$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9bdc82f-e634-4725-a517-9af23893bdd0.roa File: e9bdc82f-e634-4725-a517-9af23893bdd0.roa (raw, json) Hash identifier: lPmgY86qurEHdQ01LGgb3P+FiB3n9F7AFJ+NqM4xZTM= Subject key identifier: 19:32:5F:76:E9:10:2B:58:6C:0C:56:6D:6D:2C:8D:B4:67:13:97:18 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 28F969AC97DDBEC92D947A3C99315FCDE21C27AD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9bdc82f-e634-4725-a517-9af23893bdd0.roa Signing time: Tue 12 May 2026 00:00:54 +0000 ROA not before: Tue 12 May 2026 00:00:54 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f9:69:ac:97:dd:be:c9:2d:94:7a:3c:99:31:5f:cd:e2:1c:27:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:00:54 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=cf348c17263c4ffee67b695de2f814cf3b717315530c61d0c995029a9fa14cd7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:95:6a:2a:40:c4:99:4d:20:ff:7d:d0:df:93: ea:0e:21:eb:58:c9:ef:23:d1:c5:46:ea:6b:97:7b: a2:96:35:2c:df:ca:1c:af:5c:4b:0b:38:95:18:72: bd:11:95:44:9b:b4:83:c9:ae:5a:dd:a2:d1:41:e8: 0e:17:90:3f:a5:9d:eb:b8:0e:b4:51:1a:c8:76:b0: e9:25:ea:54:a6:9f:4b:c0:fa:ff:87:2a:e9:4f:10: 22:0c:26:9a:0d:36:7e:f8:75:cd:67:f9:b6:c4:81: 4d:75:1b:03:f0:ee:b5:da:11:ad:3d:ae:98:55:df: 47:4f:17:f7:cc:2a:42:77:c4:ae:9a:55:7b:54:81: 2a:29:cf:a7:b8:f6:6f:82:7f:fa:eb:c0:55:1d:d4: cb:04:c8:2b:d9:e7:d7:b4:9e:e5:5f:a6:a9:7f:50: 6e:24:fa:b7:34:a9:1d:0d:c8:ad:03:d1:8e:68:32: 8f:68:cb:01:9f:86:a0:cb:bb:67:06:78:16:4d:8e: 24:1a:26:25:09:d7:e9:ec:a3:cd:51:5e:de:13:4b: 15:c9:d4:6e:47:6d:c5:57:c6:17:a9:8e:55:87:65: 66:13:9b:1a:09:5f:61:cb:38:9e:48:cd:b7:49:24: 1f:a8:a9:56:39:6b:83:87:17:5c:5b:6f:0b:e8:36: 6e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:32:5F:76:E9:10:2B:58:6C:0C:56:6D:6D:2C:8D:B4:67:13:97:18 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9bdc82f-e634-4725-a517-9af23893bdd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:2000::/40 Signature Algorithm: sha256WithRSAEncryption 76:40:0a:86:8d:bf:7b:da:84:35:cf:28:6b:9d:a7:d0:20:9e: 71:a3:da:bf:02:8b:06:a8:ac:c7:eb:43:7c:ae:34:92:68:87: 15:9c:94:6e:6c:d6:26:b5:41:af:2c:09:0c:09:9b:18:9b:a4: 39:38:32:5c:9d:e2:64:b9:9d:bc:8c:e2:bc:f6:de:84:b7:e7: fb:9e:a8:15:ae:45:8a:b2:d3:1e:35:75:de:fa:23:b7:60:9c: 3a:b2:28:19:1e:77:9d:23:85:1c:7b:c5:1b:c1:cf:74:c3:c4: d1:69:88:77:db:54:f7:ba:ac:6a:89:d9:ae:8b:95:1d:7c:81: 91:bf:94:e2:2d:60:96:2f:67:5e:db:25:8b:99:a5:87:97:8b: e4:08:a9:45:61:89:a4:1a:10:95:9f:ca:49:d5:8d:7a:c3:8a: f7:4e:43:be:bf:30:e9:23:19:8a:a0:98:e1:71:ab:38:b5:42: dd:17:c0:b9:f5:ee:40:d3:16:5c:b9:c4:8b:53:e0:87:59:7a: 54:10:c0:59:a1:0b:ce:30:70:23:27:68:a4:6a:1f:e2:e4:19: c6:bb:4e:b8:3f:c3:06:10:d6:60:c9:23:16:51:53:4e:95:a7: 43:4f:fb:e1:f2:1e:f5:3b:db:d5:64:25:75:2f:8f:35:80:0a: be:be:9b:8a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKPlprJfdvsktlHo8mTFfzeIcJ60wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMDA1NFoX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAY2YzNDhjMTcyNjNjNGZmZWU2N2I2 OTVkZTJmODE0Y2YzYjcxNzMxNTUzMGM2MWQwYzk5NTAyOWE5ZmExNGNkNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZVqKkDEmU0g/33Q35PqDiHrWMnv I9HFRuprl3uiljUs38ocr1xLCziVGHK9EZVEm7SDya5a3aLRQegOF5A/pZ3ruA60 URrIdrDpJepUpp9LwPr/hyrpTxAiDCaaDTZ++HXNZ/m2xIFNdRsD8O612hGtPa6Y Vd9HTxf3zCpCd8SumlV7VIEqKc+nuPZvgn/668BVHdTLBMgr2efXtJ7lX6apf1Bu JPq3NKkdDcitA9GOaDKPaMsBn4agy7tnBngWTY4kGiYlCdfp7KPNUV7eE0sVydRu R23FV8YXqY5Vh2VmE5saCV9hyzieSM23SSQfqKlWOWuDhxdcW28L6DZupwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBkyX3bpECtYbAxWbW0sjbRnE5cYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U5YmRjODJmLWU2MzQtNDcyNS1hNTE3LTlhZjIzODkzYmRkMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8iAwDQYJKoZIhvcNAQELBQADggEBAHZACoaNv3vahDXPKGud p9AgnnGj2r8CiwaorMfrQ3yuNJJohxWclG5s1ia1Qa8sCQwJmxibpDk4Mlyd4mS5 nbyM4rz23oS35/ueqBWuRYqy0x41dd76I7dgnDqyKBked50jhRx7xRvBz3TDxNFp iHfbVPe6rGqJ2a6LlR18gZG/lOItYJYvZ17bJYuZpYeXi+QIqUVhiaQaEJWfyknV jXrDivdOQ76/MOkjGYqgmOFxqzi1Qt0XwLn17kDTFly5xItT4IdZelQQwFmhC84w cCMnaKRqH+LkGca7Trg/wwYQ1mDJIxZRU06Vp0NP++HyHvU729VkJXUvjzWACr6+ m4o= -----END CERTIFICATE-----Generated at Wed May 13 00:10:03 2026 by rpki-client