$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c703ca0e-6065-4669-887d-653890d78dab.roa File: c703ca0e-6065-4669-887d-653890d78dab.roa (raw, json) Hash identifier: Jerc8hDYimdgA0QhCdykvOJPH6HvH+YpAC66hMKrLAs= Subject key identifier: 24:9D:80:38:3F:BE:7D:0D:79:B8:7D:98:73:2B:26:C7:17:84:CC:CB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4C18586594E876E63E5B15255E75B5B3E77101C7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c703ca0e-6065-4669-887d-653890d78dab.roa Signing time: Tue 12 May 2026 00:11:08 +0000 ROA not before: Tue 12 May 2026 00:11:08 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:4800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:18:58:65:94:e8:76:e6:3e:5b:15:25:5e:75:b5:b3:e7:71:01:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:11:08 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=fa9a6c8979a2937f0847fcf452ccff3aef2a82751c0614a54a52b9ba918aaaf5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:93:87:e3:fe:c6:55:f0:a0:d5:6b:b2:f4: 2b:ef:7f:0a:7a:db:23:ee:d7:dd:8c:3e:b9:e0:1a: 28:c0:3b:a3:c3:35:6e:ab:ff:8b:b7:4c:88:4d:e0: 64:6f:e2:f7:6e:b6:41:b7:b4:b6:9f:ea:cf:28:dd: 4e:75:f0:8a:9d:bc:41:74:7f:c3:2f:04:0a:3e:4c: bd:09:7a:e1:75:f0:35:98:86:e0:ee:40:27:43:8e: 5e:b5:0b:c7:01:d2:52:18:b9:68:00:db:c1:78:e4: 63:2f:85:72:4e:d9:1c:70:00:8e:92:e9:c7:09:89: 6b:dd:9c:3c:99:39:43:9d:9e:45:9c:c4:51:e0:df: ef:81:0b:30:3f:07:e9:44:3e:ee:21:6c:fd:30:5a: a2:ed:d9:92:6f:af:33:67:da:d3:39:5c:11:17:fa: 0b:e7:38:e4:cf:a2:53:ad:36:60:66:71:6e:34:f0: 11:94:5e:df:9b:11:f4:93:ed:06:22:ee:0c:5f:97: e9:bf:13:68:ae:9a:be:12:61:85:81:ba:59:8f:97: 4c:17:a7:fd:84:4a:9c:a0:01:68:93:9e:6e:b4:62: be:ec:d7:52:d4:f2:3f:e7:fa:c1:9a:d7:32:12:7a: f4:aa:d8:99:84:f4:31:87:3d:d3:01:eb:33:d5:5b: ad:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9D:80:38:3F:BE:7D:0D:79:B8:7D:98:73:2B:26:C7:17:84:CC:CB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c703ca0e-6065-4669-887d-653890d78dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:4800::/48 Signature Algorithm: sha256WithRSAEncryption 38:ab:f9:e1:88:31:c2:81:57:e7:d7:fe:09:72:85:cd:87:a7: 7c:fc:0a:e3:b7:49:36:80:04:36:bd:d4:1b:28:61:17:13:c8: d1:56:d2:80:9d:b0:da:20:de:3a:54:c6:7d:55:4b:b6:ff:24: 94:56:eb:28:df:39:45:5b:80:b0:8b:5b:65:c2:45:a4:0d:b7: 50:75:1b:11:9f:6b:fd:22:3a:55:a6:3e:41:0d:d9:9f:59:c8: ba:e6:41:1c:0d:87:37:e2:1d:19:08:35:fd:e7:2f:05:77:19: 12:28:01:fc:9a:0d:e6:93:61:9f:e2:9a:0f:15:ac:bf:cf:e8: c2:1c:71:c6:d1:d1:83:17:c2:15:ac:f2:09:03:3a:58:a2:46: 78:bb:f9:ee:f4:31:26:0b:2e:8a:97:77:c1:aa:2d:30:42:ea: 11:f8:41:ec:d7:46:6b:9e:ce:bb:c5:25:be:0a:b4:b3:86:56: 3d:c2:17:59:10:77:db:57:cd:d2:cd:ab:c8:98:cb:5d:19:99: fb:fd:e4:5a:7e:c0:8d:fe:ac:cc:79:78:78:c7:ff:07:67:7d: c9:aa:ff:77:d9:5e:84:79:21:79:a1:a7:4e:76:7d:3a:b4:50: 09:a0:52:c7:e9:fe:a8:fa:68:94:0d:54:03:d6:45:63:c4:81: 7b:54:05:b2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTBhYZZToduY+WxUlXnW1s+dxAccwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMTEwOFoX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAZmE5YTZjODk3OWEyOTM3ZjA4NDdm Y2Y0NTJjY2ZmM2FlZjJhODI3NTFjMDYxNGE1NGE1MmI5YmE5MThhYWFmNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIOTh+P+xlXwoNVrsvQr738Ketsj 7tfdjD654BoowDujwzVuq/+Lt0yITeBkb+L3brZBt7S2n+rPKN1OdfCKnbxBdH/D LwQKPky9CXrhdfA1mIbg7kAnQ45etQvHAdJSGLloANvBeORjL4VyTtkccACOkunH CYlr3Zw8mTlDnZ5FnMRR4N/vgQswPwfpRD7uIWz9MFqi7dmSb68zZ9rTOVwRF/oL 5zjkz6JTrTZgZnFuNPARlF7fmxH0k+0GIu4MX5fpvxNorpq+EmGFgbpZj5dMF6f9 hEqcoAFok55utGK+7NdS1PI/5/rBmtcyEnr0qtiZhPQxhz3TAesz1VutIQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCSdgDg/vn0Nebh9mHMrJscXhMzLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M3MDNjYTBlLTYwNjUtNDY2OS04ODdkLTY1Mzg5MGQ3OGRhYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7EgAMA0GCSqGSIb3DQEBCwUAA4IBAQA4q/nhiDHCgVfn1/4J coXNh6d8/Arjt0k2gAQ2vdQbKGEXE8jRVtKAnbDaIN46VMZ9VUu2/ySUVuso3zlF W4Cwi1tlwkWkDbdQdRsRn2v9IjpVpj5BDdmfWci65kEcDYc34h0ZCDX95y8FdxkS KAH8mg3mk2Gf4poPFay/z+jCHHHG0dGDF8IVrPIJAzpYokZ4u/nu9DEmCy6Kl3fB qi0wQuoR+EHs10Zrns67xSW+CrSzhlY9whdZEHfbV83SzavImMtdGZn7/eRafsCN /qzMeXh4x/8HZ33Jqv932V6EeSF5oadOdn06tFAJoFLH6f6o+miUDVQD1kVjxIF7 VAWy -----END CERTIFICATE-----Generated at Tue May 12 23:43:19 2026 by rpki-client