$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52751e1c-4db1-409a-9466-4447381364fd.roa File: 52751e1c-4db1-409a-9466-4447381364fd.roa (raw, json) Hash identifier: XsEeW7Ku43xl+xzYOKNl82b4PB2msz3B+HUV0x4qZ3o= Subject key identifier: 89:F9:1D:CB:A9:6E:9D:13:9A:BD:1B:B9:C6:AE:6E:60:CF:CD:A4:57 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3BF41D71E6330C314D36573AD5BC6F47759383C8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52751e1c-4db1-409a-9466-4447381364fd.roa Signing time: Wed 06 May 2026 00:00:11 +0000 ROA not before: Wed 06 May 2026 00:00:11 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f4:1d:71:e6:33:0c:31:4d:36:57:3a:d5:bc:6f:47:75:93:83:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 6 00:00:11 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=c9705e4ac244c89a78d686dddbceeaaa560296c38a9db6bc7c5ddc9257b11df4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:c2:62:44:ec:3c:15:75:29:39:29:45:12: 33:d4:e0:86:a4:bf:9f:59:2f:7c:d1:7e:7d:95:24: b8:58:8d:2b:5f:a1:c7:42:b7:5e:73:fb:5f:be:2c: f4:3d:0d:63:4a:98:10:a8:55:48:45:c2:a3:e9:55: ef:20:58:a4:0c:0d:ae:5e:78:d2:bc:c7:d8:8a:c9: f4:9a:1e:08:65:f0:9c:3e:dd:23:5c:47:b5:d6:fc: 88:f2:fd:fa:ae:56:07:53:9a:df:03:1c:32:f9:02: 4e:e6:a2:6b:a1:ad:32:c5:8f:43:ef:84:d9:3d:32: ad:8e:d3:37:66:d6:15:bd:8b:b5:26:f8:8f:a4:d9: 66:dc:d7:0c:53:24:22:d1:73:c8:67:cf:05:2a:9b: 7e:e8:c7:fe:b0:4d:81:14:51:67:97:5d:8c:d9:47: 7e:a0:c7:e4:0a:1d:ac:e1:a4:6b:6c:92:57:a3:ed: f1:cd:b9:34:e5:ef:c1:c7:96:3f:9f:02:e0:47:11: 49:58:ee:c2:dd:16:92:0a:4f:3f:86:c5:18:3a:be: db:41:92:45:7d:17:98:20:68:fa:8f:ca:70:82:1b: b3:48:5b:ef:e4:ab:99:60:cf:0c:8b:65:1a:3d:b8: 09:00:74:ed:1d:e3:cc:83:34:f1:45:1a:8c:a0:be: 34:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F9:1D:CB:A9:6E:9D:13:9A:BD:1B:B9:C6:AE:6E:60:CF:CD:A4:57 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52751e1c-4db1-409a-9466-4447381364fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:9000::/40 Signature Algorithm: sha256WithRSAEncryption aa:7b:db:7c:f6:7e:ec:fa:90:25:10:d7:a2:ba:bf:d3:2e:8d: 45:88:5a:3a:c6:be:d6:7e:ea:4e:e9:bd:b3:8d:d8:96:de:be: 25:28:87:67:d3:00:27:09:35:b7:53:d2:0d:bc:da:c3:fd:d7: 61:2d:00:45:1f:62:03:1f:ef:dc:59:26:69:c9:15:1d:2b:fb: 8d:9b:fc:98:d6:cb:92:fe:55:0e:80:88:3b:86:69:de:cf:5f: 14:5e:0a:89:95:a2:da:92:25:10:38:3c:52:01:97:7f:f2:b8: e4:11:11:98:9e:d8:51:19:9b:43:ac:c6:cf:40:d2:dc:25:91: 55:b0:80:ec:69:4d:06:37:41:04:7e:92:6a:0d:86:46:8c:7a: c2:a8:be:ef:6c:ac:73:73:28:51:53:22:cf:db:e2:b9:56:6e: e3:1c:f7:d1:f2:d7:d6:01:3e:45:14:24:5a:c7:fa:d7:92:e6: 36:ba:8f:02:11:51:53:4d:31:ed:f6:65:3c:1b:5d:1f:55:b4: f7:73:cf:a2:6b:cb:56:0d:af:e8:3a:32:08:36:0b:86:d2:a3: 28:25:a3:7d:1d:d0:32:cf:40:1b:60:e8:8d:74:3c:6e:c2:d8: 73:22:1c:58:43:03:a2:ad:60:a3:d4:5d:b4:52:93:98:d0:d2: 59:eb:39:9c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUO/QdceYzDDFNNlc61bxvR3WTg8gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwNjAwMDAxMVoX DTI2MDgwNDIzNTk1OVowejFJMEcGA1UEBRNAYzk3MDVlNGFjMjQ0Yzg5YTc4ZDY4 NmRkZGJjZWVhYWE1NjAyOTZjMzhhOWRiNmJjN2M1ZGRjOTI1N2IxMWRmNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKvCYkTsPBV1KTkpRRIz1OCGpL+f WS980X59lSS4WI0rX6HHQrdec/tfviz0PQ1jSpgQqFVIRcKj6VXvIFikDA2uXnjS vMfYisn0mh4IZfCcPt0jXEe11vyI8v36rlYHU5rfAxwy+QJO5qJroa0yxY9D74TZ PTKtjtM3ZtYVvYu1JviPpNlm3NcMUyQi0XPIZ88FKpt+6Mf+sE2BFFFnl12M2Ud+ oMfkCh2s4aRrbJJXo+3xzbk05e/Bx5Y/nwLgRxFJWO7C3RaSCk8/hsUYOr7bQZJF fReYIGj6j8pwghuzSFvv5KuZYM8Mi2UaPbgJAHTtHePMgzTxRRqMoL40bwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIn5Hcupbp0Tmr0bucaubmDPzaRXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUyNzUxZTFjLTRkYjEtNDA5YS05NDY2LTQ0NDczODEzNjRmZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYJAwDQYJKoZIhvcNAQELBQADggEBAKp723z2fuz6kCUQ16K6 v9MujUWIWjrGvtZ+6k7pvbON2JbeviUoh2fTACcJNbdT0g282sP912EtAEUfYgMf 79xZJmnJFR0r+42b/JjWy5L+VQ6AiDuGad7PXxReComVotqSJRA4PFIBl3/yuOQR EZie2FEZm0Osxs9A0twlkVWwgOxpTQY3QQR+kmoNhkaMesKovu9srHNzKFFTIs/b 4rlWbuMc99Hy19YBPkUUJFrH+teS5ja6jwIRUVNNMe32ZTwbXR9VtPdzz6Jry1YN r+g6Mgg2C4bSoyglo30d0DLPQBtg6I10PG7C2HMiHFhDA6KtYKPUXbRSk5jQ0lnr OZw= -----END CERTIFICATE-----Generated at Wed May 13 01:03:10 2026 by rpki-client