$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0c0e6af5-6df3-4cdc-8537-f26e2a75524d.roa File: 0c0e6af5-6df3-4cdc-8537-f26e2a75524d.roa (raw, json) Hash identifier: S0Nlk3nylJeT5eZjKx/zfGOPzaXDGiMWs7wNO9+ZO/k= Subject key identifier: 56:96:BF:40:A1:FC:59:35:4C:E6:08:49:68:1D:83:67:89:FB:95:9D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 25FE750EC0CD4492B989824FFDA8BF33DFEA2A2B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0c0e6af5-6df3-4cdc-8537-f26e2a75524d.roa Signing time: Fri 03 Apr 2026 00:01:17 +0000 ROA not before: Fri 03 Apr 2026 00:01:17 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:fe:75:0e:c0:cd:44:92:b9:89:82:4f:fd:a8:bf:33:df:ea:2a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 3 00:01:17 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=b2ab68d3de850441b3caa8c3d15319b9649303e3637071e3487b5fe313608674, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f4:d1:33:0b:0f:b9:69:fe:5c:b8:9b:28:ef: fc:fc:02:18:b4:91:ba:cc:0c:c5:fb:64:c1:58:32: 67:65:b3:b3:5b:0b:73:d0:8d:3a:04:1a:4e:a6:b9: a6:e3:4d:d0:6f:2a:47:52:4b:c5:cc:43:ff:a0:9d: 84:7d:f5:8f:6c:e0:73:40:2f:83:e7:d8:03:a4:be: b7:a0:ec:ae:81:a5:98:11:65:f6:ab:84:a8:b6:26: c0:09:69:ae:1e:98:59:78:4b:1e:5a:35:6a:07:72: 96:9f:94:c9:84:d2:3f:04:2b:03:b5:fc:35:7c:09: a2:6c:b8:24:49:ce:4a:16:9e:75:24:91:46:cf:c7: ac:c9:17:77:68:9d:be:e1:df:17:c2:43:c6:2a:27: f9:22:ac:bd:14:c2:07:68:1e:66:4c:9f:56:b2:31: 77:61:b0:95:5b:96:6b:61:f7:c7:4b:c4:6a:58:3b: 47:cf:bb:f1:31:06:bd:0c:28:42:b4:07:51:3d:9b: c7:54:3a:c4:89:39:77:4e:6d:92:8c:b9:22:2c:f6: fe:19:fa:f8:ee:56:a4:72:7d:79:fc:ef:39:ed:3d: c0:4e:8d:4a:b5:5a:f9:7f:16:12:2d:bc:b4:bc:66: 64:e2:77:52:83:4b:11:e9:45:db:52:f1:26:80:9c: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:96:BF:40:A1:FC:59:35:4C:E6:08:49:68:1D:83:67:89:FB:95:9D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0c0e6af5-6df3-4cdc-8537-f26e2a75524d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:b000::/40 Signature Algorithm: sha256WithRSAEncryption 6b:51:56:5a:b4:53:10:eb:21:66:9c:d7:18:b6:43:3f:e4:57: c0:d8:e6:cf:67:c8:40:41:5e:69:99:3c:af:2c:84:ab:7c:30: 76:5a:8b:e8:af:d3:4f:f6:6b:e7:72:11:96:d8:75:ec:ca:36: 27:f7:ce:f5:a1:36:bc:79:ed:4d:14:07:b4:da:b1:eb:72:26: 0e:35:54:4d:50:69:81:95:dc:27:7f:8c:6a:6e:e7:2c:56:b2: 00:6e:90:9d:16:22:a9:40:9e:2c:c2:c4:a4:9d:ff:e9:76:ea: 67:32:87:2c:98:3c:d7:d0:e4:41:17:c8:65:b9:09:ff:18:83: 46:78:6a:3b:86:5c:83:26:b9:2f:c3:85:14:d8:15:c8:73:c7: 73:b6:e8:b1:c1:d4:12:9f:f7:19:fc:ff:81:2f:d5:25:3b:6b: 94:0a:78:2c:70:69:2b:67:a8:ea:10:6d:8b:2a:fd:11:0d:e4: d8:0c:6e:27:9c:83:ed:71:85:08:82:c7:7b:aa:bf:ef:c7:a7: 8e:da:3f:5a:32:66:16:01:4d:61:58:3a:d8:5a:b9:e2:ec:0f: e5:dc:7f:4d:65:a8:8c:2f:81:80:77:58:0d:08:a8:f9:68:ad: 22:b3:e3:a0:98:70:37:e2:72:a5:45:92:3a:49:9f:3f:b9:56: 52:cb:d2:e0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJf51DsDNRJK5iYJP/ai/M9/qKiswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQwMzAwMDExN1oX DTI2MDcwMjIzNTk1OVowejFJMEcGA1UEBRNAYjJhYjY4ZDNkZTg1MDQ0MWIzY2Fh OGMzZDE1MzE5Yjk2NDkzMDNlMzYzNzA3MWUzNDg3YjVmZTMxMzYwODY3NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPTRMwsPuWn+XLibKO/8/AIYtJG6 zAzF+2TBWDJnZbOzWwtz0I06BBpOprmm403QbypHUkvFzEP/oJ2EffWPbOBzQC+D 59gDpL63oOyugaWYEWX2q4SotibACWmuHphZeEseWjVqB3KWn5TJhNI/BCsDtfw1 fAmibLgkSc5KFp51JJFGz8esyRd3aJ2+4d8XwkPGKif5Iqy9FMIHaB5mTJ9WsjF3 YbCVW5ZrYffHS8RqWDtHz7vxMQa9DChCtAdRPZvHVDrEiTl3Tm2SjLkiLPb+Gfr4 7lakcn15/O857T3ATo1KtVr5fxYSLby0vGZk4ndSg0sR6UXbUvEmgJzRgwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFaWv0Ch/Fk1TOYISWgdg2eJ+5WdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBjMGU2YWY1LTZkZjMtNGNkYy04NTM3LWYyNmUyYTc1NTI0ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba67AwDQYJKoZIhvcNAQELBQADggEBAGtRVlq0UxDrIWac1xi2 Qz/kV8DY5s9nyEBBXmmZPK8shKt8MHZai+iv00/2a+dyEZbYdezKNif3zvWhNrx5 7U0UB7TasetyJg41VE1QaYGV3Cd/jGpu5yxWsgBukJ0WIqlAnizCxKSd/+l26mcy hyyYPNfQ5EEXyGW5Cf8Yg0Z4ajuGXIMmuS/DhRTYFchzx3O26LHB1BKf9xn8/4Ev 1SU7a5QKeCxwaStnqOoQbYsq/REN5NgMbiecg+1xhQiCx3uqv+/Hp47aP1oyZhYB TWFYOthaueLsD+Xcf01lqIwvgYB3WA0IqPlorSKz46CYcDficqVFkjpJnz+5VlLL 0uA= -----END CERTIFICATE-----Generated at Fri Apr 17 06:32:23 2026 by rpki-client