$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3deb79c0-87b5-451e-aac9-0157feb3644e.roa File: 3deb79c0-87b5-451e-aac9-0157feb3644e.roa (raw, json) Hash identifier: t1uB7uf3WYjx5tdgDg1aHJkDr/V4spt3lK25uc/P3/I= Subject key identifier: 1D:55:70:47:7D:61:D2:65:55:38:98:3E:D6:0F:57:51:AB:FF:EE:11 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 69A65FEF02F5DDEE4057BBF1433A1A1F8E533470 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3deb79c0-87b5-451e-aac9-0157feb3644e.roa Signing time: Thu 12 Mar 2026 16:23:27 +0000 ROA not before: Thu 12 Mar 2026 16:23:27 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a6:5f:ef:02:f5:dd:ee:40:57:bb:f1:43:3a:1a:1f:8e:53:34:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:23:27 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=30137a882c031930ad139c8e56e04e0851149ec084590a815c7ab3c14aa20232, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:41:7e:80:03:31:6f:58:7f:e0:29:d9:03:5a: fc:65:67:5d:d8:82:f1:2c:3c:8b:a5:17:d9:b0:65: fc:2f:97:5e:50:35:01:1c:32:24:d4:52:0b:c3:45: 99:5d:4e:29:3b:9d:b6:ca:66:ad:81:df:a9:13:fe: 55:51:2e:70:24:fb:cf:c9:52:f9:b8:5b:a8:e3:5a: 63:68:2d:71:4a:b0:a9:45:85:00:6f:52:f5:03:b1: e6:a1:71:6c:ad:56:9c:3f:b2:77:71:bc:94:6f:a3: 31:76:a6:55:3e:23:cf:86:c0:3a:d7:6f:ca:cb:68: 1a:3d:7c:8f:8e:0e:cf:99:56:35:10:3f:ce:17:4f: 43:96:a0:a1:43:7c:29:ab:86:e3:59:53:8d:75:e7: 22:0c:27:04:8d:7f:87:95:b8:11:36:e2:17:88:11: bb:d3:69:98:2b:ee:e5:63:11:b1:61:26:f9:00:7e: 58:26:0d:f6:ce:97:9a:1f:c4:51:26:3f:aa:f7:31: 6e:46:d3:56:ef:d8:0c:51:fa:ef:62:10:81:79:b1: 27:9d:22:3c:e9:b2:e6:b8:91:40:ef:93:01:a3:05: c9:e8:2e:fe:52:70:f2:5a:57:3d:f4:90:e9:c9:da: 69:f5:d1:00:16:19:f4:5c:9a:5c:5c:e8:ad:c8:72: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:55:70:47:7D:61:D2:65:55:38:98:3E:D6:0F:57:51:AB:FF:EE:11 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3deb79c0-87b5-451e-aac9-0157feb3644e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption 98:d2:88:f2:90:91:37:12:88:e8:a7:f8:37:3a:e7:ce:31:6c: 3d:5c:84:e6:78:7b:05:46:f2:ee:79:cf:94:b2:38:a0:00:83: 11:71:39:f0:8c:f3:5d:1a:a5:46:90:14:9e:cc:5a:c5:6f:36: ce:93:f8:f8:9f:46:9b:2c:76:b6:07:29:50:33:ad:6e:ec:bc: 3f:36:cc:c7:dd:88:22:4a:c1:5b:36:e5:fe:20:82:70:6c:6a: 0f:81:7a:0a:9c:29:73:4b:b0:9b:24:e8:a6:ee:b7:68:67:57: 66:78:f9:a6:82:85:f3:9a:f7:53:cf:ce:99:06:49:d0:c4:07: f3:ef:9a:a9:b3:d6:e7:37:be:0e:d6:b5:cc:f5:2c:41:4f:a8: 54:7d:65:db:49:44:3e:a1:8e:a7:c9:5a:41:68:f6:18:bc:a8: 34:02:e4:47:ae:4a:71:76:21:e6:2c:bf:24:0b:88:00:70:2e: e9:99:6d:d5:15:3a:11:96:c5:a1:a7:43:90:22:b2:c1:96:08: b1:08:ae:12:d0:8b:65:16:53:e8:28:24:a1:0c:bf:53:05:b0: 53:ab:cc:60:ab:27:05:3d:c9:a8:20:c5:f2:b2:67:56:d7:09: b8:ce:b3:4c:e2:b4:fa:30:75:c7:14:65:aa:e4:18:75:8d:fc: 80:54:37:bb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaaZf7wL13e5AV7vxQzoaH45TNHAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjMyN1oX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAMzAxMzdhODgyYzAzMTkzMGFkMTM5 YzhlNTZlMDRlMDg1MTE0OWVjMDg0NTkwYTgxNWM3YWIzYzE0YWEyMDIzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEF+gAMxb1h/4CnZA1r8ZWdd2ILx LDyLpRfZsGX8L5deUDUBHDIk1FILw0WZXU4pO522ymatgd+pE/5VUS5wJPvPyVL5 uFuo41pjaC1xSrCpRYUAb1L1A7HmoXFsrVacP7J3cbyUb6MxdqZVPiPPhsA612/K y2gaPXyPjg7PmVY1ED/OF09DlqChQ3wpq4bjWVONdeciDCcEjX+HlbgRNuIXiBG7 02mYK+7lYxGxYSb5AH5YJg32zpeaH8RRJj+q9zFuRtNW79gMUfrvYhCBebEnnSI8 6bLmuJFA75MBowXJ6C7+UnDyWlc99JDpydpp9dEAFhn0XJpcXOityHI2EQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFB1VcEd9YdJlVTiYPtYPV1Gr/+4RMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNkZWI3OWMwLTg3YjUtNDUxZS1hYWM5LTAxNTdmZWIzNjQ0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbausDAMA0GCSqGSIb3DQEBCwUAA4IBAQCY0ojykJE3Eojop/g3 OufOMWw9XITmeHsFRvLuec+UsjigAIMRcTnwjPNdGqVGkBSezFrFbzbOk/j4n0ab LHa2BylQM61u7Lw/NszH3YgiSsFbNuX+IIJwbGoPgXoKnClzS7CbJOim7rdoZ1dm ePmmgoXzmvdTz86ZBknQxAfz75qps9bnN74O1rXM9SxBT6hUfWXbSUQ+oY6nyVpB aPYYvKg0AuRHrkpxdiHmLL8kC4gAcC7pmW3VFToRlsWhp0OQIrLBlgixCK4S0Itl FlPoKCShDL9TBbBTq8xgqycFPcmoIMXysmdW1wm4zrNM4rT6MHXHFGWq5Bh1jfyA VDe7 -----END CERTIFICATE-----Generated at Thu Mar 19 12:28:05 2026 by rpki-client