$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07cfb406-d628-472a-94e3-493598a051d0.roa File: 07cfb406-d628-472a-94e3-493598a051d0.roa (raw, json) Hash identifier: XS7ZONN+xCEvyF3Tpq5EuOVRtQdiq+1dAD2AdWh2/Ng= Subject key identifier: 6E:44:19:E4:68:0D:A4:D9:3D:99:1A:EA:CF:73:0A:DA:9A:17:49:C5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 72584EB210CE265CE82DF6A2BAA9E52621CFE1B1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07cfb406-d628-472a-94e3-493598a051d0.roa Signing time: Mon 11 May 2026 00:10:45 +0000 ROA not before: Mon 11 May 2026 00:10:45 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:58:4e:b2:10:ce:26:5c:e8:2d:f6:a2:ba:a9:e5:26:21:cf:e1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:10:45 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=49ae6bc37f58569ed46dc0fa54243618a6ff6f0604dc732f9529cc331b4505c6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:c3:e2:c1:a1:c8:14:7a:2c:cf:71:3d:33: 04:c5:bf:fd:ef:80:e4:e2:6d:af:8b:d8:68:2b:c6: 79:16:5c:ee:d9:58:4d:e9:2a:65:cf:01:91:26:82: fe:48:ed:bd:13:1f:aa:70:6f:f4:1c:89:c3:56:5e: c7:83:e3:94:3e:40:e4:68:4c:3b:c5:e0:c3:56:42: 58:76:ea:ea:d5:f7:da:bc:41:43:0e:07:b7:c3:53: 76:3d:75:7a:d8:3e:e5:51:95:a3:16:24:2c:b3:80: e7:8f:6c:7b:d9:6a:0a:5e:22:13:98:44:64:e7:30: 01:7d:ea:48:98:ab:29:fa:51:21:20:67:91:a7:31: 53:9a:dc:1b:6f:1d:c1:44:4f:be:ce:86:de:3d:3e: 84:58:f2:56:db:07:e8:3b:87:a1:14:7e:e7:f8:92: 63:df:45:88:13:ba:80:e1:fd:0f:b4:7f:d0:2d:41: 63:27:8c:67:b1:45:06:87:3c:a3:95:ec:c2:97:3d: ee:a7:e7:c3:43:69:ea:4d:6c:2a:2a:a9:41:72:69: 17:a3:8e:9b:72:12:34:9d:2e:ca:f4:1b:11:06:aa: 1f:c2:a7:1f:c5:a2:9f:f1:67:d1:f2:3a:34:57:3e: dc:dd:b3:d0:9d:6f:4c:5a:cd:5c:bc:f5:32:77:61: 61:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:44:19:E4:68:0D:A4:D9:3D:99:1A:EA:CF:73:0A:DA:9A:17:49:C5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07cfb406-d628-472a-94e3-493598a051d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2040::/48 Signature Algorithm: sha256WithRSAEncryption 46:6a:ad:4d:9a:86:f1:eb:b2:f2:21:9e:46:a4:c8:6e:38:57: 33:cc:72:64:2b:e4:7a:8b:50:b6:6a:88:41:9f:0d:e8:8e:53: 95:4b:45:6d:ac:5b:30:02:a2:f0:d5:44:69:24:8d:70:97:0e: e8:93:d4:37:9c:6d:53:f6:08:72:29:4b:0c:74:6f:4f:f9:9a: c5:50:87:c3:fd:d1:cc:b3:af:3e:7f:ea:09:d0:5e:f4:29:7a: 83:8f:55:20:0f:cd:af:4c:db:f9:8d:79:ca:de:e8:5c:09:dc: 1e:a3:71:02:2b:e5:03:6d:04:a1:22:90:c2:1d:c0:6f:7b:35: d5:3a:d2:08:42:42:3e:73:84:06:dc:d3:6d:aa:d3:fa:4d:6a: 9f:68:37:23:4f:26:a5:ab:e7:58:8a:a9:e2:2d:a6:67:2a:89: 63:a0:e7:6a:83:07:26:21:b8:3a:2d:04:6a:44:31:96:79:f4: dc:0d:3a:4b:b1:0f:b9:4a:55:64:f9:a4:28:8d:24:27:27:68: 95:9a:c3:bc:19:6b:64:c3:4a:76:d9:31:98:bf:73:74:ab:90: 8c:d1:ac:ac:5d:f9:25:45:50:a9:6a:fd:df:c3:72:df:e7:5a: 93:87:d7:07:7a:8d:41:e7:f2:2d:a9:04:a2:b0:f6:08:8a:62: ef:16:1a:30 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUclhOshDOJlzoLfaiuqnlJiHP4bEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMTA0NVoX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNANDlhZTZiYzM3ZjU4NTY5ZWQ0NmRj MGZhNTQyNDM2MThhNmZmNmYwNjA0ZGM3MzJmOTUyOWNjMzMxYjQ1MDVjNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2DD4sGhyBR6LM9xPTMExb/974Dk 4m2vi9hoK8Z5Flzu2VhN6SplzwGRJoL+SO29Ex+qcG/0HInDVl7Hg+OUPkDkaEw7 xeDDVkJYdurq1ffavEFDDge3w1N2PXV62D7lUZWjFiQss4Dnj2x72WoKXiITmERk 5zABfepImKsp+lEhIGeRpzFTmtwbbx3BRE++zobePT6EWPJW2wfoO4ehFH7n+JJj 30WIE7qA4f0PtH/QLUFjJ4xnsUUGhzyjlezClz3up+fDQ2nqTWwqKqlBcmkXo46b chI0nS7K9BsRBqofwqcfxaKf8WfR8jo0Vz7c3bPQnW9MWs1cvPUyd2FhswIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFG5EGeRoDaTZPZka6s9zCtqaF0nFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3Y2ZiNDA2LWQ2MjgtNDcyYS05NGUzLTQ5MzU5OGEwNTFkMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaACBAMA0GCSqGSIb3DQEBCwUAA4IBAQBGaq1Nmobx67LyIZ5G pMhuOFczzHJkK+R6i1C2aohBnw3ojlOVS0VtrFswAqLw1URpJI1wlw7ok9Q3nG1T 9ghyKUsMdG9P+ZrFUIfD/dHMs68+f+oJ0F70KXqDj1UgD82vTNv5jXnK3uhcCdwe o3ECK+UDbQShIpDCHcBvezXVOtIIQkI+c4QG3NNtqtP6TWqfaDcjTyalq+dYiqni LaZnKoljoOdqgwcmIbg6LQRqRDGWefTcDTpLsQ+5SlVk+aQojSQnJ2iVmsO8GWtk w0p22TGYv3N0q5CM0aysXfklRVCpav3fw3Lf51qTh9cHeo1B5/ItqQSisPYIimLv Fhow -----END CERTIFICATE-----Generated at Tue May 12 23:42:49 2026 by rpki-client