$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07bbdcc6-3088-4488-9174-6e4b19fef87e.roa File: 07bbdcc6-3088-4488-9174-6e4b19fef87e.roa (raw, json) Hash identifier: JLFxiAbmW+EXH6+n+WmPEmH1mLj1PBBFoqubTmEAksI= Subject key identifier: EC:D0:D0:16:10:FF:A7:FC:0B:3E:ED:AC:10:DA:5B:61:B3:90:73:3D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3BB79B022717C0104694A3CA97BEDCC86425A1B1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07bbdcc6-3088-4488-9174-6e4b19fef87e.roa Signing time: Thu 26 Feb 2026 00:00:35 +0000 ROA not before: Thu 26 Feb 2026 00:00:35 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b7:9b:02:27:17:c0:10:46:94:a3:ca:97:be:dc:c8:64:25:a1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 26 00:00:35 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=b195eb4d95ea98b992b860cefdcde6b07c88f39951ff56da3511c6985886ec96, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:33:0a:5d:59:50:ca:ab:09:6f:42:ee:96:ca: 73:d1:8f:10:00:1f:75:d5:81:4c:33:58:04:a1:f1: 02:fd:23:fc:9c:69:8f:2a:8e:20:29:17:28:3e:b2: 13:f2:c7:5c:a6:6b:b6:1d:15:da:b4:75:6a:1b:34: 28:64:03:3e:58:f1:4f:21:08:56:8f:80:c3:44:ad: df:16:16:17:38:1f:01:c7:14:e4:38:ed:e7:25:e3: 9c:5f:80:e7:9e:9c:67:c8:32:57:1e:0c:52:4c:85: ac:1f:71:da:6c:c6:52:ff:13:31:1a:55:54:ca:19: 91:70:ba:04:8c:c2:39:ec:29:8e:d7:c8:0b:ba:c2: e9:d0:fd:59:47:d9:be:3f:5a:10:a0:9d:77:5d:ed: e0:e1:df:e4:e8:91:c0:1f:d8:3e:f3:2a:ec:96:bf: 43:9c:0e:7b:0d:8c:6f:42:79:b2:fb:70:ce:c7:e5: eb:56:d0:40:22:97:a2:f7:7d:14:36:2f:22:9b:0c: f3:8e:d7:90:c3:85:31:f8:e7:20:1d:f1:c1:e3:81: 1a:a1:3e:fc:ad:2c:e1:0c:2c:00:c5:a0:7e:e6:9a: b9:26:f4:ff:5a:b7:f0:ea:ab:51:8e:04:d1:b7:85: d7:80:2f:e1:0b:47:95:12:4c:05:0c:d9:b7:84:ab: 9b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D0:D0:16:10:FF:A7:FC:0B:3E:ED:AC:10:DA:5B:61:B3:90:73:3D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07bbdcc6-3088-4488-9174-6e4b19fef87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:2000::/40 Signature Algorithm: sha256WithRSAEncryption 87:8f:3a:33:f1:4b:40:6f:58:16:a5:f2:33:5a:52:85:fa:06: c5:4e:61:e3:9c:1e:fc:64:42:9d:1d:2c:5a:00:43:22:b2:d2: 3e:b9:4e:b6:de:f5:f3:bb:cd:7e:2a:7e:ec:4d:fc:ed:fc:be: 8b:b8:ae:18:09:cc:09:8a:82:f6:7c:2b:8e:cd:2c:6a:d6:d8: 38:55:89:06:21:9d:74:2b:91:41:c5:bf:41:2a:59:8a:f4:c7: 6b:28:e8:ec:b5:62:b4:93:5f:c7:15:d0:e7:cc:04:6f:8f:20: 31:34:12:a9:d5:0f:52:36:e1:b4:37:34:34:f2:7f:32:cf:2f: 1c:c3:bd:23:85:c0:3b:00:15:f8:86:ce:b3:61:7f:34:42:53: d6:0b:de:f1:44:f9:fa:aa:77:da:bb:94:9b:09:25:c8:80:d3: 40:05:43:89:65:2c:79:e1:a3:0b:40:a8:0b:df:c4:be:ed:56: 44:64:38:d6:bc:09:11:56:14:54:67:a3:af:33:bc:0e:93:b9: 1a:ed:14:ec:38:f5:e7:c9:1e:30:98:e3:8b:d4:b5:83:3f:02: 30:2c:a7:e1:bd:74:5d:e8:50:91:68:5d:fa:f8:fc:cb:e5:46: 16:2e:bd:2a:ca:49:ef:f0:6c:ea:d8:b5:15:76:a0:7a:bc:81: 1c:95:2c:7b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUO7ebAicXwBBGlKPKl77cyGQlobEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyNjAwMDAzNVoX DTI2MDUyNzIzNTk1OVowejFJMEcGA1UEBRNAYjE5NWViNGQ5NWVhOThiOTkyYjg2 MGNlZmRjZGU2YjA3Yzg4ZjM5OTUxZmY1NmRhMzUxMWM2OTg1ODg2ZWM5NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jMKXVlQyqsJb0Lulspz0Y8QAB91 1YFMM1gEofEC/SP8nGmPKo4gKRcoPrIT8sdcpmu2HRXatHVqGzQoZAM+WPFPIQhW j4DDRK3fFhYXOB8BxxTkOO3nJeOcX4DnnpxnyDJXHgxSTIWsH3HabMZS/xMxGlVU yhmRcLoEjMI57CmO18gLusLp0P1ZR9m+P1oQoJ13Xe3g4d/k6JHAH9g+8yrslr9D nA57DYxvQnmy+3DOx+XrVtBAIpei930UNi8imwzzjteQw4Ux+OcgHfHB44EaoT78 rSzhDCwAxaB+5pq5JvT/Wrfw6qtRjgTRt4XXgC/hC0eVEkwFDNm3hKubtwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOzQ0BYQ/6f8Cz7trBDaW2GzkHM9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3YmJkY2M2LTMwODgtNDQ4OC05MTc0LTZlNGIxOWZlZjg3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7SAwDQYJKoZIhvcNAQELBQADggEBAIePOjPxS0BvWBal8jNa UoX6BsVOYeOcHvxkQp0dLFoAQyKy0j65Trbe9fO7zX4qfuxN/O38vou4rhgJzAmK gvZ8K47NLGrW2DhViQYhnXQrkUHFv0EqWYr0x2so6Oy1YrSTX8cV0OfMBG+PIDE0 EqnVD1I24bQ3NDTyfzLPLxzDvSOFwDsAFfiGzrNhfzRCU9YL3vFE+fqqd9q7lJsJ JciA00AFQ4llLHnhowtAqAvfxL7tVkRkONa8CRFWFFRno68zvA6TuRrtFOw49efJ HjCY44vUtYM/AjAsp+G9dF3oUJFoXfr4/MvlRhYuvSrKSe/wbOrYtRV2oHq8gRyV LHs= -----END CERTIFICATE-----Generated at Sun Mar 1 23:50:08 2026 by rpki-client