$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f0b791c-9ee7-4e28-9118-ebc36592218d.roa File: 8f0b791c-9ee7-4e28-9118-ebc36592218d.roa (raw, json) Hash identifier: y1aO0VQBzQg4MVEvCMTat9eLrCSpScUXoPrNtrN+gOI= Subject key identifier: 14:0E:89:25:34:4B:B1:E8:51:3C:C0:05:E0:E7:5E:68:91:B2:37:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 48EAEC8B5673E84ECD94FB9887930962872A8476 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f0b791c-9ee7-4e28-9118-ebc36592218d.roa Signing time: Sat 02 May 2026 00:20:56 +0000 ROA not before: Sat 02 May 2026 00:20:56 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:90c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ea:ec:8b:56:73:e8:4e:cd:94:fb:98:87:93:09:62:87:2a:84:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:20:56 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=6fb857496d7ec43fcc5ff3d4639130f15df7a0aa08e7d9ed2cac23f5fa5ec45c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1e:c7:40:1c:07:37:5e:99:38:86:05:bf:38: 92:16:c4:ae:a2:01:67:9c:ef:72:35:fc:46:d1:08: 34:12:22:f5:2e:64:72:c6:ce:36:80:be:86:82:68: 26:ad:af:18:6e:29:6a:e3:80:4b:32:a3:d4:e8:d6: 01:21:44:60:a6:6e:dc:45:ce:ff:c7:0c:82:5d:04: f3:0a:1c:83:fd:fd:c7:5c:80:b5:77:45:9c:ff:fa: 2c:88:40:fb:dc:58:9a:44:26:a1:12:90:e8:15:6f: 6f:6a:24:25:25:98:ff:3c:e5:9d:96:3f:c9:eb:99: 42:0a:17:6d:1a:70:7a:ef:4d:a8:81:22:74:24:2a: 8c:ca:36:73:f8:60:20:32:8f:d8:b5:16:24:cf:57: 0a:7f:79:f0:51:05:b3:ba:a7:21:86:c9:af:02:e5: 08:02:21:f0:99:a4:ef:cf:30:7e:be:1b:b1:9f:0e: 85:e8:c2:ab:82:59:4d:59:86:92:0f:b7:4e:0f:23: c7:51:8b:79:b1:ed:ca:2a:86:8b:e1:b0:55:8c:a8: 3d:a9:f3:d7:d5:45:3a:e2:2e:94:2f:4f:c7:13:86: 81:3b:df:99:d8:56:46:5a:10:c5:c3:0d:db:25:b1: 7e:96:b6:83:0f:7e:90:9b:d7:8b:45:21:39:33:20: 7a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0E:89:25:34:4B:B1:E8:51:3C:C0:05:E0:E7:5E:68:91:B2:37:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f0b791c-9ee7-4e28-9118-ebc36592218d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:90c0::/48 Signature Algorithm: sha256WithRSAEncryption b2:89:aa:f7:a6:92:fe:51:9b:91:dc:67:f8:51:52:a0:56:c6: 79:86:a7:7e:90:f8:a0:87:33:77:ec:1f:b8:04:db:da:fb:86: 76:51:dd:6d:09:ef:b4:ed:c6:ae:29:bb:fa:04:1c:04:93:aa: ec:ca:96:fe:91:e0:c4:ca:5a:4e:a8:f1:0a:4c:09:2f:32:71: 26:c0:44:20:0c:69:87:a5:21:bb:66:34:b2:72:61:a9:c9:83: 83:49:fb:ae:31:96:89:63:10:17:db:8f:c8:f3:f1:d4:da:d2: b0:3a:ea:9c:91:c8:b3:1b:b1:8a:ff:59:0e:58:8c:7a:8c:50: 6a:9d:4d:c8:ca:e5:16:bd:17:5a:ce:98:39:db:6a:8a:0d:38: bf:12:81:11:db:ee:e6:18:f6:47:b6:5a:a1:d7:44:0e:34:c0: 4b:8b:a9:5e:74:e0:c1:8a:a3:f3:f4:d9:5a:9b:72:19:31:f5: 3d:b0:4a:2d:9e:78:d3:5e:8a:70:74:97:f3:97:15:10:b4:5b: 99:a2:78:ca:f3:eb:80:be:9c:51:98:d4:cf:29:85:c4:24:d8: 80:5a:6f:4c:f7:a8:c9:04:5a:32:87:b9:48:f4:d6:c2:4c:42: 9b:8d:d8:fa:c1:7b:60:8a:04:cc:45:ce:85:b6:1c:9a:50:00: 05:ed:aa:b0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSOrsi1Zz6E7NlPuYh5MJYocqhHYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwMjAwMjA1NloX DTI2MDczMTIzNTk1OVowejFJMEcGA1UEBRNANmZiODU3NDk2ZDdlYzQzZmNjNWZm M2Q0NjM5MTMwZjE1ZGY3YTBhYTA4ZTdkOWVkMmNhYzIzZjVmYTVlYzQ1YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x7HQBwHN16ZOIYFvziSFsSuogFn nO9yNfxG0Qg0EiL1LmRyxs42gL6Ggmgmra8Ybilq44BLMqPU6NYBIURgpm7cRc7/ xwyCXQTzChyD/f3HXIC1d0Wc//osiED73FiaRCahEpDoFW9vaiQlJZj/POWdlj/J 65lCChdtGnB6702ogSJ0JCqMyjZz+GAgMo/YtRYkz1cKf3nwUQWzuqchhsmvAuUI AiHwmaTvzzB+vhuxnw6F6MKrgllNWYaSD7dODyPHUYt5se3KKoaL4bBVjKg9qfPX 1UU64i6UL0/HE4aBO9+Z2FZGWhDFww3bJbF+lraDD36Qm9eLRSE5MyB6ZQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBQOiSU0S7HoUTzABeDnXmiRsjfgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhmMGI3OTFjLTllZTctNGUyOC05MTE4LWViYzM2NTkyMjE4ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6pDAMA0GCSqGSIb3DQEBCwUAA4IBAQCyiar3ppL+UZuR3Gf4 UVKgVsZ5hqd+kPighzN37B+4BNva+4Z2Ud1tCe+07cauKbv6BBwEk6rsypb+keDE ylpOqPEKTAkvMnEmwEQgDGmHpSG7ZjSycmGpyYODSfuuMZaJYxAX24/I8/HU2tKw OuqckcizG7GK/1kOWIx6jFBqnU3IyuUWvRdazpg522qKDTi/EoER2+7mGPZHtlqh 10QONMBLi6ledODBiqPz9Nlam3IZMfU9sEotnnjTXopwdJfzlxUQtFuZonjK8+uA vpxRmNTPKYXEJNiAWm9M96jJBFoyh7lI9NbCTEKbjdj6wXtgigTMRc6FthyaUAAF 7aqw -----END CERTIFICATE-----Generated at Tue May 12 23:30:46 2026 by rpki-client