$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/063a85bf-25e3-4208-9073-4dcf5c7a6c7e.roa File: 063a85bf-25e3-4208-9073-4dcf5c7a6c7e.roa (raw, json) Hash identifier: hrVd+FgFZ/m3wnnIYoYApz51pywgaQaDT7eRy2J2CPU= Subject key identifier: B3:BD:D0:0D:2F:7B:0D:25:ED:95:3D:13:56:0E:03:62:D8:24:E9:F2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 523BCC8D8B1C9E8FBA6FF42541D54D85E32E766C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/063a85bf-25e3-4208-9073-4dcf5c7a6c7e.roa Signing time: Thu 12 Mar 2026 16:23:24 +0000 ROA not before: Thu 12 Mar 2026 16:23:24 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:3b:cc:8d:8b:1c:9e:8f:ba:6f:f4:25:41:d5:4d:85:e3:2e:76:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:23:24 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=2b507e2a302d4eabc8569d6dc238344d66dfbbc8b87836a05deac75c7ad6a6b0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8f:28:87:9e:92:f5:59:f9:57:28:74:bd:ca: a2:c8:a7:bd:ca:c5:f6:79:2d:22:b3:bc:c1:0a:d9: b5:1d:4e:37:a1:eb:cb:1d:bd:d8:a0:53:55:0a:44: 7c:16:42:d1:3b:27:b8:34:e5:a5:46:d9:c1:3c:d0: 9f:90:fe:6c:8e:23:c5:ec:b0:27:c3:2b:32:8a:d8: 26:23:7a:fe:04:87:48:bc:d9:0d:b4:d4:27:b6:23: 55:33:04:19:7b:59:e1:50:15:b9:5b:15:64:c9:f5: 29:6a:15:7a:d7:9f:28:99:b5:d7:7e:a0:63:c6:fa: 58:1d:ad:bd:2c:04:52:4f:8b:b1:af:f5:cc:24:50: 0b:ee:f0:7d:bf:a5:06:84:81:e8:9e:24:cb:79:5e: 76:b3:0c:11:ad:24:15:27:3b:2f:6d:64:19:d3:34: ec:dd:fa:49:d1:79:86:c5:80:5c:7c:f2:f2:35:46: f6:21:69:f7:da:60:de:19:ed:71:88:56:3e:04:0a: 5c:79:73:f6:b6:81:75:b3:a6:69:df:18:5b:23:27: 96:e0:00:41:86:79:74:69:c0:51:0d:70:b8:a2:8d: 5d:88:03:f0:be:b5:47:5f:2e:46:31:88:aa:2c:9b: b7:de:98:a7:bb:06:46:f4:82:3a:d3:78:e4:e3:ae: 95:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BD:D0:0D:2F:7B:0D:25:ED:95:3D:13:56:0E:03:62:D8:24:E9:F2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/063a85bf-25e3-4208-9073-4dcf5c7a6c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:b040::/48 Signature Algorithm: sha256WithRSAEncryption 83:65:25:56:de:bc:15:69:3c:cb:ca:41:b1:fe:bc:46:be:23: 66:b0:41:8c:aa:db:53:2d:d9:96:aa:ff:96:4c:17:a5:be:44: 73:bd:f5:ae:d5:5d:84:5b:0c:8e:16:48:c6:c5:a6:2c:75:17: 7f:69:45:dc:33:07:9c:f0:f0:37:1f:35:20:01:22:9d:d3:e4: 54:36:07:2b:ce:1c:16:b2:b8:02:3f:5c:7c:be:55:6d:8d:d2: ff:00:5a:50:45:04:fa:48:4d:9d:7a:ca:cd:4e:64:82:78:59: 04:3a:8a:ef:ee:77:84:60:76:eb:b9:ab:f9:db:58:a7:da:07: b8:23:f5:7a:a1:46:fe:1b:8a:c2:b2:d4:6a:bc:5b:49:a7:ae: 5d:0b:03:ca:51:2e:8e:1a:54:1e:e0:e5:85:8b:bb:93:5d:44: 9d:8f:ec:1a:d5:6f:12:1c:61:cb:ea:fd:56:dd:df:fe:13:ba: 0c:8f:e3:c7:69:fd:fb:ae:95:5f:cb:3c:3e:ef:07:10:0b:ab: ca:07:5e:c8:fd:29:6d:38:ae:06:14:1f:ed:9b:c9:2f:e9:94: 78:97:36:02:c2:10:3f:ed:6f:e6:e9:28:a7:d1:0b:50:87:cd: be:18:2f:1d:83:6a:46:7a:a1:04:da:33:fe:09:21:52:34:d1: 47:2e:70:d8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUjvMjYscno+6b/QlQdVNheMudmwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjMyNFoX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAMmI1MDdlMmEzMDJkNGVhYmM4NTY5 ZDZkYzIzODM0NGQ2NmRmYmJjOGI4NzgzNmEwNWRlYWM3NWM3YWQ2YTZiMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs48oh56S9Vn5Vyh0vcqiyKe9ysX2 eS0is7zBCtm1HU43oevLHb3YoFNVCkR8FkLROye4NOWlRtnBPNCfkP5sjiPF7LAn wysyitgmI3r+BIdIvNkNtNQntiNVMwQZe1nhUBW5WxVkyfUpahV6158ombXXfqBj xvpYHa29LARST4uxr/XMJFAL7vB9v6UGhIHoniTLeV52swwRrSQVJzsvbWQZ0zTs 3fpJ0XmGxYBcfPLyNUb2IWn32mDeGe1xiFY+BApceXP2toF1s6Zp3xhbIyeW4ABB hnl0acBRDXC4oo1diAPwvrVHXy5GMYiqLJu33pinuwZG9II603jk466VjwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLO90A0vew0l7ZU9E1YOA2LYJOnyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA2M2E4NWJmLTI1ZTMtNDIwOC05MDczLTRkY2Y1YzdhNmM3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaurBAMA0GCSqGSIb3DQEBCwUAA4IBAQCDZSVW3rwVaTzLykGx /rxGviNmsEGMqttTLdmWqv+WTBelvkRzvfWu1V2EWwyOFkjGxaYsdRd/aUXcMwec 8PA3HzUgASKd0+RUNgcrzhwWsrgCP1x8vlVtjdL/AFpQRQT6SE2desrNTmSCeFkE Oorv7neEYHbruav521in2ge4I/V6oUb+G4rCstRqvFtJp65dCwPKUS6OGlQe4OWF i7uTXUSdj+wa1W8SHGHL6v1W3d/+E7oMj+PHaf37rpVfyzw+7wcQC6vKB17I/Slt OK4GFB/tm8kv6ZR4lzYCwhA/7W/m6Sin0QtQh82+GC8dg2pGeqEE2jP+CSFSNNFH LnDY -----END CERTIFICATE-----Generated at Thu Mar 19 12:28:02 2026 by rpki-client