$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7ec8552-7ddb-4978-bb8c-fc97d0625b4c.roa File: f7ec8552-7ddb-4978-bb8c-fc97d0625b4c.roa (raw, json) Hash identifier: nzuy1pXB8baPYzS3UZDJyVQT+SnKv3RgM6WJrk8/iNk= Subject key identifier: 28:84:DB:7C:13:EC:6E:00:76:26:12:2B:86:7C:0F:ED:4D:F2:FD:3B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7E397DE76DAB22BF1BC5A9017C24D13B66330E06 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7ec8552-7ddb-4978-bb8c-fc97d0625b4c.roa Signing time: Mon 11 May 2026 00:01:17 +0000 ROA not before: Mon 11 May 2026 00:01:17 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:39:7d:e7:6d:ab:22:bf:1b:c5:a9:01:7c:24:d1:3b:66:33:0e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:01:17 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=d61b962f545a44017ac4a1047acde187cf28939b54f1bf616477f90200b9bc1e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2f:93:79:53:41:a3:5e:95:50:23:40:0d:98: 4d:d0:08:cf:e9:69:eb:57:ff:96:82:13:2d:be:52: 6e:77:9c:86:17:20:3c:fb:d3:30:38:c0:5e:fd:dd: 58:e4:59:7d:ad:e8:3a:a2:af:a4:57:59:51:e8:c7: 64:e9:09:f8:0f:61:76:e1:5e:79:86:9b:c3:62:5b: f1:25:d0:c2:7e:90:99:e3:00:0a:15:d0:e2:c8:fa: 52:2c:cf:ea:dc:10:60:86:79:06:bf:52:d6:34:55: 78:51:e0:bd:54:45:95:47:54:5f:65:c4:96:0b:db: cb:1a:64:4e:11:23:10:b2:26:5e:bd:46:9a:b7:ff: dd:d7:d7:aa:bb:a1:14:aa:c7:14:fe:e7:9b:1e:d8: db:d8:86:ee:0e:6d:fe:66:88:73:36:30:1e:bc:8c: cf:08:77:f3:db:fa:08:fb:76:60:6a:11:fe:f1:d9: 33:8b:ad:3a:cc:3e:cc:cb:70:00:92:d0:4b:69:b1: 2a:f5:39:82:cc:76:34:28:18:d2:8d:2c:0a:19:84: d3:04:9f:84:1f:1f:8e:75:25:fc:b9:c1:f3:ce:7a: b4:9a:4b:95:56:ff:64:86:24:cb:76:6b:6c:49:bf: a1:48:e7:82:d4:dc:08:db:f5:9e:93:fc:ec:1c:03: 2e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:84:DB:7C:13:EC:6E:00:76:26:12:2B:86:7C:0F:ED:4D:F2:FD:3B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7ec8552-7ddb-4978-bb8c-fc97d0625b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:4020::/48 Signature Algorithm: sha256WithRSAEncryption 36:22:c9:b8:80:97:31:2b:d2:3c:fc:1a:16:d1:79:2c:bc:46: db:d9:2e:9e:34:ef:f8:b7:ff:3b:68:98:cb:b1:1a:91:31:24: 1b:78:b6:96:bc:42:4f:f4:88:30:44:a2:ee:51:c9:8f:53:72: 5a:0d:af:18:62:1a:46:7d:e5:84:a1:86:9c:82:20:df:54:f9: ea:e4:ff:8f:e1:31:9b:8d:5a:c9:69:f9:d4:ba:3e:27:7c:72: 7e:52:6b:f3:88:8e:ab:65:8b:b5:8a:c9:58:6d:5b:bf:f3:43: 73:e9:f2:03:cd:b4:7f:80:03:5d:77:da:9c:28:57:0c:f6:81: 75:09:f4:ab:04:17:13:f2:25:d6:0b:d4:7b:36:27:30:29:c3: b9:81:38:14:75:60:7b:1a:be:44:17:db:3a:af:0b:79:11:0a: 4a:ae:e7:e7:40:89:05:5a:66:c5:d1:03:cb:34:84:54:8a:c5: c4:b1:f6:87:e5:c5:84:2c:d5:23:82:4e:7c:05:d7:75:e2:5d: 44:6c:04:38:84:ff:2a:3f:b7:eb:c0:ea:a8:4d:08:94:f8:b3: 7f:a5:ee:ee:be:df:43:4d:04:b9:e0:87:48:dd:14:38:2e:e1: ce:3c:79:29:71:7c:34:84:72:28:1b:72:1f:a0:96:c9:1e:d1: 93:d5:67:e7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfjl9522rIr8bxakBfCTRO2YzDgYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMDExN1oX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAZDYxYjk2MmY1NDVhNDQwMTdhYzRh MTA0N2FjZGUxODdjZjI4OTM5YjU0ZjFiZjYxNjQ3N2Y5MDIwMGI5YmMxZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi+TeVNBo16VUCNADZhN0AjP6Wnr V/+WghMtvlJud5yGFyA8+9MwOMBe/d1Y5Fl9reg6oq+kV1lR6Mdk6Qn4D2F24V55 hpvDYlvxJdDCfpCZ4wAKFdDiyPpSLM/q3BBghnkGv1LWNFV4UeC9VEWVR1RfZcSW C9vLGmROESMQsiZevUaat//d19equ6EUqscU/uebHtjb2IbuDm3+ZohzNjAevIzP CHfz2/oI+3ZgahH+8dkzi606zD7My3AAktBLabEq9TmCzHY0KBjSjSwKGYTTBJ+E Hx+OdSX8ucHzznq0mkuVVv9khiTLdmtsSb+hSOeC1NwI2/Wek/zsHAMuPQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCiE23wT7G4AdiYSK4Z8D+1N8v07MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y3ZWM4NTUyLTdkZGItNDk3OC1iYjhjLWZjOTdkMDYyNWI0Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOEAgMA0GCSqGSIb3DQEBCwUAA4IBAQA2Ism4gJcxK9I8/BoW 0XksvEbb2S6eNO/4t/87aJjLsRqRMSQbeLaWvEJP9IgwRKLuUcmPU3JaDa8YYhpG feWEoYacgiDfVPnq5P+P4TGbjVrJafnUuj4nfHJ+UmvziI6rZYu1islYbVu/80Nz 6fIDzbR/gANdd9qcKFcM9oF1CfSrBBcT8iXWC9R7NicwKcO5gTgUdWB7Gr5EF9s6 rwt5EQpKrufnQIkFWmbF0QPLNIRUisXEsfaH5cWELNUjgk58Bdd14l1EbAQ4hP8q P7frwOqoTQiU+LN/pe7uvt9DTQS54IdI3RQ4LuHOPHkpcXw0hHIoG3IfoJbJHtGT 1Wfn -----END CERTIFICATE-----Generated at Wed May 13 01:13:17 2026 by rpki-client