$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6f14065-ac41-46a1-a2e3-9b0a369a893b.roa File: f6f14065-ac41-46a1-a2e3-9b0a369a893b.roa (raw, json) Hash identifier: TCfYlNYugWDSG36i2a6598PZWybePNC/bzEP3W/zZzE= Subject key identifier: D9:64:89:CD:A0:6A:52:27:C1:89:A2:C9:92:CC:20:AB:95:54:49:C9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1049E9BA58B77B273753A1B0D678E975C97AA82A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6f14065-ac41-46a1-a2e3-9b0a369a893b.roa Signing time: Tue 05 May 2026 00:01:11 +0000 ROA not before: Tue 05 May 2026 00:01:11 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:49:e9:ba:58:b7:7b:27:37:53:a1:b0:d6:78:e9:75:c9:7a:a8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 5 00:01:11 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=e28b5716b206ba444a8b7431e46ca3a6f18d167a14517654c63d3145020f49df, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:37:88:0f:cb:f5:8c:a3:d2:46:71:5f:1f: c5:e7:a5:bb:69:5d:b1:eb:54:73:b1:0e:7d:4b:ef: 45:d2:e3:d9:81:75:f6:1f:05:1b:8c:2f:8d:a0:e6: 12:63:2f:77:97:53:38:ef:86:69:6a:9e:14:2b:68: f4:8d:35:d2:88:f2:e8:c9:44:d7:e4:e5:19:35:6f: 2e:c5:c7:86:97:f9:6c:f1:2f:36:e5:cf:df:b0:02: 19:32:41:f3:74:73:a2:73:d7:17:4d:d4:5f:9e:3d: 2b:ee:91:5a:b5:8d:7c:ea:0a:cf:1d:09:8a:66:fa: a1:b7:94:11:12:56:13:6d:27:0e:24:12:12:fe:1e: 91:06:ba:3e:55:d0:a9:a4:37:12:09:a9:d1:67:7b: 26:90:c8:62:02:90:96:48:fa:74:f3:4e:e4:9e:f1: b3:76:1c:6f:00:1a:50:b6:67:20:d3:55:a0:d5:22: 80:f5:19:84:de:1d:18:c3:8c:bc:48:a0:18:a8:16: c6:ac:d5:13:6d:81:51:4b:c9:0e:8b:18:68:7e:80: cc:ee:96:2f:d0:05:59:5b:2c:24:0a:60:44:ef:17: 4a:dd:1b:d5:43:e2:1e:c3:35:96:17:8d:ac:1a:1f: ff:73:56:3e:b7:ca:61:cf:d7:3a:9c:93:4e:2d:b7: 08:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:64:89:CD:A0:6A:52:27:C1:89:A2:C9:92:CC:20:AB:95:54:49:C9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6f14065-ac41-46a1-a2e3-9b0a369a893b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:b000::/40 Signature Algorithm: sha256WithRSAEncryption 68:e7:18:d9:4a:56:be:8f:7e:80:5e:ba:ba:18:49:f1:1a:36: 97:77:02:bc:77:48:bc:ea:cf:70:4c:44:47:b4:18:4a:69:17: d5:56:2b:f9:ef:d0:fe:84:d3:79:cf:ba:1c:06:13:e0:b9:87: f2:0c:66:c0:b2:c7:e3:f4:de:fe:b2:f7:90:26:34:96:08:83: 73:fa:bc:3f:a9:88:b7:af:19:c3:81:97:79:7c:b2:22:cd:dd: 4d:e3:0a:a0:21:74:aa:17:d4:f1:1a:e1:8c:68:26:f6:d3:7a: 87:4f:83:73:91:89:34:59:71:4b:b8:e4:18:aa:fc:ba:73:71: b0:d7:82:b9:97:f1:85:49:77:16:12:f8:d4:4a:6e:62:a3:b0: cf:cf:24:64:c1:19:db:7e:23:7b:7b:b6:20:67:67:55:58:d0: 22:0e:83:6e:ce:1f:ee:27:3a:23:16:1d:28:86:a0:f1:d3:03: cd:d3:45:24:4f:96:10:03:62:0d:b0:67:b5:7a:0b:b8:97:20: f3:f0:c9:22:97:dc:c3:f4:b1:a9:cf:5c:0b:9e:12:ae:7a:a4: 4e:e4:54:77:6c:d2:9e:93:52:76:94:62:21:27:7f:fe:44:25: 0d:5a:64:40:b2:06:93:a0:65:5b:e4:64:d9:8c:eb:b0:0b:3b: d3:45:2f:3b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEEnpuli3eyc3U6Gw1njpdcl6qCowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwNTAwMDExMVoX DTI2MDgwMzIzNTk1OVowejFJMEcGA1UEBRNAZTI4YjU3MTZiMjA2YmE0NDRhOGI3 NDMxZTQ2Y2EzYTZmMThkMTY3YTE0NTE3NjU0YzYzZDMxNDUwMjBmNDlkZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCs3iA/L9Yyj0kZxXx/F56W7aV2x 61RzsQ59S+9F0uPZgXX2HwUbjC+NoOYSYy93l1M474Zpap4UK2j0jTXSiPLoyUTX 5OUZNW8uxceGl/ls8S825c/fsAIZMkHzdHOic9cXTdRfnj0r7pFatY186grPHQmK Zvqht5QRElYTbScOJBIS/h6RBro+VdCppDcSCanRZ3smkMhiApCWSPp0807knvGz dhxvABpQtmcg01Wg1SKA9RmE3h0Yw4y8SKAYqBbGrNUTbYFRS8kOixhofoDM7pYv 0AVZWywkCmBE7xdK3RvVQ+IewzWWF42sGh//c1Y+t8phz9c6nJNOLbcIFwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNlkic2galInwYmiyZLMIKuVVEnJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y2ZjE0MDY1LWFjNDEtNDZhMS1hMmUzLTliMGEzNjlhODkzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9LAwDQYJKoZIhvcNAQELBQADggEBAGjnGNlKVr6PfoBeuroY SfEaNpd3Arx3SLzqz3BMREe0GEppF9VWK/nv0P6E03nPuhwGE+C5h/IMZsCyx+P0 3v6y95AmNJYIg3P6vD+piLevGcOBl3l8siLN3U3jCqAhdKoX1PEa4YxoJvbTeodP g3ORiTRZcUu45Biq/LpzcbDXgrmX8YVJdxYS+NRKbmKjsM/PJGTBGdt+I3t7tiBn Z1VY0CIOg27OH+4nOiMWHSiGoPHTA83TRSRPlhADYg2wZ7V6C7iXIPPwySKX3MP0 sanPXAueEq56pE7kVHds0p6TUnaUYiEnf/5EJQ1aZECyBpOgZVvkZNmM67ALO9NF Lzs= -----END CERTIFICATE-----Generated at Tue May 12 23:05:25 2026 by rpki-client