$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d18e95f-6df4-4586-8657-7f68919762f8.roa File: 2d18e95f-6df4-4586-8657-7f68919762f8.roa (raw, json) Hash identifier: WQUAks9YdHq24OnWV58sTjP0mQp2B0Xvsg5WxhtKqFI= Subject key identifier: 42:ED:6C:65:B2:68:AD:95:5B:1D:92:4C:9F:F3:B0:6A:50:8F:C0:A9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7A879E0C303BF4B24E0C7B2A8500245AD78FFE6B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d18e95f-6df4-4586-8657-7f68919762f8.roa Signing time: Fri 03 Apr 2026 00:00:50 +0000 ROA not before: Fri 03 Apr 2026 00:00:50 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:2880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 21:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:87:9e:0c:30:3b:f4:b2:4e:0c:7b:2a:85:00:24:5a:d7:8f:fe:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 3 00:00:50 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=368f4dc087d3e1270e6f92392bb4196ee9cf5fd7d9bc7b677068435f9929483e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:9c:5e:34:c1:14:da:2a:54:c6:70:c1:d2: 88:b2:a4:73:16:47:e7:8e:27:cc:11:7f:53:94:24: c7:d1:9e:b9:ee:36:aa:3b:26:fd:21:f8:6b:d1:d3: 48:06:1e:7b:90:07:58:00:b1:2c:b6:06:e2:92:01: 48:ae:9e:11:83:d9:cd:7b:3b:a6:b0:6d:b4:01:cb: 9c:57:fb:f8:17:c2:d3:3a:dd:76:25:a1:28:f9:b3: 77:d5:a3:48:c7:09:6b:31:f0:5c:ae:f3:be:24:c4: 5c:2a:82:55:be:ef:8d:47:0b:76:04:40:cb:82:d3: 85:0f:60:38:76:7c:40:86:c6:86:d6:18:d0:e7:63: 4e:0a:1b:8c:de:55:ec:24:16:75:e7:20:21:b5:bb: 13:2d:e9:7e:3c:9f:83:63:4a:41:3c:a3:1d:03:cc: c6:43:2a:1a:9c:a7:cc:59:7e:1a:b5:08:30:77:8c: af:db:68:11:17:0c:df:d4:ee:dc:8c:26:6c:3f:e8: b0:dd:dd:af:0a:50:1e:e8:5e:e3:f0:61:87:fa:a5: 47:c9:96:ce:38:86:45:51:48:67:fb:d0:5c:2f:33: d5:6e:cb:58:3d:52:6f:fc:d8:58:df:f6:1c:6f:29: 8e:73:cb:9a:47:9c:f0:47:9d:cf:73:6b:e9:9f:39: 3f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:ED:6C:65:B2:68:AD:95:5B:1D:92:4C:9F:F3:B0:6A:50:8F:C0:A9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d18e95f-6df4-4586-8657-7f68919762f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:2880::/48 Signature Algorithm: sha256WithRSAEncryption 70:c4:89:17:5c:c6:33:70:4e:4a:38:c5:c0:21:0d:00:43:01: 33:9f:c3:30:d5:28:37:3c:90:ef:e3:8d:f3:e9:27:ca:c3:1e: 19:15:f0:8f:e8:32:40:6d:4c:14:c4:03:dd:26:b7:22:b9:f5: 79:b5:7b:1b:71:71:19:53:82:3f:43:04:3f:a7:d9:08:f2:08: 3e:2d:b8:0f:4a:4e:cd:7c:cc:fe:a0:28:88:f3:3b:b7:16:85: 0e:55:71:6b:84:34:d6:19:19:6e:4f:4a:5b:86:a6:3d:26:72: b0:96:40:3b:6c:2a:89:4f:3a:e6:70:7d:69:57:2f:24:e5:2f: a9:3e:b0:71:79:12:cb:4f:9a:71:29:94:02:9f:5f:9e:fd:0c: 88:9a:26:10:a0:e2:c1:82:1f:f2:79:1d:66:d6:3b:34:f4:94: ec:ea:6d:cb:6f:ee:8e:b7:41:a3:f9:8f:8c:18:27:82:53:ac: 48:9d:62:6d:97:93:32:9a:1a:57:a3:fc:e6:0c:16:43:45:97: 92:19:d3:5f:c0:27:0e:52:85:76:f3:6a:67:b5:c1:b4:f1:b3: 74:9e:16:83:28:d0:b4:a6:fc:0e:23:58:70:6c:89:d0:d8:97: 26:ae:03:58:a1:37:e9:7d:09:3e:15:b1:d7:61:a0:cc:c8:99: 9c:e9:81:db -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUeoeeDDA79LJODHsqhQAkWteP/mswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQwMzAwMDA1MFoX DTI2MDcwMjIzNTk1OVowejFJMEcGA1UEBRNAMzY4ZjRkYzA4N2QzZTEyNzBlNmY5 MjM5MmJiNDE5NmVlOWNmNWZkN2Q5YmM3YjY3NzA2ODQzNWY5OTI5NDgzZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUScXjTBFNoqVMZwwdKIsqRzFkfn jifMEX9TlCTH0Z657jaqOyb9Ifhr0dNIBh57kAdYALEstgbikgFIrp4Rg9nNezum sG20AcucV/v4F8LTOt12JaEo+bN31aNIxwlrMfBcrvO+JMRcKoJVvu+NRwt2BEDL gtOFD2A4dnxAhsaG1hjQ52NOChuM3lXsJBZ15yAhtbsTLel+PJ+DY0pBPKMdA8zG QyoanKfMWX4atQgwd4yv22gRFwzf1O7cjCZsP+iw3d2vClAe6F7j8GGH+qVHyZbO OIZFUUhn+9BcLzPVbstYPVJv/NhY3/YcbymOc8uaR5zwR53Pc2vpnzk/VQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFELtbGWyaK2VWx2STJ/zsGpQj8CpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJkMThlOTVmLTZkZjQtNDU4Ni04NjU3LTdmNjg5MTk3NjJmOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6yiAMA0GCSqGSIb3DQEBCwUAA4IBAQBwxIkXXMYzcE5KOMXA IQ0AQwEzn8Mw1Sg3PJDv443z6SfKwx4ZFfCP6DJAbUwUxAPdJrciufV5tXsbcXEZ U4I/QwQ/p9kI8gg+LbgPSk7NfMz+oCiI8zu3FoUOVXFrhDTWGRluT0pbhqY9JnKw lkA7bCqJTzrmcH1pVy8k5S+pPrBxeRLLT5pxKZQCn1+e/QyImiYQoOLBgh/yeR1m 1js09JTs6m3Lb+6Ot0Gj+Y+MGCeCU6xInWJtl5MymhpXo/zmDBZDRZeSGdNfwCcO UoV282pntcG08bN0nhaDKNC0pvwOI1hwbInQ2JcmrgNYoTfpfQk+FbHXYaDMyJmc 6YHb -----END CERTIFICATE-----Generated at Sun Apr 19 08:41:50 2026 by rpki-client