$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7af6cdd-e07a-45c3-a036-06562421e95f.roa File: f7af6cdd-e07a-45c3-a036-06562421e95f.roa (raw, json) Hash identifier: fxK+nFTRGPAvEdznoQHlGLWA8fghMV3Ke5lfumGo0Rk= Subject key identifier: 0F:61:C9:97:70:B8:CC:56:D9:91:0A:39:1E:1A:C7:0B:C3:1A:6F:99 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 04D6EA257569A58045013874A019B8448483983C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7af6cdd-e07a-45c3-a036-06562421e95f.roa Signing time: Tue 12 May 2026 00:10:44 +0000 ROA not before: Tue 12 May 2026 00:10:44 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:c080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d6:ea:25:75:69:a5:80:45:01:38:74:a0:19:b8:44:84:83:98:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:10:44 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=572d68ecb5f2ef64a41e9e6bc74a5e982201e761326be5e1c868d2f8ebcc6313, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:a4:af:79:7b:9b:8d:08:86:06:6b:2b:6d: a5:07:a1:d7:ac:68:ca:c5:af:81:66:1a:7a:47:1b: 87:6b:6a:87:bd:31:86:17:87:d6:5c:b4:c3:84:2f: 13:6c:7f:3a:84:6d:c0:90:2a:77:b9:ec:96:14:51: 41:9e:c2:37:ee:17:74:ba:f5:5a:c4:ea:7e:a4:a7: 55:ab:a4:92:74:63:fb:57:99:35:d8:d4:95:51:96: b2:8d:36:51:e5:04:39:cd:34:75:9b:01:8e:22:8d: d1:cc:b0:6d:5c:ed:1f:a7:38:3b:ba:4a:ce:4a:fc: 80:31:df:f2:fa:b3:0e:3f:3f:23:df:c0:2e:b2:be: b0:84:c0:0b:92:94:40:2c:4e:40:08:0a:60:ef:e1: 1b:0e:9b:ff:d4:25:89:25:b1:07:95:0c:b7:8c:06: 60:48:c5:a8:5e:4f:cb:92:ce:83:cb:c5:ff:8c:98: af:90:8f:21:e5:21:52:cd:e1:4b:ab:ed:cd:7f:f4: 47:0b:bb:e8:7b:f4:37:6e:5a:bc:1b:8f:09:f0:89: 07:60:ca:69:69:64:8b:03:4d:4a:31:19:40:fe:78: b1:30:3b:28:83:76:49:a0:ef:9c:8c:de:06:3f:20: 80:99:fe:33:32:21:2b:35:46:55:10:02:fc:9c:db: 12:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:61:C9:97:70:B8:CC:56:D9:91:0A:39:1E:1A:C7:0B:C3:1A:6F:99 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7af6cdd-e07a-45c3-a036-06562421e95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:c080::/48 Signature Algorithm: sha256WithRSAEncryption 32:a9:aa:b4:9f:ab:bb:71:94:ee:8b:1a:06:09:98:26:6b:0b: 94:d6:39:38:cc:d5:8d:e4:42:55:99:38:01:7d:7e:78:27:de: f7:1a:c5:b3:6a:b3:71:37:b2:08:7a:a5:e4:81:9d:7a:30:03: 10:e0:2a:24:16:cf:63:25:51:86:a6:e9:42:ba:34:05:e0:2d: dc:9f:bc:6f:25:23:48:22:bb:73:2f:05:2d:ae:05:4e:70:dd: d4:79:8a:a4:eb:b7:40:42:16:bf:ad:76:e2:c1:09:23:11:9e: 82:ee:0f:25:30:b6:f0:4c:fd:52:74:6c:b1:52:8e:28:3e:7f: 44:ce:7c:c3:c2:7f:ee:c2:42:e6:70:fe:0f:e6:12:43:e8:29: 5d:c9:e6:cf:7c:1e:ff:27:6a:47:3b:0a:b8:5f:e3:8a:2b:21: 2d:6d:3d:ce:7e:c5:6d:da:c7:0a:19:fd:67:f9:4c:df:fd:cc: 12:2d:eb:18:70:d3:b2:ce:21:91:f7:3d:f6:06:da:96:66:c4: b0:1d:0e:6b:35:fa:b8:60:70:f2:b7:a4:70:76:0e:61:0c:95: 21:40:b6:98:c3:c8:5f:49:e6:05:71:8d:95:2d:4e:6a:83:46: dc:8d:6b:d2:71:5f:fc:8d:d9:86:d7:86:6a:ed:7e:85:65:ec: d6:bf:76:1f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBNbqJXVppYBFATh0oBm4RISDmDwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMTA0NFoX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNANTcyZDY4ZWNiNWYyZWY2NGE0MWU5 ZTZiYzc0YTVlOTgyMjAxZTc2MTMyNmJlNWUxYzg2OGQyZjhlYmNjNjMxMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb+kr3l7m40IhgZrK22lB6HXrGjK xa+BZhp6RxuHa2qHvTGGF4fWXLTDhC8TbH86hG3AkCp3ueyWFFFBnsI37hd0uvVa xOp+pKdVq6SSdGP7V5k12NSVUZayjTZR5QQ5zTR1mwGOIo3RzLBtXO0fpzg7ukrO SvyAMd/y+rMOPz8j38Ausr6whMALkpRALE5ACApg7+EbDpv/1CWJJbEHlQy3jAZg SMWoXk/Lks6Dy8X/jJivkI8h5SFSzeFLq+3Nf/RHC7voe/Q3blq8G48J8IkHYMpp aWSLA01KMRlA/nixMDsog3ZJoO+cjN4GPyCAmf4zMiErNUZVEAL8nNsSFwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFA9hyZdwuMxW2ZEKOR4axwvDGm+ZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y3YWY2Y2RkLWUwN2EtNDVjMy1hMDM2LTA2NTYyNDIxZTk1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOMCAMA0GCSqGSIb3DQEBCwUAA4IBAQAyqaq0n6u7cZTuixoG CZgmawuU1jk4zNWN5EJVmTgBfX54J973GsWzarNxN7IIeqXkgZ16MAMQ4CokFs9j JVGGpulCujQF4C3cn7xvJSNIIrtzLwUtrgVOcN3UeYqk67dAQha/rXbiwQkjEZ6C 7g8lMLbwTP1SdGyxUo4oPn9EznzDwn/uwkLmcP4P5hJD6CldyebPfB7/J2pHOwq4 X+OKKyEtbT3OfsVt2scKGf1n+Uzf/cwSLesYcNOyziGR9z32BtqWZsSwHQ5rNfq4 YHDyt6Rwdg5hDJUhQLaYw8hfSeYFcY2VLU5qg0bcjWvScV/8jdmG14Zq7X6FZezW v3Yf -----END CERTIFICATE-----Generated at Tue May 12 23:27:04 2026 by rpki-client