$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6602a63e-35ff-4691-9488-f64ca93504e7.roa File: 6602a63e-35ff-4691-9488-f64ca93504e7.roa (raw, json) Hash identifier: 2/Ze3F2nejTtKhO23+2HKQHSUDbMf3p9SKRVDEUmzPI= Subject key identifier: E0:8A:8D:F4:4E:CD:17:2E:0E:7A:9A:06:16:44:B2:FB:94:72:D4:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 160CAEA4FC954882FDDA16E5C27F7E6D1AAFC852 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6602a63e-35ff-4691-9488-f64ca93504e7.roa Signing time: Fri 03 Apr 2026 00:01:43 +0000 ROA not before: Fri 03 Apr 2026 00:01:43 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0c:ae:a4:fc:95:48:82:fd:da:16:e5:c2:7f:7e:6d:1a:af:c8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 3 00:01:43 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=9dd24bcdd3b40d67ad2cd1b125b288b71c673292b2fdcc0744497096f912cfa6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4d:6e:71:bd:05:19:9a:e2:6e:39:49:bd:8a: 0b:7e:50:1b:33:1b:6b:a1:b5:aa:ff:ea:7c:75:8f: fc:d6:a0:4a:29:67:73:5c:69:eb:89:a7:56:e2:e3: 39:4b:fd:13:36:13:cd:b9:b7:fb:fc:35:68:74:ba: 03:96:9f:92:67:c5:c8:46:70:b1:57:c0:e2:2e:c2: e0:dc:1b:ae:23:bb:7d:fb:f3:62:09:42:f4:a2:da: dc:99:00:5f:93:4a:4d:c0:a1:b2:68:2c:64:5a:f8: 00:4b:0c:97:4a:c6:e0:1b:2d:c9:d3:4e:35:a3:10: 63:d4:de:24:f0:aa:14:b9:b3:77:61:cb:94:6b:a0: ea:a7:6f:ac:d6:1a:b6:82:bd:ee:10:c3:c7:c3:8a: 8a:f4:51:c2:85:cb:b2:eb:3e:55:9c:c1:ad:01:e6: d8:60:9e:e8:47:35:16:08:65:11:1b:e3:8e:bc:3f: aa:fe:ec:d1:81:3d:3b:b1:b4:da:7f:1e:18:32:73: 3c:58:3d:4c:7a:0c:7c:72:f1:bc:34:db:4c:53:c0: 76:21:21:38:73:9c:09:e2:52:e2:d5:cd:eb:71:dc: 25:94:b7:cb:4f:2f:cf:e2:f2:a4:56:ee:88:b0:8a: 03:11:d4:1a:af:41:cc:24:20:c7:ab:8e:a3:50:54: 78:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8A:8D:F4:4E:CD:17:2E:0E:7A:9A:06:16:44:B2:FB:94:72:D4:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6602a63e-35ff-4691-9488-f64ca93504e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:4040::/48 Signature Algorithm: sha256WithRSAEncryption 38:57:83:18:cf:d6:58:79:6e:b5:ca:6d:21:db:b0:83:21:6b: c0:57:dd:25:8c:89:51:94:ee:12:f3:7f:b6:28:e6:02:e3:2d: e4:39:63:cb:e7:16:7d:0e:bf:8d:f3:1c:01:e3:53:4b:40:9d: 36:84:77:ab:85:21:56:69:9e:bb:78:06:97:e1:f6:36:71:fa: ad:43:17:67:d3:56:3b:13:f1:6f:37:11:9f:ef:aa:a7:cf:46: 84:84:51:e3:43:d8:be:0e:e6:20:e1:ac:ff:c1:60:ba:0e:32: 14:4e:56:d9:13:ba:68:2e:89:56:4c:de:a5:bb:50:7c:21:9a: 03:95:3d:b7:59:f3:22:a0:62:20:7d:c7:a8:f3:6e:5e:18:88: ca:0b:24:16:90:fa:78:72:fe:53:d0:c9:d1:cc:d1:12:7b:ad: fa:44:21:cc:87:24:79:37:e6:ba:9d:17:b7:20:6a:21:38:ee: d6:30:0d:6e:de:47:64:47:35:d8:45:c8:db:a0:83:cd:fd:2e: c5:a7:67:d7:46:cc:7b:f9:44:a8:2c:dd:04:61:af:6b:76:ff: f2:bb:f3:51:e4:9c:ef:ad:43:53:92:9c:bb:df:23:0b:06:80: 72:48:72:1c:e6:dd:e7:de:81:fb:1c:83:15:54:4b:1c:74:7e: 4c:84:60:02 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFgyupPyVSIL92hblwn9+bRqvyFIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQwMzAwMDE0M1oX DTI2MDcwMjIzNTk1OVowejFJMEcGA1UEBRNAOWRkMjRiY2RkM2I0MGQ2N2FkMmNk MWIxMjViMjg4YjcxYzY3MzI5MmIyZmRjYzA3NDQ0OTcwOTZmOTEyY2ZhNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk1ucb0FGZribjlJvYoLflAbMxtr obWq/+p8dY/81qBKKWdzXGnriadW4uM5S/0TNhPNubf7/DVodLoDlp+SZ8XIRnCx V8DiLsLg3BuuI7t9+/NiCUL0otrcmQBfk0pNwKGyaCxkWvgASwyXSsbgGy3J0041 oxBj1N4k8KoUubN3YcuUa6Dqp2+s1hq2gr3uEMPHw4qK9FHChcuy6z5VnMGtAebY YJ7oRzUWCGURG+OOvD+q/uzRgT07sbTafx4YMnM8WD1Megx8cvG8NNtMU8B2ISE4 c5wJ4lLi1c3rcdwllLfLTy/P4vKkVu6IsIoDEdQar0HMJCDHq46jUFR4WQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOCKjfROzRcuDnqaBhZEsvuUctTrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY2MDJhNjNlLTM1ZmYtNDY5MS05NDg4LWY2NGNhOTM1MDRlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba60BAMA0GCSqGSIb3DQEBCwUAA4IBAQA4V4MYz9ZYeW61ym0h 27CDIWvAV90ljIlRlO4S83+2KOYC4y3kOWPL5xZ9Dr+N8xwB41NLQJ02hHerhSFW aZ67eAaX4fY2cfqtQxdn01Y7E/FvNxGf76qnz0aEhFHjQ9i+DuYg4az/wWC6DjIU TlbZE7poLolWTN6lu1B8IZoDlT23WfMioGIgfceo825eGIjKCyQWkPp4cv5T0MnR zNESe636RCHMhyR5N+a6nRe3IGohOO7WMA1u3kdkRzXYRcjboIPN/S7Fp2fXRsx7 +USoLN0EYa9rdv/yu/NR5JzvrUNTkpy73yMLBoBySHIc5t3n3oH7HIMVVEscdH5M hGAC -----END CERTIFICATE-----Generated at Fri Apr 17 06:46:05 2026 by rpki-client