$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/36780eb4-ec67-447e-93dc-7aee759e06ed.roa File: 36780eb4-ec67-447e-93dc-7aee759e06ed.roa (raw, json) Hash identifier: KbUu+0uXhlf1USsEAqSbO1vuqPhgT4uiMAuZDPWOA7Q= Subject key identifier: D2:4E:D1:01:DC:97:4A:D6:3B:5E:CF:AD:E7:65:6C:F3:4E:7B:55:2A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 77ABB64640E1A987665B5C5F462260039D3151E3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/36780eb4-ec67-447e-93dc-7aee759e06ed.roa Signing time: Sat 09 May 2026 00:00:43 +0000 ROA not before: Sat 09 May 2026 00:00:43 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 00:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ab:b6:46:40:e1:a9:87:66:5b:5c:5f:46:22:60:03:9d:31:51:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 9 00:00:43 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=0f6df26d32536d628875f1f1c7f9322b3d73304099a0ca6b12ed5c4f71d17e71, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:a4:20:2a:ff:4b:55:d5:8c:c4:7b:1d:fd: fc:47:57:01:67:65:1c:75:b8:0e:10:ae:de:a1:f9: 3a:ad:68:15:33:23:e8:6f:32:7c:6a:14:b4:5d:a3: f3:86:43:f2:31:7a:c9:05:49:95:a6:96:7c:ac:7e: 34:a7:b8:4d:1b:3f:86:71:ae:75:c6:f0:bf:86:be: 06:d7:f3:eb:79:70:7d:ac:87:f3:8c:22:72:9a:8e: d8:31:25:a2:95:8b:ac:50:cd:4d:bb:ac:8a:a6:28: 8c:4c:44:08:96:8f:5e:59:83:8b:f8:6e:d8:e0:5d: e1:7e:9b:db:19:bb:13:47:6f:34:d7:cb:bf:35:2e: ac:ff:f8:91:0a:dd:e4:30:d5:34:0f:0d:aa:c9:e6: d4:77:95:f8:c3:32:39:26:74:4a:27:29:a1:10:4f: 54:30:9f:72:de:a3:63:0c:94:fe:2e:fb:e6:a3:78: cc:50:e0:e4:78:f8:d3:1b:0c:69:39:3d:04:01:3b: d8:88:da:25:16:79:c6:74:83:50:16:8d:98:ad:98: 62:ce:30:81:23:95:64:2f:6b:6f:a6:22:c1:4b:da: 3d:9d:1a:ec:66:e2:51:59:31:ea:13:ab:76:1a:56: c2:ef:43:b6:a3:87:46:8b:30:f6:e1:29:7a:30:86: 30:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4E:D1:01:DC:97:4A:D6:3B:5E:CF:AD:E7:65:6C:F3:4E:7B:55:2A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/36780eb4-ec67-447e-93dc-7aee759e06ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00::/48 Signature Algorithm: sha256WithRSAEncryption 11:9a:b1:56:f6:b2:df:9b:cb:c2:6f:17:84:4f:a8:0d:66:04: e6:4a:90:be:9c:c2:71:d1:19:b3:0e:bf:2c:8d:32:5c:b3:54: 0b:57:0c:65:68:38:5e:e0:c3:d8:c8:15:bc:ea:32:63:4d:7f: 0e:86:a9:6a:eb:58:d4:28:f8:03:b0:32:63:9b:47:e7:6e:10: c1:7c:f7:2b:97:21:85:1a:b4:69:01:4f:28:b8:73:82:e1:b3: 46:36:57:d2:a1:54:b9:a7:1d:cc:ad:3a:2c:42:1e:46:4d:34: 95:e2:ac:84:b8:39:69:8f:ab:a9:73:e9:7f:f6:2c:9a:12:7c: c4:51:b8:f3:9f:d9:92:74:3e:96:00:60:61:54:85:9a:6c:e4: ba:7e:4d:a6:92:15:52:aa:94:f0:18:78:c1:5f:83:a3:62:ea: 31:8d:2d:d1:a7:cc:c3:a5:b1:5a:22:e6:70:e3:d5:04:e5:c9: ab:9d:ec:33:56:2b:9c:f5:16:60:df:48:c8:74:31:97:73:21: cb:38:36:f9:5f:4a:a2:74:e1:c8:ae:65:16:4d:9a:a5:54:5a: fd:18:c6:67:9f:4b:c5:60:80:e5:6a:a0:e9:61:02:35:5f:83: 2a:3f:c6:f0:b0:c9:2f:78:54:5a:93:3e:25:16:a4:43:30:a7: 58:cf:7f:75 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUd6u2RkDhqYdmW1xfRiJgA50xUeMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwOTAwMDA0M1oX DTI2MDgwNzIzNTk1OVowejFJMEcGA1UEBRNAMGY2ZGYyNmQzMjUzNmQ2Mjg4NzVm MWYxYzdmOTMyMmIzZDczMzA0MDk5YTBjYTZiMTJlZDVjNGY3MWQxN2U3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8ukICr/S1XVjMR7Hf38R1cBZ2Uc dbgOEK7eofk6rWgVMyPobzJ8ahS0XaPzhkPyMXrJBUmVppZ8rH40p7hNGz+Gca51 xvC/hr4G1/PreXB9rIfzjCJymo7YMSWilYusUM1Nu6yKpiiMTEQIlo9eWYOL+G7Y 4F3hfpvbGbsTR28018u/NS6s//iRCt3kMNU0Dw2qyebUd5X4wzI5JnRKJymhEE9U MJ9y3qNjDJT+Lvvmo3jMUODkePjTGwxpOT0EATvYiNolFnnGdINQFo2YrZhizjCB I5VkL2tvpiLBS9o9nRrsZuJRWTHqE6t2GlbC70O2o4dGizD24Sl6MIYw7wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNJO0QHcl0rWO17PredlbPNOe1UqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM2NzgwZWI0LWVjNjctNDQ3ZS05M2RjLTdhZWU3NTllMDZlZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQARmrFW9rLfm8vCbxeE T6gNZgTmSpC+nMJx0RmzDr8sjTJcs1QLVwxlaDhe4MPYyBW86jJjTX8Ohqlq61jU KPgDsDJjm0fnbhDBfPcrlyGFGrRpAU8ouHOC4bNGNlfSoVS5px3MrTosQh5GTTSV 4qyEuDlpj6upc+l/9iyaEnzEUbjzn9mSdD6WAGBhVIWabOS6fk2mkhVSqpTwGHjB X4OjYuoxjS3Rp8zDpbFaIuZw49UE5cmrnewzViuc9RZg30jIdDGXcyHLODb5X0qi dOHIrmUWTZqlVFr9GMZnn0vFYIDlaqDpYQI1X4MqP8bwsMkveFRakz4lFqRDMKdY z391 -----END CERTIFICATE-----Generated at Wed May 13 02:42:30 2026 by rpki-client