$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9726f31f-1874-4ec8-b776-34f0f05646bb.roa File: 9726f31f-1874-4ec8-b776-34f0f05646bb.roa (raw, json) Hash identifier: CiWc9ttgIOCnKuxiQ9WySm7SvSH/cU9MFzgqr6DBf1Q= Subject key identifier: 44:08:66:E9:C4:B8:0B:87:07:E0:90:1E:28:92:CC:DD:FC:9F:45:4E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 18A30B67BC5B111F4E24F40AA38A44B19099CC69 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9726f31f-1874-4ec8-b776-34f0f05646bb.roa Signing time: Tue 12 May 2026 00:10:07 +0000 ROA not before: Tue 12 May 2026 00:10:07 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 00:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a3:0b:67:bc:5b:11:1f:4e:24:f4:0a:a3:8a:44:b1:90:99:cc:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:10:07 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=ac02bf348cae2d4a91605166b48d5572a5da11982c441058369b749414f08f9e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:36:73:0f:d5:a1:56:52:49:dd:85:22:80: 1e:c9:1c:d3:4d:2e:6a:33:d7:3e:89:b4:4e:f3:47: d9:a1:fe:ce:4d:69:53:1c:20:73:db:f2:2a:3e:7d: 34:6d:8a:44:c2:28:ab:64:b2:66:4b:85:47:5d:08: 6e:a6:11:34:09:3b:a1:f7:50:f4:7e:88:d5:77:76: 38:a2:1f:fd:83:73:78:5e:65:9b:59:be:86:0a:36: 6f:04:eb:44:f4:28:7b:04:ff:7c:bb:75:9f:14:b5: c4:57:53:fe:0c:95:70:c3:bf:93:2a:d8:97:d7:a5: 2d:1a:62:cd:c3:78:65:d1:9e:b1:a3:a1:23:f1:11: 31:2c:12:9e:d6:56:fb:6d:66:1f:59:13:1a:39:fc: e6:de:75:5d:90:11:ab:81:bc:fc:0a:93:b0:ff:2b: 67:8d:ac:c1:04:9c:b6:f7:1a:6c:2e:6a:1d:17:61: d1:ed:a4:69:1b:3c:ad:fa:ab:0e:9c:09:6f:f6:65: 7d:54:9a:25:e8:55:e8:f0:39:7c:00:b4:45:5d:24: 4f:50:db:37:76:f6:76:2c:5d:92:3b:ad:c8:1f:43: e5:3c:fa:63:c1:4b:98:cf:f7:1a:83:49:e4:86:94: 8c:d8:a9:d2:2f:5e:b2:1d:4b:8b:d3:0a:17:93:6b: e2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:08:66:E9:C4:B8:0B:87:07:E0:90:1E:28:92:CC:DD:FC:9F:45:4E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9726f31f-1874-4ec8-b776-34f0f05646bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:4000::/40 Signature Algorithm: sha256WithRSAEncryption 87:fb:e1:86:93:be:dd:68:8b:ad:53:6d:9f:9f:d3:cd:d9:bd: d9:84:87:05:3e:f3:92:c5:96:ee:dd:ef:66:84:39:f7:2c:cf: a4:63:aa:28:11:5a:48:20:34:c8:25:33:aa:de:d5:ae:9f:da: b1:eb:d4:bc:6c:f8:1c:d7:fd:b3:14:85:28:34:19:32:a5:ee: 1c:c8:7f:29:e8:11:fe:49:ed:a4:7d:a2:43:99:36:06:a9:49: 02:b9:b2:9b:1b:a7:63:15:e2:0d:80:a9:c9:2b:36:3d:26:20: b6:b4:6d:20:37:27:8c:d0:9c:36:8f:f3:e7:4a:51:f4:52:23: 87:9a:5e:c2:f0:5e:89:11:53:b1:72:3e:2f:90:67:d2:66:c5: 98:3f:b9:64:71:6a:3d:b2:d2:60:0f:36:e3:ca:2b:40:2b:73: 41:b8:0a:23:ce:6a:96:42:ce:7c:46:42:cc:a2:7f:2d:3d:d3: ad:88:59:b0:61:b8:b2:82:7a:b4:77:d7:b9:fc:7d:5c:b0:95: d0:06:14:d4:fa:4a:db:18:bb:87:ec:06:45:f5:67:e3:41:26: b5:ae:b0:1a:63:96:36:e9:b0:8e:e9:59:45:41:95:6e:5f:30: 35:79:58:c5:30:15:29:1f:fc:bf:50:9a:65:32:97:de:ce:78: df:64:ab:78 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGKMLZ7xbER9OJPQKo4pEsZCZzGkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMTAwN1oX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAYWMwMmJmMzQ4Y2FlMmQ0YTkxNjA1 MTY2YjQ4ZDU1NzJhNWRhMTE5ODJjNDQxMDU4MzY5Yjc0OTQxNGYwOGY5ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcw2cw/VoVZSSd2FIoAeyRzTTS5q M9c+ibRO80fZof7OTWlTHCBz2/IqPn00bYpEwiirZLJmS4VHXQhuphE0CTuh91D0 fojVd3Y4oh/9g3N4XmWbWb6GCjZvBOtE9Ch7BP98u3WfFLXEV1P+DJVww7+TKtiX 16UtGmLNw3hl0Z6xo6Ej8RExLBKe1lb7bWYfWRMaOfzm3nVdkBGrgbz8CpOw/ytn jazBBJy29xpsLmodF2HR7aRpGzyt+qsOnAlv9mV9VJol6FXo8Dl8ALRFXSRPUNs3 dvZ2LF2SO63IH0PlPPpjwUuYz/cag0nkhpSM2KnSL16yHUuL0woXk2viJQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEQIZunEuAuHB+CQHiiSzN38n0VOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk3MjZmMzFmLTE4NzQtNGVjOC1iNzc2LTM0ZjBmMDU2NDZiYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaUAwDQYJKoZIhvcNAQELBQADggEBAIf74YaTvt1oi61TbZ+f 083ZvdmEhwU+85LFlu7d72aEOfcsz6RjqigRWkggNMglM6re1a6f2rHr1Lxs+BzX /bMUhSg0GTKl7hzIfynoEf5J7aR9okOZNgapSQK5spsbp2MV4g2AqckrNj0mILa0 bSA3J4zQnDaP8+dKUfRSI4eaXsLwXokRU7FyPi+QZ9JmxZg/uWRxaj2y0mAPNuPK K0Arc0G4CiPOapZCznxGQsyify09062IWbBhuLKCerR317n8fVywldAGFNT6StsY u4fsBkX1Z+NBJrWusBpjljbpsI7pWUVBlW5fMDV5WMUwFSkf/L9QmmUyl97OeN9k q3g= -----END CERTIFICATE-----Generated at Wed May 13 02:30:15 2026 by rpki-client