$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/562ea526-d7fd-4f54-a7f1-2891e7003176.roa File: 562ea526-d7fd-4f54-a7f1-2891e7003176.roa (raw, json) Hash identifier: bH53BKIuj3TYOshhMQaS2SguONvlLxjuZckcFJOxHq4= Subject key identifier: 44:87:84:AB:54:86:DD:EB:4F:29:82:EE:22:8D:05:A7:D3:3C:D3:A4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 456548B76DD9BA3B732871739C2D81B63F1104C4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/562ea526-d7fd-4f54-a7f1-2891e7003176.roa Signing time: Mon 11 May 2026 00:01:18 +0000 ROA not before: Mon 11 May 2026 00:01:18 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:60a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:65:48:b7:6d:d9:ba:3b:73:28:71:73:9c:2d:81:b6:3f:11:04:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:01:18 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=859fa8cb8491d0898c9b112fbb8553cf004ea00ef452bb27ccc879fa943e3c61, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bd:97:f5:14:97:f1:78:7c:3e:f3:f2:45:3c: 05:9f:62:0b:ed:25:1e:31:6d:45:61:a7:cd:0e:6a: d5:79:6c:87:64:b5:54:a9:a4:91:5f:27:62:e8:7a: 5a:ef:6f:71:16:1c:a4:a1:23:9a:a9:52:69:ef:7c: ca:03:fe:8e:2d:5e:33:46:a6:6d:96:6a:4a:8e:ea: 19:97:f0:99:c6:13:f8:df:3b:83:7e:80:7f:da:6e: bb:16:c5:23:fe:18:a5:8d:57:bc:db:66:3a:9e:c3: 0d:56:ed:f3:85:06:3d:c0:c8:04:58:21:fa:3b:a8: 3c:91:6e:64:63:d4:de:1b:91:58:a7:8b:8e:b0:85: fe:b2:02:e1:1d:2a:ce:9e:7e:58:cb:01:78:cd:8f: c3:b5:39:ee:f1:4f:8e:05:c5:0a:27:6e:76:5e:28: b4:d9:4a:c8:17:39:b4:dc:5e:fe:08:ca:f5:a5:89: 91:40:32:88:46:37:4a:63:96:68:7f:41:8a:4b:92: 8f:46:35:c1:ea:52:64:be:94:24:05:c1:61:9c:c0: 53:77:1e:6e:db:ad:fc:06:ae:f6:25:24:a3:08:25: 72:7c:1a:a2:2a:8b:cb:c5:8e:28:27:fb:fb:64:20: 83:c1:e5:d4:e8:bf:27:12:57:64:fd:80:11:4a:36: b5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:87:84:AB:54:86:DD:EB:4F:29:82:EE:22:8D:05:A7:D3:3C:D3:A4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/562ea526-d7fd-4f54-a7f1-2891e7003176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:60a0::/48 Signature Algorithm: sha256WithRSAEncryption 0b:89:ba:07:da:fb:dd:2f:63:8c:85:f0:8d:4b:40:1c:8b:24: e6:a2:4f:43:02:2f:fd:1a:09:1b:9a:21:dd:71:d5:d7:b2:34: 34:b0:f4:96:43:45:87:d9:c0:14:e9:fd:0f:bb:fc:69:94:b1: 0d:63:0f:d4:cd:c5:b3:f5:cd:f6:ff:21:68:13:a7:a4:7c:20: 91:db:2d:2e:15:c2:90:43:be:9d:9c:4e:37:ab:54:15:a3:3e: 4e:a1:50:16:e4:ef:a1:9b:0c:79:85:75:a7:c8:2f:2b:ac:cb: 7b:70:69:d3:41:03:50:35:1a:fc:77:69:15:d6:54:be:70:ca: 56:88:42:71:92:dc:a7:c1:04:62:9d:b8:0a:ee:9d:95:85:3f: 62:84:69:e5:3c:06:f2:40:b6:86:5a:71:8e:84:5f:2e:64:10: 5b:b4:59:94:84:ec:9b:9c:21:73:db:56:ff:92:5c:8d:19:4f: 8a:a3:ae:32:24:dc:00:6d:c8:68:24:c8:88:16:8d:34:bd:fe: 6f:b5:dc:9b:81:6f:0a:23:7f:9b:cd:7b:96:fb:63:3c:50:32: 0d:cc:6d:e0:ae:cb:1f:de:ff:4f:c5:58:a6:b3:c8:19:e0:d3: 82:6a:61:a3:fa:76:7d:65:66:88:15:28:b5:d1:13:02:d4:4c: 37:e0:b1:40 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURWVIt23ZujtzKHFznC2Btj8RBMQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMDExOFoX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAODU5ZmE4Y2I4NDkxZDA4OThjOWIx MTJmYmI4NTUzY2YwMDRlYTAwZWY0NTJiYjI3Y2NjODc5ZmE5NDNlM2M2MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL2X9RSX8Xh8PvPyRTwFn2IL7SUe MW1FYafNDmrVeWyHZLVUqaSRXydi6Hpa729xFhykoSOaqVJp73zKA/6OLV4zRqZt lmpKjuoZl/CZxhP43zuDfoB/2m67FsUj/hiljVe822Y6nsMNVu3zhQY9wMgEWCH6 O6g8kW5kY9TeG5FYp4uOsIX+sgLhHSrOnn5YywF4zY/DtTnu8U+OBcUKJ252Xii0 2UrIFzm03F7+CMr1pYmRQDKIRjdKY5Zof0GKS5KPRjXB6lJkvpQkBcFhnMBTdx5u 2638Bq72JSSjCCVyfBqiKovLxY4oJ/v7ZCCDweXU6L8nEldk/YARSja1NwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFESHhKtUht3rTymC7iKNBafTPNOkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2MmVhNTI2LWQ3ZmQtNGY1NC1hN2YxLTI4OTFlNzAwMzE3Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAGCgMA0GCSqGSIb3DQEBCwUAA4IBAQALiboH2vvdL2OMhfCN S0AciyTmok9DAi/9GgkbmiHdcdXXsjQ0sPSWQ0WH2cAU6f0Pu/xplLENYw/UzcWz 9c32/yFoE6ekfCCR2y0uFcKQQ76dnE43q1QVoz5OoVAW5O+hmwx5hXWnyC8rrMt7 cGnTQQNQNRr8d2kV1lS+cMpWiEJxktynwQRinbgK7p2VhT9ihGnlPAbyQLaGWnGO hF8uZBBbtFmUhOybnCFz21b/klyNGU+Ko64yJNwAbchoJMiIFo00vf5vtdybgW8K I3+bzXuW+2M8UDINzG3grssf3v9PxVims8gZ4NOCamGj+nZ9ZWaIFSi10RMC1Ew3 4LFA -----END CERTIFICATE-----Generated at Tue May 12 23:31:01 2026 by rpki-client