$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d802c27d-af4e-414d-a6e8-26c7699c45a4.roa File: d802c27d-af4e-414d-a6e8-26c7699c45a4.roa (raw, json) Hash identifier: EScVKmd8zW6qSpinrW9vc/QtPwaGRXPnmvlK+mAL32c= Subject key identifier: A8:1A:76:56:DA:C7:7F:82:C8:E7:E5:20:4C:7F:AC:84:BB:B2:A2:7B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7685C9A3CD120DA33AF95F3A6B66850EEC7DA179 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d802c27d-af4e-414d-a6e8-26c7699c45a4.roa Signing time: Sat 02 May 2026 00:01:14 +0000 ROA not before: Sat 02 May 2026 00:01:14 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:7080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:85:c9:a3:cd:12:0d:a3:3a:f9:5f:3a:6b:66:85:0e:ec:7d:a1:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:01:14 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=1a1224ddcbc98fb538f8d658ea623b9910e46615a307095494177978c9a7dba9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:78:0a:55:2e:ff:8a:b7:1d:87:7c:4a:fe:79: 4b:62:e7:6d:5e:77:7a:56:0f:23:24:a1:f0:b9:ef: 6f:62:a3:a9:1d:e7:1d:9c:d6:03:d7:3f:03:90:4f: 34:b1:cc:e5:a1:45:66:7c:0a:33:4b:87:32:6d:8d: ba:93:a5:ba:2b:db:de:de:ac:7e:e1:6d:43:47:15: 83:e7:c5:b7:67:83:d7:fb:7c:24:39:5c:74:ef:df: 98:87:7f:c1:2d:b1:7f:be:2a:65:05:29:84:a2:c6: dc:d9:4b:1f:00:ae:1a:ca:33:6f:81:7d:4a:b1:c6: 29:58:45:9e:ef:4d:f3:e1:a5:76:9a:ac:26:f7:b6: 20:2f:f4:15:c3:33:36:e6:f8:8a:1a:b0:a7:fa:7c: d5:bc:08:96:2c:40:f8:89:a2:65:6c:5e:5a:7e:64: 39:91:ed:ac:ed:7b:37:88:46:21:65:25:a8:65:12: 95:31:c9:79:d0:cd:34:23:97:45:5f:5d:a4:31:6c: 5a:4f:a8:1c:f8:92:0c:4b:0b:c3:70:37:ee:dc:1c: ed:cd:21:35:f4:49:83:49:ff:6e:fb:8b:62:d8:64: f7:d1:af:3e:bb:03:fd:a5:51:7a:b0:2c:ee:65:8a: 40:45:1e:d0:bb:2a:c5:cd:55:0c:54:ab:90:5e:9e: d3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1A:76:56:DA:C7:7F:82:C8:E7:E5:20:4C:7F:AC:84:BB:B2:A2:7B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d802c27d-af4e-414d-a6e8-26c7699c45a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:7080::/48 Signature Algorithm: sha256WithRSAEncryption ac:10:0e:81:6a:6a:10:45:22:27:44:f9:96:a3:4d:d8:59:83: 8a:3a:85:54:44:6d:61:b6:cc:6a:ef:08:e7:33:ef:18:81:39: 59:b9:45:3a:8a:eb:98:a9:8b:1c:d5:6e:3e:13:3e:5d:6b:17: 3c:46:e9:a2:fc:25:52:0b:66:39:b3:6b:02:6d:c5:a2:28:5a: e7:0c:66:8c:65:f7:c7:00:33:23:87:16:23:83:f7:f0:cf:5a: 76:ea:a1:ad:e0:91:2a:46:d4:8e:98:0d:9a:81:f4:10:a1:e4: e6:78:3f:60:57:de:af:2f:c2:ab:04:c6:6a:7e:ee:69:10:9b: 5a:08:2d:e8:22:30:b5:d7:91:9c:d4:b5:01:f6:50:d6:3f:bb: 5b:69:f9:69:01:9c:9c:85:83:c5:82:37:a5:64:9d:69:90:19: 52:88:90:2f:67:84:b4:e3:1f:63:dc:21:7a:a7:91:b6:e5:98: a5:76:4f:ec:34:09:c3:0f:30:63:05:f4:dc:59:c9:a1:72:a1: d2:db:3f:3e:cf:d9:cc:ef:ae:c1:4f:26:81:db:ab:d7:5f:f4: 8d:e0:20:d6:e3:e6:77:e3:4f:44:50:a9:2e:65:7f:ff:c2:17: e9:b4:db:89:85:fa:da:93:c5:82:86:96:6d:66:d8:42:30:c2: b5:54:0f:37 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdoXJo80SDaM6+V86a2aFDux9oXkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwMjAwMDExNFoX DTI2MDczMTIzNTk1OVowejFJMEcGA1UEBRNAMWExMjI0ZGRjYmM5OGZiNTM4Zjhk NjU4ZWE2MjNiOTkxMGU0NjYxNWEzMDcwOTU0OTQxNzc5NzhjOWE3ZGJhOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83gKVS7/ircdh3xK/nlLYudtXnd6 Vg8jJKHwue9vYqOpHecdnNYD1z8DkE80sczloUVmfAozS4cybY26k6W6K9ve3qx+ 4W1DRxWD58W3Z4PX+3wkOVx079+Yh3/BLbF/viplBSmEosbc2UsfAK4ayjNvgX1K scYpWEWe703z4aV2mqwm97YgL/QVwzM25viKGrCn+nzVvAiWLED4iaJlbF5afmQ5 ke2s7Xs3iEYhZSWoZRKVMcl50M00I5dFX12kMWxaT6gc+JIMSwvDcDfu3BztzSE1 9EmDSf9u+4ti2GT30a8+uwP9pVF6sCzuZYpARR7QuyrFzVUMVKuQXp7TvwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKgadlbax3+CyOflIEx/rIS7sqJ7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q4MDJjMjdkLWFmNGUtNDE0ZC1hNmU4LTI2Yzc2OTljNDVhNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6nCAMA0GCSqGSIb3DQEBCwUAA4IBAQCsEA6BamoQRSInRPmW o03YWYOKOoVURG1htsxq7wjnM+8YgTlZuUU6iuuYqYsc1W4+Ez5daxc8Rumi/CVS C2Y5s2sCbcWiKFrnDGaMZffHADMjhxYjg/fwz1p26qGt4JEqRtSOmA2agfQQoeTm eD9gV96vL8KrBMZqfu5pEJtaCC3oIjC115Gc1LUB9lDWP7tbaflpAZychYPFgjel ZJ1pkBlSiJAvZ4S04x9j3CF6p5G25Zildk/sNAnDDzBjBfTcWcmhcqHS2z8+z9nM 767BTyaB26vXX/SN4CDW4+Z3409EUKkuZX//whfptNuJhfrak8WChpZtZthCMMK1 VA83 -----END CERTIFICATE-----Generated at Tue May 12 23:27:01 2026 by rpki-client