$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03f3a3ce-23ee-44cf-8207-7d581569af6e.roa File: 03f3a3ce-23ee-44cf-8207-7d581569af6e.roa (raw, json) Hash identifier: 1//xAXVPXvWjdPKIDrYAj9QXbcVFAb1xm7i7FWgU5pA= Subject key identifier: 79:AE:E8:45:66:FE:80:29:D0:B1:3C:E7:4D:13:81:6C:F1:44:E7:0D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 071C1FF553DC3D6A7462EF4B92C6D7550D77B616 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03f3a3ce-23ee-44cf-8207-7d581569af6e.roa Signing time: Mon 22 Jun 2026 00:01:22 +0000 ROA not before: Mon 22 Jun 2026 00:01:22 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:4880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:1c:1f:f5:53:dc:3d:6a:74:62:ef:4b:92:c6:d7:55:0d:77:b6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:01:22 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=759442fafb9f241b9fee400335baafd88a7e113ee498258c070bad3ea01b7aa8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1a:72:c5:1e:ba:a2:29:7a:a1:62:57:00:87: ae:38:37:a6:21:c1:28:59:b9:70:20:40:b8:e7:4b: a7:0d:81:c0:89:e4:b7:87:7a:16:c9:65:3d:fa:37: c0:50:eb:3a:74:bd:18:f1:be:89:bd:29:2d:53:8c: 79:8d:a4:77:55:96:ad:d0:89:fb:81:04:93:d8:ee: d0:6f:8a:d5:0e:8e:76:af:71:5f:5a:dd:28:21:fd: 31:b3:66:25:c3:d6:75:89:01:c5:30:3d:92:a3:ab: 8c:8a:32:ac:15:a2:a1:31:7b:0f:25:b2:42:9a:23: dd:a8:66:de:e3:0a:32:5a:b2:2c:70:13:10:ab:70: 70:27:c4:93:4d:fe:5c:81:0b:0a:0b:14:38:04:fc: db:86:b3:64:c3:a6:65:82:22:84:ab:78:08:6f:35: a5:68:f9:a2:c7:de:39:c5:22:1e:69:60:8d:90:87: a1:0e:66:4b:49:31:d9:79:56:b8:c4:95:7a:2b:5e: 39:8f:e4:8c:a9:16:22:30:8c:e4:b8:5b:3d:fa:55: fb:d1:2c:4d:0b:7e:34:1b:57:2f:1e:95:8b:ff:5f: 84:a4:c6:eb:3d:74:ca:a2:2c:2e:37:da:66:86:40: 76:f2:5d:87:35:93:e3:b9:fe:b2:9a:40:f6:54:c9: 29:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AE:E8:45:66:FE:80:29:D0:B1:3C:E7:4D:13:81:6C:F1:44:E7:0D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03f3a3ce-23ee-44cf-8207-7d581569af6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:4880::/48 Signature Algorithm: sha256WithRSAEncryption 8d:2e:c8:a1:68:ec:ac:80:db:8b:11:b5:1d:9c:f4:d9:b1:9e: 77:f9:80:1f:b5:7c:cf:af:bf:58:30:b6:1f:07:75:2d:3f:0d: c7:18:b3:c2:aa:25:61:51:af:eb:39:f6:d2:5e:9e:64:3e:ac: 26:75:1b:ea:31:15:25:3e:43:8a:cd:fe:39:91:f0:ee:21:e3: b0:d0:28:1c:54:6b:ac:b8:19:21:6f:0d:26:9b:60:3f:fe:2a: d4:6e:b2:8f:dd:e0:d5:a7:95:62:cb:c3:a8:fc:8d:8c:8a:b5: 41:87:2d:8b:6d:be:c6:47:ec:6a:fe:5c:b5:0a:c8:0e:68:ff: 68:e1:c2:be:eb:e3:7e:b2:fe:29:46:d6:d1:21:b2:59:c8:d3: e9:6b:02:14:57:f9:12:24:de:d7:89:fe:28:f6:ae:16:b3:9c: 2b:96:de:00:ea:03:f1:72:8d:d0:75:a7:c2:b8:f6:23:78:4c: 52:3a:89:1d:f3:a4:53:c6:ed:80:95:b0:43:86:51:8f:e5:b2: 28:a8:95:bf:a7:08:62:52:11:cb:31:0f:96:38:9f:24:b7:37: a9:72:d6:ad:93:02:60:5b:0a:d4:5e:d3:d5:93:07:87:df:ac: 04:80:31:c3:5f:4a:eb:36:86:6c:98:35:73:73:d5:f5:8c:00: 1d:d6:6a:fe -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBxwf9VPcPWp0Yu9LksbXVQ13thYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMDEyMloX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNANzU5NDQyZmFmYjlmMjQxYjlmZWU0 MDAzMzViYWFmZDg4YTdlMTEzZWU0OTgyNThjMDcwYmFkM2VhMDFiN2FhODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhpyxR66oil6oWJXAIeuODemIcEo WblwIEC450unDYHAieS3h3oWyWU9+jfAUOs6dL0Y8b6JvSktU4x5jaR3VZat0In7 gQST2O7Qb4rVDo52r3FfWt0oIf0xs2Ylw9Z1iQHFMD2So6uMijKsFaKhMXsPJbJC miPdqGbe4woyWrIscBMQq3BwJ8STTf5cgQsKCxQ4BPzbhrNkw6ZlgiKEq3gIbzWl aPmix945xSIeaWCNkIehDmZLSTHZeVa4xJV6K145j+SMqRYiMIzkuFs9+lX70SxN C340G1cvHpWL/1+EpMbrPXTKoiwuN9pmhkB28l2HNZPjuf6ymkD2VMkp9wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHmu6EVm/oAp0LE8500TgWzxROcNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzZjNhM2NlLTIzZWUtNDRjZi04MjA3LTdkNTgxNTY5YWY2ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba60iAMA0GCSqGSIb3DQEBCwUAA4IBAQCNLsihaOysgNuLEbUd nPTZsZ53+YAftXzPr79YMLYfB3UtPw3HGLPCqiVhUa/rOfbSXp5kPqwmdRvqMRUl PkOKzf45kfDuIeOw0CgcVGusuBkhbw0mm2A//irUbrKP3eDVp5Viy8Oo/I2MirVB hy2Lbb7GR+xq/ly1CsgOaP9o4cK+6+N+sv4pRtbRIbJZyNPpawIUV/kSJN7Xif4o 9q4Ws5wrlt4A6gPxco3QdafCuPYjeExSOokd86RTxu2AlbBDhlGP5bIoqJW/pwhi UhHLMQ+WOJ8ktzepctatkwJgWwrUXtPVkweH36wEgDHDX0rrNoZsmDVzc9X1jAAd 1mr+ -----END CERTIFICATE-----Generated at Thu Jul 9 11:05:23 2026 by rpki-client