$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0a4856e0-f127-4ba4-95a7-4efde8ba42b2.roa File: 0a4856e0-f127-4ba4-95a7-4efde8ba42b2.roa (raw, json) Hash identifier: sebMIA7yts/HFso/6s2JIi3N1jjpYQ9uO01Cppstgi0= Subject key identifier: 17:AC:BD:2E:3F:C6:96:32:C0:44:BE:89:64:E2:A0:06:91:55:D1:57 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4C906C71ABF6E20FE00D2668021A53FDAA91C48E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0a4856e0-f127-4ba4-95a7-4efde8ba42b2.roa Signing time: Tue 12 May 2026 00:10:12 +0000 ROA not before: Tue 12 May 2026 00:10:12 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 126.226.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:90:6c:71:ab:f6:e2:0f:e0:0d:26:68:02:1a:53:fd:aa:91:c4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:10:12 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=c994bdb1721416bbfc3838dbf104c4fd533849bde130f2f63d5a984a5eda2233, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:0d:08:45:cd:05:13:3c:d1:e5:ad:5d:84: 89:1f:e6:27:48:c1:e1:f9:aa:c9:41:25:c2:01:cf: 31:94:95:e1:d1:db:a6:f6:86:45:e3:83:7a:88:c4: 0b:74:97:bb:61:d5:c6:41:a2:6e:24:75:df:d4:e4: 4f:dc:5c:1d:b3:cb:c1:f3:79:0c:1d:b1:13:fe:3b: 2b:63:e2:1b:a7:dc:19:37:26:83:42:e3:2b:8b:3a: af:85:44:d0:00:ae:e5:fb:76:a7:b7:cb:e8:d4:58: bc:e6:8d:43:a4:8e:ac:b0:f3:f7:29:90:44:ac:c6: 93:da:7e:81:25:d9:00:37:e1:5e:ed:bb:84:bd:b7: 1c:05:aa:2f:a6:90:61:d3:86:7f:2f:c2:ce:0a:c2: 06:14:f8:e0:a6:61:9d:0d:8d:e8:ee:b8:dc:cb:20: 8f:68:b4:ab:a9:d9:60:91:d7:c5:94:b7:2b:4e:9c: d4:55:b7:8e:64:8f:f4:0f:2f:04:78:f0:b0:6e:81: 87:b1:77:62:82:5c:7a:0d:07:aa:c6:24:20:90:f9: 74:01:19:85:87:29:d4:db:8c:b3:6d:db:34:bc:59: 44:c4:dc:75:46:e8:2b:c1:dc:d5:9a:7c:68:39:ec: da:d6:2d:e4:bf:b8:f3:73:7e:9d:16:56:af:f0:30: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AC:BD:2E:3F:C6:96:32:C0:44:BE:89:64:E2:A0:06:91:55:D1:57 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0a4856e0-f127-4ba4-95a7-4efde8ba42b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 126.226.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0f:88:a9:63:58:72:1f:e1:dd:69:9c:94:a0:5b:ea:1d:2b:04: 83:a7:93:76:53:c5:dc:a0:2b:e8:8d:a0:eb:a2:f6:81:e3:4e: 8e:ce:27:43:ba:a2:49:bd:b2:65:f9:dc:9c:9b:d0:c4:bd:dd: 17:ae:16:02:bd:86:3e:81:87:a2:ed:cb:b1:61:1c:ce:76:62: a1:c7:ad:b1:eb:60:cc:21:e7:f9:87:7d:a0:da:ef:cd:ff:0e: 68:6b:5e:f2:92:28:9d:b9:51:dc:e6:3e:b7:d0:c2:05:20:c4: 27:3b:0a:16:25:e8:9b:ed:8e:ca:f1:b3:9a:a1:01:00:23:f3: 4b:2d:ca:1e:e2:5f:d1:f6:6a:b6:51:41:1b:7d:12:27:24:30: c5:d4:71:cb:b7:30:b0:99:c3:cb:b4:8c:96:d8:53:96:30:9c: 8c:e1:e0:bc:8c:d3:44:e9:93:e8:f5:f1:92:b7:4c:63:91:16: 45:e9:6a:39:c1:aa:63:b4:44:10:ed:d6:c2:70:b7:62:30:03: b9:02:40:f5:73:63:d6:7e:bf:33:93:d4:6f:7c:0f:47:ce:58: 9a:78:2b:74:89:3d:3c:c8:4f:8f:53:04:37:ca:5b:71:77:67: 11:1f:48:dc:d1:b0:40:34:2d:ed:9e:9c:d2:89:a4:a7:9f:95: 6b:d3:22:4c -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUTJBscav24g/gDSZoAhpT/aqRxI4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMTAxMloX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAYzk5NGJkYjE3MjE0MTZiYmZjMzgz OGRiZjEwNGM0ZmQ1MzM4NDliZGUxMzBmMmY2M2Q1YTk4NGE1ZWRhMjIzMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspENCEXNBRM80eWtXYSJH+YnSMHh +arJQSXCAc8xlJXh0dum9oZF44N6iMQLdJe7YdXGQaJuJHXf1ORP3Fwds8vB83kM HbET/jsrY+Ibp9wZNyaDQuMrizqvhUTQAK7l+3ant8vo1Fi85o1DpI6ssPP3KZBE rMaT2n6BJdkAN+Fe7buEvbccBaovppBh04Z/L8LOCsIGFPjgpmGdDY3o7rjcyyCP aLSrqdlgkdfFlLcrTpzUVbeOZI/0Dy8EePCwboGHsXdiglx6DQeqxiQgkPl0ARmF hynU24yzbds0vFlExNx1RugrwdzVmnxoOeza1i3kv7jzc36dFlav8DCwxQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFBesvS4/xpYywES+iWTioAaRVdFXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBhNDg1NmUwLWYxMjctNGJhNC05NWE3LTRlZmRlOGJhNDJiMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAfuIwDQYJKoZIhvcNAQELBQADggEBAA+IqWNYch/h3WmclKBb6h0r BIOnk3ZTxdygK+iNoOui9oHjTo7OJ0O6okm9smX53Jyb0MS93ReuFgK9hj6Bh6Lt y7FhHM52YqHHrbHrYMwh5/mHfaDa783/DmhrXvKSKJ25UdzmPrfQwgUgxCc7ChYl 6Jvtjsrxs5qhAQAj80styh7iX9H2arZRQRt9EickMMXUccu3MLCZw8u0jJbYU5Yw nIzh4LyM00Tpk+j18ZK3TGORFkXpajnBqmO0RBDt1sJwt2IwA7kCQPVzY9Z+vzOT 1G98D0fOWJp4K3SJPTzIT49TBDfKW3F3ZxEfSNzRsEA0Le2enNKJpKeflWvTIkw= -----END CERTIFICATE-----Generated at Wed May 13 00:22:48 2026 by rpki-client