$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8149b6a0-3ee3-4471-b149-1e810ca39506.roa File: 8149b6a0-3ee3-4471-b149-1e810ca39506.roa (raw, json) Hash identifier: twrOA/QErt1xJoxzG5hSrPQiag/VIRZVk1kIAGphRFs= Subject key identifier: BB:E1:B2:D6:DD:4C:D6:7C:5E:D4:46:22:CA:48:49:75:53:30:17:01 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 19967B8B599A96E1B33C1E9FFD31ECF5A572961D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8149b6a0-3ee3-4471-b149-1e810ca39506.roa Signing time: Mon 27 Apr 2026 00:00:08 +0000 ROA not before: Mon 27 Apr 2026 00:00:08 +0000 ROA not after: Sun 26 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:a080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 00:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:96:7b:8b:59:9a:96:e1:b3:3c:1e:9f:fd:31:ec:f5:a5:72:96:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 27 00:00:08 2026 GMT Not After : Jul 26 23:59:59 2026 GMT Subject: serialNumber=adf229c3a3029f6733facc03dc592a1cb46669dbf23c7f404afb9a265bd4f3e7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:72:00:57:fe:5b:e7:e2:53:47:11:2d:59: 7f:b0:4a:1a:35:d4:97:67:a8:bf:f0:d7:d5:86:77: dc:a8:fa:95:d3:1b:8c:3a:94:3f:65:b5:e6:29:ff: 4c:b6:58:1e:90:ec:0e:cc:26:cd:31:70:a5:a1:f3: 15:ea:d7:0f:c6:d5:59:69:70:0f:b7:56:11:4a:60: 55:ce:bb:64:3c:68:14:5b:f3:8c:f2:e4:65:af:d9: 65:4b:8b:f3:dc:b6:13:b7:98:f3:f0:ae:5d:a8:40: e8:21:e2:b6:a6:ff:ab:43:84:b1:80:d3:90:6d:78: 99:02:12:d6:89:34:71:94:09:75:b8:b0:b2:17:33: 01:c5:6b:85:cc:96:10:f8:06:14:93:e1:c0:ae:b5: be:de:53:a0:99:66:c9:92:d2:88:7b:5e:92:8b:f7: 4a:48:c6:0a:75:be:41:92:75:76:02:d7:b9:1a:67: 1a:e9:26:92:0f:a6:20:39:a6:b3:fc:5c:29:61:5c: 7b:88:a4:34:3c:ba:50:90:44:9c:d0:fa:36:fa:6f: 76:a3:29:0d:1e:85:9e:66:ae:4c:75:73:1b:68:f0: 41:27:71:54:ec:d2:ba:e2:d8:48:18:ef:2d:99:6b: 82:8e:43:8e:5b:2f:42:04:59:6a:24:e9:82:62:5a: af:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E1:B2:D6:DD:4C:D6:7C:5E:D4:46:22:CA:48:49:75:53:30:17:01 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8149b6a0-3ee3-4471-b149-1e810ca39506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:a080::/46 Signature Algorithm: sha256WithRSAEncryption 45:e1:37:b3:d0:ad:e0:53:95:79:db:8a:f5:c1:bb:5a:f8:94: 40:66:bf:50:35:58:dc:ba:62:53:18:4d:75:6d:fd:69:8a:ee: 3f:40:0a:8f:84:ba:2d:4c:6c:23:2a:de:34:af:7f:92:a1:b0: 08:66:02:28:bb:d8:44:10:d2:24:01:65:f4:d4:83:75:b7:21: d8:8a:68:85:c1:2b:4f:26:5e:68:bb:b2:41:fa:02:e9:e2:0a: d7:9a:ff:7f:10:50:ab:e5:31:90:2b:2e:5b:80:a2:5d:a4:1d: ec:e1:9e:b3:2a:9b:c9:fa:c9:bf:15:61:2f:d1:9b:82:ed:96: a0:56:e4:65:13:52:4e:09:a4:7e:0f:ee:1b:3d:60:bf:9f:84: 76:06:86:ca:7c:f7:d4:35:b2:b1:d5:c1:05:5f:3d:2f:e8:a9: 9a:77:75:d7:8f:ac:e7:2f:b2:fb:9c:fb:5b:9e:3f:f7:0f:66: aa:99:29:7e:0c:b0:6e:92:a5:df:a8:26:c2:f9:7c:8c:0e:07: f1:aa:38:0e:c7:e4:57:70:0c:76:10:ca:5b:0e:80:64:f9:7d: b4:5e:04:9f:94:c3:25:ec:a6:2a:89:82:33:ef:df:90:cf:6f: a3:5b:31:1e:bf:59:ac:af:f2:fa:17:17:1a:18:77:cb:6a:51: 81:01:1e:58 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGZZ7i1maluGzPB6f/THs9aVylh0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQyNzAwMDAwOFoX DTI2MDcyNjIzNTk1OVowejFJMEcGA1UEBRNAYWRmMjI5YzNhMzAyOWY2NzMzZmFj YzAzZGM1OTJhMWNiNDY2NjlkYmYyM2M3ZjQwNGFmYjlhMjY1YmQ0ZjNlNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwhyAFf+W+fiU0cRLVl/sEoaNdSX Z6i/8NfVhnfcqPqV0xuMOpQ/ZbXmKf9MtlgekOwOzCbNMXClofMV6tcPxtVZaXAP t1YRSmBVzrtkPGgUW/OM8uRlr9llS4vz3LYTt5jz8K5dqEDoIeK2pv+rQ4SxgNOQ bXiZAhLWiTRxlAl1uLCyFzMBxWuFzJYQ+AYUk+HArrW+3lOgmWbJktKIe16Si/dK SMYKdb5BknV2Ate5Gmca6SaSD6YgOaaz/FwpYVx7iKQ0PLpQkESc0Po2+m92oykN HoWeZq5MdXMbaPBBJ3FU7NK64thIGO8tmWuCjkOOWy9CBFlqJOmCYlqvvwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLvhstbdTNZ8XtRGIspISXVTMBcBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgxNDliNmEwLTNlZTMtNDQ3MS1iMTQ5LTFlODEwY2EzOTUwNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaKCAMA0GCSqGSIb3DQEBCwUAA4IBAQBF4Tez0K3gU5V524r1 wbta+JRAZr9QNVjcumJTGE11bf1piu4/QAqPhLotTGwjKt40r3+SobAIZgIou9hE ENIkAWX01IN1tyHYimiFwStPJl5ou7JB+gLp4grXmv9/EFCr5TGQKy5bgKJdpB3s 4Z6zKpvJ+sm/FWEv0ZuC7ZagVuRlE1JOCaR+D+4bPWC/n4R2BobKfPfUNbKx1cEF Xz0v6Kmad3XXj6znL7L7nPtbnj/3D2aqmSl+DLBukqXfqCbC+XyMDgfxqjgOx+RX cAx2EMpbDoBk+X20XgSflMMl7KYqiYIz79+Qz2+jWzEev1msr/L6FxcaGHfLalGB AR5Y -----END CERTIFICATE-----Generated at Sun May 3 14:48:27 2026 by rpki-client