$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/026980fd-23cc-4d88-9f03-a9803c8bce71.roa File: 026980fd-23cc-4d88-9f03-a9803c8bce71.roa (raw, json) Hash identifier: LyQc0f5hR6kn3ZJd1dp56Af5ljpH6rURs8+96FFhs/o= Subject key identifier: 89:70:7E:1C:A9:1B:D8:21:30:EC:DD:D1:59:CC:4B:A2:4E:F8:4A:7C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1130AF14A43E654D1B13654229254B3CF96E0FBD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/026980fd-23cc-4d88-9f03-a9803c8bce71.roa Signing time: Thu 12 Mar 2026 16:24:56 +0000 ROA not before: Thu 12 Mar 2026 16:24:56 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:30:af:14:a4:3e:65:4d:1b:13:65:42:29:25:4b:3c:f9:6e:0f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:24:56 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=2c068e85f19418b71a3a949b567519557f8cff06838ac9e495e5459640a6db60, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:8e:c7:12:79:7a:15:28:dc:82:8e:f2:22: 20:9a:19:91:fd:45:3a:91:9b:aa:fb:38:3b:1c:63: 73:f0:23:1b:a6:70:8b:30:eb:76:bb:04:63:c0:3a: f1:97:4c:68:d0:4b:68:59:3c:9c:02:2b:38:f1:af: bf:b0:84:0d:cf:fe:41:92:a9:54:6f:54:b5:6f:a9: 54:f6:4f:ae:02:d3:63:fd:3f:a4:c9:c3:91:a6:ed: de:fa:46:54:bd:cf:4a:4c:e9:0a:0d:b8:68:48:85: 1c:1a:25:65:66:69:bb:81:f9:a7:00:49:97:b8:3b: 89:48:4a:f9:50:33:b0:86:83:bc:07:d0:0d:72:98: fd:07:62:e3:2b:2f:a0:5f:d6:4c:ae:94:1c:25:d8: a4:12:77:77:f1:b3:a1:bd:5f:79:6f:e2:cf:c3:84: 4a:8c:d6:e7:fc:b9:f8:02:58:7c:40:61:e7:b9:3c: 01:d9:2c:cc:8b:19:89:48:12:4a:f9:99:80:1b:58: 1d:d3:e3:77:bd:e5:c0:86:d0:a6:68:d8:a2:e6:90: d9:a8:a1:61:01:45:22:df:2b:52:cd:3d:63:ff:d7: eb:f6:f8:94:a6:11:3f:ab:77:f3:8c:18:7d:5c:b6: 26:a4:ab:fc:fc:fa:d5:ed:7d:ec:ec:4c:a3:33:16: 85:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:70:7E:1C:A9:1B:D8:21:30:EC:DD:D1:59:CC:4B:A2:4E:F8:4A:7C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/026980fd-23cc-4d88-9f03-a9803c8bce71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 8d:5f:4f:cb:8e:63:b1:55:07:e0:ef:26:ed:c7:6e:25:f9:af: 74:2d:df:29:70:89:bf:42:bc:81:fa:31:55:5b:e4:ba:a5:59: 85:29:a8:fc:91:1f:c9:9c:41:ab:c6:e2:d1:3f:d2:76:a3:8c: ba:41:28:8b:46:0e:4b:86:a3:97:80:90:82:ef:6d:c0:65:97: e1:93:54:cd:a7:ef:ef:de:95:fe:47:2c:b0:e0:c5:13:03:35: c8:98:7f:43:43:d5:cc:78:11:87:d0:50:f0:7d:bd:6e:28:28: 62:b4:3a:3a:d9:d5:96:93:9c:fc:ab:cc:7f:7c:61:2e:a0:b2: 01:de:d6:a8:4a:0c:b8:b3:33:1a:16:98:0c:88:5a:23:ed:ef: 45:87:f0:a5:60:7f:75:05:a2:87:a5:45:4c:35:bc:99:e9:a7: 4a:c3:c6:91:15:95:90:0d:96:57:67:7d:47:89:f9:79:33:b8: da:d4:27:68:9c:87:cb:a0:64:34:7a:eb:8c:e6:cb:01:5d:5a: a2:ab:ca:26:0e:df:8e:05:a2:6a:f7:4f:57:35:78:05:03:31: 17:90:74:83:f2:ba:a6:c1:0a:ff:67:38:f6:4a:dc:05:46:62: 17:9e:f8:4a:98:5f:5d:67:f6:8e:4c:ec:94:d0:64:19:fc:0a: a5:ae:93:20 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUETCvFKQ+ZU0bE2VCKSVLPPluD70wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjQ1NloX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAMmMwNjhlODVmMTk0MThiNzFhM2E5 NDliNTY3NTE5NTU3ZjhjZmYwNjgzOGFjOWU0OTVlNTQ1OTY0MGE2ZGI2MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroeOxxJ5ehUo3IKO8iIgmhmR/UU6 kZuq+zg7HGNz8CMbpnCLMOt2uwRjwDrxl0xo0EtoWTycAis48a+/sIQNz/5BkqlU b1S1b6lU9k+uAtNj/T+kycORpu3e+kZUvc9KTOkKDbhoSIUcGiVlZmm7gfmnAEmX uDuJSEr5UDOwhoO8B9ANcpj9B2LjKy+gX9ZMrpQcJdikEnd38bOhvV95b+LPw4RK jNbn/Ln4Alh8QGHnuTwB2SzMixmJSBJK+ZmAG1gd0+N3veXAhtCmaNii5pDZqKFh AUUi3ytSzT1j/9fr9viUphE/q3fzjBh9XLYmpKv8/PrV7X3s7EyjMxaFFwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIlwfhypG9ghMOzd0VnMS6JO+Ep8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAyNjk4MGZkLTIzY2MtNGQ4OC05ZjAzLWE5ODAzYzhiY2U3MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6YDAMA0GCSqGSIb3DQEBCwUAA4IBAQCNX0/LjmOxVQfg7ybt x24l+a90Ld8pcIm/QryB+jFVW+S6pVmFKaj8kR/JnEGrxuLRP9J2o4y6QSiLRg5L hqOXgJCC723AZZfhk1TNp+/v3pX+Ryyw4MUTAzXImH9DQ9XMeBGH0FDwfb1uKChi tDo62dWWk5z8q8x/fGEuoLIB3taoSgy4szMaFpgMiFoj7e9Fh/ClYH91BaKHpUVM NbyZ6adKw8aRFZWQDZZXZ31Hifl5M7ja1CdonIfLoGQ0euuM5ssBXVqiq8omDt+O BaJq909XNXgFAzEXkHSD8rqmwQr/Zzj2StwFRmIXnvhKmF9dZ/aOTOyU0GQZ/Aql rpMg -----END CERTIFICATE-----Generated at Thu Mar 19 12:28:00 2026 by rpki-client