$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa File: 612ca3c6-0251-4029-8118-ab1be2a61379.roa (raw, json) Hash identifier: +Igs9rfJNC6YNNE7pkpKQD8w277hTEEYpJZRM3vHih0= Subject key identifier: 01:BD:81:00:9C:89:E6:4E:41:F2:B9:A9:26:00:5B:F4:C0:F9:C6:1B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 25107FB6A7FCBB16EDE02A4F5F652B106688FFF9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa Signing time: Sat 09 May 2026 00:00:54 +0000 ROA not before: Sat 09 May 2026 00:00:54 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:10:7f:b6:a7:fc:bb:16:ed:e0:2a:4f:5f:65:2b:10:66:88:ff:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 9 00:00:54 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=06bf816480f5de8b14dbf032a07069c483cc14686c78f19d3502bda8aff29490, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:72:74:f8:c7:d4:c1:1e:d4:66:99:1e:df: 02:75:92:52:aa:32:fe:bd:ba:54:e5:1e:0f:41:a3: ab:85:13:4a:5a:86:0c:43:02:a1:3c:2c:ff:6d:18: 25:6b:70:d2:9a:b0:c7:f6:c2:ae:c7:34:45:73:c6: b4:8a:c9:97:f2:27:7c:36:73:76:89:3e:e5:39:7f: ed:51:8c:e9:11:b9:e1:9e:99:43:c4:01:cc:c5:7e: 7a:8b:91:ee:07:8a:05:f5:be:09:31:c7:b7:75:b8: a6:f7:b2:70:96:ce:62:c8:dd:8a:d6:22:1a:bf:41: 70:d5:18:a5:60:a1:e5:02:47:69:d1:9d:d1:93:c4: c5:33:cb:cd:a1:14:24:7a:20:2c:05:84:82:22:ab: 06:8c:5e:48:ab:51:59:db:33:f5:37:39:0a:5a:f7: 3d:bf:93:8c:7e:bd:58:db:fd:56:36:4c:bd:e0:ef: d7:f8:c4:e4:ea:c3:8c:4f:4e:b7:c1:98:38:ff:23: dc:ad:6d:0e:fb:be:7a:2e:69:71:e9:b9:59:d2:ae: c5:cf:8f:37:21:39:67:83:7d:27:fb:73:b3:e8:d3: ef:9e:45:cb:5a:d3:04:73:0d:6d:13:db:13:c0:b3: 24:a8:1d:00:68:db:6a:a5:a0:d9:6a:21:d5:5f:0d: cf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BD:81:00:9C:89:E6:4E:41:F2:B9:A9:26:00:5B:F4:C0:F9:C6:1B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4040::/48 Signature Algorithm: sha256WithRSAEncryption 1b:1b:30:00:68:ae:91:d3:4f:97:d2:d4:c5:f5:9b:74:56:60: 83:55:78:15:76:91:46:c6:eb:a4:e5:9f:a6:e5:e4:ca:db:0d: 04:f2:91:f6:77:af:ef:94:db:26:b3:9f:3f:af:03:18:77:e0: 8f:53:f8:a4:be:e3:27:0e:cb:76:73:f9:71:5b:ef:6c:1a:22: 1f:2e:7d:75:95:9e:de:b7:ce:f8:0c:92:f3:a0:32:92:cf:be: ae:ab:bc:3a:f1:d4:e5:03:dc:95:72:b5:52:23:92:0d:95:fe: 55:a1:20:d5:ff:84:59:3e:5d:43:1b:8c:d9:aa:a3:96:ec:85: 32:b5:75:f1:19:5b:8b:07:7a:18:f9:f7:f7:72:01:0a:a8:a8: 4a:a6:01:6d:0a:ad:4f:88:2c:3c:2b:1f:1a:ef:66:e5:ff:2f: 7e:fd:1c:f0:00:d8:f7:19:36:d1:4b:31:84:1b:1e:90:bd:fd: a1:07:f6:8a:00:19:42:99:47:64:b9:e5:d4:05:78:c0:9f:5b: 57:24:c1:94:9c:fe:fb:b5:13:f6:f4:3c:1b:5d:ba:3a:75:14: 7b:f4:52:37:ef:31:bb:4c:ed:ed:f3:0b:12:86:d9:4f:ee:7b: ac:9a:c6:0d:ca:8a:1d:36:1c:33:92:b4:f5:0e:ee:f8:34:6a: 2d:f7:df:bd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJRB/tqf8uxbt4CpPX2UrEGaI//kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwOTAwMDA1NFoX DTI2MDgwNzIzNTk1OVowejFJMEcGA1UEBRNAMDZiZjgxNjQ4MGY1ZGU4YjE0ZGJm MDMyYTA3MDY5YzQ4M2NjMTQ2ODZjNzhmMTlkMzUwMmJkYThhZmYyOTQ5MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEpydPjH1MEe1GaZHt8CdZJSqjL+ vbpU5R4PQaOrhRNKWoYMQwKhPCz/bRgla3DSmrDH9sKuxzRFc8a0ismX8id8NnN2 iT7lOX/tUYzpEbnhnplDxAHMxX56i5HuB4oF9b4JMce3dbim97Jwls5iyN2K1iIa v0Fw1RilYKHlAkdp0Z3Rk8TFM8vNoRQkeiAsBYSCIqsGjF5Iq1FZ2zP1NzkKWvc9 v5OMfr1Y2/1WNky94O/X+MTk6sOMT063wZg4/yPcrW0O+756Lmlx6blZ0q7Fz483 ITlng30n+3Oz6NPvnkXLWtMEcw1tE9sTwLMkqB0AaNtqpaDZaiHVXw3PyQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAG9gQCcieZOQfK5qSYAW/TA+cYbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxMmNhM2M2LTAyNTEtNDAyOS04MTE4LWFiMWJlMmE2MTM3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0BAMA0GCSqGSIb3DQEBCwUAA4IBAQAbGzAAaK6R00+X0tTF 9Zt0VmCDVXgVdpFGxuuk5Z+m5eTK2w0E8pH2d6/vlNsms58/rwMYd+CPU/ikvuMn Dst2c/lxW+9sGiIfLn11lZ7et874DJLzoDKSz76uq7w68dTlA9yVcrVSI5INlf5V oSDV/4RZPl1DG4zZqqOW7IUytXXxGVuLB3oY+ff3cgEKqKhKpgFtCq1PiCw8Kx8a 72bl/y9+/RzwANj3GTbRSzGEGx6Qvf2hB/aKABlCmUdkueXUBXjAn1tXJMGUnP77 tRP29DwbXbo6dRR79FI37zG7TO3t8wsShtlP7nusmsYNyoodNhwzkrT1Du74NGot 99+9 -----END CERTIFICATE-----Generated at Wed May 13 00:16:22 2026 by rpki-client