$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6916b5d4-972b-4cd6-ab59-c8bd9f7721ab.roa File: 6916b5d4-972b-4cd6-ab59-c8bd9f7721ab.roa (raw, json) Hash identifier: RfbKPUuGQ5cLlz3vxxJd/U/WsEDihznX4+c/3LxB7yY= Subject key identifier: A5:E8:ED:76:75:15:08:53:54:4F:C1:57:80:EC:60:03:5C:F9:EE:93 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1873EE7F019FE9E169513E76C8C2ABAFACA3F2CD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6916b5d4-972b-4cd6-ab59-c8bd9f7721ab.roa Signing time: Thu 12 Mar 2026 16:21:44 +0000 ROA not before: Thu 12 Mar 2026 16:21:44 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:73:ee:7f:01:9f:e9:e1:69:51:3e:76:c8:c2:ab:af:ac:a3:f2:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:21:44 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=0dc8d134ab6effe761880ba8d92a9bfec28360eb679b8d28a33c0c1786d717c8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7f:55:da:df:28:6b:0d:02:e9:5b:9f:5d:04: 22:13:13:eb:00:3e:e9:af:1b:49:cf:7f:37:6f:23: af:3c:28:de:b8:6c:88:67:94:ce:b7:8f:4c:da:3e: 9d:40:95:be:f8:63:8c:9f:0e:ba:ee:37:e7:7f:f7: fd:d3:4e:31:11:b5:57:51:35:8f:8b:83:5b:49:f0: 17:b2:75:2c:b5:d6:1b:b9:23:65:51:54:8b:71:5c: c6:e5:05:d8:2e:56:d7:67:4b:b6:95:a6:b8:8d:69: 23:b2:ac:91:d7:8f:d0:d4:f9:6f:a6:1a:0a:28:e7: b2:ac:c1:e1:87:9b:4e:4b:15:4b:e6:48:63:76:17: 09:b0:12:c3:7f:f0:b5:c1:24:29:30:4a:25:86:b2: b6:39:c6:87:b7:e0:56:d9:33:e4:de:8b:d1:70:74: c7:a9:4a:dd:7c:7d:b5:0c:d5:6e:16:6c:57:18:1a: 6f:97:8f:54:8b:7b:bd:da:17:63:d4:17:ff:98:dc: 70:29:88:e4:c2:98:56:72:ee:6f:56:17:ce:c9:d2: da:29:80:f2:54:2f:84:a1:00:1b:bf:05:c2:10:64: 75:5e:5f:50:86:ce:e2:ef:d9:26:d2:02:10:28:62: 9e:fa:1d:6b:70:15:a1:f7:1f:d0:d4:d8:19:f9:01: 35:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E8:ED:76:75:15:08:53:54:4F:C1:57:80:EC:60:03:5C:F9:EE:93 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6916b5d4-972b-4cd6-ab59-c8bd9f7721ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:28c0::/48 Signature Algorithm: sha256WithRSAEncryption 1b:56:8c:c9:7f:17:5b:8b:c9:59:f6:a8:75:e1:0b:ba:3e:7b: cd:8d:9a:f9:7f:03:30:43:f6:3b:77:15:71:5f:3a:40:33:0a: 67:1f:12:f5:8a:59:0a:8d:d0:9b:3b:73:12:4c:65:32:ed:2d: 31:cb:f8:c2:bb:6b:50:79:db:40:76:81:69:f9:de:7d:dc:41: f9:ef:e0:dc:5e:42:48:72:39:a5:3d:c7:0f:1b:88:8d:ef:9b: 71:fa:a4:af:a2:58:cf:23:cd:cb:5f:f2:23:e2:ea:c7:0c:23: 32:34:68:1b:eb:73:d9:54:32:85:a8:5d:79:1c:aa:d1:50:65: aa:7f:0d:19:ae:57:57:21:30:13:12:d9:b2:cb:e1:91:94:37: 64:7d:7b:60:a8:81:3d:97:3e:f6:2e:38:fd:4f:d5:92:e2:8c: 38:cc:2d:c2:3e:1b:33:4c:4c:3b:27:af:6d:9a:c9:6e:f4:a6: c0:e2:4a:63:aa:b8:ae:3f:94:96:57:d7:cf:cb:9b:e9:8c:bc: 35:31:d3:71:25:05:f5:b1:34:db:eb:ba:28:f3:9c:ec:8a:43: c2:5d:1d:b8:ce:2d:dd:23:53:a9:65:7b:0a:77:f0:52:b3:8f: 10:ea:36:23:9b:7d:46:71:a6:da:6c:a6:1f:e2:7a:4f:20:86: e1:be:fc:94 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGHPufwGf6eFpUT52yMKrr6yj8s0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjE0NFoX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAMGRjOGQxMzRhYjZlZmZlNzYxODgw YmE4ZDkyYTliZmVjMjgzNjBlYjY3OWI4ZDI4YTMzYzBjMTc4NmQ3MTdjODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX9V2t8oaw0C6VufXQQiExPrAD7p rxtJz383byOvPCjeuGyIZ5TOt49M2j6dQJW++GOMnw667jfnf/f9004xEbVXUTWP i4NbSfAXsnUstdYbuSNlUVSLcVzG5QXYLlbXZ0u2laa4jWkjsqyR14/Q1PlvphoK KOeyrMHhh5tOSxVL5khjdhcJsBLDf/C1wSQpMEolhrK2OcaHt+BW2TPk3ovRcHTH qUrdfH21DNVuFmxXGBpvl49Ui3u92hdj1Bf/mNxwKYjkwphWcu5vVhfOydLaKYDy VC+EoQAbvwXCEGR1Xl9Qhs7i79km0gIQKGKe+h1rcBWh9x/Q1NgZ+QE15wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKXo7XZ1FQhTVE/BV4DsYANc+e6TMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY5MTZiNWQ0LTk3MmItNGNkNi1hYjU5LWM4YmQ5Zjc3MjFhYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauijAMA0GCSqGSIb3DQEBCwUAA4IBAQAbVozJfxdbi8lZ9qh1 4Qu6PnvNjZr5fwMwQ/Y7dxVxXzpAMwpnHxL1ilkKjdCbO3MSTGUy7S0xy/jCu2tQ edtAdoFp+d593EH57+DcXkJIcjmlPccPG4iN75tx+qSvoljPI83LX/Ij4urHDCMy NGgb63PZVDKFqF15HKrRUGWqfw0ZrldXITATEtmyy+GRlDdkfXtgqIE9lz72Ljj9 T9WS4ow4zC3CPhszTEw7J69tmslu9KbA4kpjqriuP5SWV9fPy5vpjLw1MdNxJQX1 sTTb67oo85zsikPCXR24zi3dI1OpZXsKd/BSs48Q6jYjm31GcababKYf4npPIIbh vvyU -----END CERTIFICATE-----Generated at Thu Mar 19 12:28:02 2026 by rpki-client