMJtYN6JQvD9wkq8fszUBc0mIU7R7mvBwPGTloMHYjNvdsjHR jeu7s65GZPiJ87/OdLnm7CkCd4RIOg9qrgEW9c4og9siJBDTDGsjXZlM6hoiTaEK 5Om9yMS1nBe0Z3AzTxfGbSfQ0GMI0INdNkb2+/OxP8p5EpNh3DGYVFj3aQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFVIQgHm3zgYzLcvipkM1D+uTT0fMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YyMGJmNjE4LWViZWMtNDVkZS04Zjk5LTExOGI2NTA1ZTViNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaukjAMA0GCSqGSIb3DQEBCwUAA4IBAQBQo27Y+/PSlsq/5x4Q +vsw/NmUhzpK5h6kgjDynXE23CSrsGSsZQLrUb977Gw5UGf+H+cQ+qj/tv6y1T0e G4CZR+/QYsIseWO/u7zHyPaMAVHbCQYqDeLh1GIJT1u4iQwToWiSooVrvF9lMTrz 07+AJSlUcT9OIIvWenWSPgehgABFrkdC+atpWsRf9+5GL11P25pIn6NV69gV6KIV PHkk4mBsTPsVg69hjwM56gyUywloprefZOjJQHS22HddCqQtwSAgIRe7Z/TCWNyn ASBPKgcc7+A7qx9NqbRnowGs3Kvy55UmVKWXLRG9M1Ce0xwS7WjAeLES980Q3G/2 jzVa -----END CERTIFICATE-----Generated at Wed Jun 17 08:42:23 2026 by rpki-client