$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa File: 1186c93f-0bd5-4480-aec0-f19df528c312.roa (raw, json) Hash identifier: g2RRTRyOU4QYALH7K8mrYQJS+XTkYuD63TWiNpYoydY= Subject key identifier: E7:1A:C9:77:B4:BF:88:0C:16:79:51:1A:9A:48:2B:6A:9C:C0:13:D0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 30241DCDAF3F5DD1879CCF8BD66BC0FA0CF129 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa Signing time: Mon 04 May 2026 00:00:04 +0000 ROA not before: Mon 04 May 2026 00:00:04 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da23::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:24:1d:cd:af:3f:5d:d1:87:9c:cf:8b:d6:6b:c0:fa:0c:f1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 4 00:00:04 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=680b6044353746946dc993eb01c498a89502c194ae95a0f56b5665591d90ab97, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:5a:6e:d8:bc:e0:ac:a2:01:11:9b:df:3e: e7:d1:9d:e6:95:73:5e:77:50:fe:3f:8d:db:43:0e: 70:38:7b:0a:a7:f9:14:28:b3:20:8b:3f:76:f2:85: ca:11:7d:31:57:1c:e6:f0:91:61:14:8c:75:4b:fc: d4:9c:f9:40:2a:3f:ab:6f:e4:aa:7d:8e:61:78:e6: 30:3e:e6:bf:8c:b7:2e:6c:51:96:5f:05:83:a1:c8: b6:f4:af:bd:23:1b:0c:f8:8f:5d:5e:fb:b9:8f:a4: cd:30:02:be:e3:b5:b2:a6:63:1c:13:e6:7c:9a:e7: 9e:27:65:f4:d9:04:b3:19:0f:4e:ba:c4:2f:11:59: 27:56:ee:83:0d:38:c1:8a:da:d9:d7:55:61:f4:7b: 8e:85:37:fe:af:7f:45:ab:a7:04:eb:11:f0:a1:66: e3:89:aa:3a:3a:19:e8:68:35:aa:8b:78:ff:42:2e: 56:dc:5c:3d:c6:42:9c:a1:86:b3:56:54:e6:3c:fe: c0:68:f9:eb:19:03:b5:d4:19:37:c6:8e:91:12:a7: 10:41:7d:80:a8:06:01:0e:95:50:11:f8:d8:ec:a0: f7:04:c6:8a:f7:9b:1e:1b:7d:b6:0b:64:de:b5:19: 0d:da:b8:ac:49:a9:68:33:29:8a:81:e8:91:1d:07: ef:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1A:C9:77:B4:BF:88:0C:16:79:51:1A:9A:48:2B:6A:9C:C0:13:D0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da23::/36 Signature Algorithm: sha256WithRSAEncryption a2:1e:c3:82:f3:97:f3:f1:2a:6a:c5:fb:6f:94:c4:af:17:f5: 2c:88:68:9e:2c:b4:34:8b:0d:79:f1:35:81:6d:e8:01:d6:23: 61:7f:ce:c1:8d:6f:d9:16:e8:b9:cc:2f:54:7a:35:50:db:fc: b3:af:ae:73:28:cf:0e:67:23:7c:e3:b5:d7:69:72:de:69:36: b8:ec:45:7c:d8:82:54:5f:f8:d8:34:0b:9b:79:7b:5b:2d:fc: de:ea:f2:f6:46:70:98:e1:fc:f1:01:41:23:fd:ca:75:2d:11: 03:87:5f:da:cc:2f:0f:0f:38:28:6f:02:c3:63:0a:8a:a6:57: 83:03:4c:16:51:a7:51:d4:94:e5:16:b6:51:77:0e:d2:e6:61: 9a:c1:d1:1e:b7:01:6c:0c:49:d9:f0:30:e5:0f:86:2d:87:ad: 0c:91:fa:39:70:c0:0f:74:44:e8:77:f4:75:20:d8:03:ab:a0: 62:e4:f3:05:a5:1f:4c:90:55:7e:aa:b3:f2:c8:33:97:ff:3c: b5:c3:80:3b:8d:3e:2f:02:1d:50:2e:30:40:69:53:4c:af:d1: 30:20:87:ef:be:0e:40:b7:92:da:f5:6d:73:34:f1:8f:ce:c4: 58:d5:c4:aa:fb:19:9b:f9:b8:9a:5b:91:d1:e5:d1:69:e4:a9: 48:41:f1:41 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgITMCQdza8/XdGHnM+L1mvA+gzxKTANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjYwNTA0MDAwMDA0WhcN MjYwODAyMjM1OTU5WjB6MUkwRwYDVQQFE0A2ODBiNjA0NDM1Mzc0Njk0NmRjOTkz ZWIwMWM0OThhODk1MDJjMTk0YWU5NWEwZjU2YjU2NjU1OTFkOTBhYjk3MS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9olpu2LzgrKIBEZvfPufRneaVc153 UP4/jdtDDnA4ewqn+RQosyCLP3byhcoRfTFXHObwkWEUjHVL/NSc+UAqP6tv5Kp9 jmF45jA+5r+Mty5sUZZfBYOhyLb0r70jGwz4j11e+7mPpM0wAr7jtbKmYxwT5nya 554nZfTZBLMZD066xC8RWSdW7oMNOMGK2tnXVWH0e46FN/6vf0WrpwTrEfChZuOJ qjo6GehoNaqLeP9CLlbcXD3GQpyhhrNWVOY8/sBo+esZA7XUGTfGjpESpxBBfYCo BgEOlVAR+NjsoPcExor3mx4bfbYLZN61GQ3auKxJqWgzKYqB6JEdB++nAgMBAAGj ggJKMIICRjAdBgNVHQ4EFgQU5xrJd7S/iAwWeVEamkgrapzAE9AwHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv MTE4NmM5M2YtMGJkNS00NDgwLWFlYzAtZjE5ZGY1MjhjMzEyLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgQkBtojADANBgkqhkiG9w0BAQsFAAOCAQEAoh7DgvOX8/EqasX7b5TE rxf1LIhoniy0NIsNefE1gW3oAdYjYX/OwY1v2RboucwvVHo1UNv8s6+ucyjPDmcj fOO112ly3mk2uOxFfNiCVF/42DQLm3l7Wy383ury9kZwmOH88QFBI/3KdS0RA4df 2swvDw84KG8Cw2MKiqZXgwNMFlGnUdSU5Ra2UXcO0uZhmsHRHrcBbAxJ2fAw5Q+G LYetDJH6OXDAD3RE6Hf0dSDYA6ugYuTzBaUfTJBVfqqz8sgzl/88tcOAO40+LwId UC4wQGlTTK/RMCCH774OQLeS2vVtczTxj87EWNXEqvsZm/m4mluR0eXRaeSpSEHx QQ== -----END CERTIFICATE-----Generated at Wed May 13 00:19:33 2026 by rpki-client