$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed0da2e8-db13-46f1-a24a-4f4f0bff1d1a.roa File: ed0da2e8-db13-46f1-a24a-4f4f0bff1d1a.roa (raw, json) Hash identifier: L+YNRKHc3tqHQe2SPk9OiMDC9OVp76HD41b4ZpoAkFM= Subject key identifier: E1:3A:1C:C8:68:60:41:A2:DE:98:D5:6C:57:DC:7F:F4:B4:B2:BA:88 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 759C1EF08AA34D3DFD1713B3132BBEA1EA5341E6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed0da2e8-db13-46f1-a24a-4f4f0bff1d1a.roa Signing time: Sat 02 May 2026 00:10:12 +0000 ROA not before: Sat 02 May 2026 00:10:12 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 00:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:9c:1e:f0:8a:a3:4d:3d:fd:17:13:b3:13:2b:be:a1:ea:53:41:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:10:12 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=f9160ccad0528cbf8610c1b4a66b98799da5f75dcb970d6f5676a558d91af54e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:eb:c0:42:1b:11:db:22:82:4b:67:cb:25: bd:05:55:98:3f:f3:36:a5:77:29:7e:ea:7e:9f:fa: 18:51:11:5b:c4:f4:2c:05:d6:b9:07:2c:af:d8:09: 90:8e:5a:6c:e4:99:3e:d8:4c:dd:fc:16:f7:3a:1a: c4:5a:ae:29:e7:88:74:85:82:d5:dd:c4:6b:87:1c: 55:06:dc:81:c7:ed:b2:3d:b7:91:b4:94:e7:07:ab: 4d:a7:5b:c3:19:4a:1e:4f:6b:f2:26:0f:47:9c:7e: ec:94:31:d1:dd:8f:5f:10:49:b1:20:4f:ec:63:c3: c2:de:68:bd:37:61:54:52:09:4d:44:96:fd:30:6d: a7:b3:1d:95:fe:6a:be:b7:d4:76:0e:24:84:85:8f: 3f:8a:80:f1:49:d5:6b:2f:a4:1c:21:f8:3d:14:0f: e1:82:ea:56:33:ee:1e:b2:3e:9e:22:18:77:14:d5: ac:52:35:64:8a:ce:dd:ba:8c:5c:5c:df:e5:14:89: d3:4f:6d:ad:60:dd:6c:01:8d:4b:4d:c8:61:56:6d: f6:04:d7:50:48:35:bf:18:59:d0:b8:9c:cf:50:c5: 12:da:a5:3c:a5:9b:3a:e5:93:2b:d1:a8:59:50:e4: 1d:5b:17:af:90:3f:47:30:a6:ac:0c:c1:50:0c:d9: a8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3A:1C:C8:68:60:41:A2:DE:98:D5:6C:57:DC:7F:F4:B4:B2:BA:88 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed0da2e8-db13-46f1-a24a-4f4f0bff1d1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:4800::/40 Signature Algorithm: sha256WithRSAEncryption b6:4b:1e:60:9e:13:cf:5e:cf:59:bc:00:8e:0b:1d:5b:29:7a: 29:1b:0a:2a:29:a0:6b:2e:be:6a:00:ab:29:02:a1:f2:e3:ea: 0f:67:14:cd:27:7a:79:cf:c1:63:29:b6:33:80:5f:50:cc:d5: c6:fd:41:09:ab:47:32:1a:d8:e5:0a:b0:48:52:d1:57:e1:32: 2c:03:3a:d6:0f:9d:92:93:24:31:fb:de:6d:8c:e9:f2:74:10: f9:62:23:58:9d:cb:9a:4e:fe:9a:e5:60:9b:45:6c:7b:39:8f: ae:ae:09:08:96:5c:04:fb:d3:8c:f3:2e:e5:98:b5:89:81:d7: ca:02:2f:4f:60:8f:c2:af:19:96:0a:32:c1:4e:57:7b:7c:aa: b1:08:b1:f5:59:f1:90:5a:49:51:41:de:a5:96:d9:cf:7b:9d: 3d:f6:ad:c2:ad:00:59:23:91:ce:af:b3:03:b3:9d:93:24:26: b6:5f:97:a0:18:73:17:47:30:ea:73:ac:5c:dc:34:a1:6a:1e: c6:e3:cb:8c:f0:98:38:f5:fc:b8:25:33:08:3a:6e:e3:72:39: 8c:f0:0c:01:83:30:c4:a0:ca:6c:c2:00:7e:dd:c5:5a:1e:9d: 4f:5a:47:1f:d3:47:c5:59:dd:b6:99:ac:8a:3c:3c:d4:cd:95: e7:e4:39:87 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdZwe8IqjTT39FxOzEyu+oepTQeYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwMjAwMTAxMloX DTI2MDczMTIzNTk1OVowejFJMEcGA1UEBRNAZjkxNjBjY2FkMDUyOGNiZjg2MTBj MWI0YTY2Yjk4Nzk5ZGE1Zjc1ZGNiOTcwZDZmNTY3NmE1NThkOTFhZjU0ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubfrwEIbEdsigktnyyW9BVWYP/M2 pXcpfup+n/oYURFbxPQsBda5Byyv2AmQjlps5Jk+2Ezd/Bb3OhrEWq4p54h0hYLV 3cRrhxxVBtyBx+2yPbeRtJTnB6tNp1vDGUoeT2vyJg9HnH7slDHR3Y9fEEmxIE/s Y8PC3mi9N2FUUglNRJb9MG2nsx2V/mq+t9R2DiSEhY8/ioDxSdVrL6QcIfg9FA/h gupWM+4esj6eIhh3FNWsUjVkis7duoxcXN/lFInTT22tYN1sAY1LTchhVm32BNdQ SDW/GFnQuJzPUMUS2qU8pZs65ZMr0ahZUOQdWxevkD9HMKasDMFQDNmoGwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOE6HMhoYEGi3pjVbFfcf/S0srqIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VkMGRhMmU4LWRiMTMtNDZmMS1hMjRhLTRmNGYwYmZmMWQxYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba80gwDQYJKoZIhvcNAQELBQADggEBALZLHmCeE89ez1m8AI4L HVspeikbCiopoGsuvmoAqykCofLj6g9nFM0nennPwWMptjOAX1DM1cb9QQmrRzIa 2OUKsEhS0VfhMiwDOtYPnZKTJDH73m2M6fJ0EPliI1idy5pO/prlYJtFbHs5j66u CQiWXAT704zzLuWYtYmB18oCL09gj8KvGZYKMsFOV3t8qrEIsfVZ8ZBaSVFB3qWW 2c97nT32rcKtAFkjkc6vswOznZMkJrZfl6AYcxdHMOpzrFzcNKFqHsbjy4zwmDj1 /LglMwg6buNyOYzwDAGDMMSgymzCAH7dxVoenU9aRx/TR8VZ3baZrIo8PNTNlefk OYc= -----END CERTIFICATE-----Generated at Sun May 3 15:23:33 2026 by rpki-client