$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61255253-23f9-44a2-80e2-03c17530aafa.roa File: 61255253-23f9-44a2-80e2-03c17530aafa.roa (raw, json) Hash identifier: cdiL6JRhTPS/KiAVt/gHk94VLvRYAI3z7SZAdHDSCvk= Subject key identifier: 10:8D:E8:71:73:90:7C:8F:B6:AB:C2:4E:C4:7F:99:42:A4:78:E0:F7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0EA077CBFBD1937CD56B3B5B995E6675F493533E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61255253-23f9-44a2-80e2-03c17530aafa.roa Signing time: Tue 12 May 2026 00:01:32 +0000 ROA not before: Tue 12 May 2026 00:01:32 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a0:77:cb:fb:d1:93:7c:d5:6b:3b:5b:99:5e:66:75:f4:93:53:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:01:32 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=98d980c70db5f6f5a4f109297bc2c247ba9490286d598b3365e8b438c8a3af00, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0c:ef:4d:de:3f:9a:83:8e:19:e0:8b:8e:98: 81:7f:64:9f:d2:09:d1:10:94:3e:a6:5d:c2:2c:f8: 15:cf:bd:4c:fa:89:cc:1b:8d:da:e6:79:65:4e:72: 56:91:9f:87:21:41:03:52:6b:3d:21:e5:b1:95:0d: 32:eb:ec:f7:43:a0:b7:52:92:6c:44:04:6c:54:af: b7:d4:01:7c:94:fc:ad:0f:7f:7c:3b:0d:b1:7a:bd: e5:7b:dc:62:80:b3:07:7e:8b:37:29:f6:83:77:62: 8f:86:e7:1d:e8:40:f8:bb:c0:93:bc:bd:f4:9e:a2: 6f:a3:ba:5e:9f:fb:55:f8:60:19:1b:08:b0:dc:ef: 15:b5:d4:6f:06:a5:da:17:e7:65:7c:ea:f2:38:4e: d6:20:f4:9e:f4:b5:9c:a9:46:45:59:0e:b2:f0:5c: 78:7f:19:be:b3:e4:ad:ca:9d:d0:ff:fc:e8:d8:75: 6b:83:b9:57:39:a0:2b:0a:c5:e3:d8:5e:06:82:62: bf:c6:44:22:68:f4:f6:8a:fe:b8:09:c8:b1:a9:d6: 31:c6:5d:31:81:6e:d7:64:62:d5:ca:f2:b6:dd:f9: cb:28:b9:af:e1:b5:30:ef:7a:45:c6:3a:ed:78:b9: 9b:21:44:49:ff:5c:f1:c6:b3:8c:ba:70:01:01:68: a7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8D:E8:71:73:90:7C:8F:B6:AB:C2:4E:C4:7F:99:42:A4:78:E0:F7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61255253-23f9-44a2-80e2-03c17530aafa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:a000::/40 Signature Algorithm: sha256WithRSAEncryption 15:a9:bd:2b:4c:47:d5:a9:8e:a2:86:8b:e0:e2:5e:f6:62:f9: 84:a9:0d:59:53:4f:63:66:db:81:b1:63:0c:33:b1:b3:51:b2: 56:42:e0:e8:a2:bc:49:74:7d:fc:6c:88:8a:e7:66:3e:db:77: f3:85:2f:16:07:ef:6e:04:e0:5c:49:53:52:22:6b:5e:66:15: 24:bc:71:e9:c2:63:46:e8:03:80:a4:58:dd:e3:4b:56:b6:93: 4f:15:6d:75:88:aa:fe:f1:10:0f:08:c8:e5:1c:a1:27:3b:e8: dd:4a:38:3f:f5:ab:8d:16:e8:29:5a:e1:a0:71:86:57:b9:5b: 25:fb:93:4d:33:c7:b4:59:76:bf:17:ef:68:20:8e:a5:3d:d2: 92:2e:59:07:8a:c4:1d:f1:34:c3:ec:17:4c:49:37:6a:08:e7: 9d:81:99:36:18:53:05:ec:ab:55:55:6e:23:c9:6d:cd:ee:dd: 4b:70:29:6f:b0:f6:97:75:b5:bd:5b:c9:a8:20:4d:ad:2b:37: 52:30:88:29:a1:20:c7:b4:68:48:0c:43:b1:9d:ad:f2:fe:0f: 5b:9b:71:e5:8a:b0:24:3e:bb:d5:70:b0:bf:4f:3f:8a:fc:5d: e6:61:8a:3d:ec:89:57:63:d9:8f:e7:fa:93:f0:62:a1:71:42: f0:e0:bb:11 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDqB3y/vRk3zVaztbmV5mdfSTUz4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMDEzMloX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAOThkOTgwYzcwZGI1ZjZmNWE0ZjEw OTI5N2JjMmMyNDdiYTk0OTAyODZkNTk4YjMzNjVlOGI0MzhjOGEzYWYwMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwzvTd4/moOOGeCLjpiBf2Sf0gnR EJQ+pl3CLPgVz71M+onMG43a5nllTnJWkZ+HIUEDUms9IeWxlQ0y6+z3Q6C3UpJs RARsVK+31AF8lPytD398Ow2xer3le9xigLMHfos3KfaDd2KPhucd6ED4u8CTvL30 nqJvo7pen/tV+GAZGwiw3O8VtdRvBqXaF+dlfOryOE7WIPSe9LWcqUZFWQ6y8Fx4 fxm+s+Styp3Q//zo2HVrg7lXOaArCsXj2F4GgmK/xkQiaPT2iv64CcixqdYxxl0x gW7XZGLVyvK23fnLKLmv4bUw73pFxjrteLmbIURJ/1zxxrOMunABAWinsQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBCN6HFzkHyPtqvCTsR/mUKkeOD3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxMjU1MjUzLTIzZjktNDRhMi04MGUyLTAzYzE3NTMwYWFmYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaaAwDQYJKoZIhvcNAQELBQADggEBABWpvStMR9WpjqKGi+Di XvZi+YSpDVlTT2Nm24GxYwwzsbNRslZC4OiivEl0ffxsiIrnZj7bd/OFLxYH724E 4FxJU1Iia15mFSS8cenCY0boA4CkWN3jS1a2k08VbXWIqv7xEA8IyOUcoSc76N1K OD/1q40W6Cla4aBxhle5WyX7k00zx7RZdr8X72ggjqU90pIuWQeKxB3xNMPsF0xJ N2oI552BmTYYUwXsq1VVbiPJbc3u3UtwKW+w9pd1tb1byaggTa0rN1IwiCmhIMe0 aEgMQ7GdrfL+D1ubceWKsCQ+u9VwsL9PP4r8XeZhij3siVdj2Y/n+pPwYqFxQvDg uxE= -----END CERTIFICATE-----Generated at Wed May 13 00:47:34 2026 by rpki-client