$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44d0f865-f79a-4e97-944b-d51ee49c79e8.roa File: 44d0f865-f79a-4e97-944b-d51ee49c79e8.roa (raw, json) Hash identifier: HZoY1JmOBj/e+iVuEef8APa/OC/AP0Khl8gYCM/GD0M= Subject key identifier: 3A:23:46:0D:0B:06:B6:79:F5:5C:96:5F:E7:ED:7E:85:9F:CF:CF:B7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 68861C9F0B9A57455A17C578247BF31DB3552D49 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44d0f865-f79a-4e97-944b-d51ee49c79e8.roa Signing time: Thu 12 Mar 2026 16:24:55 +0000 ROA not before: Thu 12 Mar 2026 16:24:55 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:86:1c:9f:0b:9a:57:45:5a:17:c5:78:24:7b:f3:1d:b3:55:2d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:24:55 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=ea3396ef518929d254103fdad33442c5b3c1ec14c8b638d84a9c5f181ec4093f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:de:cf:6f:a0:1a:95:25:d8:17:5c:37:e4:de: bd:66:9c:4b:c1:0a:d4:5e:b4:2d:6e:61:58:2e:94: 5b:ff:10:d6:b3:7b:7c:31:20:cb:a6:f6:e3:bb:59: c9:54:62:98:51:93:d4:dd:ad:08:61:a1:85:4f:86: 63:40:93:6a:76:b7:ae:46:57:b3:68:66:d6:ad:93: ff:d9:f2:30:83:93:5f:14:a9:57:70:85:76:0a:80: de:87:3d:f5:74:c0:ff:2e:95:b0:b1:7e:51:c0:7d: e1:07:a4:13:1a:be:1c:f3:ee:e3:8b:89:9c:4b:20: fe:53:2d:17:26:06:80:42:6d:89:3c:c7:e2:66:76: 23:0e:97:ff:9d:39:f6:9d:31:ae:47:77:e0:6f:f8: d8:08:7e:d4:6c:8d:ef:b2:39:53:65:93:fe:a5:fd: 86:a9:63:1e:32:0f:14:9d:c0:2a:97:d3:c3:40:29: a9:d4:16:7c:1c:89:20:53:f5:86:f9:f3:1b:8e:9c: 13:37:3f:af:50:5c:4c:d2:5b:ce:fd:0e:ec:a1:59: 40:d6:3d:68:97:34:b6:42:1f:a3:c1:b7:d6:a4:f2: 40:6b:a6:5c:e3:8b:2e:47:65:fa:04:66:78:5e:88: c4:78:38:e8:1d:44:59:35:0b:08:3f:4d:50:bd:46: 46:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:23:46:0D:0B:06:B6:79:F5:5C:96:5F:E7:ED:7E:85:9F:CF:CF:B7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44d0f865-f79a-4e97-944b-d51ee49c79e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:8040::/48 Signature Algorithm: sha256WithRSAEncryption 1f:0b:59:95:c8:5c:30:be:99:b2:b5:cc:e1:3f:50:7a:98:54: f0:e7:a6:23:80:01:ab:c9:b5:25:fb:35:97:3d:d4:d4:ff:91: c3:62:d7:11:bd:a0:25:a6:a5:54:de:5f:43:99:00:28:5d:0b: f2:2d:b5:5a:33:28:d7:51:6d:57:14:95:0c:cb:47:3c:09:8f: e7:c0:eb:69:83:cc:70:3a:cb:9b:30:25:19:0a:4e:92:d5:45: de:1e:a8:cd:a2:31:bb:46:0b:60:e1:8d:00:db:b7:a6:eb:f7: 6f:33:98:54:c3:43:44:b4:c0:d6:25:04:9f:fc:29:d2:6b:5f: 85:87:e9:30:a7:1b:68:75:0a:a2:8f:be:05:5d:cd:97:95:dc: 60:03:31:06:2d:d9:21:97:5a:f5:65:4b:4e:33:f6:21:2e:b1: 19:f4:a0:6a:45:e3:3c:5f:d4:eb:16:55:22:19:24:f2:41:71: 53:91:98:d4:9a:3e:a7:56:ec:eb:d8:29:4e:47:a9:b1:fa:2a: 3e:6c:ae:b9:69:ac:74:44:67:26:89:66:63:9f:fc:1e:1d:bd: 2c:9f:18:94:e5:ff:70:9b:3b:29:d5:b8:0d:b3:7d:97:96:1a: a7:35:b2:9b:42:d0:b2:64:b2:4c:fc:44:74:58:8b:a8:bf:a4: 13:8b:cf:bd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaIYcnwuaV0VaF8V4JHvzHbNVLUkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjQ1NVoX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAZWEzMzk2ZWY1MTg5MjlkMjU0MTAz ZmRhZDMzNDQyYzViM2MxZWMxNGM4YjYzOGQ4NGE5YzVmMTgxZWM0MDkzZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d7Pb6AalSXYF1w35N69ZpxLwQrU XrQtbmFYLpRb/xDWs3t8MSDLpvbju1nJVGKYUZPU3a0IYaGFT4ZjQJNqdreuRlez aGbWrZP/2fIwg5NfFKlXcIV2CoDehz31dMD/LpWwsX5RwH3hB6QTGr4c8+7ji4mc SyD+Uy0XJgaAQm2JPMfiZnYjDpf/nTn2nTGuR3fgb/jYCH7UbI3vsjlTZZP+pf2G qWMeMg8UncAql9PDQCmp1BZ8HIkgU/WG+fMbjpwTNz+vUFxM0lvO/Q7soVlA1j1o lzS2Qh+jwbfWpPJAa6Zc44suR2X6BGZ4XojEeDjoHURZNQsIP01QvUZGHQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDojRg0LBrZ59VyWX+ftfoWfz8+3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ0ZDBmODY1LWY3OWEtNGU5Ny05NDRiLWQ1MWVlNDljNzllOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6YBAMA0GCSqGSIb3DQEBCwUAA4IBAQAfC1mVyFwwvpmytczh P1B6mFTw56YjgAGrybUl+zWXPdTU/5HDYtcRvaAlpqVU3l9DmQAoXQvyLbVaMyjX UW1XFJUMy0c8CY/nwOtpg8xwOsubMCUZCk6S1UXeHqjNojG7Rgtg4Y0A27em6/dv M5hUw0NEtMDWJQSf/CnSa1+Fh+kwpxtodQqij74FXc2XldxgAzEGLdkhl1r1ZUtO M/YhLrEZ9KBqReM8X9TrFlUiGSTyQXFTkZjUmj6nVuzr2ClOR6mx+io+bK65aax0 RGcmiWZjn/weHb0snxiU5f9wmzsp1bgNs32XlhqnNbKbQtCyZLJM/ER0WIuov6QT i8+9 -----END CERTIFICATE-----Generated at Thu Mar 19 12:27:57 2026 by rpki-client