$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63777c06-b519-45e4-be04-36da7b0abbcf.roa File: 63777c06-b519-45e4-be04-36da7b0abbcf.roa (raw, json) Hash identifier: rd/j1BsORbm8rqRlx5VGqLJo/kLmhnM2aYLSKt57+HY= Subject key identifier: 73:B0:B8:C4:0D:AC:CD:66:A0:C8:B4:AB:4E:46:BD:FF:84:E6:AF:7B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 587DF83B3903508882CEFC25C4DB1425ABB3D5CE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63777c06-b519-45e4-be04-36da7b0abbcf.roa Signing time: Thu 12 Mar 2026 16:21:42 +0000 ROA not before: Thu 12 Mar 2026 16:21:42 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:2020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7d:f8:3b:39:03:50:88:82:ce:fc:25:c4:db:14:25:ab:b3:d5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:21:42 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=bb7a2e04961f619273235a13c200487f18bb52c829fb1a0638c032e5a00eaec9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ad:fb:b0:7c:2b:6d:79:6a:74:11:0d:41:cb: 24:4f:fa:31:35:99:d3:9d:b8:ce:04:ae:1d:1a:7c: f8:c8:22:66:40:bc:87:3a:6e:13:a0:7f:e9:d4:d4: 1e:f8:e0:70:cf:3a:f9:58:05:ba:9f:7c:b3:79:39: 2a:bc:10:e8:35:f4:c9:3b:96:52:23:0d:74:26:5c: 02:e0:ad:74:0d:68:b3:2d:10:be:55:fd:75:7e:a9: 89:10:58:c2:e8:1b:7a:ff:e6:3b:e8:3c:8a:3f:67: 25:d7:18:25:05:47:9c:77:11:b9:23:03:25:f1:27: 46:34:00:89:7c:59:67:0a:c3:1c:36:b8:76:4f:28: 04:5a:18:46:49:3d:c4:91:f8:f0:57:11:95:49:d1: 00:44:e9:51:92:4a:f7:ab:f6:85:bc:8d:85:be:08: 2d:df:e0:d2:8e:50:19:a8:0f:22:34:23:66:46:7c: 1c:9b:cc:20:ca:51:d9:f5:2d:16:bb:38:bf:b4:6d: d4:29:bd:82:08:19:00:65:ca:c5:c3:80:e4:0f:d7: 11:3f:21:d1:ed:e1:08:d5:79:2a:ed:ce:36:ad:86: 7f:4a:13:56:b0:b0:a1:04:2d:a7:51:32:d0:72:a9: 50:f7:83:eb:70:61:c7:4e:57:08:12:b7:72:f2:ea: e1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B0:B8:C4:0D:AC:CD:66:A0:C8:B4:AB:4E:46:BD:FF:84:E6:AF:7B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63777c06-b519-45e4-be04-36da7b0abbcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:2020::/48 Signature Algorithm: sha256WithRSAEncryption b4:14:ea:0e:c9:8b:4b:c2:67:8b:e9:88:d0:9c:df:5d:e0:30: 99:fd:a9:9c:b4:12:3d:b5:85:4e:03:9f:31:57:a4:c9:7d:61: 7e:77:f1:7f:ff:fc:ae:2c:15:7e:54:24:4e:14:56:47:99:a5: ea:f0:27:8c:47:1e:7d:d1:81:1e:8d:10:e1:39:2f:d7:26:a6: 50:e6:b3:65:59:e4:81:35:4b:b1:0c:48:7f:c3:6a:96:13:d3: c0:5c:ca:bb:ca:b6:8f:86:d4:52:05:3a:b1:76:7f:95:de:5c: 8c:af:11:cc:e2:99:82:19:06:e5:d2:6f:04:9b:27:76:c0:41: c9:ab:cf:36:33:46:90:33:d3:0a:ac:49:71:b9:da:ae:3e:31: 47:1c:7f:3d:c7:88:b7:53:21:84:4e:20:e6:86:5b:ed:21:b6: 8d:36:dd:18:b0:1b:14:79:0c:b7:f1:bc:f9:aa:09:6a:8b:5b: a8:8f:94:59:18:6a:10:cd:f1:c1:01:e3:66:7b:3f:ae:25:0a: 86:96:a6:02:d0:79:72:4f:ba:3f:76:29:49:06:55:7e:c9:cf: 95:23:b9:3f:7c:b6:5b:9f:37:67:1d:c8:ba:58:07:b8:90:74: 74:9f:0c:75:f0:12:1c:a9:c2:d1:aa:e4:42:10:10:27:5d:55: 23:ff:56:6a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWH34OzkDUIiCzvwlxNsUJauz1c4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjE0MloX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAYmI3YTJlMDQ5NjFmNjE5MjczMjM1 YTEzYzIwMDQ4N2YxOGJiNTJjODI5ZmIxYTA2MzhjMDMyZTVhMDBlYWVjOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj637sHwrbXlqdBENQcskT/oxNZnT nbjOBK4dGnz4yCJmQLyHOm4ToH/p1NQe+OBwzzr5WAW6n3yzeTkqvBDoNfTJO5ZS Iw10JlwC4K10DWizLRC+Vf11fqmJEFjC6Bt6/+Y76DyKP2cl1xglBUecdxG5IwMl 8SdGNACJfFlnCsMcNrh2TygEWhhGST3EkfjwVxGVSdEAROlRkkr3q/aFvI2Fvggt 3+DSjlAZqA8iNCNmRnwcm8wgylHZ9S0Wuzi/tG3UKb2CCBkAZcrFw4DkD9cRPyHR 7eEI1Xkq7c42rYZ/ShNWsLChBC2nUTLQcqlQ94PrcGHHTlcIErdy8urhowIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHOwuMQNrM1moMi0q05Gvf+E5q97MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYzNzc3YzA2LWI1MTktNDVlNC1iZTA0LTM2ZGE3YjBhYmJjZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauiAgMA0GCSqGSIb3DQEBCwUAA4IBAQC0FOoOyYtLwmeL6YjQ nN9d4DCZ/amctBI9tYVOA58xV6TJfWF+d/F///yuLBV+VCROFFZHmaXq8CeMRx59 0YEejRDhOS/XJqZQ5rNlWeSBNUuxDEh/w2qWE9PAXMq7yraPhtRSBTqxdn+V3lyM rxHM4pmCGQbl0m8Emyd2wEHJq882M0aQM9MKrElxudquPjFHHH89x4i3UyGETiDm hlvtIbaNNt0YsBsUeQy38bz5qglqi1uoj5RZGGoQzfHBAeNmez+uJQqGlqYC0Hly T7o/dilJBlV+yc+VI7k/fLZbnzdnHci6WAe4kHR0nwx18BIcqcLRquRCEBAnXVUj /1Zq -----END CERTIFICATE-----Generated at Thu Mar 19 12:28:03 2026 by rpki-client