$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b7aebad-8218-4e90-9fdc-d83b5c654d2c.roa File: 1b7aebad-8218-4e90-9fdc-d83b5c654d2c.roa (raw, json) Hash identifier: r4jmcpr8a8jnMSB4Si0uxxX+xDEsWnhT7bkCTUAADBU= Subject key identifier: 7C:B1:58:82:F5:A4:37:0F:D8:F3:B7:1B:23:C3:56:CA:72:40:7E:6D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0C6BB7E2A342A79E0C7777C463A3F035A713C359 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b7aebad-8218-4e90-9fdc-d83b5c654d2c.roa Signing time: Thu 12 Mar 2026 16:27:43 +0000 ROA not before: Thu 12 Mar 2026 16:27:43 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:6b:b7:e2:a3:42:a7:9e:0c:77:77:c4:63:a3:f0:35:a7:13:c3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:27:43 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=8a553fa7e97f6279d5076d915c9e5455b60691666f9e9b01884b712129b32d48, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6b:2b:a7:83:6f:8b:e8:49:7d:a3:2a:e6:6d: e6:c9:25:ee:b9:43:9a:3f:83:35:7c:7d:4e:cb:05: 48:a4:66:58:74:6e:e2:38:d7:33:89:f3:4f:da:29: f0:19:51:41:4c:56:dd:ba:32:da:cd:61:cf:b2:f6: 8d:0a:57:e4:03:e3:f3:3b:f4:32:92:c9:56:02:8d: ca:45:5e:05:f7:6e:61:5f:28:e5:26:a2:b3:9c:2f: b0:a6:92:79:d4:e9:a2:97:3a:ac:da:34:0e:b8:2e: ac:b9:a7:8c:5f:b3:76:f7:b5:c1:ba:56:85:49:62: 8c:b4:dd:3a:c3:7e:37:c1:d6:4b:82:32:92:46:7c: 2d:05:3b:ca:e7:80:14:6b:63:bf:c8:d3:5d:12:9a: da:45:34:d5:a6:6d:4a:7c:f1:a4:f7:96:03:1e:19: a8:91:24:f2:6b:2e:6a:4a:6f:44:84:dd:9f:8d:f7: 94:f7:a9:91:18:17:e8:27:eb:63:93:8b:77:78:69: 4f:c8:06:94:e9:10:0b:fc:ae:50:e5:9e:05:37:20: 06:5f:7a:ff:05:99:78:6a:88:04:55:b4:99:73:25: 7b:a6:db:02:d0:57:8b:49:3e:79:12:3b:25:7f:bc: b8:50:1c:77:3d:d5:ff:0c:24:52:db:1b:f6:b5:43: 0c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B1:58:82:F5:A4:37:0F:D8:F3:B7:1B:23:C3:56:CA:72:40:7E:6D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b7aebad-8218-4e90-9fdc-d83b5c654d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:2000::/40 Signature Algorithm: sha256WithRSAEncryption 16:cc:4b:fc:8e:3d:8f:7b:ab:bc:69:2d:61:f2:55:2c:00:7d: ae:d3:69:9a:b7:aa:f6:6f:90:9f:d8:a1:f1:5d:88:f5:32:b7: de:b9:4f:14:ff:a8:cd:8d:8d:40:75:ea:f2:08:1e:e0:99:9d: 84:19:c7:e5:fc:f9:ef:85:1d:bc:3a:13:5e:cc:d5:6e:07:1b: f6:cc:41:59:0b:a0:3f:ce:2c:67:cc:a5:08:58:75:14:2d:cf: d0:0f:93:8c:ac:fb:f5:71:1d:5e:f8:88:90:dc:ab:38:23:1d: e0:11:6d:9e:65:e4:e0:aa:1a:27:9a:6a:81:c9:77:94:d9:87: 0b:2b:32:d4:33:9c:0a:72:30:22:1c:e5:e8:c2:04:49:7a:61: 9f:fb:17:17:8b:68:ec:33:80:83:d0:c4:e9:21:17:5f:23:f9: 4c:b5:08:b3:0d:17:0d:38:12:92:98:63:06:14:e8:34:a6:bc: 13:8e:62:09:01:9f:16:f9:c0:14:61:93:ed:48:d2:e6:86:20: fb:bc:64:3c:80:4f:e0:2d:07:96:70:75:45:6c:3b:b5:0f:5a: 69:5f:26:7f:54:97:c6:1b:b9:aa:01:7e:19:75:8c:25:f0:58: c5:e9:0e:db:c3:d4:ac:08:0c:a3:c4:5f:6a:28:a9:4b:b8:ac: 7a:c0:d8:fe -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDGu34qNCp54Md3fEY6PwNacTw1kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2Mjc0M1oX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAOGE1NTNmYTdlOTdmNjI3OWQ1MDc2 ZDkxNWM5ZTU0NTViNjA2OTE2NjZmOWU5YjAxODg0YjcxMjEyOWIzMmQ0ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGsrp4Nvi+hJfaMq5m3mySXuuUOa P4M1fH1OywVIpGZYdG7iONczifNP2inwGVFBTFbdujLazWHPsvaNClfkA+PzO/Qy kslWAo3KRV4F925hXyjlJqKznC+wppJ51Omilzqs2jQOuC6suaeMX7N297XBulaF SWKMtN06w343wdZLgjKSRnwtBTvK54AUa2O/yNNdEpraRTTVpm1KfPGk95YDHhmo kSTyay5qSm9EhN2fjfeU96mRGBfoJ+tjk4t3eGlPyAaU6RAL/K5Q5Z4FNyAGX3r/ BZl4aogEVbSZcyV7ptsC0FeLST55Ejslf7y4UBx3PdX/DCRS2xv2tUMM2QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHyxWIL1pDcP2PO3GyPDVspyQH5tMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFiN2FlYmFkLTgyMTgtNGU5MC05ZmRjLWQ4M2I1YzY1NGQyYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauiAwDQYJKoZIhvcNAQELBQADggEBABbMS/yOPY97q7xpLWHy VSwAfa7TaZq3qvZvkJ/YofFdiPUyt965TxT/qM2NjUB16vIIHuCZnYQZx+X8+e+F Hbw6E17M1W4HG/bMQVkLoD/OLGfMpQhYdRQtz9APk4ys+/VxHV74iJDcqzgjHeAR bZ5l5OCqGieaaoHJd5TZhwsrMtQznApyMCIc5ejCBEl6YZ/7FxeLaOwzgIPQxOkh F18j+Uy1CLMNFw04EpKYYwYU6DSmvBOOYgkBnxb5wBRhk+1I0uaGIPu8ZDyAT+At B5ZwdUVsO7UPWmlfJn9Ul8YbuaoBfhl1jCXwWMXpDtvD1KwIDKPEX2ooqUu4rHrA 2P4= -----END CERTIFICATE-----Generated at Thu Mar 19 12:28:07 2026 by rpki-client