$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b05b4-a0a1-4e31-b7b4-cc8368668534.roa File: 783b05b4-a0a1-4e31-b7b4-cc8368668534.roa (raw, json) Hash identifier: sEGsZVI8VFV+Y2tedIsBtrPwKrC5m3l7/0apeKFtg7U= Subject key identifier: B2:F2:C9:B9:3D:C8:B8:C0:36:04:84:6A:97:55:0E:6C:BB:78:1C:CC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1FB4D0356AEEE1B57331155F640A5A39EEE3F7F4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b05b4-a0a1-4e31-b7b4-cc8368668534.roa Signing time: Mon 11 May 2026 00:30:11 +0000 ROA not before: Mon 11 May 2026 00:30:11 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b4:d0:35:6a:ee:e1:b5:73:31:15:5f:64:0a:5a:39:ee:e3:f7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:30:11 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=d560906f39ab28802a0da1ff9ccf50464738a105a70d3632f13ccbfaf7b0ceb4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b0:fb:8b:53:be:2f:3e:97:65:47:fc:b6:14: f8:19:d2:b3:e1:49:4b:fc:8b:c5:f5:37:c8:5b:dd: 1b:3c:1e:15:66:10:e6:3f:57:11:29:1b:b1:77:d2: fd:33:88:7c:3e:9e:24:c9:86:86:fe:62:c8:95:ef: 9d:ac:97:3b:ac:f1:ea:3e:06:ec:9a:6e:c2:20:bc: 4d:6d:d7:64:54:5e:c5:e7:cc:2e:b3:a4:16:5c:3f: bf:2d:ec:43:e8:c6:ea:3a:48:b5:69:3d:28:c0:d0: 8b:8f:12:1b:57:83:ee:50:a6:b4:24:10:ca:e3:f5: e7:c3:42:eb:a9:98:b2:93:0a:82:62:45:01:f6:c7: 5d:3e:4e:52:e9:cc:2f:87:5a:6e:89:a0:e8:8e:9d: 99:9d:83:2f:98:1e:60:dc:b5:3d:b4:3a:4d:aa:b2: 14:39:a6:85:91:6b:c9:5a:2a:de:50:7a:b5:2e:b7: 8c:dc:b5:29:d8:f6:0e:2e:7e:10:44:81:b9:34:c4: 85:4c:74:31:cb:92:f0:c6:7d:b5:a4:eb:47:fa:f4: 50:8a:ee:7f:de:f1:44:ea:a7:b4:c3:21:3a:25:75: d0:f0:5b:a2:f4:4c:68:e4:46:f3:39:38:ed:45:bd: 61:10:5d:94:32:98:bc:5d:7a:7d:6a:05:6a:d5:a3: fe:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F2:C9:B9:3D:C8:B8:C0:36:04:84:6A:97:55:0E:6C:BB:78:1C:CC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b05b4-a0a1-4e31-b7b4-cc8368668534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:c000::/40 Signature Algorithm: sha256WithRSAEncryption 40:4c:ea:a8:27:3d:01:df:8c:a4:19:50:3b:78:e4:c1:46:6a: 41:f1:35:1e:26:12:c6:25:f8:84:01:fe:da:3e:86:8a:cc:85: 69:82:88:82:70:71:a5:cc:df:d2:b6:17:c0:9b:c6:88:21:99: a6:b5:08:4f:e8:a8:2d:fe:3c:d0:d2:1b:e7:c0:0a:bd:40:1a: 3a:d5:d8:07:53:fe:21:32:98:46:dd:ce:32:53:99:0b:55:0a: 17:7c:8d:c7:b5:0c:32:b6:b6:62:c2:11:08:5f:39:5a:f8:65: 93:f3:b4:71:12:a0:b0:ec:42:66:b8:52:6a:a7:08:fc:94:4a: e8:b2:17:dc:46:67:29:ba:86:8f:2e:bb:34:fb:de:28:96:da: 78:78:d0:d8:31:91:41:9a:19:61:dd:05:7a:b1:3c:44:7b:c0: 44:26:e4:68:cc:b0:20:36:75:ac:c5:34:eb:28:c8:37:29:f1: 77:a1:c9:83:1d:a0:7d:a0:20:23:44:e7:1d:b3:97:8c:17:d1: 9d:54:95:42:91:9e:a4:75:16:3b:56:2a:af:44:a8:c2:a5:66: e9:86:a2:50:a2:01:1b:2a:02:dd:35:4c:12:db:ba:3f:ea:81: e8:b2:59:5e:d3:b9:97:36:6d:a5:03:99:cb:8a:9d:15:63:9b: 59:a5:e3:75 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUH7TQNWru4bVzMRVfZApaOe7j9/QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMzAxMVoX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAZDU2MDkwNmYzOWFiMjg4MDJhMGRh MWZmOWNjZjUwNDY0NzM4YTEwNWE3MGQzNjMyZjEzY2NiZmFmN2IwY2ViNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57D7i1O+Lz6XZUf8thT4GdKz4UlL /IvF9TfIW90bPB4VZhDmP1cRKRuxd9L9M4h8Pp4kyYaG/mLIle+drJc7rPHqPgbs mm7CILxNbddkVF7F58wus6QWXD+/LexD6MbqOki1aT0owNCLjxIbV4PuUKa0JBDK 4/Xnw0LrqZiykwqCYkUB9sddPk5S6cwvh1puiaDojp2ZnYMvmB5g3LU9tDpNqrIU OaaFkWvJWireUHq1LreM3LUp2PYOLn4QRIG5NMSFTHQxy5Lwxn21pOtH+vRQiu5/ 3vFE6qe0wyE6JXXQ8Fui9Exo5EbzOTjtRb1hEF2UMpi8XXp9agVq1aP+GQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLLyybk9yLjANgSEapdVDmy7eBzMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc4M2IwNWI0LWEwYTEtNGUzMS1iN2I0LWNjODM2ODY2ODUzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8sAwDQYJKoZIhvcNAQELBQADggEBAEBM6qgnPQHfjKQZUDt4 5MFGakHxNR4mEsYl+IQB/to+horMhWmCiIJwcaXM39K2F8Cbxoghmaa1CE/oqC3+ PNDSG+fACr1AGjrV2AdT/iEymEbdzjJTmQtVChd8jce1DDK2tmLCEQhfOVr4ZZPz tHESoLDsQma4UmqnCPyUSuiyF9xGZym6ho8uuzT73iiW2nh40NgxkUGaGWHdBXqx PER7wEQm5GjMsCA2dazFNOsoyDcp8XehyYMdoH2gICNE5x2zl4wX0Z1UlUKRnqR1 FjtWKq9EqMKlZumGolCiARsqAt01TBLbuj/qgeiyWV7TuZc2baUDmcuKnRVjm1ml 43U= -----END CERTIFICATE-----Generated at Tue May 12 23:37:54 2026 by rpki-client