$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df32b4dc-f216-4f87-832d-d0230fac751f.roa File: df32b4dc-f216-4f87-832d-d0230fac751f.roa (raw, json) Hash identifier: eA+nEKANhGx2aRHu0mOK8w7Higa73juSz989SlkxESY= Subject key identifier: 7E:C7:E4:CE:2B:76:57:6A:74:17:CE:AB:17:1C:96:C2:F2:ED:B5:9E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63AB76589C74DE73728C7ED6220286C32E92E42B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df32b4dc-f216-4f87-832d-d0230fac751f.roa Signing time: Mon 11 May 2026 00:00:12 +0000 ROA not before: Mon 11 May 2026 00:00:12 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ab:76:58:9c:74:de:73:72:8c:7e:d6:22:02:86:c3:2e:92:e4:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:00:12 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=24202789bf5ed4c7a4c75bf83608a6b81067d45259bf29cf8f00835061ca0649, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:f9:ec:70:87:9f:f5:c1:04:5c:ab:f9:6b: 77:7c:f6:55:d0:bc:b6:f8:f8:eb:3b:79:04:36:9a: 67:0e:4e:c9:c7:20:03:4b:7f:16:93:36:0e:88:8e: e9:be:30:1f:d0:7f:f9:ea:e8:f3:8a:14:a7:9f:d5: b7:72:9a:00:c4:9c:03:49:0f:05:26:60:79:86:24: e1:99:49:88:95:68:80:10:f0:7d:1c:ee:da:2a:9d: 3f:27:54:28:ef:92:26:07:26:ce:58:07:5d:c8:b1: da:a4:8e:82:e7:ef:2d:2b:f7:5b:92:a5:5c:7e:91: aa:91:19:79:fb:59:dc:1e:1e:17:9e:ce:d1:8d:4c: 5d:4d:d3:5b:9d:cc:26:b7:3d:76:a2:94:f3:11:26: 56:9d:f7:5f:31:ce:37:dc:7d:58:60:74:d9:e7:41: 8e:76:48:3b:e9:3a:79:c7:4e:68:7b:6f:74:93:75: 8d:c3:c0:ac:6c:27:74:bc:97:15:9b:f1:01:8a:c5: e4:c3:83:04:fb:82:aa:62:92:99:4a:ae:41:df:f5: 13:63:f3:55:d6:5c:08:c7:65:59:16:88:b3:5b:61: 9c:fb:40:bc:96:e6:e4:a7:a2:31:a3:4c:7e:37:bb: 72:32:1a:db:46:f4:8a:e7:b3:60:41:f0:12:9e:97: 60:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C7:E4:CE:2B:76:57:6A:74:17:CE:AB:17:1C:96:C2:F2:ED:B5:9E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df32b4dc-f216-4f87-832d-d0230fac751f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:9000::/40 Signature Algorithm: sha256WithRSAEncryption 49:35:23:54:79:51:e5:30:ad:21:0c:27:06:e9:f9:81:87:41: ba:08:7e:9b:7d:73:95:c8:16:6d:6a:14:36:98:e1:1c:31:6e: ca:60:e3:2b:4a:a7:fb:ed:6e:d5:f1:dc:02:52:0d:b5:28:9c: 73:f9:ba:40:da:32:eb:63:c9:9e:2f:34:73:c7:1e:c3:88:dd: 74:75:2b:9e:1c:4a:b4:88:4f:9c:d6:3a:1f:a2:fd:20:41:ce: 63:30:6b:81:84:f1:8c:fd:26:40:61:f3:0e:79:75:84:28:95: d1:43:0e:51:d4:90:df:0b:82:73:5a:e8:2f:a0:a8:ea:a4:8e: 69:17:0a:26:63:a9:bc:95:3f:ab:57:50:fd:c0:e8:cd:50:a4: 31:90:d7:c8:29:0e:5c:98:01:9a:15:62:f5:9f:fd:8b:37:a3: f7:2f:6a:f1:5f:40:39:57:55:64:99:8f:d0:8f:cf:61:c4:6a: f0:1a:c9:20:a4:26:97:3f:9c:da:5c:49:bc:cf:d0:5c:90:13: 86:6b:03:01:cb:53:03:df:eb:c3:6f:b9:9a:30:5a:39:f4:cf: d3:4b:97:12:d9:46:44:80:98:68:8d:70:aa:c9:d2:f4:ad:ac: 36:62:63:62:ad:6f:81:2a:ca:2a:ef:ae:91:8c:f5:76:b0:e3: 0c:e9:e5:ec -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUY6t2WJx03nNyjH7WIgKGwy6S5CswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMDAxMloX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAMjQyMDI3ODliZjVlZDRjN2E0Yzc1 YmY4MzYwOGE2YjgxMDY3ZDQ1MjU5YmYyOWNmOGYwMDgzNTA2MWNhMDY0OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj757HCHn/XBBFyr+Wt3fPZV0Ly2 +PjrO3kENppnDk7JxyADS38WkzYOiI7pvjAf0H/56ujzihSnn9W3cpoAxJwDSQ8F JmB5hiThmUmIlWiAEPB9HO7aKp0/J1Qo75ImBybOWAddyLHapI6C5+8tK/dbkqVc fpGqkRl5+1ncHh4Xns7RjUxdTdNbncwmtz12opTzESZWnfdfMc433H1YYHTZ50GO dkg76Tp5x05oe290k3WNw8CsbCd0vJcVm/EBisXkw4ME+4KqYpKZSq5B3/UTY/NV 1lwIx2VZFoizW2Gc+0C8lubkp6Ixo0x+N7tyMhrbRvSK57NgQfASnpdgfwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH7H5M4rdldqdBfOqxcclsLy7bWeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmMzJiNGRjLWYyMTYtNGY4Ny04MzJkLWQwMjMwZmFjNzUxZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8pAwDQYJKoZIhvcNAQELBQADggEBAEk1I1R5UeUwrSEMJwbp +YGHQboIfpt9c5XIFm1qFDaY4Rwxbspg4ytKp/vtbtXx3AJSDbUonHP5ukDaMutj yZ4vNHPHHsOI3XR1K54cSrSIT5zWOh+i/SBBzmMwa4GE8Yz9JkBh8w55dYQoldFD DlHUkN8LgnNa6C+gqOqkjmkXCiZjqbyVP6tXUP3A6M1QpDGQ18gpDlyYAZoVYvWf /Ys3o/cvavFfQDlXVWSZj9CPz2HEavAaySCkJpc/nNpcSbzP0FyQE4ZrAwHLUwPf 68NvuZowWjn0z9NLlxLZRkSAmGiNcKrJ0vStrDZiY2Ktb4EqyirvrpGM9Xaw4wzp 5ew= -----END CERTIFICATE-----Generated at Wed May 13 00:43:19 2026 by rpki-client