$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00368081-8a8a-489b-8bc3-0a49667f9757.roa File: 00368081-8a8a-489b-8bc3-0a49667f9757.roa (raw, json) Hash identifier: XAf+M5vomh0OuuqqVjaBXUK++BUXlqwp7u+zxxEQl+U= Subject key identifier: E0:87:6F:15:36:76:8E:F1:12:66:AB:65:35:ED:AB:AF:D8:8B:F6:B6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5FBB931115DDC3FCBC8B23AB7B3425C0A2DB21A1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00368081-8a8a-489b-8bc3-0a49667f9757.roa Signing time: Mon 22 Jun 2026 00:01:02 +0000 ROA not before: Mon 22 Jun 2026 00:01:02 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bb:93:11:15:dd:c3:fc:bc:8b:23:ab:7b:34:25:c0:a2:db:21:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:01:02 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=79a198dc2ea27c96eb81b260172fc1dfe148b9b54e722d9aaa89a6e05b17d5de, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:1c:e3:11:58:da:8c:1b:98:ec:5c:fd:35: 83:62:9e:0c:c0:24:fb:f8:40:0c:b8:45:3d:36:03: a6:2a:2e:62:ef:3d:f7:e3:ec:e8:9e:4e:2d:18:c3: 46:09:f3:cb:76:bc:06:b2:24:dd:73:9f:00:c4:2e: 3c:b9:57:67:fb:aa:89:08:e9:18:26:cc:82:3d:b8: 6f:60:15:4d:42:89:dd:9d:25:5e:1a:7d:c3:08:b5: 0a:3c:d5:37:d7:0c:38:96:6c:b4:08:8d:01:b4:67: e4:6c:7a:67:54:3d:ed:5a:b6:51:79:94:36:80:89: 88:8e:e9:7d:c1:7f:44:79:0b:84:61:7f:99:84:f2: ab:67:0d:dc:95:0d:82:9e:04:6d:3f:61:a9:4c:9c: a7:5a:42:94:c3:ff:44:ae:60:99:75:c1:5e:83:49: ed:7e:5a:3d:42:56:85:3b:a4:91:a2:9f:ac:3d:98: 71:05:db:4a:96:7f:c3:bb:97:37:89:45:17:97:3a: d9:2b:10:29:e2:40:e5:22:6b:68:43:83:8c:f2:c6: dc:4b:28:43:54:ab:7a:33:c5:92:ba:67:18:45:16: 7a:16:2f:22:a0:ee:e6:e2:29:d1:73:63:62:0b:f7: 10:7a:ae:66:3f:09:ca:ea:c4:6e:d6:88:4b:9c:bb: 19:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:87:6F:15:36:76:8E:F1:12:66:AB:65:35:ED:AB:AF:D8:8B:F6:B6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00368081-8a8a-489b-8bc3-0a49667f9757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:800::/40 Signature Algorithm: sha256WithRSAEncryption 0d:f5:f3:a5:13:bd:4c:f6:56:0a:86:19:b8:52:fb:e8:d8:ea: a2:47:2f:22:ba:35:87:55:44:59:3b:ac:83:bb:24:19:29:a9: a3:39:5f:2b:a9:85:33:01:13:6c:99:4d:f4:64:8a:d3:3c:3f: c1:2d:c9:d2:05:40:25:02:ce:41:76:0e:6a:23:cb:81:a4:1f: 8b:af:48:be:f9:48:30:90:e6:b2:64:8d:52:ba:03:46:18:b9: eb:25:ab:ee:91:40:34:7e:7f:e8:3f:fe:f5:7f:63:5c:1a:e8: a6:5e:a9:81:da:bc:57:91:40:64:81:0a:87:50:9d:2c:ca:6f: f8:00:01:f4:3d:75:5c:17:8f:92:da:7b:62:5b:df:a3:1a:f7: 2e:5e:11:50:3d:3e:d6:50:69:3d:1f:ce:ae:8d:02:8c:e3:2a: 5a:67:ce:95:af:94:4b:c3:dc:52:c6:da:69:26:bd:34:f2:d4: a7:73:f7:14:70:cd:79:e3:34:11:e8:10:89:79:5a:3c:59:15: ec:e6:1c:44:bc:80:94:62:bd:f8:5e:35:89:84:98:ef:99:8d: af:0e:31:67:8a:d7:4e:a5:f8:79:ba:93:b3:8b:bf:22:c2:23: 44:01:81:a4:75:93:f0:30:54:25:e0:45:05:c6:ff:f7:86:9f: 5a:be:e4:1e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUX7uTERXdw/y8iyOrezQlwKLbIaEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMDEwMloX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNANzlhMTk4ZGMyZWEyN2M5NmViODFi MjYwMTcyZmMxZGZlMTQ4YjliNTRlNzIyZDlhYWE4OWE2ZTA1YjE3ZDVkZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAussc4xFY2owbmOxc/TWDYp4MwCT7 +EAMuEU9NgOmKi5i7z334+zonk4tGMNGCfPLdrwGsiTdc58AxC48uVdn+6qJCOkY JsyCPbhvYBVNQondnSVeGn3DCLUKPNU31ww4lmy0CI0BtGfkbHpnVD3tWrZReZQ2 gImIjul9wX9EeQuEYX+ZhPKrZw3clQ2CngRtP2GpTJynWkKUw/9ErmCZdcFeg0nt flo9QlaFO6SRop+sPZhxBdtKln/Du5c3iUUXlzrZKxAp4kDlImtoQ4OM8sbcSyhD VKt6M8WSumcYRRZ6Fi8ioO7m4inRc2NiC/cQeq5mPwnK6sRu1ohLnLsZcwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOCHbxU2do7xEmarZTXtq6/Yi/a2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAwMzY4MDgxLThhOGEtNDg5Yi04YmMzLTBhNDk2NjdmOTc1Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6wgwDQYJKoZIhvcNAQELBQADggEBAA3186UTvUz2VgqGGbhS ++jY6qJHLyK6NYdVRFk7rIO7JBkpqaM5XyuphTMBE2yZTfRkitM8P8EtydIFQCUC zkF2Dmojy4GkH4uvSL75SDCQ5rJkjVK6A0YYueslq+6RQDR+f+g//vV/Y1wa6KZe qYHavFeRQGSBCodQnSzKb/gAAfQ9dVwXj5Lae2Jb36Ma9y5eEVA9PtZQaT0fzq6N AozjKlpnzpWvlEvD3FLG2mkmvTTy1Kdz9xRwzXnjNBHoEIl5WjxZFezmHES8gJRi vfheNYmEmO+Zja8OMWeK106l+Hm6k7OLvyLCI0QBgaR1k/AwVCXgRQXG//eGn1q+ 5B4= -----END CERTIFICATE-----Generated at Thu Jul 9 11:05:23 2026 by rpki-client