$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1310cdca-925e-4f9b-913f-8acc4b67cee7.roa File: 1310cdca-925e-4f9b-913f-8acc4b67cee7.roa (raw, json) Hash identifier: UEyfydKK1KxhgvTqFKiz4mtdJh08U4ZoMYbqB0alQSE= Subject key identifier: 70:3E:DC:B2:9E:A1:0A:2A:28:E0:42:C1:B6:D7:81:2C:0C:07:01:C8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 04620F52A9AC08657831F9AC95D951AEE68C85B2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1310cdca-925e-4f9b-913f-8acc4b67cee7.roa Signing time: Sat 02 May 2026 00:01:13 +0000 ROA not before: Sat 02 May 2026 00:01:13 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 00:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:62:0f:52:a9:ac:08:65:78:31:f9:ac:95:d9:51:ae:e6:8c:85:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:01:13 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=35d2e05bbcd84eab594d374cb85f238178857596ca899a908ed3532aac4fb03d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:58:68:7d:ad:c1:34:7d:79:34:75:84:04:45: c4:3c:ef:75:0b:e2:66:d4:4d:34:bb:f9:81:73:8f: 63:2e:5b:7a:2e:3b:88:de:d1:68:29:39:e3:ae:94: 5e:b1:e9:b2:bb:19:ef:0b:60:51:83:14:da:0e:45: 3b:d9:09:14:84:ce:78:af:07:cc:3f:03:59:63:d6: 69:4a:7d:26:7c:38:b4:e8:83:11:a5:a5:3a:cf:d4: 81:07:e9:cb:8d:58:11:bc:dd:e7:f0:23:3c:18:6a: 19:3c:ee:c0:40:ce:3a:c3:8c:5b:e9:94:e1:09:a3: 29:82:9f:82:95:17:31:59:94:be:8f:2d:11:29:81: c9:20:c1:b1:9e:72:79:97:6d:8d:65:38:ad:4d:e8: 7c:de:87:82:fc:07:fe:99:7f:30:02:78:f3:0f:a4: f2:fc:6c:b5:87:68:2a:0d:9a:4b:b1:60:1b:37:44: 52:2c:dc:17:04:f3:71:4b:40:31:7c:48:b9:2e:b4: bc:28:48:07:0e:7f:84:d1:e3:56:c6:70:91:81:8e: 0d:cc:e1:52:af:a5:f2:88:bc:88:55:d0:f4:37:b4: b3:3d:84:c4:3e:3c:0a:9e:c7:e9:9f:58:8f:2b:87: 39:08:04:95:72:84:67:c0:7e:ac:0c:47:aa:64:ce: c3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3E:DC:B2:9E:A1:0A:2A:28:E0:42:C1:B6:D7:81:2C:0C:07:01:C8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1310cdca-925e-4f9b-913f-8acc4b67cee7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:c880::/48 Signature Algorithm: sha256WithRSAEncryption 0d:b8:6d:c7:ee:83:49:ae:58:6c:03:c6:59:26:16:a8:00:4f: 60:be:40:33:2a:9c:31:f4:3e:aa:cd:11:95:25:57:b2:d8:18: d3:21:62:c8:98:da:df:e6:25:fc:1a:61:ae:05:f3:24:c8:f8: 24:74:d6:13:21:65:e4:81:2b:d7:76:58:f4:9e:3d:6e:33:44: 85:ec:f4:0d:fa:e0:dd:f7:05:eb:da:70:12:5f:c9:16:24:49: 40:58:5e:ee:f3:c4:54:cc:f1:b4:d6:fb:ff:89:fd:58:16:6b: d1:07:c1:40:7d:00:9e:de:ee:f8:1a:ea:a5:24:e1:89:be:22: 95:4f:f4:2d:24:da:61:a0:22:b9:ed:1b:68:03:9f:89:d2:b9: 7d:ff:37:5e:bd:be:ff:ea:2a:07:45:26:34:75:c8:ea:94:5e: f1:18:e6:40:57:f8:9f:88:bb:9c:3c:99:f0:6f:b1:b7:47:40: 87:76:f7:f9:f6:a4:84:94:95:45:fb:f7:a1:04:0a:51:b7:3e: e1:b4:24:28:f1:1f:b4:32:51:0e:d0:d6:29:da:89:96:bc:41: df:72:3d:18:78:20:2f:fb:e3:e9:77:0a:88:e4:5b:af:a1:1e: 95:61:47:a2:41:f9:12:be:72:89:7a:d3:a4:cb:ad:1b:f5:34: 6d:de:56:5e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBGIPUqmsCGV4MfmsldlRruaMhbIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwMjAwMDExM1oX DTI2MDczMTIzNTk1OVowejFJMEcGA1UEBRNAMzVkMmUwNWJiY2Q4NGVhYjU5NGQz NzRjYjg1ZjIzODE3ODg1NzU5NmNhODk5YTkwOGVkMzUzMmFhYzRmYjAzZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1hofa3BNH15NHWEBEXEPO91C+Jm 1E00u/mBc49jLlt6LjuI3tFoKTnjrpResemyuxnvC2BRgxTaDkU72QkUhM54rwfM PwNZY9ZpSn0mfDi06IMRpaU6z9SBB+nLjVgRvN3n8CM8GGoZPO7AQM46w4xb6ZTh CaMpgp+ClRcxWZS+jy0RKYHJIMGxnnJ5l22NZTitTeh83oeC/Af+mX8wAnjzD6Ty /Gy1h2gqDZpLsWAbN0RSLNwXBPNxS0AxfEi5LrS8KEgHDn+E0eNWxnCRgY4NzOFS r6XyiLyIVdD0N7SzPYTEPjwKnsfpn1iPK4c5CASVcoRnwH6sDEeqZM7D4wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHA+3LKeoQoqKOBCwbbXgSwMBwHIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEzMTBjZGNhLTkyNWUtNGY5Yi05MTNmLThhY2M0YjY3Y2VlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6siAMA0GCSqGSIb3DQEBCwUAA4IBAQANuG3H7oNJrlhsA8ZZ JhaoAE9gvkAzKpwx9D6qzRGVJVey2BjTIWLImNrf5iX8GmGuBfMkyPgkdNYTIWXk gSvXdlj0nj1uM0SF7PQN+uDd9wXr2nASX8kWJElAWF7u88RUzPG01vv/if1YFmvR B8FAfQCe3u74GuqlJOGJviKVT/QtJNphoCK57RtoA5+J0rl9/zdevb7/6ioHRSY0 dcjqlF7xGOZAV/ifiLucPJnwb7G3R0CHdvf59qSElJVF+/ehBApRtz7htCQo8R+0 MlEO0NYp2omWvEHfcj0YeCAv++PpdwqI5FuvoR6VYUeiQfkSvnKJetOky60b9TRt 3lZe -----END CERTIFICATE-----Generated at Sun May 3 15:23:35 2026 by rpki-client