$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b2fa8e7a-5f8e-4d0e-901b-262d25f5dc1e.roa File: b2fa8e7a-5f8e-4d0e-901b-262d25f5dc1e.roa (raw, json) Hash identifier: 0Kx6S5BgoDq3HKPoLx0kK7g5FHKYD1vD+YGehCKBs6I= Subject key identifier: 32:54:F7:80:D9:80:CA:17:E9:D7:8A:72:04:CC:17:6E:77:AE:E6:12 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 670DC92AA5CD3D6E4D89DD44800E64F1FA57D7B7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b2fa8e7a-5f8e-4d0e-901b-262d25f5dc1e.roa Signing time: Wed 29 Apr 2026 00:00:05 +0000 ROA not before: Wed 29 Apr 2026 00:00:05 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2406:da30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0d:c9:2a:a5:cd:3d:6e:4d:89:dd:44:80:0e:64:f1:fa:57:d7:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 29 00:00:05 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=b187954b444f1b90fc13e5a5d408d3f25e6eea6c207c4a937afec0011b4f6170, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ed:53:9b:16:8e:d4:54:8d:d0:67:c1:9e:5a: dc:12:cf:68:cb:f5:cd:ef:73:d6:1d:d2:28:e1:09: 92:86:90:72:fc:50:53:c9:c2:36:fd:de:64:96:3b: 33:cb:6a:20:e2:83:92:62:0f:92:05:19:2d:10:8a: 72:6d:f7:2c:c8:8c:ed:c2:b6:a1:98:41:56:5a:7c: c0:e5:c4:ff:bc:81:53:2c:24:24:ca:71:97:ed:1b: ff:45:af:24:79:6c:96:94:44:2d:ab:02:14:34:ab: 1f:aa:dc:c6:74:a7:2f:fb:28:a5:77:9d:ec:53:7f: be:8c:7d:c5:0f:ed:b8:de:47:dc:3e:50:3f:8d:a4: 22:5f:b4:18:19:08:e8:d8:1c:cf:36:af:92:c1:c9: 87:51:f9:92:51:93:dd:02:9f:0d:95:a6:59:23:5e: c7:6f:cf:f3:43:ce:27:67:b3:7c:72:30:e5:92:28: ee:14:9e:ba:49:f7:5f:1b:32:7e:2b:5a:22:0e:be: 4f:e5:cc:46:c9:f1:8d:58:40:87:74:60:11:3c:b1: 86:ca:da:72:00:f3:ff:18:bf:89:de:cf:97:51:6b: 6f:85:36:ea:0f:6d:02:b5:ea:0e:9c:5f:88:03:26: d0:b5:67:01:20:e0:c5:32:f8:0a:7f:cc:f2:bc:50: 2e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:54:F7:80:D9:80:CA:17:E9:D7:8A:72:04:CC:17:6E:77:AE:E6:12 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b2fa8e7a-5f8e-4d0e-901b-262d25f5dc1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da30::/32 Signature Algorithm: sha256WithRSAEncryption a9:be:78:a6:98:c5:b8:74:33:da:6c:e0:8d:88:14:a3:57:9c: d5:65:7b:d7:98:a2:37:ed:23:15:73:76:6c:14:19:f1:f2:55: 92:8f:ad:95:ee:93:8e:fd:17:cc:12:73:e0:62:e9:43:f3:80: 16:1c:65:00:65:b6:54:ef:51:7f:fc:31:b3:da:f9:2b:fb:b9: 40:d8:42:83:e4:44:35:56:31:95:de:1b:26:48:9e:4d:44:45: 5a:ca:44:44:07:51:f4:24:c5:4b:58:64:b9:c7:92:5a:4d:b7: 57:ba:e2:3a:4c:61:6f:10:6b:aa:ac:78:bf:29:45:1c:fd:70: 44:a5:f7:3d:5d:35:1c:3b:6d:ce:aa:da:56:0f:95:52:23:da: 8e:15:75:fa:13:c0:5b:05:2a:06:44:16:db:3f:65:9b:43:79: 84:07:27:ec:c0:1f:7f:5d:f9:ff:8b:3b:31:af:d2:88:69:7c: 3a:b5:da:a6:8c:ba:77:66:97:42:bb:b7:df:82:59:8d:6f:65: 44:5e:71:5e:52:7b:ee:a8:d9:1e:73:8e:19:53:f6:89:f3:64: 8d:3e:8a:95:3c:93:1b:80:aa:96:3f:51:20:34:c1:5a:11:db: c4:46:71:ae:01:90:35:71:71:99:12:2c:ea:15:65:99:b9:71: 28:79:a6:89 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUZw3JKqXNPW5Nid1EgA5k8fpX17cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQyOTAwMDAwNVoX DTI2MDcyODIzNTk1OVowejFJMEcGA1UEBRNAYjE4Nzk1NGI0NDRmMWI5MGZjMTNl NWE1ZDQwOGQzZjI1ZTZlZWE2YzIwN2M0YTkzN2FmZWMwMDExYjRmNjE3MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu1TmxaO1FSN0GfBnlrcEs9oy/XN 73PWHdIo4QmShpBy/FBTycI2/d5kljszy2og4oOSYg+SBRktEIpybfcsyIztwrah mEFWWnzA5cT/vIFTLCQkynGX7Rv/Ra8keWyWlEQtqwIUNKsfqtzGdKcv+yild53s U3++jH3FD+243kfcPlA/jaQiX7QYGQjo2BzPNq+SwcmHUfmSUZPdAp8NlaZZI17H b8/zQ84nZ7N8cjDlkijuFJ66SfdfGzJ+K1oiDr5P5cxGyfGNWECHdGARPLGGytpy APP/GL+J3s+XUWtvhTbqD20CteoOnF+IAybQtWcBIODFMvgKf8zyvFAuuQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFDJU94DZgMoX6deKcgTMF253ruYSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IyZmE4ZTdhLTVmOGUtNGQwZS05MDFiLTI2MmQyNWY1ZGMxZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaMDANBgkqhkiG9w0BAQsFAAOCAQEAqb54ppjFuHQz2mzgjYgU o1ec1WV715iiN+0jFXN2bBQZ8fJVko+tle6Tjv0XzBJz4GLpQ/OAFhxlAGW2VO9R f/wxs9r5K/u5QNhCg+RENVYxld4bJkieTURFWspERAdR9CTFS1hkuceSWk23V7ri OkxhbxBrqqx4vylFHP1wRKX3PV01HDttzqraVg+VUiPajhV1+hPAWwUqBkQW2z9l m0N5hAcn7MAff135/4s7Ma/SiGl8OrXapoy6d2aXQru334JZjW9lRF5xXlJ77qjZ HnOOGVP2ifNkjT6KlTyTG4Cqlj9RIDTBWhHbxEZxrgGQNXFxmRIs6hVlmblxKHmm iQ== -----END CERTIFICATE-----Generated at Wed May 13 01:05:38 2026 by rpki-client