$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a1d2e49b-19af-4fac-9021-489155cff427.roa File: a1d2e49b-19af-4fac-9021-489155cff427.roa (raw, json) Hash identifier: MmEEumcwZEKH1YSuo3pY4lg+0sAEKLdVCOGct17tEy0= Subject key identifier: 83:AC:79:CF:36:01:C1:C4:4A:51:96:52:C5:A8:C1:D9:E4:98:24:6C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2F4952A04CCB35A589DF60DFFAA62722FD8F9E82 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a1d2e49b-19af-4fac-9021-489155cff427.roa Signing time: Mon 11 May 2026 00:20:48 +0000 ROA not before: Mon 11 May 2026 00:20:48 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:49:52:a0:4c:cb:35:a5:89:df:60:df:fa:a6:27:22:fd:8f:9e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:20:48 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=d08dc3f609d4c73fb0208a947891366bf2af0130d0f65408fbec56b67f81cd32, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d2:cc:c1:56:62:12:f5:c9:c9:da:93:d4:88: 14:1e:6e:e4:bc:2a:54:9f:a7:be:43:36:62:b2:06: e8:9c:90:b1:27:be:94:be:45:db:a3:cb:c4:ee:92: 12:74:e2:0f:5b:a3:ca:b4:89:c2:b3:17:c6:97:fb: cb:41:27:20:84:a0:8a:82:14:c6:41:45:f3:e1:b7: b2:30:ca:51:6f:33:ee:2b:47:87:74:41:f0:36:ed: 9b:f9:95:59:fb:fc:15:11:92:a9:eb:14:d3:51:a6: a6:57:af:c4:3f:e6:09:11:21:0d:6b:dd:8d:17:db: e2:83:90:07:48:4e:6a:ad:45:6a:16:e1:e5:6e:14: 75:6d:35:e5:bf:6a:c4:47:e3:85:b2:e5:bb:f8:02: a1:43:90:1d:10:a2:4d:1e:73:e0:b7:16:68:2e:1d: c5:a4:79:9d:86:f9:4b:fa:22:3b:9d:1d:e8:54:d1: d6:6e:04:08:67:1e:df:70:4b:d3:4e:f8:bd:da:19: 0b:ad:db:c0:f0:ac:4a:7e:f1:45:ff:47:c2:c2:ba: 87:c4:99:90:d9:48:6b:ec:12:31:be:87:1c:27:f7: dd:30:7d:c7:3f:17:f2:e1:24:c4:41:13:6a:a5:51: 1b:59:3d:a6:8c:1f:f1:2b:29:93:c2:5d:93:2f:3a: 42:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AC:79:CF:36:01:C1:C4:4A:51:96:52:C5:A8:C1:D9:E4:98:24:6C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a1d2e49b-19af-4fac-9021-489155cff427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4880::/48 Signature Algorithm: sha256WithRSAEncryption 12:db:39:d4:a9:d4:6f:7d:b5:54:ba:c5:46:63:15:a9:4b:e4: ab:9f:13:dc:74:90:9e:c8:e5:c8:24:ee:a8:c9:4e:24:a3:ba: 3e:b3:26:c6:7a:a6:54:f1:03:24:80:ac:78:bc:35:87:07:9f: bd:51:0c:d6:77:b3:00:c9:9a:53:58:88:ac:7e:97:1c:aa:69: e8:8d:58:f4:3b:0b:a9:13:4a:2e:5d:33:e4:36:0c:21:b3:7a: 28:22:70:d3:e4:71:d0:39:e0:94:84:3d:91:1c:33:a2:59:34: 8c:a7:28:49:63:6e:31:9c:22:38:6b:3d:d0:48:06:3a:ce:f5: 4e:eb:04:c5:3a:b4:d3:9b:61:c2:3b:09:02:b0:74:c8:d7:ff: 7d:af:ed:25:4f:ad:de:39:60:c8:33:33:8d:5c:80:28:fc:8d: ca:21:44:88:3e:47:0e:54:05:e1:f2:aa:01:3f:1a:c7:64:92: a2:0b:7c:29:13:31:3e:f4:5c:e1:81:7d:cb:01:b5:3b:1b:f3: f9:67:b0:f5:27:36:16:c3:66:79:a9:70:fd:b0:28:7a:7a:be: 8f:b2:be:50:8e:ec:f7:fc:f7:bb:a8:78:b7:88:d2:d3:e4:5b: 10:a2:45:c3:da:2c:6f:14:01:a4:8c:f5:ba:a7:f1:69:6d:2f: 1a:91:c3:d1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUL0lSoEzLNaWJ32Df+qYnIv2PnoIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMjA0OFoX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAZDA4ZGMzZjYwOWQ0YzczZmIwMjA4 YTk0Nzg5MTM2NmJmMmFmMDEzMGQwZjY1NDA4ZmJlYzU2YjY3ZjgxY2QzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtLMwVZiEvXJydqT1IgUHm7kvCpU n6e+QzZisgbonJCxJ76UvkXbo8vE7pISdOIPW6PKtInCsxfGl/vLQScghKCKghTG QUXz4beyMMpRbzPuK0eHdEHwNu2b+ZVZ+/wVEZKp6xTTUaamV6/EP+YJESENa92N F9vig5AHSE5qrUVqFuHlbhR1bTXlv2rER+OFsuW7+AKhQ5AdEKJNHnPgtxZoLh3F pHmdhvlL+iI7nR3oVNHWbgQIZx7fcEvTTvi92hkLrdvA8KxKfvFF/0fCwrqHxJmQ 2Uhr7BIxvoccJ/fdMH3HPxfy4STEQRNqpVEbWT2mjB/xKymTwl2TLzpCCQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIOsec82AcHESlGWUsWowdnkmCRsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ExZDJlNDliLTE5YWYtNGZhYy05MDIxLTQ4OTE1NWNmZjQyNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0iAMA0GCSqGSIb3DQEBCwUAA4IBAQAS2znUqdRvfbVUusVG YxWpS+SrnxPcdJCeyOXIJO6oyU4ko7o+sybGeqZU8QMkgKx4vDWHB5+9UQzWd7MA yZpTWIisfpccqmnojVj0OwupE0ouXTPkNgwhs3ooInDT5HHQOeCUhD2RHDOiWTSM pyhJY24xnCI4az3QSAY6zvVO6wTFOrTTm2HCOwkCsHTI1/99r+0lT63eOWDIMzON XIAo/I3KIUSIPkcOVAXh8qoBPxrHZJKiC3wpEzE+9FzhgX3LAbU7G/P5Z7D1JzYW w2Z5qXD9sCh6er6Psr5Qjuz3/Pe7qHi3iNLT5FsQokXD2ixvFAGkjPW6p/FpbS8a kcPR -----END CERTIFICATE-----Generated at Tue May 12 23:57:17 2026 by rpki-client