$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fc70e995-d3cf-4937-923b-4d31c726fea9.roa File: fc70e995-d3cf-4937-923b-4d31c726fea9.roa (raw, json) Hash identifier: epQS5i+lGLoZA8brOnfqbXmaQ1ETycAt2jv7m+aa+tc= Subject key identifier: 84:D2:CF:ED:2C:6D:F2:89:32:0A:3A:D1:44:07:09:3E:54:12:54:F9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 12CBA29D05B7F8151F51A52ABA110423C9BA7E37 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fc70e995-d3cf-4937-923b-4d31c726fea9.roa Signing time: Thu 12 Mar 2026 16:21:43 +0000 ROA not before: Thu 12 Mar 2026 16:21:43 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:cb:a2:9d:05:b7:f8:15:1f:51:a5:2a:ba:11:04:23:c9:ba:7e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:21:43 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=44e57cb8f1e8fa846e71cdcf13b68e900372f4ce370889acf8a6bfed48827a54, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:71:f2:99:5a:a1:a9:4b:d4:4f:57:21:59: 1b:97:d8:aa:ed:03:4e:71:10:ad:f4:35:08:cb:6f: 5e:df:a9:82:a1:48:32:48:6f:87:c8:a2:da:2b:c4: e5:73:f0:b0:55:63:c6:30:4d:6c:6e:dd:55:e3:35: f2:73:c8:1d:9d:38:30:f1:7f:af:f6:13:29:2a:5c: 36:db:be:9e:c4:84:37:a7:14:f8:16:ab:d3:c3:94: 70:97:b6:57:f6:64:d1:a1:01:c3:91:a6:d8:e8:f0: 32:43:29:40:42:dd:4d:d0:a5:4d:de:6b:74:76:61: c3:8f:ef:61:a1:d8:71:d2:28:a0:b0:a5:b5:61:ec: b6:1a:9f:27:75:a6:eb:df:c0:b1:4d:16:68:f6:de: 04:77:d6:00:9e:b8:c7:65:fd:e5:7c:e8:b4:cf:a7: 1a:77:77:39:1f:42:0a:3c:17:00:94:ba:66:a9:32: fa:99:be:c0:d1:9a:25:8d:cb:fe:5f:7d:37:58:a0: a3:db:29:c6:0c:2b:6f:74:ac:66:f0:0d:ed:26:4c: a9:45:51:db:58:2b:62:2e:ee:5c:f9:24:f6:31:5f: 98:a7:14:0a:2d:d6:07:a4:97:25:22:21:42:f6:b5: 8c:f8:e4:db:60:da:5e:39:cf:50:a3:89:98:bd:01: 59:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D2:CF:ED:2C:6D:F2:89:32:0A:3A:D1:44:07:09:3E:54:12:54:F9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fc70e995-d3cf-4937-923b-4d31c726fea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:2840::/48 Signature Algorithm: sha256WithRSAEncryption 6f:30:8c:6b:57:63:cb:ad:fe:90:84:33:1c:c6:44:a3:2a:48: dc:71:b4:b6:e6:ba:1d:16:4f:4e:89:f2:2f:98:9a:20:a3:99: 46:09:ac:26:c1:b8:42:0c:5c:3a:4e:46:10:47:a2:25:21:99: 66:59:70:be:36:c3:b5:8a:42:d8:bb:6f:d6:45:09:61:75:f7: f1:61:dc:79:75:ee:ac:15:a4:aa:91:06:5b:27:38:6a:57:fe: e0:aa:af:b6:bc:db:83:76:78:f6:0b:19:cf:00:4b:1f:b3:3d: 8c:19:1f:28:48:0c:1b:49:2f:e9:4f:5a:be:77:78:1f:d5:0c: b0:2f:f9:50:38:d6:66:05:f3:fe:99:88:07:49:77:54:33:45: 8d:76:7b:1b:bb:3e:5d:19:32:32:b9:5e:fb:c1:fd:cd:eb:28: 60:0b:16:88:0f:8e:27:c8:f3:d3:d3:26:46:a9:3c:42:3f:a6: eb:48:66:5d:e1:5d:8f:10:7c:12:f5:d2:4d:90:d7:f4:6c:e6: 95:c6:cd:20:2f:c9:c1:28:9c:80:6f:dd:c7:04:58:05:96:1f: cc:c5:49:ae:52:b5:32:17:dd:ce:c5:53:bd:c4:65:90:72:b0: 02:79:6b:12:39:4e:2f:d6:cc:21:74:57:7e:cf:aa:b5:36:c6: bc:58:99:94 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEsuinQW3+BUfUaUquhEEI8m6fjcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjE0M1oX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNANDRlNTdjYjhmMWU4ZmE4NDZlNzFj ZGNmMTNiNjhlOTAwMzcyZjRjZTM3MDg4OWFjZjhhNmJmZWQ0ODgyN2E1NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSBx8plaoalL1E9XIVkbl9iq7QNO cRCt9DUIy29e36mCoUgySG+HyKLaK8Tlc/CwVWPGME1sbt1V4zXyc8gdnTgw8X+v 9hMpKlw2276exIQ3pxT4FqvTw5Rwl7ZX9mTRoQHDkabY6PAyQylAQt1N0KVN3mt0 dmHDj+9hodhx0iigsKW1Yey2Gp8ndabr38CxTRZo9t4Ed9YAnrjHZf3lfOi0z6ca d3c5H0IKPBcAlLpmqTL6mb7A0Zoljcv+X303WKCj2ynGDCtvdKxm8A3tJkypRVHb WCtiLu5c+ST2MV+YpxQKLdYHpJclIiFC9rWM+OTbYNpeOc9Qo4mYvQFZxQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFITSz+0sbfKJMgo60UQHCT5UElT5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZjNzBlOTk1LWQzY2YtNDkzNy05MjNiLTRkMzFjNzI2ZmVhOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauihAMA0GCSqGSIb3DQEBCwUAA4IBAQBvMIxrV2PLrf6QhDMc xkSjKkjccbS25rodFk9OifIvmJogo5lGCawmwbhCDFw6TkYQR6IlIZlmWXC+NsO1 ikLYu2/WRQlhdffxYdx5de6sFaSqkQZbJzhqV/7gqq+2vNuDdnj2CxnPAEsfsz2M GR8oSAwbSS/pT1q+d3gf1QywL/lQONZmBfP+mYgHSXdUM0WNdnsbuz5dGTIyuV77 wf3N6yhgCxaID44nyPPT0yZGqTxCP6brSGZd4V2PEHwS9dJNkNf0bOaVxs0gL8nB KJyAb93HBFgFlh/MxUmuUrUyF93OxVO9xGWQcrACeWsSOU4v1swhdFd+z6q1Nsa8 WJmU -----END CERTIFICATE-----Generated at Thu Mar 19 12:28:02 2026 by rpki-client