$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d49fe9-a284-47e5-8002-41310ce8752e.roa File: f9d49fe9-a284-47e5-8002-41310ce8752e.roa (raw, json) Hash identifier: SwSZn/xRjU1sxAvc2c1gVEcP7RbBk4yRfZLw2hFpfQY= Subject key identifier: 14:C6:25:3E:A4:B7:94:E4:DA:31:4C:F9:E3:D4:8C:21:20:13:B9:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 67D973AB6684565F78DF3220F58A4721CFD6C79F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d49fe9-a284-47e5-8002-41310ce8752e.roa Signing time: Sat 09 May 2026 00:01:28 +0000 ROA not before: Sat 09 May 2026 00:01:28 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d9:73:ab:66:84:56:5f:78:df:32:20:f5:8a:47:21:cf:d6:c7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 9 00:01:28 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=aca42697623a71fddb91dc74038cedea799ae3eb9dd41191077ccdeadf3957a1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:77:33:c5:6c:12:75:e2:23:10:54:2f:c0: 95:be:d8:0a:e4:d9:94:d1:5c:4c:d4:7f:8b:6d:9f: e2:cd:fe:6d:43:54:bf:32:0a:81:c2:c1:97:92:ad: 25:ea:74:e1:3c:bd:7c:43:5c:a2:82:73:f4:d5:20: 11:15:ac:7d:cf:a8:35:a7:24:bb:50:ab:21:1b:77: 2c:3b:f8:6c:41:06:77:b8:95:03:dc:5c:4b:fd:3b: e6:e4:4c:ad:bd:ed:ef:08:dd:ad:35:98:f0:ed:87: 4c:b2:50:2c:7c:52:a6:ea:3f:51:4c:e7:fb:a2:c6: 6a:ea:e5:3f:bd:b8:55:66:af:43:c0:b8:cc:7a:e5: 4e:81:b5:df:1d:64:1a:2f:91:42:46:b8:ad:b2:97: 35:cf:45:0d:2b:0a:e2:06:32:ad:bd:6f:40:10:57: 29:d2:c3:10:ce:09:71:64:99:b0:0c:25:3b:93:3b: c7:50:f1:d3:f2:b5:1a:6b:34:75:d0:ef:36:a8:d9: 50:91:17:b0:76:b5:d1:85:cf:3f:8a:89:dd:82:48: 65:bf:8e:e9:c7:ce:68:c6:83:2a:97:88:e8:df:ee: ea:75:ce:98:ad:3e:28:34:9e:40:38:68:89:55:b5: d5:fa:a5:6e:a7:65:ba:2d:e3:f2:87:56:2b:5d:de: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C6:25:3E:A4:B7:94:E4:DA:31:4C:F9:E3:D4:8C:21:20:13:B9:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d49fe9-a284-47e5-8002-41310ce8752e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:1040::/48 Signature Algorithm: sha256WithRSAEncryption 30:5f:f4:02:1c:fa:a0:6f:f1:8f:f7:fc:10:99:14:b2:86:3c: 59:98:82:2c:5a:06:0d:61:84:34:79:c6:3f:e4:1e:b6:ad:bb: b7:9d:39:be:ed:d6:4e:ad:e2:cd:32:ef:27:35:e2:c5:a1:4d: b3:f7:c5:d4:a2:42:58:63:72:b3:b1:4c:80:48:ab:80:37:9e: 05:19:6c:47:34:a3:1d:da:1e:c9:ad:e2:62:32:15:bf:ba:f3: ae:91:08:f9:a7:27:f9:e5:97:32:d2:2c:1f:e5:97:d2:5c:fd: b2:34:9b:58:8e:84:da:13:80:5d:0f:02:98:00:e8:62:5d:4b: 11:c8:0b:2e:1f:67:57:03:04:00:0b:14:54:24:bc:a7:7e:b3: f6:b6:e8:77:fb:8d:5c:3b:ec:f9:b2:7f:ce:93:1e:23:15:e7: 72:d9:3c:6d:5f:93:28:76:5d:29:76:7a:47:8d:e9:6b:0b:47: 39:26:6f:4c:06:54:18:92:40:74:d0:21:d3:75:68:a3:9f:90: 54:43:d4:2b:b5:c5:0e:5c:2b:78:c2:ba:43:1e:b2:37:34:a0: 8b:d6:4b:6c:d5:de:ee:54:7c:20:de:4f:db:ba:3e:8e:ff:9c: 31:49:f8:a1:fb:29:0b:2c:45:27:c7:b8:9d:a8:a9:25:07:39: 33:a0:8e:fb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZ9lzq2aEVl943zIg9YpHIc/Wx58wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwOTAwMDEyOFoX DTI2MDgwNzIzNTk1OVowejFJMEcGA1UEBRNAYWNhNDI2OTc2MjNhNzFmZGRiOTFk Yzc0MDM4Y2VkZWE3OTlhZTNlYjlkZDQxMTkxMDc3Y2NkZWFkZjM5NTdhMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYd3M8VsEnXiIxBUL8CVvtgK5NmU 0VxM1H+LbZ/izf5tQ1S/MgqBwsGXkq0l6nThPL18Q1yignP01SARFax9z6g1pyS7 UKshG3csO/hsQQZ3uJUD3FxL/Tvm5Eytve3vCN2tNZjw7YdMslAsfFKm6j9RTOf7 osZq6uU/vbhVZq9DwLjMeuVOgbXfHWQaL5FCRritspc1z0UNKwriBjKtvW9AEFcp 0sMQzglxZJmwDCU7kzvHUPHT8rUaazR10O82qNlQkRewdrXRhc8/iondgkhlv47p x85oxoMql4jo3+7qdc6YrT4oNJ5AOGiJVbXV+qVup2W6LePyh1YrXd6HLwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBTGJT6kt5Tk2jFM+ePUjCEgE7lYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y5ZDQ5ZmU5LWEyODQtNDdlNS04MDAyLTQxMzEwY2U4NzUyZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaABBAMA0GCSqGSIb3DQEBCwUAA4IBAQAwX/QCHPqgb/GP9/wQ mRSyhjxZmIIsWgYNYYQ0ecY/5B62rbu3nTm+7dZOreLNMu8nNeLFoU2z98XUokJY Y3KzsUyASKuAN54FGWxHNKMd2h7JreJiMhW/uvOukQj5pyf55Zcy0iwf5ZfSXP2y NJtYjoTaE4BdDwKYAOhiXUsRyAsuH2dXAwQACxRUJLynfrP2tuh3+41cO+z5sn/O kx4jFedy2TxtX5Modl0pdnpHjelrC0c5Jm9MBlQYkkB00CHTdWijn5BUQ9QrtcUO XCt4wrpDHrI3NKCL1kts1d7uVHwg3k/buj6O/5wxSfih+ykLLEUnx7idqKklBzkz oI77 -----END CERTIFICATE-----Generated at Tue May 12 23:41:33 2026 by rpki-client