$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0a9b33f8-71dc-49e1-9953-634a2d045ebe.roa File: 0a9b33f8-71dc-49e1-9953-634a2d045ebe.roa (raw, json) Hash identifier: SgdA0VbY8GJEC2EsMt4NF2ABoNVcauj4OZZuQV3UWSU= Subject key identifier: C4:E6:7B:19:5F:F0:D0:8A:48:08:A2:37:48:73:93:89:2A:F8:40:3C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 042CF85B0683BDB1C2BC977958C13FB040D0C5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0a9b33f8-71dc-49e1-9953-634a2d045ebe.roa Signing time: Fri 03 Apr 2026 00:10:04 +0000 ROA not before: Fri 03 Apr 2026 00:10:04 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2c:f8:5b:06:83:bd:b1:c2:bc:97:79:58:c1:3f:b0:40:d0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 3 00:10:04 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=9edcedd0fcd5f0b7f0e6fc81a0d78232b2d28613a1ae68eee08ecaf9ea6e44a9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:43:89:c5:8e:d8:fc:13:8e:7e:8e:87:c5: 10:45:f0:39:77:fe:1b:db:fc:50:46:32:24:04:ce: ad:0c:9f:78:14:b7:1b:dc:90:2d:1a:94:72:08:9e: c6:f0:7b:1e:a7:87:40:ad:82:5b:0a:c5:08:f0:68: 9d:c1:77:0b:9e:2b:7b:6a:c8:15:82:53:57:29:d7: 33:d4:d4:ad:f2:cd:e4:55:c7:1c:9b:a1:38:78:f5: 1c:f7:e5:e2:6f:c9:22:95:47:81:4c:74:a0:a3:e2: 2f:5b:df:8c:11:06:62:f6:d3:44:23:ec:9f:4a:38: 45:ae:06:10:92:5f:bd:94:dd:20:d5:22:f4:1b:1e: da:75:6d:37:c4:3e:88:d8:89:06:5a:46:74:8d:9b: e6:73:74:ec:d7:dd:4b:c4:d4:9c:17:92:87:27:b5: 99:68:2e:05:fe:e0:39:c0:46:74:9e:48:1c:2b:36: 6f:5d:1f:80:6f:02:46:54:94:ff:11:50:68:00:59: 43:60:b3:e7:90:dd:86:2c:b9:18:dc:8e:9a:ae:28: 7b:ad:a5:82:b7:c2:54:d7:04:7f:e6:1e:20:bd:37: 82:33:dc:62:17:76:08:e2:05:46:82:7e:36:f2:52: 7f:13:c0:bd:8c:27:44:b6:e0:77:c8:62:9c:03:9a: 8b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E6:7B:19:5F:F0:D0:8A:48:08:A2:37:48:73:93:89:2A:F8:40:3C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0a9b33f8-71dc-49e1-9953-634a2d045ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:c040::/48 Signature Algorithm: sha256WithRSAEncryption ca:06:c7:a4:de:96:15:0c:b4:07:a2:9c:65:45:9c:be:ab:63: 1e:51:13:c8:d8:7f:a5:a7:28:6d:08:3d:e6:eb:81:5d:89:1a: e2:7b:18:68:68:b2:b6:30:fe:da:d5:c4:b9:9d:58:01:21:16: 0e:db:9a:fa:a3:3a:db:b6:99:d3:1f:c0:45:c6:45:92:67:db: 26:aa:b6:4f:dc:78:43:4a:5b:3d:33:40:8f:f3:c6:66:35:56: 09:3f:cd:3e:e1:93:25:4a:f7:46:3e:a5:c7:fa:70:b8:c4:47: e4:12:76:f8:03:f4:c6:3e:46:b9:8d:68:bc:8d:be:a8:3f:de: b8:5f:0b:6e:31:1e:fa:03:9c:3f:9e:17:5a:30:6b:0c:c3:36: 47:9f:b3:55:9b:fe:e3:3a:24:06:4c:5a:f3:fb:88:a2:9b:1d: 1f:c3:92:a9:e2:dd:50:04:9e:e9:ad:d2:1a:75:55:c9:c1:7f: 7b:d8:95:e4:42:c2:e2:f3:97:e6:b6:a9:f9:0c:0d:bc:12:a7: 3a:5a:9b:90:de:fe:fa:a4:d2:d6:28:ed:85:a8:71:88:d6:53: 48:e0:62:f7:52:8d:e6:55:51:f7:b1:c8:39:47:40:18:6d:40: 3f:dc:f5:b3:d0:46:ba:cc:af:80:5b:06:f2:3a:f5:93:a2:95: 58:bd:5f:ae -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgITBCz4WwaDvbHCvJd5WME/sEDQxTANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjYwNDAzMDAxMDA0WhcN MjYwNzAyMjM1OTU5WjB6MUkwRwYDVQQFE0A5ZWRjZWRkMGZjZDVmMGI3ZjBlNmZj ODFhMGQ3ODIzMmIyZDI4NjEzYTFhZTY4ZWVlMDhlY2FmOWVhNmU0NGE5MS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXHEOJxY7Y/BOOfo6HxRBF8Dl3/hvb /FBGMiQEzq0Mn3gUtxvckC0alHIInsbwex6nh0CtglsKxQjwaJ3BdwueK3tqyBWC U1cp1zPU1K3yzeRVxxyboTh49Rz35eJvySKVR4FMdKCj4i9b34wRBmL200Qj7J9K OEWuBhCSX72U3SDVIvQbHtp1bTfEPojYiQZaRnSNm+ZzdOzX3UvE1JwXkocntZlo LgX+4DnARnSeSBwrNm9dH4BvAkZUlP8RUGgAWUNgs+eQ3YYsuRjcjpquKHutpYK3 wlTXBH/mHiC9N4Iz3GIXdgjiBUaCfjbyUn8TwL2MJ0S24HfIYpwDmoshAgMBAAGj ggJLMIICRzAdBgNVHQ4EFgQUxOZ7GV/w0IpICKI3SHOTiSr4QDwwHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv MGE5YjMzZjgtNzFkYy00OWUxLTk5NTMtNjM0YTJkMDQ1ZWJlLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkBtrrwEAwDQYJKoZIhvcNAQELBQADggEBAMoGx6TelhUMtAeinGVF nL6rYx5RE8jYf6WnKG0IPebrgV2JGuJ7GGhosrYw/trVxLmdWAEhFg7bmvqjOtu2 mdMfwEXGRZJn2yaqtk/ceENKWz0zQI/zxmY1Vgk/zT7hkyVK90Y+pcf6cLjER+QS dvgD9MY+RrmNaLyNvqg/3rhfC24xHvoDnD+eF1owawzDNkefs1Wb/uM6JAZMWvP7 iKKbHR/Dkqni3VAEnumt0hp1VcnBf3vYleRCwuLzl+a2qfkMDbwSpzpam5De/vqk 0tYo7YWocYjWU0jgYvdSjeZVUfexyDlHQBhtQD/c9bPQRrrMr4BbBvI69ZOilVi9 X64= -----END CERTIFICATE-----Generated at Fri Apr 17 03:33:00 2026 by rpki-client