$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47434232-b704-41a7-acb8-66411788335e.roa File: 47434232-b704-41a7-acb8-66411788335e.roa (raw, json) Hash identifier: U30pQg8VPTIiLi43UALemlfGD5v6GnOUmT62LTQSpBU= Subject key identifier: F0:B4:AB:D9:8A:15:90:DF:D1:24:0E:09:F0:8C:31:AF:E9:FE:7A:07 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7673FFED5B6D9AC53497643DC60E578145361B6D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47434232-b704-41a7-acb8-66411788335e.roa Signing time: Fri 22 May 2026 17:03:19 +0000 ROA not before: Fri 22 May 2026 17:03:19 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:f040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:73:ff:ed:5b:6d:9a:c5:34:97:64:3d:c6:0e:57:81:45:36:1b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 17:03:19 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=9337aaf3c3a4aef0a690b740526a36b361da7a2dc2c7de450812ce98a8c682c4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:91:b5:89:59:3c:ff:e0:f3:20:9c:07:96:9b: 8d:cf:cc:f6:d4:ed:11:ca:80:a1:bd:47:26:72:03: ad:3e:ff:53:03:66:9f:a8:cb:d9:64:f7:34:36:e6: ef:02:37:88:c8:8e:35:a0:89:76:6b:ea:36:cb:6b: 9b:16:20:6c:de:48:32:4d:10:7a:46:3e:72:6e:a3: 8f:f3:90:ce:ed:24:40:b6:3b:95:a6:f8:02:78:cb: 5e:b0:73:a1:47:02:1f:79:d4:d6:49:70:ac:3c:da: 21:0c:67:98:9b:d7:dc:14:ef:59:27:e2:55:4d:a6: 98:81:f8:59:4a:57:d5:25:53:68:bb:ea:37:28:39: 06:e5:37:17:33:f8:7f:c0:91:15:cb:a8:2e:23:9f: 72:92:8b:94:22:ef:34:35:cd:75:af:98:9d:d2:55: f2:0a:da:55:29:aa:c5:bb:f5:d6:22:38:32:7a:59: 03:c0:d1:9e:ea:e0:65:b1:c8:71:56:2a:cd:c7:7a: bd:33:1a:7b:45:4a:c8:8c:88:78:f8:b4:80:0e:29: d9:81:0c:46:d7:0c:7f:2f:90:2b:da:80:e0:e1:47: 58:e9:c9:07:dd:09:9d:c1:28:df:b8:97:c4:9a:93: 7e:8b:3d:a2:c2:27:56:2a:e3:82:48:14:3f:d4:08: 32:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B4:AB:D9:8A:15:90:DF:D1:24:0E:09:F0:8C:31:AF:E9:FE:7A:07 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47434232-b704-41a7-acb8-66411788335e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:f040::/48 Signature Algorithm: sha256WithRSAEncryption 80:e9:ef:98:3e:c9:76:dc:f9:b9:5a:00:58:21:54:41:02:60: 55:b6:3a:8d:1c:8d:d5:0e:f1:57:3e:d4:2e:ff:8d:89:52:78: 03:ce:8b:0d:0b:2e:d3:99:e5:f8:13:67:e6:e3:da:fe:94:c1: 6e:bd:e6:50:a1:c0:16:fa:b7:87:61:b3:6d:57:63:04:95:73: 56:7a:ff:0f:d7:86:44:37:3a:f1:8a:d1:6d:aa:04:bd:99:f3: 3f:c7:ce:55:68:0a:07:03:d3:85:89:a9:74:5f:04:6a:4d:02: 92:ca:24:ae:27:e6:48:72:06:dd:7a:40:fe:67:80:14:b5:f7: a6:e9:56:15:ea:d0:dc:b0:47:df:22:d8:f3:14:b6:32:33:9b: 32:82:f0:ef:e4:69:c7:50:7e:5f:b9:6f:51:94:6e:5c:64:85: 92:61:ff:30:72:61:72:97:77:6c:e0:db:f1:0f:b9:68:49:b8: ab:37:3d:b4:51:b7:7a:51:fa:9e:33:f9:9b:ce:ef:d3:a8:f9: ab:ce:d5:28:09:df:89:3b:5d:9f:15:9c:1a:86:ba:75:78:c6: 54:94:24:be:18:79:78:fa:47:9f:2a:96:68:ca:e4:b8:4f:07: 9c:08:2d:4f:52:4b:88:ac:b9:08:dc:37:f1:5c:d3:17:cc:b6: 80:56:e8:92 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdnP/7VttmsU0l2Q9xg5XgUU2G20wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE3MDMxOVoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAOTMzN2FhZjNjM2E0YWVmMGE2OTBi NzQwNTI2YTM2YjM2MWRhN2EyZGMyYzdkZTQ1MDgxMmNlOThhOGM2ODJjNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJG1iVk8/+DzIJwHlpuNz8z21O0R yoChvUcmcgOtPv9TA2afqMvZZPc0NubvAjeIyI41oIl2a+o2y2ubFiBs3kgyTRB6 Rj5ybqOP85DO7SRAtjuVpvgCeMtesHOhRwIfedTWSXCsPNohDGeYm9fcFO9ZJ+JV TaaYgfhZSlfVJVNou+o3KDkG5TcXM/h/wJEVy6guI59ykouUIu80Nc11r5id0lXy CtpVKarFu/XWIjgyelkDwNGe6uBlschxVirNx3q9Mxp7RUrIjIh4+LSADinZgQxG 1wx/L5Ar2oDg4UdY6ckH3QmdwSjfuJfEmpN+iz2iwidWKuOCSBQ/1Agy3QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPC0q9mKFZDf0SQOCfCMMa/p/noHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ3NDM0MjMyLWI3MDQtNDFhNy1hY2I4LTY2NDExNzg4MzM1ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6PBAMA0GCSqGSIb3DQEBCwUAA4IBAQCA6e+YPsl23Pm5WgBY IVRBAmBVtjqNHI3VDvFXPtQu/42JUngDzosNCy7TmeX4E2fm49r+lMFuveZQocAW +reHYbNtV2MElXNWev8P14ZENzrxitFtqgS9mfM/x85VaAoHA9OFial0XwRqTQKS yiSuJ+ZIcgbdekD+Z4AUtfem6VYV6tDcsEffItjzFLYyM5sygvDv5GnHUH5fuW9R lG5cZIWSYf8wcmFyl3ds4NvxD7loSbirNz20Ubd6UfqeM/mbzu/TqPmrztUoCd+J O12fFZwahrp1eMZUlCS+GHl4+kefKpZoyuS4TwecCC1PUkuIrLkI3DfxXNMXzLaA VuiS -----END CERTIFICATE-----Generated at Sun May 24 12:19:54 2026 by rpki-client