$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f0c58f3-95ea-40f6-ad92-e52e7261f262.roa File: 1f0c58f3-95ea-40f6-ad92-e52e7261f262.roa (raw, json) Hash identifier: 7btj6O2H+CGE4cV5hku+phK3f4g5cxhd7Zc/E2v3woQ= Subject key identifier: 1D:FD:0A:55:89:0C:12:4F:0B:FA:C2:2A:FC:D5:AD:64:43:B7:44:49 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 09D467D9780553803D8455AA23289FAE70C985CB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f0c58f3-95ea-40f6-ad92-e52e7261f262.roa Signing time: Mon 11 May 2026 00:10:22 +0000 ROA not before: Mon 11 May 2026 00:10:22 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:7040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d4:67:d9:78:05:53:80:3d:84:55:aa:23:28:9f:ae:70:c9:85:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:10:22 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=b2b35d170c99f67c557442e5c3eb884679ac79939bba86481991a58906523771, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:2e:90:37:b4:19:61:d2:98:62:ee:89:16: 20:ff:44:3d:3d:35:e7:db:60:03:0a:1f:1c:1d:e4: eb:84:a1:5f:73:b0:c5:bc:e7:0e:75:f1:99:5d:4c: 47:bd:65:c6:8c:dc:00:2b:31:e7:0c:ef:1e:57:f5: 9c:53:3f:b2:e4:18:1a:1a:f2:a2:b9:9c:32:2b:94: 3d:1c:02:10:61:cd:4c:10:16:6d:fb:e1:b5:b0:1c: be:fd:48:27:49:e9:38:4c:16:cc:6a:e5:34:29:7c: 04:cb:2e:a1:dc:e0:d5:53:56:55:fb:a4:b7:7a:3b: 8c:47:67:21:76:a4:ee:dd:b0:2e:5e:f2:03:74:98: 92:dd:6f:73:a0:38:59:f3:90:de:0a:20:c7:ee:14: e8:84:c1:f1:4d:b4:c9:bd:aa:bf:dd:bb:d4:41:21: 89:63:9e:4c:b0:5f:8a:30:b1:8b:e6:14:3f:95:46: d2:f4:e1:3d:54:23:dd:38:cb:71:1b:bf:2c:62:00: 6d:69:e5:9c:89:e3:78:f1:9d:31:48:a0:65:df:36: d3:32:22:81:c7:a3:2a:97:45:7f:18:3d:e6:b8:80: 2c:c5:65:cc:d4:92:70:27:43:58:51:15:2f:b0:dd: 85:b5:b4:22:c4:fa:58:6a:e6:ac:5f:a1:15:e3:f1: 47:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FD:0A:55:89:0C:12:4F:0B:FA:C2:2A:FC:D5:AD:64:43:B7:44:49 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f0c58f3-95ea-40f6-ad92-e52e7261f262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:7040::/48 Signature Algorithm: sha256WithRSAEncryption 6d:3b:5a:6d:87:04:2f:c6:f0:81:7e:43:5a:01:f8:43:cf:88: ec:4d:ef:cc:26:33:dd:84:80:dd:9a:e1:df:fb:8d:89:f5:ba: 2e:d8:7c:a0:b9:2a:30:dd:90:bf:22:97:d9:a7:bb:da:08:ec: 92:7b:e6:d7:17:ba:d0:47:76:e3:bd:8d:84:32:48:bc:77:3e: a5:e6:1c:a8:3d:92:e5:65:9c:fb:e5:78:7a:06:bb:18:35:fa: 3d:2e:2a:8d:cd:d2:64:5c:64:19:ce:d2:43:a3:df:a6:bf:6b: 05:e7:b7:26:9d:d2:ad:d3:79:96:0c:3b:df:37:8f:0d:52:4f: e3:3d:c9:ba:cc:38:b2:58:2d:5d:7c:9d:af:49:b8:e1:c4:27: 90:ff:59:7c:52:5e:9f:f1:9e:81:ae:98:07:8f:30:bb:74:30: 1f:20:02:ea:3a:14:5f:37:ec:2b:9e:4d:31:64:9c:cd:64:21: e0:29:4c:c5:13:2d:f2:fd:60:13:72:36:ff:f5:9b:ba:6b:92: b6:54:54:19:1b:b4:2e:b3:61:6f:cd:95:1a:6e:fb:ed:1f:47: 16:28:32:31:cb:c8:05:5b:7c:37:01:31:fa:46:9a:9b:86:29: 58:00:c0:a7:f1:de:0d:e2:f6:4a:91:40:e9:ff:a1:c4:60:8a: 4e:4e:03:49 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCdRn2XgFU4A9hFWqIyifrnDJhcswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMTAyMloX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAYjJiMzVkMTcwYzk5ZjY3YzU1NzQ0 MmU1YzNlYjg4NDY3OWFjNzk5MzliYmE4NjQ4MTk5MWE1ODkwNjUyMzc3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod4ukDe0GWHSmGLuiRYg/0Q9PTXn 22ADCh8cHeTrhKFfc7DFvOcOdfGZXUxHvWXGjNwAKzHnDO8eV/WcUz+y5BgaGvKi uZwyK5Q9HAIQYc1MEBZt++G1sBy+/UgnSek4TBbMauU0KXwEyy6h3ODVU1ZV+6S3 ejuMR2chdqTu3bAuXvIDdJiS3W9zoDhZ85DeCiDH7hTohMHxTbTJvaq/3bvUQSGJ Y55MsF+KMLGL5hQ/lUbS9OE9VCPdOMtxG78sYgBtaeWcieN48Z0xSKBl3zbTMiKB x6Mql0V/GD3muIAsxWXM1JJwJ0NYURUvsN2FtbQixPpYauasX6EV4/FHcwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFB39ClWJDBJPC/rCKvzVrWRDt0RJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFmMGM1OGYzLTk1ZWEtNDBmNi1hZDkyLWU1MmU3MjYxZjI2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/3BAMA0GCSqGSIb3DQEBCwUAA4IBAQBtO1pthwQvxvCBfkNa AfhDz4jsTe/MJjPdhIDdmuHf+42J9bou2HyguSow3ZC/IpfZp7vaCOySe+bXF7rQ R3bjvY2EMki8dz6l5hyoPZLlZZz75Xh6BrsYNfo9LiqNzdJkXGQZztJDo9+mv2sF 57cmndKt03mWDDvfN48NUk/jPcm6zDiyWC1dfJ2vSbjhxCeQ/1l8Ul6f8Z6BrpgH jzC7dDAfIALqOhRfN+wrnk0xZJzNZCHgKUzFEy3y/WATcjb/9Zu6a5K2VFQZG7Qu s2FvzZUabvvtH0cWKDIxy8gFW3w3ATH6RpqbhilYAMCn8d4N4vZKkUDp/6HEYIpO TgNJ -----END CERTIFICATE-----Generated at Tue May 12 23:39:13 2026 by rpki-client