$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/803133e2-b46b-4dbc-9fc8-0014c2592315.roa File: 803133e2-b46b-4dbc-9fc8-0014c2592315.roa (raw, json) Hash identifier: dHtlx/q8E91qbIPrziPD/gw6h/ssqqxxvpPtJ8Y00/o= Subject key identifier: 02:AB:4C:D4:21:74:80:CA:16:68:88:17:1A:07:97:78:37:ED:49:D9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 08311891AF7EBF9713471052BCFCEF2F73201D93 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/803133e2-b46b-4dbc-9fc8-0014c2592315.roa Signing time: Sat 02 May 2026 00:20:41 +0000 ROA not before: Sat 02 May 2026 00:20:41 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 00:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:31:18:91:af:7e:bf:97:13:47:10:52:bc:fc:ef:2f:73:20:1d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:20:41 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=acc800ba0395fe07bf6d32590f97ccf7d87c5075bbf783cb8d9eb6cd96bfcdea, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:c6:fd:6d:88:c2:d9:cf:f3:75:f5:a7:18: 5e:cf:82:d1:2b:0f:f5:ba:61:73:7b:9b:fa:6a:33: 8e:d0:49:85:37:7a:b2:2b:c4:80:46:f8:58:38:ee: b4:21:4a:69:a4:7c:bb:63:79:8a:bf:68:3e:b5:53: 8b:aa:9c:38:c8:c4:44:30:3f:36:b1:00:28:b5:4a: 6c:bc:07:5a:e6:50:59:bc:87:8c:4c:2c:7b:97:66: ed:4e:0e:9a:f4:4b:11:0a:31:ed:8d:20:8f:52:5d: a3:0f:a9:8a:e1:af:b1:83:80:b8:a0:2b:3c:51:26: 07:5f:49:be:2e:d3:e2:cc:fb:de:da:5d:57:27:09: 82:c4:42:09:8d:91:73:71:9d:8c:3e:25:8b:e4:8c: d7:ed:e4:5b:46:f2:37:1a:05:74:21:ce:61:b3:87: f9:32:44:c1:11:e4:08:d7:fa:58:1b:b3:1a:2a:91: 00:0e:f4:df:bd:21:d0:f3:ba:1b:a6:ed:b1:c5:25: b0:c4:16:8b:e2:7c:fe:64:62:6a:af:4d:b0:96:58: ca:92:c6:15:8d:34:96:47:31:5b:fe:14:f9:35:39: ba:34:7f:df:cc:0a:7e:77:63:c2:aa:bc:ea:be:83: 76:2a:f9:a2:ed:10:84:be:66:c1:7c:fd:27:a8:21: f5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AB:4C:D4:21:74:80:CA:16:68:88:17:1A:07:97:78:37:ED:49:D9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/803133e2-b46b-4dbc-9fc8-0014c2592315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:4000::/40 Signature Algorithm: sha256WithRSAEncryption c5:1b:1d:28:67:67:41:0b:be:91:13:40:46:03:d0:6c:27:16: e5:06:69:dd:77:d5:ed:34:5d:11:dc:65:ff:e3:a3:b2:41:d4: 66:16:63:de:ae:2d:ba:a9:e9:75:7d:a3:dd:ef:5c:0e:2a:fd: ab:eb:10:a6:5d:f8:01:69:e7:c5:98:2d:2b:11:9c:02:3e:83: ee:c7:2a:bc:d9:9a:cb:c9:66:66:01:0b:95:bd:1a:91:d1:81: 67:d4:58:8d:31:56:2a:65:a1:c0:19:9a:98:f3:bc:52:9f:e0: 1d:e6:fd:25:00:6c:8d:62:d5:eb:32:5b:bf:ed:64:26:2e:0d: ef:0c:bd:40:ca:c6:05:ec:b0:e6:26:a9:51:77:96:86:f0:6e: b4:9b:75:4d:b1:95:64:fc:ab:2d:87:8a:99:d0:32:e3:48:a4: 5c:d1:fb:8b:0c:cb:c9:94:4a:01:27:21:df:04:5f:e8:a4:15: 83:90:1e:9b:d0:98:14:ae:57:ae:52:3b:a4:e6:a6:3b:1e:32: 60:4a:cc:3f:31:b1:7e:14:88:62:e7:da:d3:05:6d:b2:1b:29: 56:8c:ab:f0:71:69:7d:64:1e:ec:59:9d:e8:0a:7b:71:c8:08: 44:2e:59:6f:04:f3:7a:49:5f:25:28:65:97:b0:ea:19:95:34: 1f:6e:8f:c3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCDEYka9+v5cTRxBSvPzvL3MgHZMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwMjAwMjA0MVoX DTI2MDczMTIzNTk1OVowejFJMEcGA1UEBRNAYWNjODAwYmEwMzk1ZmUwN2JmNmQz MjU5MGY5N2NjZjdkODdjNTA3NWJiZjc4M2NiOGQ5ZWI2Y2Q5NmJmY2RlYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7fG/W2IwtnP83X1pxhez4LRKw/1 umFze5v6ajOO0EmFN3qyK8SARvhYOO60IUpppHy7Y3mKv2g+tVOLqpw4yMREMD82 sQAotUpsvAda5lBZvIeMTCx7l2btTg6a9EsRCjHtjSCPUl2jD6mK4a+xg4C4oCs8 USYHX0m+LtPizPve2l1XJwmCxEIJjZFzcZ2MPiWL5IzX7eRbRvI3GgV0Ic5hs4f5 MkTBEeQI1/pYG7MaKpEADvTfvSHQ87obpu2xxSWwxBaL4nz+ZGJqr02wlljKksYV jTSWRzFb/hT5NTm6NH/fzAp+d2PCqrzqvoN2Kvmi7RCEvmbBfP0nqCH1bwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAKrTNQhdIDKFmiIFxoHl3g37UnZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgwMzEzM2UyLWI0NmItNGRiYy05ZmM4LTAwMTRjMjU5MjMxNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9UAwDQYJKoZIhvcNAQELBQADggEBAMUbHShnZ0ELvpETQEYD 0GwnFuUGad131e00XRHcZf/jo7JB1GYWY96uLbqp6XV9o93vXA4q/avrEKZd+AFp 58WYLSsRnAI+g+7HKrzZmsvJZmYBC5W9GpHRgWfUWI0xViplocAZmpjzvFKf4B3m /SUAbI1i1esyW7/tZCYuDe8MvUDKxgXssOYmqVF3lobwbrSbdU2xlWT8qy2HipnQ MuNIpFzR+4sMy8mUSgEnId8EX+ikFYOQHpvQmBSuV65SO6TmpjseMmBKzD8xsX4U iGLn2tMFbbIbKVaMq/BxaX1kHuxZnegKe3HICEQuWW8E83pJXyUoZZew6hmVNB9u j8M= -----END CERTIFICATE-----Generated at Sun May 3 15:29:44 2026 by rpki-client