$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/62603757-a298-4715-81cd-bc8195aabfe8.roa File: 62603757-a298-4715-81cd-bc8195aabfe8.roa (raw, json) Hash identifier: 8e1f2snvY2Q66M1u++30f9bdBMa2bDA+f9LLl1d7Jxk= Subject key identifier: D0:24:66:FD:2A:25:41:48:D7:AB:37:65:86:D4:D9:EC:9D:D9:EA:2B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4468B62F562B43C19E8AD73E2BDA304A5DC57EF3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/62603757-a298-4715-81cd-bc8195aabfe8.roa Signing time: Fri 03 Apr 2026 00:10:06 +0000 ROA not before: Fri 03 Apr 2026 00:10:06 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:68:b6:2f:56:2b:43:c1:9e:8a:d7:3e:2b:da:30:4a:5d:c5:7e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 3 00:10:06 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=50a6461ae02462e28c3584b1ddba4fdc749dd9f74ed50d5ff1ed7aa19a1aab9f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:a4:f6:a6:87:4f:90:57:95:48:e3:fc:7b: cd:02:ff:d5:63:6d:ae:64:87:da:2f:fb:73:89:ad: 6e:e0:d3:be:ef:b9:8e:5b:cd:cf:cc:5c:1d:9b:52: 04:36:f1:07:27:aa:c7:70:b5:f9:32:02:bb:7b:86: 0f:2b:ae:5f:a9:00:98:24:aa:15:83:1a:a9:d9:16: 19:51:b8:6f:09:ef:2e:b0:1b:30:a9:8e:b3:02:3d: a2:58:27:2b:e2:81:66:6d:1c:56:47:63:dd:3b:75: 25:d1:11:2f:b9:77:6c:75:81:0c:38:27:7c:71:ad: c8:55:33:ee:f6:46:13:ea:98:47:62:73:f6:60:10: d6:21:44:a4:fb:0f:5a:3a:87:57:b3:c5:28:d0:70: 4d:1d:2f:2d:03:52:bc:c6:e5:a3:d0:4e:b3:10:aa: ce:08:6b:10:fa:d3:a3:02:d1:70:b8:35:d7:08:5b: 06:98:17:0d:1b:c3:85:a0:35:f7:44:13:bb:f2:b8: 5a:56:fa:be:a0:29:60:13:f8:57:c0:74:51:f8:01: 8e:ae:63:90:e8:10:d6:28:24:fa:67:15:03:f5:05: 2c:20:62:f1:7e:35:07:5e:65:21:98:62:79:1f:45: 20:f5:22:3a:f6:13:1a:a3:b6:75:db:81:2b:18:2e: f0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:24:66:FD:2A:25:41:48:D7:AB:37:65:86:D4:D9:EC:9D:D9:EA:2B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/62603757-a298-4715-81cd-bc8195aabfe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:8000::/40 Signature Algorithm: sha256WithRSAEncryption 67:22:0c:f7:12:45:a8:47:e6:6c:3d:b1:0a:dd:7e:64:24:20: 5f:f7:76:48:57:9a:c3:ab:98:83:03:c2:cd:cd:23:1d:09:a9: 0e:48:18:83:86:94:8a:62:d9:09:aa:55:1e:e6:fa:56:d2:9e: 78:04:51:0d:db:13:a0:5a:97:1a:94:12:31:16:83:5b:41:62: b8:04:ac:01:3e:fc:26:91:df:e1:d0:1f:d2:46:d7:dc:f8:67: 36:89:da:f7:fa:16:35:5c:0c:d2:6f:e6:d5:9d:ff:bb:fe:7a: 84:63:e5:ab:8d:bf:61:b3:1f:1f:f3:3e:0e:ab:42:00:0c:50: a0:48:72:eb:07:32:bd:d0:06:dd:07:54:7c:45:37:78:73:4f: 51:16:61:31:68:77:ce:27:b0:d1:a3:aa:0b:e6:3b:7a:3f:8e: 14:75:d5:7c:d6:05:cd:8b:e8:65:63:b8:1c:81:cd:d5:aa:c3: ef:31:95:12:c2:79:97:b4:85:39:d8:7e:d9:e3:42:1d:57:0a: 18:3b:1b:13:9e:fa:ee:64:73:a9:e6:3e:88:4b:37:6d:82:3e: d8:42:26:34:59:7e:0b:7a:c6:f5:c9:c7:eb:6c:66:0e:2c:09: 37:8b:4f:69:99:15:d8:d3:93:44:26:eb:9c:9d:a0:b6:66:54: b0:0b:1a:63 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURGi2L1YrQ8Geitc+K9owSl3FfvMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQwMzAwMTAwNloX DTI2MDcwMjIzNTk1OVowejFJMEcGA1UEBRNANTBhNjQ2MWFlMDI0NjJlMjhjMzU4 NGIxZGRiYTRmZGM3NDlkZDlmNzRlZDUwZDVmZjFlZDdhYTE5YTFhYWI5ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDCk9qaHT5BXlUjj/HvNAv/VY22u ZIfaL/tzia1u4NO+77mOW83PzFwdm1IENvEHJ6rHcLX5MgK7e4YPK65fqQCYJKoV gxqp2RYZUbhvCe8usBswqY6zAj2iWCcr4oFmbRxWR2PdO3Ul0REvuXdsdYEMOCd8 ca3IVTPu9kYT6phHYnP2YBDWIUSk+w9aOodXs8Uo0HBNHS8tA1K8xuWj0E6zEKrO CGsQ+tOjAtFwuDXXCFsGmBcNG8OFoDX3RBO78rhaVvq+oClgE/hXwHRR+AGOrmOQ 6BDWKCT6ZxUD9QUsIGLxfjUHXmUhmGJ5H0Ug9SI69hMao7Z124ErGC7wPQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNAkZv0qJUFI16s3ZYbU2eyd2eorMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYyNjAzNzU3LWEyOTgtNDcxNS04MWNkLWJjODE5NWFhYmZlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba64AwDQYJKoZIhvcNAQELBQADggEBAGciDPcSRahH5mw9sQrd fmQkIF/3dkhXmsOrmIMDws3NIx0JqQ5IGIOGlIpi2QmqVR7m+lbSnngEUQ3bE6Ba lxqUEjEWg1tBYrgErAE+/CaR3+HQH9JG19z4ZzaJ2vf6FjVcDNJv5tWd/7v+eoRj 5auNv2GzHx/zPg6rQgAMUKBIcusHMr3QBt0HVHxFN3hzT1EWYTFod84nsNGjqgvm O3o/jhR11XzWBc2L6GVjuByBzdWqw+8xlRLCeZe0hTnYftnjQh1XChg7GxOe+u5k c6nmPohLN22CPthCJjRZfgt6xvXJx+tsZg4sCTeLT2mZFdjTk0Qm65ydoLZmVLAL GmM= -----END CERTIFICATE-----Generated at Fri Apr 17 08:00:53 2026 by rpki-client