$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6622abc-f896-4288-ad4e-5c52c1eaf806.roa File: d6622abc-f896-4288-ad4e-5c52c1eaf806.roa (raw, json) Hash identifier: lQUX53ZejvHOaoQVbZavfXqcNXrpkid98dGKzbbbk1g= Subject key identifier: 07:9C:73:39:64:90:0B:BE:6C:36:22:70:C5:15:F3:37:66:1E:69:24 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 597D49AD3E665085187A843EAFFC49BB2503B78F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6622abc-f896-4288-ad4e-5c52c1eaf806.roa Signing time: Wed 06 May 2026 00:01:03 +0000 ROA not before: Wed 06 May 2026 00:01:03 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:7d:49:ad:3e:66:50:85:18:7a:84:3e:af:fc:49:bb:25:03:b7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 6 00:01:03 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=78bd2a19528dd73a2b99075ca20ce6ca009965c0d659634c559c2a2d4cb05fb1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:4f:57:8b:6e:be:f2:74:db:26:ac:9a:8d: b2:25:ce:ee:14:a7:22:d0:90:ee:58:0b:3f:97:ab: fa:01:17:53:da:8a:1f:38:72:51:95:08:d9:24:3a: 46:8c:9c:c5:ee:df:06:8c:4b:0a:e5:6e:5b:26:d9: 20:8c:64:16:db:83:2e:bf:33:db:f4:12:ad:e3:3e: b7:02:24:bd:70:f8:3e:97:7c:66:56:a5:82:47:0b: 6d:42:ef:71:f9:61:25:41:5c:e2:90:71:08:53:90: 6c:8c:4f:df:5b:af:de:f7:38:94:60:6f:4c:37:51: 02:45:7a:ad:f9:b0:c2:0f:ea:d7:2f:a6:c9:a8:3b: c8:b0:4c:97:c1:89:98:20:0a:07:d0:b5:ad:ee:1e: 0e:d9:e6:96:f4:21:8c:43:45:62:26:47:9a:d7:d7: 94:44:f9:8a:66:0d:d6:c6:9d:00:93:ae:57:1d:fa: ab:82:ce:c9:3e:ef:ec:31:9c:34:21:f5:25:19:e4: e6:90:15:60:50:60:32:a2:ce:e2:8c:ef:aa:dc:ca: 45:56:85:9a:4d:be:74:75:bd:54:95:18:ea:33:45: 89:0a:ed:61:dd:28:c4:79:0c:dc:89:92:fa:97:15: e2:fa:70:4a:5c:67:59:c7:05:31:ab:69:06:c8:26: be:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9C:73:39:64:90:0B:BE:6C:36:22:70:C5:15:F3:37:66:1E:69:24 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6622abc-f896-4288-ad4e-5c52c1eaf806.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:4800::/40 Signature Algorithm: sha256WithRSAEncryption a8:d8:29:93:95:89:88:a1:da:9e:a1:8d:10:0a:72:fc:cc:ba: 21:69:dc:5b:57:91:c7:f4:ad:50:0a:5e:f5:08:00:a6:65:d4: b9:a7:00:82:de:34:4f:b2:cd:be:ff:43:dd:1e:a3:cc:cc:b0: b9:11:c9:7f:46:73:36:07:fd:ab:1a:e4:c8:8c:54:bb:b8:1b: 1b:a8:6b:48:fa:99:8d:01:0e:4a:9b:4a:d4:6b:59:91:05:e1: af:a6:02:af:df:15:e2:b4:bb:7d:72:23:87:2a:9a:37:87:bc: aa:70:31:aa:fe:53:5f:6c:b3:7f:2d:e6:7d:18:f6:11:e1:3b: 5a:5d:86:01:25:14:e2:e6:ce:5d:37:6b:e9:f0:13:ab:92:80: 98:b9:2c:17:83:26:01:7e:50:0f:f3:c3:98:e3:9e:7e:96:ca: d8:07:41:b4:0c:bb:ce:01:1f:1d:82:3c:56:8c:a5:89:a6:99: 77:36:2e:6e:97:8a:5b:29:e8:d8:4c:ab:8b:f6:3c:3c:3c:9a: 84:b7:35:34:a8:22:c6:ac:10:07:77:60:4d:17:6d:65:d4:04: 56:15:8e:12:47:11:cc:39:f0:9b:10:20:58:65:4f:34:34:6a: e1:9f:06:32:68:90:d3:3f:e0:f6:2b:47:ee:4f:4f:32:62:36: b6:89:cc:b0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWX1JrT5mUIUYeoQ+r/xJuyUDt48wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwNjAwMDEwM1oX DTI2MDgwNDIzNTk1OVowejFJMEcGA1UEBRNANzhiZDJhMTk1MjhkZDczYTJiOTkw NzVjYTIwY2U2Y2EwMDk5NjVjMGQ2NTk2MzRjNTU5YzJhMmQ0Y2IwNWZiMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbNPV4tuvvJ02yasmo2yJc7uFKci 0JDuWAs/l6v6ARdT2oofOHJRlQjZJDpGjJzF7t8GjEsK5W5bJtkgjGQW24MuvzPb 9BKt4z63AiS9cPg+l3xmVqWCRwttQu9x+WElQVzikHEIU5BsjE/fW6/e9ziUYG9M N1ECRXqt+bDCD+rXL6bJqDvIsEyXwYmYIAoH0LWt7h4O2eaW9CGMQ0ViJkea19eU RPmKZg3Wxp0Ak65XHfqrgs7JPu/sMZw0IfUlGeTmkBVgUGAyos7ijO+q3MpFVoWa Tb50db1UlRjqM0WJCu1h3SjEeQzciZL6lxXi+nBKXGdZxwUxq2kGyCa+SwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAecczlkkAu+bDYicMUV8zdmHmkkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q2NjIyYWJjLWY4OTYtNDI4OC1hZDRlLTVjNTJjMWVhZjgwNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYEgwDQYJKoZIhvcNAQELBQADggEBAKjYKZOViYih2p6hjRAK cvzMuiFp3FtXkcf0rVAKXvUIAKZl1LmnAILeNE+yzb7/Q90eo8zMsLkRyX9GczYH /asa5MiMVLu4Gxuoa0j6mY0BDkqbStRrWZEF4a+mAq/fFeK0u31yI4cqmjeHvKpw Mar+U19ss38t5n0Y9hHhO1pdhgElFOLmzl03a+nwE6uSgJi5LBeDJgF+UA/zw5jj nn6WytgHQbQMu84BHx2CPFaMpYmmmXc2Lm6Xilsp6NhMq4v2PDw8moS3NTSoIsas EAd3YE0XbWXUBFYVjhJHEcw58JsQIFhlTzQ0auGfBjJokNM/4PYrR+5PTzJiNraJ zLA= -----END CERTIFICATE-----Generated at Wed May 13 00:26:45 2026 by rpki-client