$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0c0e6af5-6df3-4cdc-8537-f26e2a75524d.roa File: 0c0e6af5-6df3-4cdc-8537-f26e2a75524d.roa (raw, json) Hash identifier: wcVqFlg/3hWDi9sCLKCnBTAfYWk0M/7HaO88P/DR3UA= Subject key identifier: 8D:71:65:BB:80:26:D1:47:1C:16:B6:CC:2E:53:0E:36:8C:92:84:27 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 453329FB9A36D415BC90B894DB1ED16900BE47B0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0c0e6af5-6df3-4cdc-8537-f26e2a75524d.roa Signing time: Mon 22 Jun 2026 00:00:40 +0000 ROA not before: Mon 22 Jun 2026 00:00:40 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:33:29:fb:9a:36:d4:15:bc:90:b8:94:db:1e:d1:69:00:be:47:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:00:40 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=88f941c285d460eb4d95a3bae2dacf4f399dfd8f7cf9d7ba2eddee7da5ff9405, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e3:ce:6e:8a:0b:7c:3d:11:13:d7:49:9e:70: 4a:8d:4c:32:81:4a:60:25:bf:a9:45:ec:18:2b:8f: 39:2a:7a:ff:f4:43:5b:45:5c:d1:47:88:03:2d:05: f0:fd:0b:c6:11:d0:bd:38:64:da:b3:23:d5:31:cf: 91:26:22:23:65:03:41:7c:d0:e8:2b:ff:5f:5a:11: 54:10:87:bc:a6:94:89:5d:13:1b:1d:f3:b6:ce:23: b8:27:03:dd:14:26:d1:2c:86:0b:1a:c3:c7:30:74: 3e:22:7c:10:65:00:df:5e:96:56:4b:b4:2e:d2:6e: 21:49:9f:ae:0f:c6:88:80:43:08:1c:88:72:ac:25: 57:72:97:56:04:40:79:5b:58:f9:19:15:07:cc:74: 8c:ca:cf:ba:a8:3e:f2:34:be:88:46:33:be:97:c1: 33:9d:f3:c8:5a:ed:be:1a:04:3f:ad:8a:e0:6f:d1: ee:38:44:61:d6:dd:f8:9b:e8:dc:25:13:2e:fa:26: 2c:5b:8d:2c:f8:69:8e:03:63:af:a8:fc:03:42:55: de:bf:94:18:19:ca:a7:84:ad:90:7c:05:8d:f1:d7: 48:73:14:87:89:55:c6:21:98:0f:74:b6:d6:04:0d: 18:d4:64:eb:3e:59:a5:61:ce:e7:3d:f4:ab:c8:dc: 27:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:71:65:BB:80:26:D1:47:1C:16:B6:CC:2E:53:0E:36:8C:92:84:27 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0c0e6af5-6df3-4cdc-8537-f26e2a75524d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:b000::/40 Signature Algorithm: sha256WithRSAEncryption 7d:11:04:47:6a:64:79:b7:aa:a7:57:b2:19:ba:85:a7:e8:a0: b3:d4:70:88:5f:8f:89:ba:c3:e5:16:e9:99:30:b2:7e:0c:8d: 8a:92:d8:b9:63:42:39:e7:71:f4:10:34:f0:06:d8:0e:1c:d5: 0f:d9:89:1a:05:50:60:73:d4:da:16:56:d4:21:62:57:83:e1: 21:17:54:6b:0d:36:15:fd:01:9a:71:c0:14:7b:2d:52:e1:6a: ae:0d:0a:1c:1b:48:34:f4:11:a4:18:1a:b3:e8:8a:49:2e:44: f0:e0:e7:d1:06:21:81:d4:dd:62:74:42:9e:0c:fe:24:ea:78: 86:99:7f:e8:4a:2b:83:73:8b:7c:ed:cb:56:4c:e5:c9:03:49: f5:67:8a:ca:b3:2e:cd:bd:9f:e6:06:33:b5:ba:c8:fc:ef:ef: b7:d1:7f:b1:5a:60:cb:9d:ae:5c:38:36:b2:e5:f6:3a:9e:1f: 92:09:0a:f9:34:74:05:2a:93:5c:61:a7:f0:20:40:31:10:57: 42:07:c1:aa:42:88:0e:e9:7c:54:85:4d:4a:ba:85:a0:66:64: 81:7e:c8:9a:b1:2d:0a:95:7b:54:4a:63:3b:17:18:cb:c7:eb: bb:0e:ca:0b:61:94:1b:44:1c:94:25:8b:3f:13:f3:e5:55:ab: 99:f4:26:ab -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURTMp+5o21BW8kLiU2x7RaQC+R7AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMDA0MFoX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNAODhmOTQxYzI4NWQ0NjBlYjRkOTVh M2JhZTJkYWNmNGYzOTlkZmQ4ZjdjZjlkN2JhMmVkZGVlN2RhNWZmOTQwNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkePObooLfD0RE9dJnnBKjUwygUpg Jb+pRewYK485Knr/9ENbRVzRR4gDLQXw/QvGEdC9OGTasyPVMc+RJiIjZQNBfNDo K/9fWhFUEIe8ppSJXRMbHfO2ziO4JwPdFCbRLIYLGsPHMHQ+InwQZQDfXpZWS7Qu 0m4hSZ+uD8aIgEMIHIhyrCVXcpdWBEB5W1j5GRUHzHSMys+6qD7yNL6IRjO+l8Ez nfPIWu2+GgQ/rYrgb9HuOERh1t34m+jcJRMu+iYsW40s+GmOA2OvqPwDQlXev5QY GcqnhK2QfAWN8ddIcxSHiVXGIZgPdLbWBA0Y1GTrPlmlYc7nPfSryNwnCwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFI1xZbuAJtFHHBa2zC5TDjaMkoQnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBjMGU2YWY1LTZkZjMtNGNkYy04NTM3LWYyNmUyYTc1NTI0ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba67AwDQYJKoZIhvcNAQELBQADggEBAH0RBEdqZHm3qqdXshm6 hafooLPUcIhfj4m6w+UW6Zkwsn4MjYqS2LljQjnncfQQNPAG2A4c1Q/ZiRoFUGBz 1NoWVtQhYleD4SEXVGsNNhX9AZpxwBR7LVLhaq4NChwbSDT0EaQYGrPoikkuRPDg 59EGIYHU3WJ0Qp4M/iTqeIaZf+hKK4Nzi3zty1ZM5ckDSfVnisqzLs29n+YGM7W6 yPzv77fRf7FaYMudrlw4NrLl9jqeH5IJCvk0dAUqk1xhp/AgQDEQV0IHwapCiA7p fFSFTUq6haBmZIF+yJqxLQqVe1RKYzsXGMvH67sOygthlBtEHJQliz8T8+VVq5n0 Jqs= -----END CERTIFICATE-----Generated at Thu Jul 9 11:06:28 2026 by rpki-client