$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d545d42-676e-4de2-8c27-f33d51079ff5.roa File: 7d545d42-676e-4de2-8c27-f33d51079ff5.roa (raw, json) Hash identifier: NEQAjfNuqnZvyoNETCe1OPRcJD5/xPajo2PS74n82oI= Subject key identifier: 6C:40:83:45:F2:7A:CC:BF:51:6E:29:E3:AB:38:EB:48:C2:8E:8E:AC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1DFEA191910467287FF41539C1DBA18C9E254202 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d545d42-676e-4de2-8c27-f33d51079ff5.roa Signing time: Thu 12 Mar 2026 16:24:56 +0000 ROA not before: Thu 12 Mar 2026 16:24:56 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fe:a1:91:91:04:67:28:7f:f4:15:39:c1:db:a1:8c:9e:25:42:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:24:56 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=c49803ff591ecf8489d887297645e9082cd6e1bd4d2118445c4bb108946f3c1c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7c:b9:b3:e0:54:a8:9f:3d:39:28:90:8d:9c: 6b:85:cb:a7:28:1d:d3:74:1d:cb:fa:e6:30:ca:eb: 12:11:ab:bb:1e:5b:da:81:6a:b0:17:b4:40:2f:17: cc:7d:49:7c:d1:11:36:28:49:0f:63:d9:5d:15:17: e9:6f:3d:70:74:fd:10:1e:a6:f4:bf:c5:e0:43:e6: 07:84:45:15:d7:9c:0e:50:33:86:ed:ea:49:c1:f7: 60:c6:68:26:0b:eb:b2:53:f8:90:19:c3:ee:a2:2f: ef:0c:a3:3d:c8:c8:1a:0a:23:8a:5f:e6:9e:4d:03: 7b:84:a0:78:fd:52:70:f8:3f:53:14:07:75:80:f9: 57:79:e7:20:eb:11:33:bf:4a:17:76:76:bd:76:2b: 5b:8e:44:d0:d4:14:de:0f:00:89:da:43:6c:fd:db: e0:8b:97:39:a8:d0:c6:e3:de:e2:4c:ae:6c:b3:6b: 22:ea:79:92:91:c4:7d:33:e1:1b:0c:1d:3a:b4:27: 82:e0:ec:06:1d:9d:85:12:c8:47:52:36:5f:c9:c6: a1:30:12:5a:27:c0:81:17:9f:f9:b8:86:c9:61:79: fb:36:e2:39:91:9b:ac:aa:8e:80:29:b6:92:82:7e: e3:d5:32:a4:dd:42:a6:9c:1f:e2:d5:21:c5:34:69: d1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:40:83:45:F2:7A:CC:BF:51:6E:29:E3:AB:38:EB:48:C2:8E:8E:AC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d545d42-676e-4de2-8c27-f33d51079ff5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:840::/48 Signature Algorithm: sha256WithRSAEncryption 18:b6:9a:db:ae:04:ce:43:18:cd:19:96:88:99:61:95:c8:a7: 67:cd:e5:29:b9:3c:71:56:50:69:c6:c8:c9:3a:32:bf:51:1c: 45:2f:c2:02:e0:e0:bd:5e:b8:82:ae:81:14:5d:42:88:3c:88: 31:c2:7d:bc:d4:12:6d:95:9f:9b:f0:72:60:77:f1:7e:31:3c: 77:cd:d8:cd:03:df:ee:46:ee:5d:14:2f:04:eb:c4:da:e9:f9: f9:0f:31:6e:b8:a5:e8:54:27:0a:a6:65:cd:e3:ec:7b:e9:f3: fc:32:3f:96:4e:37:1f:ef:87:4d:07:71:c6:34:5b:49:5c:87: f1:58:09:09:f9:a8:7b:46:7d:b1:0b:77:53:3e:fe:7e:38:8e: c2:fe:6e:66:ef:66:35:9d:b5:a9:b1:ea:d8:a4:ba:11:9c:10: f4:14:90:ef:d1:57:26:5f:0d:e3:a8:cf:fd:cf:b9:a7:69:32: 6d:25:c2:d9:a0:c3:8d:ed:cd:58:5d:7d:ce:27:02:d5:6e:cc: 34:bf:c5:97:68:94:d4:51:b7:7a:9a:5a:5f:c4:97:a0:bc:16: 1d:e4:9c:16:b6:0e:fb:2f:b6:10:55:a8:5e:13:49:b8:95:aa: 66:b8:9a:4d:84:ad:c1:d0:b1:f5:5c:6d:81:e0:42:8a:39:80: 2f:be:aa:30 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHf6hkZEEZyh/9BU5wduhjJ4lQgIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjQ1NloX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAYzQ5ODAzZmY1OTFlY2Y4NDg5ZDg4 NzI5NzY0NWU5MDgyY2Q2ZTFiZDRkMjExODQ0NWM0YmIxMDg5NDZmM2MxYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ny5s+BUqJ89OSiQjZxrhcunKB3T dB3L+uYwyusSEau7HlvagWqwF7RALxfMfUl80RE2KEkPY9ldFRfpbz1wdP0QHqb0 v8XgQ+YHhEUV15wOUDOG7epJwfdgxmgmC+uyU/iQGcPuoi/vDKM9yMgaCiOKX+ae TQN7hKB4/VJw+D9TFAd1gPlXeecg6xEzv0oXdna9ditbjkTQ1BTeDwCJ2kNs/dvg i5c5qNDG497iTK5ss2si6nmSkcR9M+EbDB06tCeC4OwGHZ2FEshHUjZfycahMBJa J8CBF5/5uIbJYXn7NuI5kZusqo6AKbaSgn7j1TKk3UKmnB/i1SHFNGnRdwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGxAg0Xyesy/UW4p46s460jCjo6sMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdkNTQ1ZDQyLTY3NmUtNGRlMi04YzI3LWYzM2Q1MTA3OWZmNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6QhAMA0GCSqGSIb3DQEBCwUAA4IBAQAYtprbrgTOQxjNGZaI mWGVyKdnzeUpuTxxVlBpxsjJOjK/URxFL8IC4OC9XriCroEUXUKIPIgxwn281BJt lZ+b8HJgd/F+MTx3zdjNA9/uRu5dFC8E68Ta6fn5DzFuuKXoVCcKpmXN4+x76fP8 Mj+WTjcf74dNB3HGNFtJXIfxWAkJ+ah7Rn2xC3dTPv5+OI7C/m5m72Y1nbWpserY pLoRnBD0FJDv0VcmXw3jqM/9z7mnaTJtJcLZoMON7c1YXX3OJwLVbsw0v8WXaJTU Ubd6mlpfxJegvBYd5JwWtg77L7YQVaheE0m4lapmuJpNhK3B0LH1XG2B4EKKOYAv vqow -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:22 2026 by rpki-client