$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa File: 0f3544c3-90af-45ac-b6c1-f680a3230f34.roa (raw, json) Hash identifier: 5EKfGBRe3RB9FIIrDwpqaGoppiVA7aCKQQOPo2ChMrY= Subject key identifier: 58:A1:D7:4F:55:04:DE:DC:06:72:0F:48:56:2B:C3:AC:A8:1B:3A:A5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 08A80BD567BD5A0CB2E018F3AB1887C7553F8A49 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa Signing time: Mon 11 May 2026 00:01:14 +0000 ROA not before: Mon 11 May 2026 00:01:14 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 00:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a8:0b:d5:67:bd:5a:0c:b2:e0:18:f3:ab:18:87:c7:55:3f:8a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:01:14 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=803b553d89e762361ad71864e9dc64c83d41e54f546e6c975310875ada1b6952, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:9d:c5:5c:f5:66:10:13:36:e9:79:e3:1e: 67:ae:7b:60:c8:02:55:f8:42:a2:ce:9e:76:ef:1c: 3c:3f:68:be:6c:4a:b8:c1:95:10:fa:af:9d:ab:dc: 06:f0:10:72:f2:f1:3e:74:23:bf:a1:8c:f4:d5:65: 09:63:45:3c:62:21:2e:45:8c:82:a6:40:c3:47:ac: 0a:40:ea:5e:57:47:b6:7d:0a:d7:ea:b4:90:9d:9c: 0d:85:d1:96:39:01:66:81:88:27:28:fa:5e:ff:78: 4a:d1:5f:3a:1c:fe:be:18:f6:c8:3f:d6:96:d6:cc: a9:f5:87:97:60:57:05:e9:59:f2:e6:21:60:62:72: 45:dc:dc:ff:29:91:d4:7d:6b:59:d9:d2:e7:c7:d0: 2f:83:c5:50:27:8a:93:01:92:d6:39:95:05:fc:a1: 48:bd:46:e0:fd:02:fc:6e:43:f3:a6:a3:05:07:21: f1:e4:11:3f:69:f7:dd:91:77:1c:ce:0f:61:eb:fb: a6:e2:a5:6f:6f:68:fc:82:5a:29:2b:8e:d5:a4:48: 6b:d6:2a:9a:37:02:ba:93:37:3d:db:fc:4e:38:2a: 7a:ac:07:92:7e:46:cd:98:5e:39:3f:1c:1c:75:c1: 8f:da:70:40:55:b2:8b:74:35:0b:f7:16:ab:d4:c8: 5b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A1:D7:4F:55:04:DE:DC:06:72:0F:48:56:2B:C3:AC:A8:1B:3A:A5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:b040::/48 Signature Algorithm: sha256WithRSAEncryption 0d:b5:f8:85:44:bf:7c:9f:b7:0e:9c:ff:dc:64:4e:99:5f:9c: c2:31:bb:fd:5b:4c:d1:a4:2e:b0:aa:07:cb:2a:d9:d4:8d:5c: 7f:4b:3c:14:3e:43:8f:12:0d:36:14:42:df:b7:85:d5:d5:55: d7:b7:5d:58:9f:98:ec:16:7e:b7:b6:2d:8e:61:19:4c:14:0f: 6c:b9:4f:1b:ac:a4:bc:34:45:88:d3:b3:fe:c6:0e:0a:f2:11: 33:c5:a0:32:04:e3:73:87:a1:25:56:c2:f9:dd:79:40:90:bf: f0:3d:56:a9:bf:fe:8f:45:6c:cd:d4:9d:3f:5f:4f:dd:1b:a3: 86:99:58:80:16:24:5d:45:d5:36:ef:a3:e1:c2:4c:73:11:47: aa:3e:1c:b3:46:de:7a:18:ba:a8:60:cc:73:00:23:47:25:5b: 9c:ae:ac:7e:48:54:40:67:bb:73:d8:bb:da:58:d0:bd:bb:cf: 8a:32:0d:2c:50:19:fb:63:68:6b:39:11:39:83:4b:f2:62:8d: 2a:a4:6e:80:a2:81:f4:de:d5:15:2d:4f:66:a5:04:54:37:31: 28:99:e5:91:bb:f0:5c:ac:da:f5:41:5b:af:96:1c:7b:ea:52: 15:e6:19:7c:10:13:e3:0b:a1:61:be:4a:47:24:65:a6:9a:a0: 9c:16:98:18 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCKgL1We9Wgyy4BjzqxiHx1U/ikkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMDExNFoX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAODAzYjU1M2Q4OWU3NjIzNjFhZDcx ODY0ZTlkYzY0YzgzZDQxZTU0ZjU0NmU2Yzk3NTMxMDg3NWFkYTFiNjk1MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7+dxVz1ZhATNul54x5nrntgyAJV +EKizp527xw8P2i+bEq4wZUQ+q+dq9wG8BBy8vE+dCO/oYz01WUJY0U8YiEuRYyC pkDDR6wKQOpeV0e2fQrX6rSQnZwNhdGWOQFmgYgnKPpe/3hK0V86HP6+GPbIP9aW 1syp9YeXYFcF6Vny5iFgYnJF3Nz/KZHUfWtZ2dLnx9Avg8VQJ4qTAZLWOZUF/KFI vUbg/QL8bkPzpqMFByHx5BE/affdkXcczg9h6/um4qVvb2j8glopK47VpEhr1iqa NwK6kzc92/xOOCp6rAeSfkbNmF45PxwcdcGP2nBAVbKLdDUL9xar1MhbiQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFih109VBN7cBnIPSFYrw6yoGzqlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmMzU0NGMzLTkwYWYtNDVhYy1iNmMxLWY2ODBhMzIzMGYzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaALBAMA0GCSqGSIb3DQEBCwUAA4IBAQANtfiFRL98n7cOnP/c ZE6ZX5zCMbv9W0zRpC6wqgfLKtnUjVx/SzwUPkOPEg02FELft4XV1VXXt11Yn5js Fn63ti2OYRlMFA9suU8brKS8NEWI07P+xg4K8hEzxaAyBONzh6ElVsL53XlAkL/w PVapv/6PRWzN1J0/X0/dG6OGmViAFiRdRdU276PhwkxzEUeqPhyzRt56GLqoYMxz ACNHJVucrqx+SFRAZ7tz2LvaWNC9u8+KMg0sUBn7Y2hrORE5g0vyYo0qpG6AooH0 3tUVLU9mpQRUNzEomeWRu/BcrNr1QVuvlhx76lIV5hl8EBPjC6FhvkpHJGWmmqCc FpgY -----END CERTIFICATE-----Generated at Wed May 13 03:13:00 2026 by rpki-client