$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03ad2b77-3143-43df-9d1e-acbaa4d2d2e8.roa File: 03ad2b77-3143-43df-9d1e-acbaa4d2d2e8.roa (raw, json) Hash identifier: t3f2/5uTKSI/cJOW89c5v5jcuvT8TH2Kfz7RqmV1qA4= Subject key identifier: C8:D1:EF:B3:CF:14:82:DD:27:71:FD:17:E3:D7:14:93:E3:31:18:F2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 15E25DC6FF602E8747B7587FA39A361509518A8B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03ad2b77-3143-43df-9d1e-acbaa4d2d2e8.roa Signing time: Wed 20 May 2026 00:00:04 +0000 ROA not before: Wed 20 May 2026 00:00:04 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:8800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e2:5d:c6:ff:60:2e:87:47:b7:58:7f:a3:9a:36:15:09:51:8a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 20 00:00:04 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=6601450236770edc73047ac7a97d7bebe7c9914890a406b91df65142972c4d64, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:67:1d:91:78:68:22:4a:55:54:5b:59:fe:60: b2:0d:88:6d:30:c3:b0:5d:df:fd:f3:25:14:17:e5: 6d:85:cd:fe:05:9a:71:05:30:12:70:a8:fa:2f:96: 3e:47:02:24:ca:dd:71:7e:72:3c:73:f5:1b:85:54: 93:ec:d7:63:9f:70:49:57:12:cb:1f:7f:79:d8:1d: f0:67:8e:8b:31:be:3c:26:cd:15:fe:b2:c9:1e:60: 17:29:69:62:56:15:96:d9:a4:48:2e:38:8d:17:11: ea:0d:ae:0d:0f:e9:13:72:5c:ef:6f:db:90:a4:85: 0b:80:57:10:9c:53:34:dc:cd:1f:fb:a8:9d:ba:e8: d5:40:a9:2f:8d:c8:16:77:ec:27:d1:77:0e:d3:2d: 71:dc:c7:75:e6:01:4a:8f:5b:52:36:45:bd:4c:b4: 72:2a:38:e6:54:8d:18:4c:cf:a3:b1:17:32:08:19: 91:8b:84:10:ed:5f:8d:8c:c4:d3:1d:55:83:73:42: 6e:16:f9:b7:ab:b5:e6:d2:5d:0c:da:e3:a4:95:73: 56:22:a7:16:e5:2c:51:5a:28:4f:94:e9:39:d4:9d: 99:18:e7:a3:68:43:09:3e:06:e6:d1:b3:c1:0e:d7: 11:f8:92:f0:9b:0e:4e:b6:33:a9:c4:26:d2:70:11: c8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D1:EF:B3:CF:14:82:DD:27:71:FD:17:E3:D7:14:93:E3:31:18:F2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03ad2b77-3143-43df-9d1e-acbaa4d2d2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:8800::/48 Signature Algorithm: sha256WithRSAEncryption 71:c2:2f:b1:fd:09:9f:48:67:b7:46:9b:3c:92:17:17:89:5a: 0c:68:13:ab:4f:b3:fa:61:0a:57:6f:a8:ac:aa:df:8e:75:6b: 95:34:74:4d:f2:64:81:8c:48:07:80:a9:db:1b:3b:8c:65:4c: 37:a7:19:68:5b:aa:97:f2:36:ee:db:60:25:ba:c4:31:a9:0d: d8:17:d6:b3:ac:c6:81:a7:06:8b:dd:0b:de:77:70:bd:f7:b2: 09:5e:52:d4:7a:e8:64:ef:dd:3f:8c:25:8b:0a:64:f8:fd:da: fc:4c:7e:9a:df:90:b7:37:90:05:73:cf:f0:15:9b:e3:e5:3d: 21:74:82:dc:34:98:4b:b3:fc:81:36:d4:7a:81:a4:68:93:87: 5b:b7:b3:ae:04:44:76:86:ec:fa:c8:9a:c3:b1:b4:72:d5:cf: fe:ee:46:eb:c5:2d:56:40:70:80:d5:d5:20:b2:9a:71:ae:fb: 7a:ed:2d:5a:e7:79:f7:48:79:9d:f8:11:0a:9c:c2:a9:4f:82: 5c:df:76:3d:db:75:db:c2:5d:36:e8:f4:be:9e:a4:4b:b0:4e: fb:06:3f:af:75:5d:53:47:c8:ac:05:7f:59:83:9e:91:e1:0a: 2f:72:aa:f0:15:d6:62:b6:2b:85:60:a9:32:bc:3d:9d:78:f8: 39:ef:3b:1c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFeJdxv9gLodHt1h/o5o2FQlRioswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMDAwMDAwNFoX DTI2MDgxODIzNTk1OVowejFJMEcGA1UEBRNANjYwMTQ1MDIzNjc3MGVkYzczMDQ3 YWM3YTk3ZDdiZWJlN2M5OTE0ODkwYTQwNmI5MWRmNjUxNDI5NzJjNGQ2NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WcdkXhoIkpVVFtZ/mCyDYhtMMOw Xd/98yUUF+Vthc3+BZpxBTAScKj6L5Y+RwIkyt1xfnI8c/UbhVST7Ndjn3BJVxLL H3952B3wZ46LMb48Js0V/rLJHmAXKWliVhWW2aRILjiNFxHqDa4ND+kTclzvb9uQ pIULgFcQnFM03M0f+6iduujVQKkvjcgWd+wn0XcO0y1x3Md15gFKj1tSNkW9TLRy KjjmVI0YTM+jsRcyCBmRi4QQ7V+NjMTTHVWDc0JuFvm3q7Xm0l0M2uOklXNWIqcW 5SxRWihPlOk51J2ZGOejaEMJPgbm0bPBDtcR+JLwmw5OtjOpxCbScBHIIQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMjR77PPFILdJ3H9F+PXFJPjMRjyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzYWQyYjc3LTMxNDMtNDNkZi05ZDFlLWFjYmFhNGQyZDJlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7IgAMA0GCSqGSIb3DQEBCwUAA4IBAQBxwi+x/QmfSGe3Rps8 khcXiVoMaBOrT7P6YQpXb6isqt+OdWuVNHRN8mSBjEgHgKnbGzuMZUw3pxloW6qX 8jbu22AlusQxqQ3YF9azrMaBpwaL3Qved3C997IJXlLUeuhk790/jCWLCmT4/dr8 TH6a35C3N5AFc8/wFZvj5T0hdILcNJhLs/yBNtR6gaRok4dbt7OuBER2huz6yJrD sbRy1c/+7kbrxS1WQHCA1dUgsppxrvt67S1a53n3SHmd+BEKnMKpT4Jc33Y923Xb wl026PS+nqRLsE77Bj+vdV1TR8isBX9Zg56R4QovcqrwFdZitiuFYKkyvD2dePg5 7zsc -----END CERTIFICATE-----Generated at Sat Jun 13 10:24:20 2026 by rpki-client