$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1d8f4f77-fc49-40a4-a1bc-7aee17724141.roa File: 1d8f4f77-fc49-40a4-a1bc-7aee17724141.roa (raw, json) Hash identifier: HXVKfGh8cLn9cmI+iZgSJXvA/H8dFZNGMpVid957N5I= Subject key identifier: 56:1E:3E:5E:7F:F6:67:D3:15:45:70:65:A2:1C:54:BA:6B:F9:B1:D0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6F7DF5A15C5B84E917B27008285B3AB7171BF4BC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1d8f4f77-fc49-40a4-a1bc-7aee17724141.roa Signing time: Thu 12 Mar 2026 16:26:54 +0000 ROA not before: Thu 12 Mar 2026 16:26:54 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da33:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7d:f5:a1:5c:5b:84:e9:17:b2:70:08:28:5b:3a:b7:17:1b:f4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:26:54 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=8c869cc439675d99d88065d24023215dd3e734bd1d642ef7fad6b57c8c86de18, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:90:92:39:f7:29:3e:51:94:0e:4a:4a:ac:89: ca:d6:1a:e9:27:b1:80:45:c7:48:b4:e3:65:47:df: 03:3f:07:ff:bf:00:2a:6a:bd:4f:5d:00:e0:fb:ea: 72:d2:dc:81:19:4d:47:70:d1:f1:13:aa:9e:1f:de: 7d:9b:8f:b9:72:e5:f1:e1:4f:f9:fb:dd:b9:a6:4e: a6:62:1c:83:67:d2:77:7d:a0:0c:3e:ed:3c:97:62: 17:3e:6e:65:0f:ee:85:df:e7:d0:aa:a9:63:6b:2a: 9b:dc:75:06:c1:bc:e1:f2:ed:ab:05:90:91:44:8c: 04:28:70:ad:b9:12:ca:f9:c0:6d:5d:00:22:02:1d: 84:bd:33:f2:e5:18:21:b5:dc:5b:8d:cf:02:1e:7a: 6f:d7:17:66:f9:11:34:ba:7c:29:52:ec:61:63:1d: 9e:04:62:d2:67:a6:d5:dc:d6:e1:80:02:96:b9:f3: 8a:86:f4:ef:f0:b2:39:ba:4b:9f:b4:f2:dc:2f:3b: cc:36:11:18:13:05:66:99:da:78:37:73:2f:14:8a: 46:74:70:78:4f:2e:f6:83:be:45:a0:30:c3:86:e1: 92:9b:78:52:4a:e5:45:32:01:b6:96:2c:d2:d1:af: a4:99:eb:0b:36:3f:73:f9:ad:ed:5b:8b:ec:10:fb: 1f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1E:3E:5E:7F:F6:67:D3:15:45:70:65:A2:1C:54:BA:6B:F9:B1:D0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1d8f4f77-fc49-40a4-a1bc-7aee17724141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da33:800::/40 Signature Algorithm: sha256WithRSAEncryption 02:28:9e:cd:fe:ea:41:ac:62:8b:2a:04:7d:2d:51:6f:89:ab: c8:44:9c:9b:32:f0:27:46:7a:30:8b:5d:6a:70:eb:8f:e1:86: d4:86:00:cc:de:ce:ef:07:e8:42:99:5e:b1:c5:09:01:e4:20: 97:67:36:a7:70:33:1a:28:11:92:4b:ec:75:a1:3a:f6:fb:65: ad:ab:c6:04:c9:c8:31:1a:ba:55:66:da:58:d4:82:95:a5:c0: 0f:5a:76:87:3b:fd:ba:c0:88:45:76:cb:4a:6a:52:07:2b:e6: 97:d4:b4:64:9e:b8:d0:22:60:21:18:31:d5:47:b2:a8:8c:8f: 58:75:83:66:43:14:0e:4c:68:35:03:15:c1:62:4f:cf:7a:ab: c0:dc:bf:32:fc:69:6a:53:6f:b5:6e:31:31:8f:6a:14:ee:75: 50:72:61:9c:95:a8:7e:52:26:08:05:e9:e3:0d:23:42:fd:61: 2a:86:ac:b7:25:89:16:b1:8d:ae:a3:4d:7b:fa:1e:a3:47:21: ae:7e:f8:f0:21:2a:1e:b3:23:c7:87:25:c3:1e:4a:ff:7b:6a: 0f:1b:8a:d0:2d:9c:7f:4f:d0:12:90:bd:85:20:6f:e8:58:e9: ed:19:dd:99:cc:d7:76:b8:d8:ab:16:27:a5:40:83:7b:77:af: 8f:07:c5:ae -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUb331oVxbhOkXsnAIKFs6txcb9LwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjY1NFoX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAOGM4NjljYzQzOTY3NWQ5OWQ4ODA2 NWQyNDAyMzIxNWRkM2U3MzRiZDFkNjQyZWY3ZmFkNmI1N2M4Yzg2ZGUxODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpCSOfcpPlGUDkpKrInK1hrpJ7GA RcdItONlR98DPwf/vwAqar1PXQDg++py0tyBGU1HcNHxE6qeH959m4+5cuXx4U/5 +925pk6mYhyDZ9J3faAMPu08l2IXPm5lD+6F3+fQqqljayqb3HUGwbzh8u2rBZCR RIwEKHCtuRLK+cBtXQAiAh2EvTPy5Rghtdxbjc8CHnpv1xdm+RE0unwpUuxhYx2e BGLSZ6bV3NbhgAKWufOKhvTv8LI5ukuftPLcLzvMNhEYEwVmmdp4N3MvFIpGdHB4 Ty72g75FoDDDhuGSm3hSSuVFMgG2lizS0a+kmesLNj9z+a3tW4vsEPsfgQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFYePl5/9mfTFUVwZaIcVLpr+bHQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFkOGY0Zjc3LWZjNDktNDBhNC1hMWJjLTdhZWUxNzcyNDE0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMwgwDQYJKoZIhvcNAQELBQADggEBAAIons3+6kGsYosqBH0t UW+Jq8hEnJsy8CdGejCLXWpw64/hhtSGAMzezu8H6EKZXrHFCQHkIJdnNqdwMxoo EZJL7HWhOvb7Za2rxgTJyDEaulVm2ljUgpWlwA9adoc7/brAiEV2y0pqUgcr5pfU tGSeuNAiYCEYMdVHsqiMj1h1g2ZDFA5MaDUDFcFiT896q8DcvzL8aWpTb7VuMTGP ahTudVByYZyVqH5SJggF6eMNI0L9YSqGrLcliRaxja6jTXv6HqNHIa5++PAhKh6z I8eHJcMeSv97ag8bitAtnH9P0BKQvYUgb+hY6e0Z3ZnM13a42KsWJ6VAg3t3r48H xa4= -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:03 2026 by rpki-client