$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bd28cccd-dab9-461e-9c6e-07f2e7132afc.roa File: bd28cccd-dab9-461e-9c6e-07f2e7132afc.roa (raw, json) Hash identifier: hZZDZD6NflyjTtilhMcIvL0GUIw3J9PQgGZyrgM8xbQ= Subject key identifier: 40:EB:B2:AB:55:3C:95:1E:1B:2E:9A:72:63:13:56:C4:24:9A:F6:A6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 70B8D9CB6024E74EACDD140F7AB0FE6E220F9AB2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bd28cccd-dab9-461e-9c6e-07f2e7132afc.roa Signing time: Sat 09 May 2026 00:00:08 +0000 ROA not before: Sat 09 May 2026 00:00:08 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b8:d9:cb:60:24:e7:4e:ac:dd:14:0f:7a:b0:fe:6e:22:0f:9a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 9 00:00:08 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=59cda1efdd6a9b85925fb2539585986c325da4c778abd488757a0e0d865e6083, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:a0:dd:19:14:3b:16:1b:be:5a:a9:45:0b: ca:7c:7d:e5:bf:ef:38:33:60:91:5f:c8:04:69:90: 2c:7e:d6:44:9c:c1:f0:d9:1b:bf:8f:20:95:f3:d7: 04:8a:c2:8a:95:1c:5a:ec:8a:f1:d7:ef:ed:bf:d8: 6c:a3:bc:61:1f:3c:3f:f8:68:e1:99:d1:cb:10:74: 3b:33:e1:37:af:a2:a5:05:6f:9d:fa:a9:9a:70:cf: b2:3f:98:6f:2a:a8:77:13:bc:2e:28:8d:d3:d2:67: 7f:b5:d5:f9:86:4d:1a:e3:e3:fc:e8:0b:2f:f3:55: 49:ac:c3:09:c9:2d:41:27:cf:ac:cf:18:09:9e:b1: 10:b4:a3:ce:a4:1a:de:b9:86:41:05:8f:41:a0:dd: eb:38:ca:6e:5f:5c:77:6c:e9:71:0c:b3:d6:e7:11: ac:0f:f6:33:96:71:4e:d4:c3:a2:93:2e:cb:d3:de: d7:82:58:7f:4d:58:98:2e:bf:0a:83:ef:1b:58:b6: dd:a1:03:b1:a3:e0:58:f4:89:2e:79:a2:b1:04:41: da:c2:0d:ae:3c:ff:5f:91:15:ec:d4:7c:e8:8d:43: 9b:0b:40:77:02:a2:e9:49:52:0c:40:14:1f:af:fa: 7c:e1:91:8b:3c:36:5d:a1:46:77:a4:4a:2c:11:0d: 65:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EB:B2:AB:55:3C:95:1E:1B:2E:9A:72:63:13:56:C4:24:9A:F6:A6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bd28cccd-dab9-461e-9c6e-07f2e7132afc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4840::/48 Signature Algorithm: sha256WithRSAEncryption 27:e2:bd:84:7a:51:e5:78:bb:2d:44:30:e3:14:8d:bc:ba:7a: 57:01:de:a7:c4:b2:02:69:59:ef:8c:7e:f4:c9:dd:5e:39:79: 42:e4:93:30:de:9c:21:51:43:d9:f9:0e:bd:35:dc:6f:35:10: 25:0c:a1:d9:1e:f4:43:87:7c:82:b4:2c:b9:a5:2f:2a:29:e3: 3d:0a:d1:92:56:39:a3:0b:24:98:ba:11:42:6c:74:80:a6:b2: 25:8c:ed:32:15:ed:bf:b4:51:f9:d8:8c:cc:81:32:b2:35:4f: 6b:a5:c0:c6:5e:dc:81:77:d7:b3:08:fa:90:7f:a4:b4:f0:3e: 25:79:f1:f0:77:36:9b:0c:c8:73:97:12:e0:d9:e9:cb:52:81: bd:30:b1:af:fb:9c:84:da:08:fd:ab:dc:a2:3f:e8:ba:0b:b6: 8a:25:cb:7d:36:b6:7e:20:0b:f8:17:64:c3:f7:9b:75:7f:a8: ab:e7:3b:f3:4d:82:a7:f8:72:26:10:ca:ef:25:ae:1f:54:c1: 84:56:ed:5d:ff:9b:6f:33:9b:c4:bb:1b:0e:8d:0c:30:ff:39: ff:23:17:7d:7b:8f:5a:23:c1:5c:fe:86:a8:6f:cc:ad:75:f4: 7c:45:6c:ac:5a:02:57:61:c6:e5:fe:7c:04:9c:c8:fb:e9:14: 6b:c3:69:f0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcLjZy2Ak506s3RQPerD+biIPmrIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwOTAwMDAwOFoX DTI2MDgwNzIzNTk1OVowejFJMEcGA1UEBRNANTljZGExZWZkZDZhOWI4NTkyNWZi MjUzOTU4NTk4NmMzMjVkYTRjNzc4YWJkNDg4NzU3YTBlMGQ4NjVlNjA4MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiag3RkUOxYbvlqpRQvKfH3lv+84 M2CRX8gEaZAsftZEnMHw2Ru/jyCV89cEisKKlRxa7Irx1+/tv9hso7xhHzw/+Gjh mdHLEHQ7M+E3r6KlBW+d+qmacM+yP5hvKqh3E7wuKI3T0md/tdX5hk0a4+P86Asv 81VJrMMJyS1BJ8+szxgJnrEQtKPOpBreuYZBBY9BoN3rOMpuX1x3bOlxDLPW5xGs D/YzlnFO1MOiky7L097Xglh/TViYLr8Kg+8bWLbdoQOxo+BY9IkueaKxBEHawg2u PP9fkRXs1HzojUObC0B3AqLpSVIMQBQfr/p84ZGLPDZdoUZ3pEosEQ1lQwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEDrsqtVPJUeGy6acmMTVsQkmvamMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JkMjhjY2NkLWRhYjktNDYxZS05YzZlLTA3ZjJlNzEzMmFmYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYUhAMA0GCSqGSIb3DQEBCwUAA4IBAQAn4r2EelHleLstRDDj FI28unpXAd6nxLICaVnvjH70yd1eOXlC5JMw3pwhUUPZ+Q69NdxvNRAlDKHZHvRD h3yCtCy5pS8qKeM9CtGSVjmjCySYuhFCbHSAprIljO0yFe2/tFH52IzMgTKyNU9r pcDGXtyBd9ezCPqQf6S08D4lefHwdzabDMhzlxLg2enLUoG9MLGv+5yE2gj9q9yi P+i6C7aKJct9NrZ+IAv4F2TD95t1f6ir5zvzTYKn+HImEMrvJa4fVMGEVu1d/5tv M5vEuxsOjQww/zn/Ixd9e49aI8Fc/oaob8ytdfR8RWysWgJXYcbl/nwEnMj76RRr w2nw -----END CERTIFICATE-----Generated at Wed May 13 00:18:12 2026 by rpki-client