$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02c8365b-491a-4d86-982a-061536efed53.roa File: 02c8365b-491a-4d86-982a-061536efed53.roa (raw, json) Hash identifier: ridggH86TDXnDjQv+Bv/bo9fYXpH5DlJE/p5WWjWMgU= Subject key identifier: 53:3E:F8:56:44:C5:75:44:1B:D2:ED:06:F9:BB:32:1D:79:55:7D:4D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 697B8B60E0A4485F0B966DB2710A22D15E65B273 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02c8365b-491a-4d86-982a-061536efed53.roa Signing time: Fri 03 Apr 2026 00:00:17 +0000 ROA not before: Fri 03 Apr 2026 00:00:17 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:8880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:7b:8b:60:e0:a4:48:5f:0b:96:6d:b2:71:0a:22:d1:5e:65:b2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 3 00:00:17 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=cf27805f3c706765b19343554aee92d226a51ec6c2d1e1ad99c66832b70928b7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:b9:fa:e2:2c:94:1f:0a:0d:d4:37:57:22: c9:c9:04:6b:7c:8f:5c:0b:62:5e:cc:ce:7b:0e:23: d1:15:d3:df:08:22:a9:8d:e0:f2:b5:47:a1:12:91: 04:8a:7e:89:12:ea:44:0e:df:d2:1a:10:62:de:aa: af:1e:c8:3f:1a:93:56:ea:1c:bf:b4:b8:c8:2b:19: 87:35:80:54:a2:de:da:49:fa:88:67:e3:f9:03:7d: 1a:97:3a:2c:5a:f2:7e:de:34:f4:c1:ec:ff:5c:4f: 0d:5b:ae:21:74:13:3a:ec:39:85:b9:a6:cf:4b:a3: 0b:7b:28:ce:37:28:8b:a3:6c:e9:8e:4f:ea:95:78: 18:f8:39:3e:b9:2e:d9:10:fb:86:d6:93:1c:68:48: 6d:b5:a1:85:a7:27:33:d9:ef:17:f2:ea:94:8e:6c: 9c:6a:e0:66:2a:4b:ad:c5:14:13:49:c9:5a:ee:dd: e2:37:d5:98:bd:25:9a:79:89:1c:95:72:d3:30:ca: cd:61:30:ed:cc:db:cf:02:a7:66:7f:81:ae:65:01: 99:15:8b:17:4f:93:d7:c4:78:a0:1e:2b:8a:ce:4f: 8d:a4:ca:22:b9:bf:c7:34:e0:99:d9:a1:95:fd:a5: 78:c7:97:55:62:cc:1b:98:10:ad:14:be:48:d1:89: df:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3E:F8:56:44:C5:75:44:1B:D2:ED:06:F9:BB:32:1D:79:55:7D:4D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02c8365b-491a-4d86-982a-061536efed53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:8880::/48 Signature Algorithm: sha256WithRSAEncryption 4f:a0:9f:60:3f:8b:03:ef:78:1f:8c:c0:59:e2:18:9a:38:21: 0a:65:71:84:28:fd:09:75:b8:43:a0:3f:35:37:1d:22:14:53: 41:37:76:14:4f:b3:d1:ae:c0:60:40:64:2e:66:85:5d:98:15: 10:bc:2a:57:65:a6:61:03:df:e4:8c:09:6d:e2:0a:cd:95:e6: 6e:87:d7:97:6d:8a:aa:f6:00:38:2d:8f:03:86:62:95:17:12: 02:73:75:08:2f:9a:cd:04:72:ff:47:3f:b0:e3:cc:ef:f9:2b: b0:fe:49:fd:58:c3:ff:a6:5f:67:70:38:00:c7:02:90:da:23: 06:0c:09:29:ec:3e:99:95:81:42:6b:ad:64:c3:52:68:23:6a: b1:bb:8d:35:8e:af:ca:43:cb:5d:1c:d8:66:f6:4c:9f:16:45: 80:3f:0e:40:24:7b:52:3d:9d:a7:50:85:4c:5d:89:04:49:fc: 32:1d:0d:79:34:c0:05:98:cb:c6:01:af:89:b1:87:0b:ea:f2: 8f:20:a2:1c:d8:da:3e:a4:60:18:18:95:bd:e3:1a:1c:f0:71: 9b:a3:31:30:af:f8:63:29:77:7e:20:37:b8:1b:d8:13:bb:95: fd:73:25:a9:0f:95:55:d5:50:03:68:a5:06:09:8c:c9:09:2b: d4:c4:00:60 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaXuLYOCkSF8Llm2ycQoi0V5lsnMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQwMzAwMDAxN1oX DTI2MDcwMjIzNTk1OVowejFJMEcGA1UEBRNAY2YyNzgwNWYzYzcwNjc2NWIxOTM0 MzU1NGFlZTkyZDIyNmE1MWVjNmMyZDFlMWFkOTljNjY4MzJiNzA5MjhiNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPu5+uIslB8KDdQ3VyLJyQRrfI9c C2JezM57DiPRFdPfCCKpjeDytUehEpEEin6JEupEDt/SGhBi3qqvHsg/GpNW6hy/ tLjIKxmHNYBUot7aSfqIZ+P5A30alzosWvJ+3jT0wez/XE8NW64hdBM67DmFuabP S6MLeyjONyiLo2zpjk/qlXgY+Dk+uS7ZEPuG1pMcaEhttaGFpycz2e8X8uqUjmyc auBmKkutxRQTScla7t3iN9WYvSWaeYkclXLTMMrNYTDtzNvPAqdmf4GuZQGZFYsX T5PXxHigHiuKzk+NpMoiub/HNOCZ2aGV/aV4x5dVYswbmBCtFL5I0Ynf7wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFM++FZExXVEG9LtBvm7Mh15VX1NMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAyYzgzNjViLTQ5MWEtNGQ4Ni05ODJhLTA2MTUzNmVmZWQ1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba64iAMA0GCSqGSIb3DQEBCwUAA4IBAQBPoJ9gP4sD73gfjMBZ 4hiaOCEKZXGEKP0JdbhDoD81Nx0iFFNBN3YUT7PRrsBgQGQuZoVdmBUQvCpXZaZh A9/kjAlt4grNleZuh9eXbYqq9gA4LY8DhmKVFxICc3UIL5rNBHL/Rz+w48zv+Suw /kn9WMP/pl9ncDgAxwKQ2iMGDAkp7D6ZlYFCa61kw1JoI2qxu401jq/KQ8tdHNhm 9kyfFkWAPw5AJHtSPZ2nUIVMXYkESfwyHQ15NMAFmMvGAa+JsYcL6vKPIKIc2No+ pGAYGJW94xoc8HGbozEwr/hjKXd+IDe4G9gTu5X9cyWpD5VV1VADaKUGCYzJCSvU xABg -----END CERTIFICATE-----Generated at Fri Apr 17 04:45:36 2026 by rpki-client