$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d929729c-c013-4024-ad4e-4b7ddbd3ca1d.roa File: d929729c-c013-4024-ad4e-4b7ddbd3ca1d.roa (raw, json) Hash identifier: Ph9s/OfiQK2xzCnT8YVTqpQt0j8KdsJuoG7iyrJfzWo= Subject key identifier: 47:D5:B1:F7:76:A9:C6:70:C2:66:F1:BD:FF:31:AE:11:21:B9:B1:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4CF1AD4BCB7811B17D5AAB9C2A92AB5090BFA472 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d929729c-c013-4024-ad4e-4b7ddbd3ca1d.roa Signing time: Tue 12 May 2026 00:01:15 +0000 ROA not before: Tue 12 May 2026 00:01:15 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f1:ad:4b:cb:78:11:b1:7d:5a:ab:9c:2a:92:ab:50:90:bf:a4:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:01:15 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=fde4118f3a000e7784f144d033fd5d7088b6f2ff95ac0943890fd1acb618b30f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b2:3c:db:68:cd:58:1e:09:8c:cb:11:78:2b: 26:71:cd:ca:ab:8e:80:01:6f:f5:42:d3:58:e1:62: d2:5c:62:41:90:d6:4f:4a:73:d8:14:8d:c4:a1:fb: 93:7c:c0:20:50:47:b3:24:b1:77:05:53:71:c3:4a: 47:2d:f3:49:e5:2d:d8:6a:b1:7f:4b:c1:91:55:ae: 29:ee:a1:7a:30:14:df:e9:c1:b1:8a:ec:37:cf:6d: 40:4d:81:b3:6e:cc:0a:2e:69:5b:51:9f:4b:76:f4: 20:21:ef:ff:d3:d1:c0:57:1f:8b:9b:b4:c6:a9:7c: 0d:b8:9c:53:60:3c:38:cf:b1:ea:32:ae:a5:97:57: 80:ea:c3:2b:37:f8:24:f4:98:af:f4:c6:c5:e9:d4: 9d:12:cc:6c:e3:ce:0e:c9:f7:7d:99:4a:84:32:4b: 0b:de:cd:8c:1d:11:2f:00:5b:dd:5c:af:e6:b2:9b: 4f:55:38:62:1d:ab:28:8d:5c:03:b2:08:92:a4:64: b7:b0:ca:fd:17:80:52:94:d1:46:bf:c8:4c:df:75: ef:fc:e2:00:ee:96:61:47:88:6e:87:5c:86:e2:25: 59:55:04:27:62:23:5c:21:35:cc:58:50:34:64:57: 76:fe:07:f2:a6:85:2d:97:12:10:56:f1:8f:5c:85: e5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D5:B1:F7:76:A9:C6:70:C2:66:F1:BD:FF:31:AE:11:21:B9:B1:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d929729c-c013-4024-ad4e-4b7ddbd3ca1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:7000::/40 Signature Algorithm: sha256WithRSAEncryption 04:d3:8b:74:da:53:cd:5f:f6:a4:6d:43:75:1e:94:91:29:6b: 1d:84:c3:c6:ca:8a:01:bc:c8:02:21:77:03:6c:34:89:76:37: 7e:98:d8:94:68:de:43:ef:00:d1:44:a6:3c:29:8c:7a:23:d7: 83:c5:89:06:9b:d7:88:e7:08:14:a8:0b:f5:eb:dd:33:bd:90: fe:28:ff:f5:e1:5c:17:37:12:7e:6c:ab:ee:f4:52:91:59:c6: 52:03:2e:90:7e:fc:9e:0d:cb:e2:e1:11:be:8f:86:02:4a:87: 17:36:dd:d0:14:ec:47:3f:29:d7:2f:64:98:98:6f:fe:b5:0c: 72:f8:92:38:cc:3e:cf:f1:4b:8a:10:dc:ee:d8:2e:08:41:e0: 84:a6:1f:35:3e:75:aa:bf:a5:2b:7e:62:5b:32:e8:20:38:12: 85:8e:53:2b:c2:bd:e8:da:e3:14:92:c3:54:ad:7d:a5:da:ad: ba:d6:6b:5d:ea:ea:3c:f5:96:ba:f2:25:34:6e:89:8e:3a:7a: f6:d1:ba:d5:5a:9f:f3:d8:a5:80:8f:d2:6d:f2:a4:1e:65:d6: aa:01:d7:dc:10:50:ec:6e:d0:e0:c5:73:c2:10:db:c4:2e:b6: 60:d2:e9:c1:df:21:b2:91:32:d4:dd:e3:83:5e:8c:3f:4a:8a: 68:bf:a8:06 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTPGtS8t4EbF9WqucKpKrUJC/pHIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMDExNVoX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAZmRlNDExOGYzYTAwMGU3Nzg0ZjE0 NGQwMzNmZDVkNzA4OGI2ZjJmZjk1YWMwOTQzODkwZmQxYWNiNjE4YjMwZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrI822jNWB4JjMsReCsmcc3Kq46A AW/1QtNY4WLSXGJBkNZPSnPYFI3EofuTfMAgUEezJLF3BVNxw0pHLfNJ5S3YarF/ S8GRVa4p7qF6MBTf6cGxiuw3z21ATYGzbswKLmlbUZ9LdvQgIe//09HAVx+Lm7TG qXwNuJxTYDw4z7HqMq6ll1eA6sMrN/gk9Jiv9MbF6dSdEsxs484Oyfd9mUqEMksL 3s2MHREvAFvdXK/msptPVThiHasojVwDsgiSpGS3sMr9F4BSlNFGv8hM33Xv/OIA 7pZhR4huh1yG4iVZVQQnYiNcITXMWFA0ZFd2/gfypoUtlxIQVvGPXIXl2QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEfVsfd2qcZwwmbxvf8xrhEhubHKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q5Mjk3MjljLWMwMTMtNDAyNC1hZDRlLTRiN2RkYmQzY2ExZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8nAwDQYJKoZIhvcNAQELBQADggEBAATTi3TaU81f9qRtQ3Ue lJEpax2Ew8bKigG8yAIhdwNsNIl2N36Y2JRo3kPvANFEpjwpjHoj14PFiQab14jn CBSoC/Xr3TO9kP4o//XhXBc3En5sq+70UpFZxlIDLpB+/J4Ny+LhEb6PhgJKhxc2 3dAU7Ec/KdcvZJiYb/61DHL4kjjMPs/xS4oQ3O7YLghB4ISmHzU+daq/pSt+Ylsy 6CA4EoWOUyvCveja4xSSw1StfaXarbrWa13q6jz1lrryJTRuiY46evbRutVan/PY pYCP0m3ypB5l1qoB19wQUOxu0ODFc8IQ28QutmDS6cHfIbKRMtTd44NejD9Kimi/ qAY= -----END CERTIFICATE-----Generated at Wed May 13 00:09:05 2026 by rpki-client