$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6413b799-f822-4470-b7a0-a8f6a6103653.roa File: 6413b799-f822-4470-b7a0-a8f6a6103653.roa (raw, json) Hash identifier: VCk1duLswCXYSb0FmqCkPVk/MFIhfoIKNT6GZFTAHwA= Subject key identifier: 62:2A:1A:FA:CD:E6:1D:11:25:7F:7F:71:BA:D7:A1:16:1F:F4:AB:61 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62B817217862943286C060B74A73F59D6ED087CB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6413b799-f822-4470-b7a0-a8f6a6103653.roa Signing time: Thu 12 Mar 2026 16:21:55 +0000 ROA not before: Thu 12 Mar 2026 16:21:55 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:8880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b8:17:21:78:62:94:32:86:c0:60:b7:4a:73:f5:9d:6e:d0:87:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:21:55 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=5893a0cfa918be50ed6726dc18b2305032d3bb0163c6d52f9d54d1093a1e9dee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:60:4b:a7:29:cf:16:0e:9f:84:38:50:6d:95: 1b:94:ec:22:92:ba:ef:f8:f9:f0:9a:e3:b4:79:c4: e4:32:d9:95:2c:53:5f:02:cd:63:b4:69:52:14:4a: 8e:19:18:c5:79:b6:b7:f9:04:70:39:f3:96:fe:91: 22:9e:4b:4c:83:98:73:3b:31:9f:9a:2f:2c:90:23: f6:4c:8f:ec:b1:b8:3c:32:46:34:40:70:c8:8e:25: d7:30:1f:b3:df:2c:02:56:7e:cf:6e:db:01:7e:71: f6:01:e6:4c:08:e8:03:08:e4:ba:c5:5e:9f:0c:5b: 5c:c3:48:0b:c8:23:e9:32:f1:2f:43:de:dd:fd:fa: 98:ef:a1:98:b3:ef:0f:e3:04:0b:62:a8:77:8d:b1: 0f:ff:de:a7:2f:74:48:20:7e:ae:02:4c:fb:21:9e: d8:9a:57:42:d6:5c:2f:28:51:5a:ed:36:f7:51:f1: 48:6f:3f:4b:11:34:3f:f3:c3:1d:31:3a:3b:8b:0b: 47:7a:9b:e1:a2:6b:7e:dc:41:ee:35:af:d5:9b:da: 14:fc:02:c9:bf:9d:27:2e:89:3c:6c:dc:dd:76:28: 95:40:28:b2:11:3c:c3:c2:b6:e9:0b:66:97:e0:42: fb:ae:f6:4c:08:bd:c5:dd:55:f7:82:77:c0:27:f3: c5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2A:1A:FA:CD:E6:1D:11:25:7F:7F:71:BA:D7:A1:16:1F:F4:AB:61 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6413b799-f822-4470-b7a0-a8f6a6103653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:8880::/48 Signature Algorithm: sha256WithRSAEncryption 1b:39:6b:23:84:2f:65:e7:3e:e3:2f:1b:7f:ad:cb:45:33:52: 7d:3b:57:a6:34:00:6e:18:58:5b:81:44:4a:25:87:dc:cc:db: 01:ba:94:9b:4b:bd:e0:63:3e:a0:b2:1f:43:35:5e:91:9e:fe: 15:81:65:95:aa:a5:8f:71:2b:43:2f:84:d5:10:2a:59:0b:6b: 68:75:41:5e:1d:2b:cd:28:11:91:9d:a7:76:d8:b0:52:8e:d5: 15:4a:a1:e6:6c:7a:3d:e7:4f:4b:41:cf:2f:a5:8e:25:1d:5d: ea:04:11:05:c3:a0:49:8b:d0:34:e4:ef:1e:fc:95:b0:06:ee: 6e:8a:83:13:4a:8d:db:43:70:8f:ab:7c:43:7f:dc:fc:4a:ad: 30:e8:ed:65:fd:3e:19:a6:60:5d:01:da:99:02:73:ef:74:02: c2:0a:e9:9d:98:b6:48:d2:8c:fb:7a:32:77:5e:26:a9:16:c2: 23:88:12:02:93:3d:ad:90:7d:7d:82:99:2a:c7:29:ba:49:7a: 3b:44:30:a8:c7:c1:b4:86:d9:a4:cc:97:85:22:89:41:de:9a: 40:2a:75:1d:97:6e:06:e1:77:d5:5b:b4:70:68:e8:d6:52:15: 67:25:9b:8f:5b:5d:d4:8f:a6:d4:4e:80:5c:fc:41:4d:e8:5b: 2c:1f:a4:83 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYrgXIXhilDKGwGC3SnP1nW7Qh8swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjE1NVoX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNANTg5M2EwY2ZhOTE4YmU1MGVkNjcy NmRjMThiMjMwNTAzMmQzYmIwMTYzYzZkNTJmOWQ1NGQxMDkzYTFlOWRlZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2BLpynPFg6fhDhQbZUblOwikrrv +PnwmuO0ecTkMtmVLFNfAs1jtGlSFEqOGRjFeba3+QRwOfOW/pEinktMg5hzOzGf mi8skCP2TI/ssbg8MkY0QHDIjiXXMB+z3ywCVn7PbtsBfnH2AeZMCOgDCOS6xV6f DFtcw0gLyCPpMvEvQ97d/fqY76GYs+8P4wQLYqh3jbEP/96nL3RIIH6uAkz7IZ7Y mldC1lwvKFFa7Tb3UfFIbz9LETQ/88MdMTo7iwtHepvhomt+3EHuNa/Vm9oU/ALJ v50nLok8bNzddiiVQCiyETzDwrbpC2aX4EL7rvZMCL3F3VX3gnfAJ/PFyQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGIqGvrN5h0RJX9/cbrXoRYf9KthMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY0MTNiNzk5LWY4MjItNDQ3MC1iN2EwLWE4ZjZhNjEwMzY1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauoiAMA0GCSqGSIb3DQEBCwUAA4IBAQAbOWsjhC9l5z7jLxt/ rctFM1J9O1emNABuGFhbgURKJYfczNsBupSbS73gYz6gsh9DNV6Rnv4VgWWVqqWP cStDL4TVECpZC2todUFeHSvNKBGRnad22LBSjtUVSqHmbHo9509LQc8vpY4lHV3q BBEFw6BJi9A05O8e/JWwBu5uioMTSo3bQ3CPq3xDf9z8Sq0w6O1l/T4ZpmBdAdqZ AnPvdALCCumdmLZI0oz7ejJ3XiapFsIjiBICkz2tkH19gpkqxym6SXo7RDCox8G0 htmkzJeFIolB3ppAKnUdl24G4XfVW7RwaOjWUhVnJZuPW13Uj6bUToBc/EFN6Fss H6SD -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:04 2026 by rpki-client