$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31b93eb1-f3df-41e8-97a9-6d61adfae37d.roa File: 31b93eb1-f3df-41e8-97a9-6d61adfae37d.roa (raw, json) Hash identifier: 7ZDFxPEQl2Qk1gsuy1GIRFlmrOL8n9oSc4yoE6XjH2U= Subject key identifier: C3:62:0C:26:68:62:81:AC:18:EF:48:29:3A:8A:F6:DA:4E:B4:3F:F7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 16E0B011469A00C33F4BB817FF2A20EA28C87E42 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31b93eb1-f3df-41e8-97a9-6d61adfae37d.roa Signing time: Thu 12 Mar 2026 16:23:25 +0000 ROA not before: Thu 12 Mar 2026 16:23:25 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:b0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e0:b0:11:46:9a:00:c3:3f:4b:b8:17:ff:2a:20:ea:28:c8:7e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:23:25 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=78436556890bacf44d2e7716e08c82221cb0bd720852d70ddeb6b72b31f7d2ef, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:64:be:d7:d3:95:b4:b3:df:07:3e:68:8e:85: 6a:af:b9:41:fa:77:59:1a:b0:d4:8a:33:9c:bb:46: 67:1c:c9:fe:dc:04:96:1b:0f:45:ff:52:ba:7b:3a: a5:96:9c:37:3b:81:81:a9:9a:51:f1:42:3a:0f:e8: d9:43:55:e0:58:2e:73:fd:ac:7c:cc:35:dc:51:a5: 72:56:16:b2:c6:16:df:af:f3:5d:38:2b:a5:70:cc: 1d:e7:d8:a7:19:b0:f4:ad:30:85:85:96:26:68:82: c7:1a:ec:09:88:56:c7:41:c6:35:43:bd:6a:d3:9f: d5:27:e0:6a:b4:51:24:a0:1a:29:26:e1:be:fa:3c: 99:8e:b5:e3:49:d2:11:c9:fb:35:74:0a:d3:c8:b9: c0:4b:aa:d8:53:81:ea:eb:98:88:64:cf:c3:68:a6: 24:5f:c6:48:3a:79:ca:65:81:11:1d:c2:2f:0c:b7: f5:a1:1c:0f:8c:96:25:d3:29:db:aa:ef:5c:19:32: 33:8d:f4:54:db:68:ef:d3:b9:b9:9c:e7:8b:e0:af: b3:16:df:06:31:5f:6d:f3:67:7f:7d:91:41:c7:1e: 7c:32:41:54:47:71:47:89:84:f4:2b:40:31:81:8e: e3:42:3c:32:1c:36:0f:32:fe:96:5b:7a:61:36:c4: 5c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:62:0C:26:68:62:81:AC:18:EF:48:29:3A:8A:F6:DA:4E:B4:3F:F7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31b93eb1-f3df-41e8-97a9-6d61adfae37d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:b0c0::/48 Signature Algorithm: sha256WithRSAEncryption 1d:e8:dd:ab:74:77:84:9e:0f:5f:b6:d8:ff:ca:b7:31:b7:a2: 67:52:fb:c4:d1:e9:f4:ad:f6:4e:df:cc:16:8c:ff:61:d0:34: cf:c2:a3:71:35:a3:0c:5d:e3:3b:5a:fb:64:ed:7e:b7:b2:9a: 1c:ac:f3:78:81:0a:f3:48:36:08:d6:02:c7:c5:4c:45:ee:09: c4:b1:9f:fb:81:35:66:8e:da:f9:5c:0e:77:b7:61:bf:30:47: 7d:57:77:dd:80:34:07:cc:5a:9d:77:b9:4a:82:a0:c0:ad:43: df:2d:e5:f5:cb:96:32:18:21:e2:ee:1c:53:d7:7f:88:19:64: 89:b5:f6:9e:76:11:dd:30:ba:b0:3f:08:83:5b:e7:f0:ff:c5: e7:cc:91:37:3b:ca:4d:22:8e:73:9a:2d:98:04:83:28:7d:c9: 6b:41:8a:85:80:07:8d:bc:b8:3b:bd:74:0a:40:41:cd:81:4d: 71:e7:0b:0a:db:a4:a6:8a:6e:83:d4:d0:fe:04:ac:80:35:23: 4a:7b:b7:40:2e:b5:94:87:f0:91:fb:27:be:11:6e:84:29:20: ab:38:06:34:00:a7:ca:b3:2a:8d:2f:e3:40:bc:f3:19:95:a0: 89:6e:4f:ea:a3:f5:03:2f:da:b3:ba:60:33:bf:ea:59:2b:a0: 02:b1:fe:6f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFuCwEUaaAMM/S7gX/yog6ijIfkIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjMyNVoX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNANzg0MzY1NTY4OTBiYWNmNDRkMmU3 NzE2ZTA4YzgyMjIxY2IwYmQ3MjA4NTJkNzBkZGViNmI3MmIzMWY3ZDJlZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mS+19OVtLPfBz5ojoVqr7lB+ndZ GrDUijOcu0ZnHMn+3ASWGw9F/1K6ezqllpw3O4GBqZpR8UI6D+jZQ1XgWC5z/ax8 zDXcUaVyVhayxhbfr/NdOCulcMwd59inGbD0rTCFhZYmaILHGuwJiFbHQcY1Q71q 05/VJ+BqtFEkoBopJuG++jyZjrXjSdIRyfs1dArTyLnAS6rYU4Hq65iIZM/DaKYk X8ZIOnnKZYERHcIvDLf1oRwPjJYl0ynbqu9cGTIzjfRU22jv07m5nOeL4K+zFt8G MV9t82d/fZFBxx58MkFUR3FHiYT0K0AxgY7jQjwyHDYPMv6WW3phNsRcrQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMNiDCZoYoGsGO9IKTqK9tpOtD/3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMxYjkzZWIxLWYzZGYtNDFlOC05N2E5LTZkNjFhZGZhZTM3ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaurDAMA0GCSqGSIb3DQEBCwUAA4IBAQAd6N2rdHeEng9fttj/ yrcxt6JnUvvE0en0rfZO38wWjP9h0DTPwqNxNaMMXeM7Wvtk7X63spocrPN4gQrz SDYI1gLHxUxF7gnEsZ/7gTVmjtr5XA53t2G/MEd9V3fdgDQHzFqdd7lKgqDArUPf LeX1y5YyGCHi7hxT13+IGWSJtfaedhHdMLqwPwiDW+fw/8XnzJE3O8pNIo5zmi2Y BIMofclrQYqFgAeNvLg7vXQKQEHNgU1x5wsK26Smim6D1ND+BKyANSNKe7dALrWU h/CR+ye+EW6EKSCrOAY0AKfKsyqNL+NAvPMZlaCJbk/qo/UDL9qzumAzv+pZK6AC sf5v -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:21 2026 by rpki-client