$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47fd1e7c-7671-4ab7-ad31-5d256d450a70.roa File: 47fd1e7c-7671-4ab7-ad31-5d256d450a70.roa (raw, json) Hash identifier: SUSIYV5e8EMb6GkOKDdmQEZLV+7oeRnEB0sdwixhl+M= Subject key identifier: 39:1E:CD:EF:CE:A8:F9:04:B9:54:AA:E9:6A:54:CE:D2:B6:C8:F5:F6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2DDCDA9DFB317A130DDAB1B6293A86822D935BF9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47fd1e7c-7671-4ab7-ad31-5d256d450a70.roa Signing time: Fri 22 May 2026 16:52:07 +0000 ROA not before: Fri 22 May 2026 16:52:07 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:dc:da:9d:fb:31:7a:13:0d:da:b1:b6:29:3a:86:82:2d:93:5b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:52:07 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=a4fa6a3f4a0303f37ea5850da890aaff7f0ec2ea025b10f2cbe391d31cb11d13, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:30:05:3a:6f:ee:6c:78:7e:27:16:6b:9f:65: 46:ee:05:02:6c:61:cc:02:3b:82:0e:9d:e6:27:e1: bb:56:96:cf:e8:5a:81:ba:76:69:56:9a:4a:b2:fa: 75:49:7a:69:5f:91:9d:5a:80:61:db:b3:ea:55:b2: cf:c6:47:3f:98:a3:56:6e:16:8c:d4:f5:2e:c5:82: fd:03:34:ee:6b:5e:30:49:0b:b4:62:f5:54:7c:2f: 7c:85:2e:4b:6f:c5:b4:43:3b:26:a0:9d:93:98:3d: 77:fd:d1:c8:4c:b8:cc:5e:43:7c:e4:c5:99:94:22: be:7a:e7:f1:c5:7b:7d:97:e0:01:97:32:8b:4d:85: 62:b5:37:3b:39:32:5e:4b:dd:c5:7c:55:c1:6c:ba: c4:c5:28:d5:4e:62:98:28:e5:ae:ed:eb:84:26:9d: a8:85:9a:30:11:7f:2f:0c:af:a2:a6:8d:4b:2f:d1: 57:82:69:fd:80:8f:0a:ae:8e:02:82:b8:f0:7e:61: e7:9c:98:61:a8:fe:b7:1d:7e:0c:50:7c:ea:30:68: b3:2d:97:c8:32:9f:5d:ed:77:e3:e1:83:6d:6b:05: 3c:01:98:db:08:e3:36:26:8f:0b:80:0a:aa:35:63: bb:9e:f2:93:34:ed:ad:b4:78:62:3f:c3:85:0d:a7: 5d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1E:CD:EF:CE:A8:F9:04:B9:54:AA:E9:6A:54:CE:D2:B6:C8:F5:F6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47fd1e7c-7671-4ab7-ad31-5d256d450a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4800::/40 Signature Algorithm: sha256WithRSAEncryption 0d:4f:a6:e7:21:3c:c9:1c:0f:89:c0:26:64:52:1c:f4:a7:26: c5:7c:16:95:bc:af:1a:bd:76:a6:cf:bb:a3:85:dd:22:7c:d7: b6:e9:ce:08:92:f0:7d:9c:60:94:a8:46:62:12:f6:1f:03:a1: 44:c5:32:05:72:6c:68:af:13:62:54:4b:36:8f:d8:e1:08:b7: 13:de:97:cf:b7:1f:a0:a2:6f:46:b7:2f:05:10:fd:14:31:ae: c8:1c:90:4b:97:d0:f8:df:54:69:aa:32:20:15:39:08:29:2a: cc:9a:9e:b4:67:11:6c:f9:30:b2:e9:45:9e:82:90:b5:b3:eb: 49:e8:67:5c:4d:cf:d2:8a:c0:ea:50:89:a7:f2:c9:89:ed:1d: 93:74:91:d5:33:d9:34:00:77:f7:f1:50:0b:c5:c8:24:12:a1: 77:04:ba:8b:8e:cf:07:20:da:0b:70:cc:89:18:0e:7a:86:40: 58:3e:4a:68:7d:fd:02:c1:13:80:74:f0:49:b7:93:a4:00:87: 27:21:0c:96:98:a0:d9:0b:e5:c8:17:48:c3:51:0e:29:cc:47: b6:d3:3b:2e:14:bf:fc:0e:57:6a:1e:a4:51:5a:f1:e8:aa:e0: f2:c2:56:c6:c7:6b:55:a7:00:99:a6:b9:c9:15:da:db:6f:2a: 86:a7:cb:70 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULdzanfsxehMN2rG2KTqGgi2TW/kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTIwN1oX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAYTRmYTZhM2Y0YTAzMDNmMzdlYTU4 NTBkYTg5MGFhZmY3ZjBlYzJlYTAyNWIxMGYyY2JlMzkxZDMxY2IxMWQxMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzAFOm/ubHh+JxZrn2VG7gUCbGHM AjuCDp3mJ+G7VpbP6FqBunZpVppKsvp1SXppX5GdWoBh27PqVbLPxkc/mKNWbhaM 1PUuxYL9AzTua14wSQu0YvVUfC98hS5Lb8W0QzsmoJ2TmD13/dHITLjMXkN85MWZ lCK+eufxxXt9l+ABlzKLTYVitTc7OTJeS93FfFXBbLrExSjVTmKYKOWu7euEJp2o hZowEX8vDK+ipo1LL9FXgmn9gI8Kro4CgrjwfmHnnJhhqP63HX4MUHzqMGizLZfI Mp9d7Xfj4YNtawU8AZjbCOM2Jo8LgAqqNWO7nvKTNO2ttHhiP8OFDadd7QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDkeze/OqPkEuVSq6WpUztK2yPX2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ3ZmQxZTdjLTc2NzEtNGFiNy1hZDMxLTVkMjU2ZDQ1MGE3MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYUgwDQYJKoZIhvcNAQELBQADggEBAA1PpuchPMkcD4nAJmRS HPSnJsV8FpW8rxq9dqbPu6OF3SJ817bpzgiS8H2cYJSoRmIS9h8DoUTFMgVybGiv E2JUSzaP2OEItxPel8+3H6Cib0a3LwUQ/RQxrsgckEuX0PjfVGmqMiAVOQgpKsya nrRnEWz5MLLpRZ6CkLWz60noZ1xNz9KKwOpQiafyyYntHZN0kdUz2TQAd/fxUAvF yCQSoXcEuouOzwcg2gtwzIkYDnqGQFg+Smh9/QLBE4B08Em3k6QAhychDJaYoNkL 5cgXSMNRDinMR7bTOy4Uv/wOV2oepFFa8eiq4PLCVsbHa1WnAJmmuckV2ttvKoan y3A= -----END CERTIFICATE-----Generated at Sun May 24 12:19:40 2026 by rpki-client