$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/206f10d0-0840-46e9-be47-09127e97b837.roa File: 206f10d0-0840-46e9-be47-09127e97b837.roa (raw, json) Hash identifier: wqKjjErg2/wKbhENTp1TMKcVW0RgyXbFOOuRcgBGGf4= Subject key identifier: B2:7E:A6:AF:AA:32:45:CE:D6:F5:2F:F5:9F:8A:68:CA:AF:AE:B7:84 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 16E69B222B9FFCB0588116C5DD9FF99A8C76184F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/206f10d0-0840-46e9-be47-09127e97b837.roa Signing time: Sat 09 May 2026 00:00:11 +0000 ROA not before: Sat 09 May 2026 00:00:11 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e6:9b:22:2b:9f:fc:b0:58:81:16:c5:dd:9f:f9:9a:8c:76:18:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 9 00:00:11 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=1f15aa52d998d8968673954940d7b94e479f26264817eb286e2ae4b5bddcd857, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:45:17:d0:7a:75:72:bf:7c:be:43:e5:a2: 9a:c0:f8:4a:77:30:05:a1:52:bf:ec:e0:79:92:af: ce:04:7a:dd:2e:28:84:ba:09:86:e1:e1:f1:ad:cb: 1d:11:a0:44:ab:4d:dd:85:b3:43:48:61:36:55:05: 57:86:7e:16:2e:73:f3:fb:1d:6c:dd:d4:6a:b8:89: 8b:76:49:3f:53:57:15:9a:74:da:e7:a0:04:0f:32: 27:f7:46:7a:4b:01:7f:2b:54:b4:42:9f:19:ec:9d: e3:68:37:b0:d7:f9:b3:e0:a9:a9:7d:82:85:94:3f: 8c:03:58:d9:da:21:e1:b2:9d:50:ac:93:40:80:e3: cb:43:a3:cb:ab:50:cf:d4:5d:7e:c5:e8:02:0f:72: 96:e8:87:a5:b8:55:6a:5d:50:18:97:f7:7c:64:f5: cf:d7:2b:23:86:ff:26:1e:87:2b:5e:8a:52:06:62: 12:46:ca:f6:7a:48:3b:bc:94:2f:35:74:ab:9d:f9: 63:b9:7f:e0:1c:54:d8:61:86:e9:48:cb:34:7e:e3: 4a:77:5c:ac:ca:43:59:69:df:b1:18:fa:88:60:3e: 2d:fb:0d:c2:3c:53:12:a7:4a:09:11:29:93:50:bb: 86:40:30:15:c3:bc:04:32:04:1d:b1:2e:d7:b7:06: 30:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7E:A6:AF:AA:32:45:CE:D6:F5:2F:F5:9F:8A:68:CA:AF:AE:B7:84 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/206f10d0-0840-46e9-be47-09127e97b837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:70c0::/48 Signature Algorithm: sha256WithRSAEncryption 77:cd:50:79:a6:a4:1a:28:b2:81:04:43:e3:66:66:04:ee:ac: 4b:e6:36:dc:79:60:30:7d:0c:79:1c:c4:47:0b:b6:d2:5c:5f: c7:76:dd:b4:ee:59:c4:18:db:4f:e0:bb:a1:f7:d5:99:48:83: 90:a7:ac:1d:04:12:56:29:67:16:b7:f9:22:d8:83:b6:26:b7: 1e:1d:36:2c:59:f5:a2:a2:57:6f:32:e2:64:58:07:dc:6e:a5: 46:38:47:a6:34:7d:1b:ea:7f:a5:b5:87:81:e0:2e:9f:d3:81: cb:e0:34:91:46:ca:e3:ad:e3:09:e5:06:c6:9d:a1:b1:47:6e: 3f:93:cd:a8:b1:67:af:75:99:62:8e:c6:bb:4e:8c:57:2a:2e: d3:5f:3c:15:48:b6:bf:f4:64:08:7f:b8:36:ec:36:74:d9:c9: 42:1d:ae:78:ab:46:da:b9:a4:18:c3:3d:f2:2d:5c:6a:73:10: 7a:22:92:d8:9b:75:90:f5:41:4f:ca:d8:de:50:18:74:30:8a: 47:23:f2:79:6f:2b:84:07:bc:99:b2:3d:e3:2d:40:da:4d:a9: f9:5e:e4:bb:a1:cb:36:c0:e3:d3:17:e3:3d:4f:54:43:d5:8a: ee:f5:26:f4:69:dc:12:e6:d7:56:59:22:80:81:d8:33:1f:c7: 63:05:95:71 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFuabIiuf/LBYgRbF3Z/5mox2GE8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwOTAwMDAxMVoX DTI2MDgwNzIzNTk1OVowejFJMEcGA1UEBRNAMWYxNWFhNTJkOTk4ZDg5Njg2NzM5 NTQ5NDBkN2I5NGU0NzlmMjYyNjQ4MTdlYjI4NmUyYWU0YjViZGRjZDg1NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAundFF9B6dXK/fL5D5aKawPhKdzAF oVK/7OB5kq/OBHrdLiiEugmG4eHxrcsdEaBEq03dhbNDSGE2VQVXhn4WLnPz+x1s 3dRquImLdkk/U1cVmnTa56AEDzIn90Z6SwF/K1S0Qp8Z7J3jaDew1/mz4KmpfYKF lD+MA1jZ2iHhsp1QrJNAgOPLQ6PLq1DP1F1+xegCD3KW6IeluFVqXVAYl/d8ZPXP 1ysjhv8mHocrXopSBmISRsr2ekg7vJQvNXSrnfljuX/gHFTYYYbpSMs0fuNKd1ys ykNZad+xGPqIYD4t+w3CPFMSp0oJESmTULuGQDAVw7wEMgQdsS7XtwYw6QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLJ+pq+qMkXO1vUv9Z+KaMqvrreEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIwNmYxMGQwLTA4NDAtNDZlOS1iZTQ3LTA5MTI3ZTk3YjgzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8nDAMA0GCSqGSIb3DQEBCwUAA4IBAQB3zVB5pqQaKLKBBEPj ZmYE7qxL5jbceWAwfQx5HMRHC7bSXF/Hdt207lnEGNtP4Luh99WZSIOQp6wdBBJW KWcWt/ki2IO2JrceHTYsWfWioldvMuJkWAfcbqVGOEemNH0b6n+ltYeB4C6f04HL 4DSRRsrjreMJ5QbGnaGxR24/k82osWevdZlijsa7ToxXKi7TXzwVSLa/9GQIf7g2 7DZ02clCHa54q0bauaQYwz3yLVxqcxB6IpLYm3WQ9UFPytjeUBh0MIpHI/J5byuE B7yZsj3jLUDaTan5XuS7ocs2wOPTF+M9T1RD1Yru9Sb0adwS5tdWWSKAgdgzH8dj BZVx -----END CERTIFICATE-----Generated at Wed May 13 01:00:05 2026 by rpki-client