$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/797893b8-c104-4c3c-a4c9-4fe82cad340d.roa File: 797893b8-c104-4c3c-a4c9-4fe82cad340d.roa (raw, json) Hash identifier: Bxp1D9VDs1yWWFt6rmUwRQuAqkgahZFVFLdEiCFP+uE= Subject key identifier: 9B:14:83:EF:8E:34:83:58:90:8F:7E:4F:5D:63:E5:E9:72:28:F9:E5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63C123F547BDAC5B51CDB7CE15C2A9DDA5C22AFD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/797893b8-c104-4c3c-a4c9-4fe82cad340d.roa Signing time: Sat 09 May 2026 00:01:33 +0000 ROA not before: Sat 09 May 2026 00:01:33 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c1:23:f5:47:bd:ac:5b:51:cd:b7:ce:15:c2:a9:dd:a5:c2:2a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 9 00:01:33 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=5d283768f2ae5f45d9e6bba343bdee912f64bf6717cdab4087b7996d48e687fa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:bc:a3:d7:d1:f9:b5:b3:c5:ea:86:81:25: 69:f5:33:bc:40:d5:c8:f3:65:05:71:0f:19:a8:92: 72:a9:c4:a4:ad:7f:cd:65:19:b2:6f:9c:05:8d:ea: 3f:2e:ba:00:5f:0b:61:cf:e3:8c:72:80:3b:5f:84: 19:b3:60:6b:45:a5:c5:a7:70:c5:10:08:d1:32:f5: 88:00:35:2b:4f:67:9a:62:ee:47:98:d7:54:cb:a3: 34:63:2f:3a:9c:fd:98:6e:c3:87:4c:33:b0:a3:ab: 0e:c7:b3:a4:8f:69:ac:6f:d1:9a:7d:7b:a3:60:06: 96:b3:53:91:be:7e:e9:fb:70:10:b4:12:0c:3d:5f: c1:94:53:d6:0e:d7:5c:b5:8f:0b:c4:29:6d:ad:29: fd:ba:4a:d4:c3:2b:44:14:12:47:15:2e:4f:9c:57: 07:61:d0:c9:e0:f2:f2:32:1f:27:79:e0:b1:f4:b7: 59:1e:d3:10:d9:f2:6b:16:cd:03:08:e9:53:25:0c: 71:c8:12:89:9b:20:f1:11:c7:5d:3c:86:36:55:37: 11:4d:18:da:d4:9b:94:01:89:03:22:a8:12:6d:2d: 03:7e:1a:d7:f9:38:c5:ad:af:0c:4f:59:f8:7c:07: 55:61:f9:7d:27:a8:5f:39:93:1c:9a:5e:ad:4b:fd: 96:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:14:83:EF:8E:34:83:58:90:8F:7E:4F:5D:63:E5:E9:72:28:F9:E5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/797893b8-c104-4c3c-a4c9-4fe82cad340d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:8840::/48 Signature Algorithm: sha256WithRSAEncryption 47:05:e9:36:d3:42:73:6a:74:f6:fb:41:70:d7:52:f7:49:52: 95:ba:c8:97:f5:e4:b4:cc:db:40:4f:d7:78:3f:14:cb:7c:b9: 45:4c:1e:44:a9:e3:b0:ae:f7:1a:34:4f:dd:98:08:f5:82:df: a6:7d:c8:c6:d6:3b:c7:2c:05:51:1e:66:e0:4c:71:f1:b3:39: 7d:83:ba:0e:b5:5b:59:4d:b4:89:9f:e5:64:84:b7:1b:c6:b8: 57:78:b5:21:dd:fb:55:b9:5f:28:35:50:a8:ba:1d:89:c8:80: 3d:fe:45:8d:be:fc:0b:ec:87:2e:78:2e:bc:f7:b0:6f:2f:01: 0b:64:a9:22:26:1a:41:23:b6:a4:c1:aa:a4:19:25:d5:4a:cc: 46:97:8e:40:b0:5e:79:59:b8:1a:ec:9a:c6:72:23:75:c5:f1: 05:a5:f4:f1:40:12:a5:71:15:d1:d2:73:4a:28:52:81:be:90: 7e:05:63:6c:14:4a:1d:37:8e:5c:a6:4b:51:82:60:48:1a:0f: 03:39:d2:72:0f:2d:f4:56:c5:48:93:fe:7b:ad:18:92:ad:31: bb:15:a0:41:e8:bf:8a:f9:a3:c2:98:ad:4f:16:d1:24:f1:7a: b3:39:16:6c:49:ee:bf:29:80:d8:e5:19:bf:c3:dc:a9:b6:45: b0:51:e7:3d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUY8Ej9Ue9rFtRzbfOFcKp3aXCKv0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwOTAwMDEzM1oX DTI2MDgwNzIzNTk1OVowejFJMEcGA1UEBRNANWQyODM3NjhmMmFlNWY0NWQ5ZTZi YmEzNDNiZGVlOTEyZjY0YmY2NzE3Y2RhYjQwODdiNzk5NmQ0OGU2ODdmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq928o9fR+bWzxeqGgSVp9TO8QNXI 82UFcQ8ZqJJyqcSkrX/NZRmyb5wFjeo/LroAXwthz+OMcoA7X4QZs2BrRaXFp3DF EAjRMvWIADUrT2eaYu5HmNdUy6M0Yy86nP2YbsOHTDOwo6sOx7Okj2msb9GafXuj YAaWs1ORvn7p+3AQtBIMPV/BlFPWDtdctY8LxCltrSn9ukrUwytEFBJHFS5PnFcH YdDJ4PLyMh8neeCx9LdZHtMQ2fJrFs0DCOlTJQxxyBKJmyDxEcddPIY2VTcRTRja 1JuUAYkDIqgSbS0DfhrX+TjFra8MT1n4fAdVYfl9J6hfOZMcml6tS/2WDQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJsUg++ONINYkI9+T11j5elyKPnlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc5Nzg5M2I4LWMxMDQtNGMzYy1hNGM5LTRmZTgyY2FkMzQwZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYYhAMA0GCSqGSIb3DQEBCwUAA4IBAQBHBek200JzanT2+0Fw 11L3SVKVusiX9eS0zNtAT9d4PxTLfLlFTB5EqeOwrvcaNE/dmAj1gt+mfcjG1jvH LAVRHmbgTHHxszl9g7oOtVtZTbSJn+VkhLcbxrhXeLUh3ftVuV8oNVCouh2JyIA9 /kWNvvwL7IcueC6897BvLwELZKkiJhpBI7akwaqkGSXVSsxGl45AsF55Wbga7JrG ciN1xfEFpfTxQBKlcRXR0nNKKFKBvpB+BWNsFEodN45cpktRgmBIGg8DOdJyDy30 VsVIk/57rRiSrTG7FaBB6L+K+aPCmK1PFtEk8XqzORZsSe6/KYDY5Rm/w9yptkWw Uec9 -----END CERTIFICATE-----Generated at Wed May 13 00:22:03 2026 by rpki-client