$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d47ce112-c2bb-4af9-8e57-271d2038e059.roa File: d47ce112-c2bb-4af9-8e57-271d2038e059.roa (raw, json) Hash identifier: 6ZRpWSXfR9Gfu8vdKGTMtWD/ALbQVSzmIr1Wju4shbE= Subject key identifier: 7D:D8:A0:D2:A7:45:5F:A9:CB:AA:FB:86:16:78:69:02:4D:EA:EA:FA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 47AFCF174500C998FCF8D9152A929E85BAD19265 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d47ce112-c2bb-4af9-8e57-271d2038e059.roa Signing time: Tue 05 May 2026 00:01:14 +0000 ROA not before: Tue 05 May 2026 00:01:14 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:af:cf:17:45:00:c9:98:fc:f8:d9:15:2a:92:9e:85:ba:d1:92:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 5 00:01:14 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=7b532c4ac4c6006e0b430bf2d2e78119f525cad0cccec018e3ce9397bc453abc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:33:d0:88:3d:22:82:45:b4:b4:a6:dd:74:86: 51:92:1f:10:93:0c:f0:1b:69:f6:fa:12:c6:0c:2a: 33:d8:2b:ad:6e:32:91:90:3a:26:7e:0b:68:b2:c9: fa:6d:c3:e6:29:88:1d:1c:29:1e:b5:cc:ef:00:0f: ae:7e:8b:f4:d2:dd:fa:c5:f6:33:ec:7a:9b:65:2b: 79:c2:41:2f:4c:92:2e:92:d3:7b:a5:20:27:35:e9: bc:ce:4b:13:e1:f9:e3:0f:82:0c:df:92:e9:e5:6e: 77:1e:60:a3:9a:d5:49:f8:cc:44:08:ff:94:8a:7e: ee:9c:f2:0a:2a:92:87:87:80:91:6e:8b:1b:b0:5b: 79:1a:19:23:ac:f4:e8:84:85:ab:26:a5:3b:c2:76: 3a:d8:26:73:79:0a:1f:98:d1:8d:d8:8f:8c:18:f9: 52:c1:eb:03:a9:54:63:07:7b:c9:c6:49:cd:b8:e2: 85:5c:15:03:92:35:3a:26:47:db:59:95:20:f2:da: d8:36:a6:3d:44:c1:25:2b:dc:0d:a1:23:8e:7a:fd: 45:34:05:0f:30:99:79:b2:89:1e:09:25:bb:67:65: 52:0c:9a:9d:f4:56:3b:22:fa:13:06:29:dc:fa:85: e1:a0:d8:32:fc:ec:b3:d1:7a:5b:2d:2f:61:d2:43: 3f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D8:A0:D2:A7:45:5F:A9:CB:AA:FB:86:16:78:69:02:4D:EA:EA:FA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d47ce112-c2bb-4af9-8e57-271d2038e059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:2800::/40 Signature Algorithm: sha256WithRSAEncryption 69:f0:8c:e4:2e:84:35:43:a7:02:03:5a:7f:53:b7:ae:27:74: 3f:f2:1c:da:19:83:99:b7:11:c9:f2:40:52:16:9c:db:64:6c: 51:ff:8a:30:18:ef:59:00:99:a5:d4:97:b6:5d:34:2e:63:fa: a8:95:dc:4f:bc:53:94:bc:da:81:3b:0d:64:66:30:05:9e:c8: a1:6e:f7:25:4b:fc:a2:d0:99:4c:41:54:2c:91:27:97:93:05: 04:f7:74:5d:f4:9d:c4:c8:7d:6d:a8:fc:c3:3f:f5:1b:1f:f8: 9a:6c:3b:dc:82:56:c2:18:ea:4b:55:4c:79:ec:96:a5:98:44: d9:53:25:80:ea:c9:74:7b:42:f9:17:c5:f0:9f:bd:35:8e:43: 1d:3b:41:90:20:e6:72:4e:f4:76:79:0c:b5:7b:75:da:f4:f7: 55:13:b2:a3:59:5f:c5:2d:9f:bc:43:88:08:48:fb:3b:c4:d8: 8d:43:ff:bf:d1:f2:39:15:3d:9c:c8:ac:aa:1e:55:9e:37:d1: ad:a9:2c:40:73:39:9c:5e:60:33:14:f0:18:f2:a0:b8:2c:e8: 06:9e:00:a7:9e:7f:47:82:4f:58:1c:f7:a5:6a:65:28:7e:a4: 51:98:35:3d:6a:89:de:7c:0c:18:96:71:36:93:4e:f0:a4:f3: ab:d7:a2:e8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUR6/PF0UAyZj8+NkVKpKehbrRkmUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwNTAwMDExNFoX DTI2MDgwMzIzNTk1OVowejFJMEcGA1UEBRNAN2I1MzJjNGFjNGM2MDA2ZTBiNDMw YmYyZDJlNzgxMTlmNTI1Y2FkMGNjY2VjMDE4ZTNjZTkzOTdiYzQ1M2FiYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zPQiD0igkW0tKbddIZRkh8Qkwzw G2n2+hLGDCoz2CutbjKRkDomfgtossn6bcPmKYgdHCketczvAA+ufov00t36xfYz 7HqbZSt5wkEvTJIuktN7pSAnNem8zksT4fnjD4IM35Lp5W53HmCjmtVJ+MxECP+U in7unPIKKpKHh4CRbosbsFt5GhkjrPTohIWrJqU7wnY62CZzeQofmNGN2I+MGPlS wesDqVRjB3vJxknNuOKFXBUDkjU6JkfbWZUg8trYNqY9RMElK9wNoSOOev1FNAUP MJl5sokeCSW7Z2VSDJqd9FY7IvoTBinc+oXhoNgy/Oyz0XpbLS9h0kM/lQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH3YoNKnRV+py6r7hhZ4aQJN6ur6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q0N2NlMTEyLWMyYmItNGFmOS04ZTU3LTI3MWQyMDM4ZTA1OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9CgwDQYJKoZIhvcNAQELBQADggEBAGnwjOQuhDVDpwIDWn9T t64ndD/yHNoZg5m3EcnyQFIWnNtkbFH/ijAY71kAmaXUl7ZdNC5j+qiV3E+8U5S8 2oE7DWRmMAWeyKFu9yVL/KLQmUxBVCyRJ5eTBQT3dF30ncTIfW2o/MM/9Rsf+Jps O9yCVsIY6ktVTHnslqWYRNlTJYDqyXR7QvkXxfCfvTWOQx07QZAg5nJO9HZ5DLV7 ddr091UTsqNZX8Utn7xDiAhI+zvE2I1D/7/R8jkVPZzIrKoeVZ430a2pLEBzOZxe YDMU8BjyoLgs6AaeAKeef0eCT1gc96VqZSh+pFGYNT1qid58DBiWcTaTTvCk86vX oug= -----END CERTIFICATE-----Generated at Tue May 12 23:27:17 2026 by rpki-client