$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f34870a-6ff1-4942-bad4-5224c601b9de.roa File: 6f34870a-6ff1-4942-bad4-5224c601b9de.roa (raw, json) Hash identifier: YbAm6+BkOOqvUBrg6ES4PHzkrcDIStIgcARZ09mHuco= Subject key identifier: BD:E8:A0:DF:78:8D:B6:BB:D6:90:5E:07:A5:37:6E:04:9F:96:99:2E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 43863B266DDECFF6FD027E528986D3396C5BD8DE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f34870a-6ff1-4942-bad4-5224c601b9de.roa Signing time: Thu 12 Mar 2026 16:23:26 +0000 ROA not before: Thu 12 Mar 2026 16:23:26 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:c080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:86:3b:26:6d:de:cf:f6:fd:02:7e:52:89:86:d3:39:6c:5b:d8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:23:26 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=c309bf765c0b58cff1c561791f6c775472276e16a04740ca0a11d13204c3a72e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2c:8d:f4:60:e1:3d:56:ee:2e:ec:2a:2a:2c: dd:90:36:4b:71:0e:d1:3b:74:d8:e4:2d:3e:89:4c: 64:cb:3b:e2:25:84:8c:a1:db:d2:b2:14:86:f8:44: f0:b5:91:f2:f4:f8:62:63:de:c9:7a:6d:07:7f:7b: c6:6d:d9:6f:d0:1b:f6:b9:de:d1:e3:c0:3d:bd:85: 13:3d:c4:84:a0:1d:61:27:da:08:b3:a8:6c:28:b1: cb:cd:c2:24:a0:7b:8f:b5:09:1f:23:01:68:d1:4b: 96:e8:c2:65:a3:41:88:9f:8c:44:bf:0d:4d:07:dc: 94:44:4b:a5:89:fb:9d:e3:ea:fb:09:ff:fc:78:d9: b8:e2:5d:22:42:eb:be:07:f4:78:97:ec:c7:4c:c0: 3e:43:9f:0e:05:d3:76:33:f3:86:fd:fe:07:fc:2f: a3:0c:2d:59:c8:de:8b:7e:ea:e6:93:66:97:19:d4: 55:bd:4f:c4:35:d0:3c:fc:be:22:da:d3:e9:1d:9c: a2:bd:f9:4d:50:0b:f2:d9:7c:46:3c:3d:e1:79:5c: 92:9c:e0:0c:dc:f5:c0:af:ba:c4:c4:d4:f6:fd:94: eb:6a:8c:47:ad:74:c7:73:31:7f:fb:5b:38:81:6a: 29:dd:81:7a:ab:21:a0:93:77:b9:71:aa:2c:ac:c6: ca:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E8:A0:DF:78:8D:B6:BB:D6:90:5E:07:A5:37:6E:04:9F:96:99:2E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f34870a-6ff1-4942-bad4-5224c601b9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:c080::/48 Signature Algorithm: sha256WithRSAEncryption c5:00:52:17:71:cf:9d:f7:34:13:ff:7f:d3:b4:28:2c:0d:97: d3:ea:2b:6e:d6:64:a6:cb:2b:7c:f0:92:7a:c7:6f:c7:01:e6: 4e:44:a7:7a:9f:2a:8f:d2:0e:18:cb:9e:9c:2d:db:0e:b5:8e: b0:0d:80:90:16:78:b0:a0:a7:cb:ff:49:ce:fe:53:92:cb:21: 33:1d:c8:55:3d:77:72:ee:a9:57:ca:e3:31:ca:b7:9a:be:d9: 47:0e:d1:30:ca:81:2e:cc:84:b9:4e:a7:42:6a:df:43:ea:30: cf:02:2f:bb:80:2c:a7:19:f9:87:13:b6:bc:80:40:71:d5:2d: 81:ed:44:e5:dd:22:20:b8:b1:a7:ae:50:c9:b1:cc:90:48:5c: a1:05:af:57:f7:be:92:07:97:68:c2:77:34:a6:13:ae:3b:8f: bd:d4:98:ab:2e:3e:4a:89:e8:3c:af:1c:ec:14:ea:e8:3a:48: a1:dc:ae:12:bf:f6:00:57:3a:82:ac:bc:4a:f9:34:af:4f:65: f8:00:40:17:2c:b9:58:77:48:63:2e:a5:4c:27:cb:f3:7c:63: aa:3b:f4:b1:66:5c:d1:6b:94:28:50:8d:11:42:02:7d:94:06: e7:b9:6e:29:03:ce:c6:7a:81:7b:1f:64:c9:20:7b:2b:dc:c2: 90:e3:da:db -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQ4Y7Jm3ez/b9An5SiYbTOWxb2N4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjMyNloX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAYzMwOWJmNzY1YzBiNThjZmYxYzU2 MTc5MWY2Yzc3NTQ3MjI3NmUxNmEwNDc0MGNhMGExMWQxMzIwNGMzYTcyZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iyN9GDhPVbuLuwqKizdkDZLcQ7R O3TY5C0+iUxkyzviJYSModvSshSG+ETwtZHy9PhiY97Jem0Hf3vGbdlv0Bv2ud7R 48A9vYUTPcSEoB1hJ9oIs6hsKLHLzcIkoHuPtQkfIwFo0UuW6MJlo0GIn4xEvw1N B9yUREulifud4+r7Cf/8eNm44l0iQuu+B/R4l+zHTMA+Q58OBdN2M/OG/f4H/C+j DC1ZyN6Lfurmk2aXGdRVvU/ENdA8/L4i2tPpHZyivflNUAvy2XxGPD3heVySnOAM 3PXAr7rExNT2/ZTraoxHrXTHczF/+1s4gWop3YF6qyGgk3e5caosrMbKjwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFL3ooN94jba71pBeB6U3bgSflpkuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZmMzQ4NzBhLTZmZjEtNDk0Mi1iYWQ0LTUyMjRjNjAxYjlkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbausCAMA0GCSqGSIb3DQEBCwUAA4IBAQDFAFIXcc+d9zQT/3/T tCgsDZfT6itu1mSmyyt88JJ6x2/HAeZORKd6nyqP0g4Yy56cLdsOtY6wDYCQFniw oKfL/0nO/lOSyyEzHchVPXdy7qlXyuMxyreavtlHDtEwyoEuzIS5TqdCat9D6jDP Ai+7gCynGfmHE7a8gEBx1S2B7UTl3SIguLGnrlDJscyQSFyhBa9X976SB5downc0 phOuO4+91JirLj5Kieg8rxzsFOroOkih3K4Sv/YAVzqCrLxK+TSvT2X4AEAXLLlY d0hjLqVMJ8vzfGOqO/SxZlzRa5QoUI0RQgJ9lAbnuW4pA87GeoF7H2TJIHsr3MKQ 49rb -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:21 2026 by rpki-client