$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93628203-b0e1-4510-b021-531c535d1c54.roa File: 93628203-b0e1-4510-b021-531c535d1c54.roa (raw, json) Hash identifier: RnEJKr4GixeypR031+omOM6t6VQpGc/QVt4wKki2Ks4= Subject key identifier: D5:49:08:57:5A:E1:4F:21:4B:7F:4A:FE:FF:D8:FB:AF:04:07:32:5F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 35C4C1BB053EE9ABC299F9E66AFEE218643E3113 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93628203-b0e1-4510-b021-531c535d1c54.roa Signing time: Wed 13 May 2026 00:21:31 +0000 ROA not before: Wed 13 May 2026 00:21:31 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da12:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 00:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c4:c1:bb:05:3e:e9:ab:c2:99:f9:e6:6a:fe:e2:18:64:3e:31:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:21:31 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=d4594cdffdef4b87a4bf9b8a3e46e720d28d72d9cec1f103a9702cd78acd6d2d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:2d:99:c6:0d:0b:d3:6b:20:4c:a0:f9:f0: 9f:3f:2e:7e:25:56:43:b3:00:6b:2d:16:91:65:47: 24:e7:88:96:45:e0:19:47:c4:e4:58:9e:52:9a:55: 81:9a:6f:fd:ac:99:e1:f6:3d:03:74:be:57:0c:a1: 68:82:61:a8:d4:6b:29:52:f8:ab:bf:82:27:de:8e: e3:6e:9e:29:bc:b6:7a:25:eb:5e:c9:6d:42:53:cc: 60:d5:28:89:c7:29:94:f7:d3:06:02:d5:c2:fb:c3: dd:d5:65:c4:02:fc:b0:d6:53:fe:49:c6:48:32:d0: 4f:54:12:b5:84:0e:7b:9a:c2:b1:fd:8d:ed:aa:36: 96:43:6d:cc:7f:6a:1e:6f:39:aa:2a:1e:c3:88:37: 67:01:e7:a9:3f:e2:a1:61:4c:37:49:65:db:3d:a2: 3a:a1:a6:29:f4:9d:2e:0f:55:21:8e:ab:aa:c7:a5: 38:ad:da:54:74:3d:3b:a7:d6:93:91:77:bf:bb:eb: 91:ce:74:42:c1:77:97:77:e2:50:83:92:b9:f4:8a: 1c:fa:0a:87:d5:2d:60:a1:b1:0b:ca:3f:92:e5:d0: 8f:0d:df:77:3a:08:55:04:ce:fe:1d:1c:37:8c:0a: eb:5d:ac:4a:6d:c5:59:c6:7a:1e:2f:dd:cd:3b:d6: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:49:08:57:5A:E1:4F:21:4B:7F:4A:FE:FF:D8:FB:AF:04:07:32:5F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93628203-b0e1-4510-b021-531c535d1c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da12:800::/38 Signature Algorithm: sha256WithRSAEncryption 1d:1a:13:86:29:22:35:52:45:dd:15:3e:bf:6f:60:2f:5a:22: ec:f7:58:37:3f:d7:b0:18:67:c9:45:8f:c0:23:f2:b3:66:ec: 73:11:0d:0b:56:06:62:eb:9b:c5:60:ce:c8:a2:80:82:60:92: 34:1b:3e:84:90:f0:cf:de:02:40:46:40:87:44:4b:34:23:08: a7:40:cf:1d:56:22:75:e3:c7:f7:5d:db:be:44:0d:e8:db:f7: 26:0c:a8:ab:46:35:bd:56:e6:e8:da:ab:b7:fd:98:2a:d5:ba: 86:97:40:e0:b5:fe:c6:25:e8:a9:39:14:2d:a1:ae:77:df:07: d6:fb:d5:74:a8:35:a3:0d:2c:d2:c5:c7:a0:90:65:c1:c0:45: eb:08:6f:aa:7c:e0:d1:35:ed:34:28:a4:20:3c:03:d7:cf:35: b9:09:26:b1:4a:b8:b7:92:fc:5f:9d:f4:5e:03:d9:2c:8a:f7: a8:70:93:67:79:2d:ed:c1:8a:42:29:14:e8:d2:54:49:d6:75: 5e:f7:98:dc:d0:13:2b:cc:83:77:7f:da:c3:c5:bc:f1:15:e7: 3c:fe:9e:c6:d8:72:1d:08:41:76:18:2b:eb:52:02:e3:a4:95: ec:e4:d6:4b:b1:00:6a:ef:93:0f:07:97:a3:b0:5a:6a:e1:1c: d5:da:c2:05 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNcTBuwU+6avCmfnmav7iGGQ+MRMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMjEzMVoX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAZDQ1OTRjZGZmZGVmNGI4N2E0YmY5 YjhhM2U0NmU3MjBkMjhkNzJkOWNlYzFmMTAzYTk3MDJjZDc4YWNkNmQyZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApngtmcYNC9NrIEyg+fCfPy5+JVZD swBrLRaRZUck54iWReAZR8TkWJ5SmlWBmm/9rJnh9j0DdL5XDKFogmGo1GspUvir v4In3o7jbp4pvLZ6JeteyW1CU8xg1SiJxymU99MGAtXC+8Pd1WXEAvyw1lP+ScZI MtBPVBK1hA57msKx/Y3tqjaWQ23Mf2oebzmqKh7DiDdnAeepP+KhYUw3SWXbPaI6 oaYp9J0uD1Uhjquqx6U4rdpUdD07p9aTkXe/u+uRznRCwXeXd+JQg5K59Ioc+gqH 1S1gobELyj+S5dCPDd93OghVBM7+HRw3jArrXaxKbcVZxnoeL93NO9Z7+wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNVJCFda4U8hS39K/v/Y+68EBzJfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkzNjI4MjAzLWIwZTEtNDUxMC1iMDIxLTUzMWM1MzVkMWM1NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEggwDQYJKoZIhvcNAQELBQADggEBAB0aE4YpIjVSRd0VPr9v YC9aIuz3WDc/17AYZ8lFj8Aj8rNm7HMRDQtWBmLrm8VgzsiigIJgkjQbPoSQ8M/e AkBGQIdESzQjCKdAzx1WInXjx/dd275EDejb9yYMqKtGNb1W5ujaq7f9mCrVuoaX QOC1/sYl6Kk5FC2hrnffB9b71XSoNaMNLNLFx6CQZcHAResIb6p84NE17TQopCA8 A9fPNbkJJrFKuLeS/F+d9F4D2SyK96hwk2d5Le3BikIpFOjSVEnWdV73mNzQEyvM g3d/2sPFvPEV5zz+nsbYch0IQXYYK+tSAuOklezk1kuxAGrvkw8Hl6OwWmrhHNXa wgU= -----END CERTIFICATE-----Generated at Wed May 13 03:56:56 2026 by rpki-client