$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/412c7b01-5685-4f18-82cd-b23372a53b95.roa File: 412c7b01-5685-4f18-82cd-b23372a53b95.roa (raw, json) Hash identifier: M1ovbS7KgEwAUOkhCYg/Wspl2H4nYVBpTjlDzJW49aE= Subject key identifier: C0:AE:B9:9E:41:C0:1E:BA:99:B0:D7:79:30:8F:FD:C8:81:34:29:2C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0FD02453D3278873D128F48BD281AE0E7D5BEF6C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/412c7b01-5685-4f18-82cd-b23372a53b95.roa Signing time: Fri 03 Apr 2026 00:00:50 +0000 ROA not before: Fri 03 Apr 2026 00:00:50 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:c8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d0:24:53:d3:27:88:73:d1:28:f4:8b:d2:81:ae:0e:7d:5b:ef:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 3 00:00:50 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=5890eb5f9237091f195d9207781284756223da0ca73b26e40741e0eda79b72d2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:26:ab:1e:d5:52:b4:11:f8:c0:26:2c:1e: f4:34:8b:61:43:d2:35:31:a7:7e:74:75:7a:8d:b5: 52:33:4e:13:09:35:c5:7a:f3:20:54:43:e6:6f:d3: 50:11:f7:b4:ab:32:56:78:5f:de:ff:b8:89:3a:1c: f1:82:f5:36:80:84:2e:27:5d:0d:2d:d5:7d:4c:e2: 81:2b:66:00:40:37:d0:32:61:42:44:be:93:23:13: 1c:bd:eb:7f:71:5b:02:d8:5b:2d:d6:1b:5a:79:f2: 10:bd:9c:5e:8d:de:7b:47:85:6e:10:06:64:be:79: 0a:13:31:48:a5:19:1f:22:9c:cf:96:22:ef:63:19: ec:ed:1b:59:ee:7f:04:6c:cc:26:2d:f3:56:27:fe: a1:12:18:30:c7:15:87:c2:57:3c:0f:9e:b5:c4:ad: 78:b8:3f:d4:32:9e:99:28:a7:cb:1e:3f:59:ed:cb: f5:fb:9b:10:fd:ae:46:a9:aa:1d:bb:dc:54:51:51: 09:55:60:1d:64:5f:7f:e9:7b:71:11:8e:db:50:57: 1c:20:62:b4:e5:fe:cd:e2:d4:13:15:4d:dc:d0:df: 54:d9:5d:12:b6:2a:1e:51:9b:14:98:10:47:ac:b7: 8c:69:dd:a8:9d:61:ed:36:8d:b9:9c:2b:e0:32:4a: 17:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AE:B9:9E:41:C0:1E:BA:99:B0:D7:79:30:8F:FD:C8:81:34:29:2C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/412c7b01-5685-4f18-82cd-b23372a53b95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:c8c0::/48 Signature Algorithm: sha256WithRSAEncryption c3:71:f6:76:df:f5:6f:5c:96:96:c9:1f:09:50:56:69:33:68: 28:7f:0e:2c:96:75:bc:2c:c4:25:8e:67:fe:7d:6f:cd:31:25: d2:fc:a9:93:01:07:cc:4f:d2:af:81:63:b0:88:83:41:f3:50: c6:ce:42:a2:19:e8:32:89:f8:ce:c3:ec:2f:16:a6:49:8e:c0: 37:6f:98:46:32:96:ca:f8:cc:f5:08:ee:77:5b:3f:c4:cc:e4: 29:a4:ac:86:15:31:a8:62:37:78:56:7e:32:bc:66:de:dd:f2: 92:70:13:a5:12:8a:cb:7b:a1:7b:de:76:cf:33:16:24:f6:05: c4:70:ee:47:cd:6e:0b:b6:0d:03:89:92:af:bd:dc:4b:33:fc: c6:30:bf:e0:71:7b:a7:0e:cc:9f:79:9d:b0:8f:bf:24:30:b2: 67:4b:38:8e:13:93:b9:d3:e1:89:39:e2:8b:b4:a6:63:80:f1: c9:d8:6c:63:43:de:04:f1:a3:2e:33:8c:d0:92:c6:5f:f4:1a: c0:f2:2a:90:6b:17:04:76:eb:1e:ba:4b:09:f7:09:fc:b7:61: cb:ca:c1:21:3d:ee:30:3e:69:1c:1d:95:fd:1a:33:16:0e:30: 5b:44:25:67:16:9b:28:e4:a8:76:81:cd:41:6c:8c:6c:a2:3f: 17:54:62:71 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUD9AkU9MniHPRKPSL0oGuDn1b72wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQwMzAwMDA1MFoX DTI2MDcwMjIzNTk1OVowejFJMEcGA1UEBRNANTg5MGViNWY5MjM3MDkxZjE5NWQ5 MjA3NzgxMjg0NzU2MjIzZGEwY2E3M2IyNmU0MDc0MWUwZWRhNzliNzJkMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+gmqx7VUrQR+MAmLB70NIthQ9I1 Mad+dHV6jbVSM04TCTXFevMgVEPmb9NQEfe0qzJWeF/e/7iJOhzxgvU2gIQuJ10N LdV9TOKBK2YAQDfQMmFCRL6TIxMcvet/cVsC2Fst1htaefIQvZxejd57R4VuEAZk vnkKEzFIpRkfIpzPliLvYxns7RtZ7n8EbMwmLfNWJ/6hEhgwxxWHwlc8D561xK14 uD/UMp6ZKKfLHj9Z7cv1+5sQ/a5Gqaodu9xUUVEJVWAdZF9/6XtxEY7bUFccIGK0 5f7N4tQTFU3c0N9U2V0StioeUZsUmBBHrLeMad2onWHtNo25nCvgMkoXaQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMCuuZ5BwB66mbDXeTCP/ciBNCksMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQxMmM3YjAxLTU2ODUtNGYxOC04MmNkLWIyMzM3MmE1M2I5NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba68jAMA0GCSqGSIb3DQEBCwUAA4IBAQDDcfZ23/VvXJaWyR8J UFZpM2gofw4slnW8LMQljmf+fW/NMSXS/KmTAQfMT9KvgWOwiINB81DGzkKiGegy ifjOw+wvFqZJjsA3b5hGMpbK+Mz1CO53Wz/EzOQppKyGFTGoYjd4Vn4yvGbe3fKS cBOlEorLe6F73nbPMxYk9gXEcO5HzW4Ltg0DiZKvvdxLM/zGML/gcXunDsyfeZ2w j78kMLJnSziOE5O50+GJOeKLtKZjgPHJ2GxjQ94E8aMuM4zQksZf9BrA8iqQaxcE duseuksJ9wn8t2HLysEhPe4wPmkcHZX9GjMWDjBbRCVnFpso5Kh2gc1BbIxsoj8X VGJx -----END CERTIFICATE-----Generated at Fri Apr 17 04:42:19 2026 by rpki-client