$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bc7f9b2-dbc3-4b20-a592-a46685e789c7.roa File: 8bc7f9b2-dbc3-4b20-a592-a46685e789c7.roa (raw, json) Hash identifier: z0NPOZsvvxvkfUy+fexoR7D69N00A7bi4KyS53bMx1Q= Subject key identifier: 6B:B0:9E:44:E7:CD:46:F9:A3:2D:89:55:19:0A:81:CD:02:28:56:9A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7973B2638CBF6D460A8C6C42BBEFC46C8FCAD20D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bc7f9b2-dbc3-4b20-a592-a46685e789c7.roa Signing time: Tue 12 May 2026 00:00:18 +0000 ROA not before: Tue 12 May 2026 00:00:18 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:73:b2:63:8c:bf:6d:46:0a:8c:6c:42:bb:ef:c4:6c:8f:ca:d2:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:00:18 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=1775042a8543fc380562568106385d78424ea22d538458ab91f8ec616167de57, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:1e:ac:a5:42:0a:0f:bf:13:39:1f:54:98: a9:04:fb:54:f8:54:fb:7b:06:ad:c4:11:d3:47:8a: 50:7a:f4:4d:0c:26:ef:0a:d8:a3:b4:34:d6:10:75: 8d:bf:4e:c9:38:48:61:0a:5a:67:79:29:58:81:c2: 71:03:b0:32:0b:76:5d:b2:41:3e:fc:b5:bc:33:ee: b9:4f:bf:ed:9c:1d:c4:d5:9e:a4:9a:58:a3:03:7b: 63:9b:5f:04:4c:23:61:ff:ee:80:ab:f5:91:d6:8c: 4a:53:e8:f4:8e:f6:38:d5:ca:fa:29:b9:6f:6b:89: 19:d3:7d:12:c2:36:fd:9a:7c:49:75:eb:d0:0b:1c: 9c:4a:c4:b8:a1:17:57:c1:b1:81:6a:da:bc:39:e1: 5f:5f:3d:37:bc:df:a1:d1:b9:0b:93:b7:21:46:77: 08:a8:11:17:9e:1a:42:9f:36:b5:d8:9c:b1:b4:cd: bf:55:3d:7c:08:f3:72:a7:d0:88:27:f8:e9:25:f8: 17:76:1f:f8:0e:4b:53:c4:2c:35:fe:1d:9a:c3:4b: c3:83:73:d7:f5:83:c1:69:b0:66:90:de:77:34:ad: c0:13:c5:bc:dd:54:2d:5e:9b:ac:93:f1:47:f6:c5: 6f:db:26:fd:d7:d5:2d:29:35:03:62:8d:0e:e3:44: ec:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B0:9E:44:E7:CD:46:F9:A3:2D:89:55:19:0A:81:CD:02:28:56:9A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bc7f9b2-dbc3-4b20-a592-a46685e789c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:c000::/40 Signature Algorithm: sha256WithRSAEncryption b3:92:1f:d6:05:ac:5b:e6:71:61:47:68:d0:65:c5:1b:4a:49: ec:65:1f:46:cc:48:75:eb:c5:98:15:c4:7d:d7:55:a1:f2:e2: f7:b2:6a:e4:89:90:4a:4d:26:56:fc:1d:71:1d:49:a8:9f:59: 90:6f:4e:fa:5c:2b:cd:1f:e6:13:8c:41:96:85:a2:d4:8c:af: 35:cb:4f:64:6b:79:7c:3e:1d:9a:84:9a:32:38:d4:cd:cc:77: 9c:30:0e:20:fb:33:4a:44:b1:46:1b:8e:71:8b:db:3b:32:ce: 57:08:fe:5e:c8:03:ca:49:7a:b4:ff:c1:a0:9a:dc:76:eb:3d: 82:7d:67:f4:15:13:8e:28:29:43:50:a8:9f:6d:12:f9:9c:b1: 42:88:6a:c2:b7:c9:c8:f3:96:cc:2b:70:0e:54:09:8d:7c:c1: 37:b1:dd:83:c2:3b:15:d4:43:dc:b7:6b:e7:39:be:b8:6f:e6: 85:13:55:c3:55:4f:d3:bb:53:1a:0c:31:c6:b4:e5:29:c2:9a: 83:00:32:9e:e9:b9:c1:6f:40:79:bd:57:56:af:cc:22:e4:5f: 26:7c:59:0f:03:9e:66:db:f2:dc:cd:e2:b3:ee:1f:6b:cf:87: 27:e1:b5:e1:26:50:2a:2b:e3:8a:43:36:2e:eb:d2:dd:75:df: f0:35:5f:94 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeXOyY4y/bUYKjGxCu+/EbI/K0g0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMDAxOFoX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAMTc3NTA0MmE4NTQzZmMzODA1NjI1 NjgxMDYzODVkNzg0MjRlYTIyZDUzODQ1OGFiOTFmOGVjNjE2MTY3ZGU1NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwIerKVCCg+/EzkfVJipBPtU+FT7 ewatxBHTR4pQevRNDCbvCtijtDTWEHWNv07JOEhhClpneSlYgcJxA7AyC3ZdskE+ /LW8M+65T7/tnB3E1Z6kmlijA3tjm18ETCNh/+6Aq/WR1oxKU+j0jvY41cr6Kblv a4kZ030Swjb9mnxJdevQCxycSsS4oRdXwbGBatq8OeFfXz03vN+h0bkLk7chRncI qBEXnhpCnza12JyxtM2/VT18CPNyp9CIJ/jpJfgXdh/4DktTxCw1/h2aw0vDg3PX 9YPBabBmkN53NK3AE8W83VQtXpusk/FH9sVv2yb919UtKTUDYo0O40TsqQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGuwnkTnzUb5oy2JVRkKgc0CKFaaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiYzdmOWIyLWRiYzMtNGIyMC1hNTkyLWE0NjY4NWU3ODljNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+8AwDQYJKoZIhvcNAQELBQADggEBALOSH9YFrFvmcWFHaNBl xRtKSexlH0bMSHXrxZgVxH3XVaHy4veyauSJkEpNJlb8HXEdSaifWZBvTvpcK80f 5hOMQZaFotSMrzXLT2RreXw+HZqEmjI41M3Md5wwDiD7M0pEsUYbjnGL2zsyzlcI /l7IA8pJerT/waCa3HbrPYJ9Z/QVE44oKUNQqJ9tEvmcsUKIasK3ycjzlswrcA5U CY18wTex3YPCOxXUQ9y3a+c5vrhv5oUTVcNVT9O7UxoMMca05SnCmoMAMp7pucFv QHm9V1avzCLkXyZ8WQ8Dnmbb8tzN4rPuH2vPhyfhteEmUCor44pDNi7r0t113/A1 X5Q= -----END CERTIFICATE-----Generated at Tue May 12 23:30:48 2026 by rpki-client