$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/daef484d-11aa-4bc3-89ae-50742593b34c.roa File: daef484d-11aa-4bc3-89ae-50742593b34c.roa (raw, json) Hash identifier: GzPPqGMqJktDdnISUW4/6txAT26BOSRfWV8zhaSRZ0M= Subject key identifier: 4B:BC:70:18:AD:E8:15:6B:1A:59:13:1A:23:0C:18:2D:6B:18:D4:28 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 070824C20067DF74E32010FE0B59DB28FC7BA2FF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/daef484d-11aa-4bc3-89ae-50742593b34c.roa Signing time: Mon 11 May 2026 00:00:07 +0000 ROA not before: Mon 11 May 2026 00:00:07 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:08:24:c2:00:67:df:74:e3:20:10:fe:0b:59:db:28:fc:7b:a2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:00:07 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=a3d0835794ec7750f53c082f2e8fcdb0c161f40bff92182723d205270a1d8f3e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b7:45:8f:2b:73:8f:ce:88:b8:8f:35:d4:d4: 3b:e1:44:8c:e5:3e:f3:0e:d5:67:09:1b:60:c6:ad: 7d:ba:ea:df:c2:15:9e:c5:8c:f1:9c:8c:bf:c5:ca: c2:cf:11:46:cf:c1:b8:f4:1f:35:62:b6:21:6a:30: 42:f1:c9:59:21:b3:1f:c0:18:13:68:8c:4f:f0:71: 15:91:74:f1:70:05:27:8f:8a:95:a4:c6:93:8a:3f: 37:1a:6e:1c:ee:56:30:40:5b:9e:e1:9d:bd:bb:1b: f3:ea:d1:a5:c3:55:bd:37:cb:8f:a8:14:f3:12:0d: 35:7f:63:7b:ad:9e:64:1d:11:78:88:71:3a:13:11: ce:78:77:7d:18:cc:13:9d:f8:2d:f8:93:d6:43:00: a1:7e:ab:da:f1:82:25:f1:f3:44:77:fe:83:b3:59: 74:d3:a0:35:ae:17:fe:62:57:e6:d4:a9:fc:60:21: 6f:b7:21:32:9e:e8:59:76:50:d8:69:88:49:83:97: 99:97:2d:0e:9d:79:53:ce:17:be:2a:18:74:f2:94: 50:e0:c4:f3:99:13:8a:94:a0:5b:1f:a8:4b:84:4e: 2f:ce:c5:7b:fa:97:53:8d:b5:b8:81:a1:bc:6d:0f: 2d:56:e5:04:51:81:16:49:f2:3e:c9:7d:9e:07:ee: a2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BC:70:18:AD:E8:15:6B:1A:59:13:1A:23:0C:18:2D:6B:18:D4:28 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/daef484d-11aa-4bc3-89ae-50742593b34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4800::/40 Signature Algorithm: sha256WithRSAEncryption 0e:fe:63:7f:88:7c:78:6e:b2:2e:47:b5:3b:3f:92:2d:eb:76: 27:c9:94:4f:82:5c:5c:b1:b7:3c:ec:42:c1:c2:92:83:58:e6: f2:12:bd:0f:39:96:45:f6:2b:1d:b0:58:ad:5a:f4:3c:05:38: 87:08:31:76:d2:7f:1d:b0:18:80:08:9c:15:9e:3d:4a:ef:06: f7:b6:7e:af:6d:f3:6e:9c:5b:5e:a9:23:a2:44:7e:75:1a:54: b0:24:89:f1:e1:ae:1a:0c:d8:de:db:3a:0e:1d:7b:2d:fe:5d: 0b:ec:99:75:1e:b1:18:30:35:b2:32:26:bf:69:55:14:c8:a8: 96:e0:ec:8b:71:fc:11:f3:3f:ff:bc:68:aa:49:83:5f:4c:f5: f9:01:2a:80:f0:fd:1c:8d:85:32:a7:87:81:e2:6e:12:1c:85: 09:40:91:02:37:d6:50:7c:7b:48:66:d5:a6:99:f0:a9:b7:6f: ad:62:bc:f3:e8:af:65:2c:34:aa:8e:74:93:ee:1f:4f:3f:c6: a7:9b:30:5b:3a:44:c2:78:14:76:dd:98:c1:43:9d:8d:1b:65: 7a:a1:84:22:4c:16:f9:bf:5b:b3:4c:d8:2f:ff:82:4f:11:a6: 03:4b:31:75:45:6b:4b:07:e3:39:db:d9:40:fe:cd:73:06:ed: 8a:ae:08:9a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBwgkwgBn33TjIBD+C1nbKPx7ov8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMDAwN1oX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAYTNkMDgzNTc5NGVjNzc1MGY1M2Mw ODJmMmU4ZmNkYjBjMTYxZjQwYmZmOTIxODI3MjNkMjA1MjcwYTFkOGYzZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLdFjytzj86IuI811NQ74USM5T7z DtVnCRtgxq19uurfwhWexYzxnIy/xcrCzxFGz8G49B81YrYhajBC8clZIbMfwBgT aIxP8HEVkXTxcAUnj4qVpMaTij83Gm4c7lYwQFue4Z29uxvz6tGlw1W9N8uPqBTz Eg01f2N7rZ5kHRF4iHE6ExHOeHd9GMwTnfgt+JPWQwChfqva8YIl8fNEd/6Ds1l0 06A1rhf+Ylfm1Kn8YCFvtyEynuhZdlDYaYhJg5eZly0OnXlTzhe+Khh08pRQ4MTz mROKlKBbH6hLhE4vzsV7+pdTjbW4gaG8bQ8tVuUEUYEWSfI+yX2eB+6inQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEu8cBit6BVrGlkTGiMMGC1rGNQoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RhZWY0ODRkLTExYWEtNGJjMy04OWFlLTUwNzQyNTkzYjM0Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYUgwDQYJKoZIhvcNAQELBQADggEBAA7+Y3+IfHhusi5HtTs/ ki3rdifJlE+CXFyxtzzsQsHCkoNY5vISvQ85lkX2Kx2wWK1a9DwFOIcIMXbSfx2w GIAInBWePUrvBve2fq9t826cW16pI6JEfnUaVLAkifHhrhoM2N7bOg4dey3+XQvs mXUesRgwNbIyJr9pVRTIqJbg7Itx/BHzP/+8aKpJg19M9fkBKoDw/RyNhTKnh4Hi bhIchQlAkQI31lB8e0hm1aaZ8Km3b61ivPPor2UsNKqOdJPuH08/xqebMFs6RMJ4 FHbdmMFDnY0bZXqhhCJMFvm/W7NM2C//gk8RpgNLMXVFa0sH4znb2UD+zXMG7Yqu CJo= -----END CERTIFICATE-----Generated at Tue May 12 23:42:27 2026 by rpki-client