$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa File: b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa (raw, json) Hash identifier: LbS9hHt0cUwTtzTA+TUEqo6K+vlktmSj28SqynNuOHs= Subject key identifier: AD:B8:4D:82:88:D8:CF:27:D6:60:E0:3B:94:05:B2:B5:D3:BC:D7:4B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E3BE8F3C9F98B6B16EB83B375AD220A1CB63539 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa Signing time: Tue 12 May 2026 00:01:18 +0000 ROA not before: Tue 12 May 2026 00:01:18 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3b:e8:f3:c9:f9:8b:6b:16:eb:83:b3:75:ad:22:0a:1c:b6:35:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:01:18 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=c6150011a8e27ca57208651fa83d2a32eecea024a139e22af55833fcbeb32c69, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:55:fc:8e:c4:8e:96:ab:da:6d:a6:1b:72:bb: 0b:3e:ac:46:ec:64:a7:8f:26:41:f9:e0:71:04:dc: 47:cf:8a:e7:06:60:8a:da:17:cc:7c:6e:eb:bb:7b: 4f:52:81:f6:98:4f:13:27:c3:e8:7b:b7:35:aa:da: 08:0e:62:f1:da:de:4c:93:a2:a9:3d:6b:07:3e:83: fe:3e:fb:60:1d:dd:2d:c9:84:47:44:2c:e2:c8:70: 29:66:c4:e7:3d:33:e7:15:9a:1c:9c:1a:4f:1a:0f: 1f:e3:67:55:a0:56:20:3b:b9:ba:ce:d0:47:c6:58: 44:c6:a1:26:20:18:00:1e:da:0d:a5:24:3c:10:05: ef:70:df:16:db:46:75:db:1a:20:7b:a0:f4:e1:c2: 7f:89:b0:15:e4:cd:88:70:1b:ce:c5:71:27:09:80: 50:54:8b:1e:10:a5:19:56:53:1d:6f:59:5f:09:4d: e4:1e:95:22:11:d7:6c:61:40:f0:99:34:8a:92:c5: 4a:6f:e1:b5:75:07:d6:0a:5b:a3:2f:60:ef:48:13: 8a:4d:c4:1c:98:b4:8b:0e:5c:73:2f:58:8a:0f:c2: ba:d8:35:fa:cb:54:8e:05:70:09:11:64:a6:e0:a5: 4a:c6:fa:ba:86:4e:4f:e7:8d:f6:12:4b:47:08:96: 8d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B8:4D:82:88:D8:CF:27:D6:60:E0:3B:94:05:B2:B5:D3:BC:D7:4B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2000::/40 Signature Algorithm: sha256WithRSAEncryption be:82:a9:5c:0d:9e:fb:28:fc:3b:c3:14:01:48:f4:9a:65:39: 46:49:f1:f1:36:68:e2:ed:4b:68:6d:bb:60:ae:ea:15:02:28: 64:a6:c8:cd:b2:26:11:ea:02:cc:35:a3:81:15:ee:8c:75:24: 54:8f:59:d2:8d:9c:83:19:40:42:6d:74:79:11:70:19:bd:7d: 55:37:97:18:6e:52:90:c5:a2:6a:eb:7d:f8:19:75:ab:a8:5d: e0:fa:86:73:0a:db:02:d7:ff:89:e9:3e:1b:d0:51:2e:14:d9: db:c3:da:41:d6:a5:9a:79:00:6f:e6:4c:cb:15:1a:53:a9:0b: 68:25:bc:5c:b9:69:4e:57:c8:50:76:4b:a3:41:f9:e8:2b:5e: 3b:5c:ed:17:39:69:55:38:a4:f9:06:92:a2:9a:d7:76:2c:8f: f7:8a:a2:b7:c3:79:b8:64:a1:13:dc:2a:ef:e9:f1:43:7c:55: cb:e7:1c:c6:52:2b:73:a4:28:d7:62:ae:a8:ae:58:66:a5:a1: 33:f3:60:ad:fe:54:bc:d5:04:ae:5e:a4:17:06:ba:c9:59:ec: ee:2d:73:1d:27:02:c8:c3:cf:2c:e7:44:b5:5c:e4:95:fa:52: f4:ff:89:77:69:05:b0:c5:b1:c4:6e:ac:39:c4:f7:6b:64:cf: 99:8b:06:bd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULjvo88n5i2sW64Ozda0iChy2NTkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMDExOFoX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAYzYxNTAwMTFhOGUyN2NhNTcyMDg2 NTFmYTgzZDJhMzJlZWNlYTAyNGExMzllMjJhZjU1ODMzZmNiZWIzMmM2OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVX8jsSOlqvabaYbcrsLPqxG7GSn jyZB+eBxBNxHz4rnBmCK2hfMfG7ru3tPUoH2mE8TJ8Poe7c1qtoIDmLx2t5Mk6Kp PWsHPoP+PvtgHd0tyYRHRCziyHApZsTnPTPnFZocnBpPGg8f42dVoFYgO7m6ztBH xlhExqEmIBgAHtoNpSQ8EAXvcN8W20Z12xoge6D04cJ/ibAV5M2IcBvOxXEnCYBQ VIseEKUZVlMdb1lfCU3kHpUiEddsYUDwmTSKksVKb+G1dQfWClujL2DvSBOKTcQc mLSLDlxzL1iKD8K62DX6y1SOBXAJEWSm4KVKxvq6hk5P5432EktHCJaNcwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK24TYKI2M8n1mDgO5QFsrXTvNdLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I4NjhlMTEyLTJjNjgtNGRjNS1iMjlmLThjNjRjNGUwOWMwNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaACAwDQYJKoZIhvcNAQELBQADggEBAL6CqVwNnvso/DvDFAFI 9JplOUZJ8fE2aOLtS2htu2Cu6hUCKGSmyM2yJhHqAsw1o4EV7ox1JFSPWdKNnIMZ QEJtdHkRcBm9fVU3lxhuUpDFomrrffgZdauoXeD6hnMK2wLX/4npPhvQUS4U2dvD 2kHWpZp5AG/mTMsVGlOpC2glvFy5aU5XyFB2S6NB+egrXjtc7Rc5aVU4pPkGkqKa 13Ysj/eKorfDebhkoRPcKu/p8UN8VcvnHMZSK3OkKNdirqiuWGaloTPzYK3+VLzV BK5epBcGuslZ7O4tcx0nAsjDzyznRLVc5JX6UvT/iXdpBbDFscRurDnE92tkz5mL Br0= -----END CERTIFICATE-----Generated at Tue May 12 23:32:31 2026 by rpki-client