$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b0691dc-b282-4ace-bad7-77b450e088e9.roa File: 2b0691dc-b282-4ace-bad7-77b450e088e9.roa (raw, json) Hash identifier: 9yjRxezMUL7pdNtDHzqNksPxIbfCeDZD9W6tUuBQlKk= Subject key identifier: BF:52:59:00:6A:A6:2D:01:F5:26:06:17:FB:DB:FF:A4:24:FD:39:5C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 59F196DE226F6ECE2DBF38FC211B170CD493740A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b0691dc-b282-4ace-bad7-77b450e088e9.roa Signing time: Sat 02 May 2026 00:00:43 +0000 ROA not before: Sat 02 May 2026 00:00:43 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 00:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f1:96:de:22:6f:6e:ce:2d:bf:38:fc:21:1b:17:0c:d4:93:74:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:00:43 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=cfa68a73df169df4836a5faa7f1edf57af1b72ce914b8015ce7df1f79037e34c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:88:3d:e0:06:6b:71:e9:71:d3:28:47:ed:7a: 34:c6:b8:67:84:a5:fa:c6:50:37:8a:97:43:08:07: ab:a7:0b:53:3e:82:75:e6:1d:14:c9:c6:36:fc:a9: e6:6f:c8:6f:48:e5:09:79:08:5d:e5:cb:a8:b2:70: 54:be:70:ce:5c:76:d9:f1:b5:45:59:88:fb:22:3c: 32:6e:ca:76:54:d4:63:1b:6e:d1:34:11:ac:36:70: 85:8c:eb:86:36:b3:f7:0f:44:48:e5:82:7f:40:b7: d0:c6:f1:99:d0:3b:7c:d7:5e:60:73:2f:59:94:35: 94:49:57:93:27:c3:b2:60:5b:e7:34:ae:7d:cc:e7: 37:c3:cf:cf:6e:83:3e:1c:19:74:21:60:4d:73:d7: 85:c8:aa:95:d4:76:d9:50:12:c9:6d:2b:a9:d7:32: 28:ed:12:23:02:e1:e1:cc:03:49:f0:20:b4:62:8d: 74:53:eb:69:3b:fb:d5:ef:fa:8d:ec:8c:6c:31:b4: 3e:03:82:83:58:43:22:fe:92:b0:0b:f0:a1:1e:9d: 41:1f:6d:b3:b3:9a:b8:c2:a6:0e:48:29:b2:e2:cd: a4:58:35:e3:86:4e:88:ae:9e:00:4b:33:57:f7:34: 90:70:98:82:29:21:d6:51:34:35:33:43:c7:a0:63: 95:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:52:59:00:6A:A6:2D:01:F5:26:06:17:FB:DB:FF:A4:24:FD:39:5C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b0691dc-b282-4ace-bad7-77b450e088e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:70c0::/48 Signature Algorithm: sha256WithRSAEncryption 9b:3f:b6:42:62:76:9f:21:21:2e:83:e3:5a:bd:6a:eb:99:af: e5:e0:5b:21:72:c1:20:ff:3c:1f:99:e3:ee:e1:b0:8e:d4:21: f0:01:b7:1f:46:f0:ae:e5:81:66:27:23:ce:09:39:41:19:79: 5e:53:eb:a8:a0:5d:b9:4c:74:8b:3b:24:42:a8:2d:e1:36:e6: bc:9d:11:c1:04:c5:35:cb:9b:7d:bc:a0:75:06:10:66:83:8d: 93:21:bb:1f:20:30:e6:54:bc:d8:3c:71:f8:4b:e3:6c:f5:bd: f8:39:e7:ee:34:37:06:33:f8:19:3f:00:30:03:8d:c5:70:42: 90:4b:95:ff:2d:47:18:9f:93:ff:f6:cd:87:06:a8:40:89:b5: 39:90:f8:a4:a5:33:ed:6c:7f:85:d3:0b:2e:58:0f:ef:01:27: 8f:36:cb:ff:15:a1:d1:d0:0e:03:2e:16:31:ef:6b:7c:8b:dd: f6:33:70:98:82:97:3f:bb:8f:40:43:f6:1c:01:3e:cd:46:21: e0:eb:69:ac:67:49:95:19:75:3d:7a:f2:02:0c:87:07:e4:8e: 43:20:c2:d4:3e:a8:ee:45:ab:50:52:1e:de:2e:77:71:49:c1: 46:f8:c4:14:fc:8c:a1:2c:d6:dc:d9:08:3c:e5:49:a3:9f:c4: 0c:b6:e0:6e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWfGW3iJvbs4tvzj8IRsXDNSTdAowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwMjAwMDA0M1oX DTI2MDczMTIzNTk1OVowejFJMEcGA1UEBRNAY2ZhNjhhNzNkZjE2OWRmNDgzNmE1 ZmFhN2YxZWRmNTdhZjFiNzJjZTkxNGI4MDE1Y2U3ZGYxZjc5MDM3ZTM0YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4g94AZrcelx0yhH7Xo0xrhnhKX6 xlA3ipdDCAerpwtTPoJ15h0UycY2/Knmb8hvSOUJeQhd5cuosnBUvnDOXHbZ8bVF WYj7Ijwybsp2VNRjG27RNBGsNnCFjOuGNrP3D0RI5YJ/QLfQxvGZ0Dt8115gcy9Z lDWUSVeTJ8OyYFvnNK59zOc3w8/PboM+HBl0IWBNc9eFyKqV1HbZUBLJbSup1zIo 7RIjAuHhzANJ8CC0Yo10U+tpO/vV7/qN7IxsMbQ+A4KDWEMi/pKwC/ChHp1BH22z s5q4wqYOSCmy4s2kWDXjhk6Irp4ASzNX9zSQcJiCKSHWUTQ1M0PHoGOVfwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFL9SWQBqpi0B9SYGF/vb/6Qk/TlcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJiMDY5MWRjLWIyODItNGFjZS1iYWQ3LTc3YjQ1MGUwODhlOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6nDAMA0GCSqGSIb3DQEBCwUAA4IBAQCbP7ZCYnafISEug+Na vWrrma/l4FshcsEg/zwfmePu4bCO1CHwAbcfRvCu5YFmJyPOCTlBGXleU+uooF25 THSLOyRCqC3hNua8nRHBBMU1y5t9vKB1BhBmg42TIbsfIDDmVLzYPHH4S+Ns9b34 OefuNDcGM/gZPwAwA43FcEKQS5X/LUcYn5P/9s2HBqhAibU5kPikpTPtbH+F0wsu WA/vASePNsv/FaHR0A4DLhYx72t8i932M3CYgpc/u49AQ/YcAT7NRiHg62msZ0mV GXU9evICDIcH5I5DIMLUPqjuRatQUh7eLndxScFG+MQU/IyhLNbc2Qg85Umjn8QM tuBu -----END CERTIFICATE-----Generated at Sun May 3 16:54:38 2026 by rpki-client