$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63bd71f1-ad22-4426-9f28-aaa82ba31578.roa File: 63bd71f1-ad22-4426-9f28-aaa82ba31578.roa (raw, json) Hash identifier: zs/zowItjCupt7rkZtTomMum+2Nn2DEYWdshuU278L8= Subject key identifier: 98:6B:47:CC:B5:1B:8A:C5:01:8E:60:C5:2F:05:73:06:9E:B5:35:51 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63BE5A69DC6C9F2B2796D4A7CABCA5851B745073 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63bd71f1-ad22-4426-9f28-aaa82ba31578.roa Signing time: Mon 11 May 2026 00:01:02 +0000 ROA not before: Mon 11 May 2026 00:01:02 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:be:5a:69:dc:6c:9f:2b:27:96:d4:a7:ca:bc:a5:85:1b:74:50:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:01:02 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=0c5f53fc8045832c170c3a5176e9e2bf34b405cb19f3ba64399be3ba35038c42, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6e:64:29:8e:de:71:45:ed:ab:6f:de:01:9c: bc:16:90:cc:3f:bc:66:95:06:7c:6c:3a:f5:ae:43: e0:65:6f:ef:bf:56:b6:6d:23:40:84:55:a7:23:6d: 10:c8:8d:d4:0a:30:23:b5:7e:8f:a8:9e:cd:7f:84: 79:7d:02:ba:34:75:ba:3d:a2:43:20:91:55:38:ad: ed:8d:21:e1:e2:44:2c:65:03:4f:db:59:f6:41:d1: fc:11:52:68:5d:9e:81:48:f3:20:61:82:e3:b5:2e: df:87:b4:de:cb:ad:27:3d:75:0b:64:d6:f2:ea:67: af:41:de:4e:cc:35:04:13:96:ff:f3:70:93:7b:54: af:3f:ce:ac:57:9c:36:06:81:f2:5e:21:78:cf:92: 0a:8e:f8:ee:8e:5b:bb:05:ff:9b:10:86:e8:7c:00: 39:bf:e3:0e:cd:e7:6c:4c:d7:75:95:c5:4d:78:3b: 1e:54:ad:aa:28:cf:0a:f1:68:eb:11:11:e9:30:e8: cf:8a:3b:d2:0d:5f:2e:40:7e:3a:14:fb:96:49:73: a7:6d:a7:8b:5a:2c:12:a4:84:c1:7b:7e:fc:d7:69: 42:d0:b7:a1:50:06:46:ca:0a:15:ae:cc:18:31:12: 73:6f:f8:11:3a:8d:85:43:3b:11:be:14:c9:16:0d: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6B:47:CC:B5:1B:8A:C5:01:8E:60:C5:2F:05:73:06:9E:B5:35:51 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63bd71f1-ad22-4426-9f28-aaa82ba31578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:c880::/48 Signature Algorithm: sha256WithRSAEncryption 5e:5a:bc:02:9a:12:de:4e:e5:3e:d8:7f:bf:10:f0:95:61:3c: 05:2f:45:80:26:c5:7e:7e:29:65:a6:23:43:29:23:61:d0:e2: 1c:57:78:21:e8:0a:e8:66:36:c7:1c:81:b3:3a:7b:0d:00:59: f0:71:4d:cd:8f:c0:24:9a:d4:05:4a:b4:8b:8d:73:3e:7a:fe: 70:f1:0e:88:c0:2e:8e:57:32:7a:64:82:0e:c8:ee:06:d9:59: 85:3e:78:49:90:63:54:5a:2e:1e:d4:c8:93:91:f6:71:97:fe: 26:fe:10:77:51:a4:82:5e:d1:03:9b:68:d4:0c:e6:13:71:c3: 00:1e:4e:51:62:29:32:e8:eb:e7:6b:92:71:59:12:fe:3e:6a: dd:3a:b4:c5:63:98:4a:ff:88:82:4b:d6:97:53:a0:07:d9:22: 36:61:d6:79:a9:74:20:48:d8:00:14:3c:f3:f9:f3:99:dc:e7: 5c:7b:6d:74:1d:44:0a:e1:24:49:54:b6:bf:5b:da:e8:ff:ac: 7a:dd:22:3d:5a:1d:49:b3:68:60:df:a1:28:52:f3:20:e1:fb: 5e:d9:be:b8:7b:c9:c4:d9:63:b0:bf:7e:bc:a4:d8:eb:d1:76: b4:a6:3f:fc:27:d0:66:9f:18:39:e4:8f:c5:e7:22:b8:42:59: b9:57:e8:1a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUY75aadxsnysnltSnyrylhRt0UHMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMDEwMloX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAMGM1ZjUzZmM4MDQ1ODMyYzE3MGMz YTUxNzZlOWUyYmYzNGI0MDVjYjE5ZjNiYTY0Mzk5YmUzYmEzNTAzOGM0MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm5kKY7ecUXtq2/eAZy8FpDMP7xm lQZ8bDr1rkPgZW/vv1a2bSNAhFWnI20QyI3UCjAjtX6PqJ7Nf4R5fQK6NHW6PaJD IJFVOK3tjSHh4kQsZQNP21n2QdH8EVJoXZ6BSPMgYYLjtS7fh7Tey60nPXULZNby 6mevQd5OzDUEE5b/83CTe1SvP86sV5w2BoHyXiF4z5IKjvjujlu7Bf+bEIbofAA5 v+MOzedsTNd1lcVNeDseVK2qKM8K8WjrERHpMOjPijvSDV8uQH46FPuWSXOnbaeL WiwSpITBe37812lC0LehUAZGygoVrswYMRJzb/gROo2FQzsRvhTJFg2UAQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJhrR8y1G4rFAY5gxS8FcwaetTVRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYzYmQ3MWYxLWFkMjItNDQyNi05ZjI4LWFhYTgyYmEzMTU3OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOMiAMA0GCSqGSIb3DQEBCwUAA4IBAQBeWrwCmhLeTuU+2H+/ EPCVYTwFL0WAJsV+fillpiNDKSNh0OIcV3gh6AroZjbHHIGzOnsNAFnwcU3Nj8Ak mtQFSrSLjXM+ev5w8Q6IwC6OVzJ6ZIIOyO4G2VmFPnhJkGNUWi4e1MiTkfZxl/4m /hB3UaSCXtEDm2jUDOYTccMAHk5RYiky6Ovna5JxWRL+PmrdOrTFY5hK/4iCS9aX U6AH2SI2YdZ5qXQgSNgAFDzz+fOZ3Odce210HUQK4SRJVLa/W9ro/6x63SI9Wh1J s2hg36EoUvMg4fte2b64e8nE2WOwv368pNjr0Xa0pj/8J9Bmnxg55I/F5yK4Qlm5 V+ga -----END CERTIFICATE-----Generated at Wed May 13 00:23:05 2026 by rpki-client