$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b917cdc-cbf7-4fc0-8407-db80743f3e38.roa File: 6b917cdc-cbf7-4fc0-8407-db80743f3e38.roa (raw, json) Hash identifier: Yz06/Rj5JUykgH5f4BElI/2AaLlYSYUZdaCUp4yy4TQ= Subject key identifier: 6C:F5:19:D7:CD:F4:61:4A:36:28:72:5D:3C:12:7A:D2:DD:C1:05:D7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 01216FC559A4FED108FA3C0718D6E9F2B33BD731 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b917cdc-cbf7-4fc0-8407-db80743f3e38.roa Signing time: Fri 03 Apr 2026 00:00:46 +0000 ROA not before: Fri 03 Apr 2026 00:00:46 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:21:6f:c5:59:a4:fe:d1:08:fa:3c:07:18:d6:e9:f2:b3:3b:d7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 3 00:00:46 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=e294647b8673c0edde940748fe2f4ba2e5e6ae21dd5167240e00b367460930d8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:97:b8:a5:8c:9b:ae:e2:b7:cc:81:52:6d:10: d6:5b:02:2d:86:fe:ff:2a:53:02:64:ad:9a:30:2a: ab:76:72:c8:13:f3:11:c4:34:89:cd:3b:21:81:32: ee:d1:45:47:da:3b:37:1d:be:4b:1d:74:3d:81:03: 54:5d:9d:24:7a:2d:85:4d:90:ce:36:b5:7f:e9:a3: 03:e8:37:5a:ea:03:b0:67:18:da:53:1b:2d:6a:0b: cf:21:71:1c:e0:c4:c2:56:da:06:b5:ad:3d:70:60: e5:2c:23:7e:ce:04:aa:0a:4f:c9:f0:ea:d7:db:38: 5d:9e:cf:bf:9c:6e:40:f4:bc:64:ca:53:15:bb:ff: dc:e8:59:b2:29:7c:5f:e5:f8:04:42:8a:b3:62:29: 7c:e7:2b:4d:9f:44:5f:34:f3:1d:aa:47:7c:79:c0: 46:e5:5e:7c:bd:09:b0:23:0b:81:85:c6:f6:c2:1b: 11:e5:a1:d5:f1:f5:f7:e8:a5:c8:b1:e0:c4:16:fb: ab:7b:20:bb:b2:ad:66:8b:03:dd:90:f9:5f:64:01: a9:8f:3b:80:fa:af:4a:72:49:7f:2c:57:34:7f:37: cd:7b:b1:85:90:9f:4a:45:dd:c2:9f:e8:80:68:b2: 54:ca:9f:9e:c3:10:38:dc:9b:0f:69:4c:ef:3b:1a: bf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F5:19:D7:CD:F4:61:4A:36:28:72:5D:3C:12:7A:D2:DD:C1:05:D7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b917cdc-cbf7-4fc0-8407-db80743f3e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:1080::/48 Signature Algorithm: sha256WithRSAEncryption 07:7b:ff:6b:94:67:82:cf:49:68:77:6a:55:14:08:22:98:bf: ae:b8:ab:b9:4c:e3:58:47:38:48:5b:37:22:32:7c:30:11:65: 43:b9:b0:3d:82:bb:56:65:b8:cb:ca:a5:a1:55:6c:7e:51:f5: bd:db:d3:61:02:60:42:c5:55:bd:d5:97:65:b1:09:90:7a:ab: 14:03:f0:f4:01:35:2a:bc:a0:8a:9d:87:c1:0e:1f:68:84:2e: 44:bb:67:ad:fb:9a:1f:3e:6e:8e:b1:b6:d6:21:2d:62:94:89: 7f:7e:4a:a0:ba:b0:9d:9a:63:f7:4a:46:77:61:89:fd:ed:55: ad:1a:54:53:5e:e6:a5:fe:e5:de:d3:2e:71:b6:ea:58:f4:66: d2:cf:ef:f9:3f:30:e4:f8:59:53:d4:3f:47:ad:0d:8d:87:3b: fe:80:30:47:d1:48:af:18:99:6b:cb:06:88:5e:bc:e5:0b:bd: a0:59:5c:e9:4d:ee:29:4b:40:83:8f:cb:25:82:1b:f7:a6:85: 54:83:8d:1b:d6:17:ee:14:c0:ab:75:40:e5:3f:bf:68:8d:ef: 82:c4:fc:ed:dd:88:42:50:21:c5:b7:c6:18:2c:0d:5e:d7:40: eb:de:c7:67:84:88:3d:64:ea:4e:cb:fe:33:43:70:fd:38:37: b7:e2:3e:c7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUASFvxVmk/tEI+jwHGNbp8rM71zEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQwMzAwMDA0NloX DTI2MDcwMjIzNTk1OVowejFJMEcGA1UEBRNAZTI5NDY0N2I4NjczYzBlZGRlOTQw NzQ4ZmUyZjRiYTJlNWU2YWUyMWRkNTE2NzI0MGUwMGIzNjc0NjA5MzBkODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpe4pYybruK3zIFSbRDWWwIthv7/ KlMCZK2aMCqrdnLIE/MRxDSJzTshgTLu0UVH2js3Hb5LHXQ9gQNUXZ0kei2FTZDO NrV/6aMD6Dda6gOwZxjaUxstagvPIXEc4MTCVtoGta09cGDlLCN+zgSqCk/J8OrX 2zhdns+/nG5A9LxkylMVu//c6FmyKXxf5fgEQoqzYil85ytNn0RfNPMdqkd8ecBG 5V58vQmwIwuBhcb2whsR5aHV8fX36KXIseDEFvureyC7sq1miwPdkPlfZAGpjzuA +q9Kckl/LFc0fzfNe7GFkJ9KRd3Cn+iAaLJUyp+ewxA43JsPaUzvOxq/kwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGz1GdfN9GFKNihyXTwSetLdwQXXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZiOTE3Y2RjLWNiZjctNGZjMC04NDA3LWRiODA3NDNmM2UzOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6xCAMA0GCSqGSIb3DQEBCwUAA4IBAQAHe/9rlGeCz0lod2pV FAgimL+uuKu5TONYRzhIWzciMnwwEWVDubA9grtWZbjLyqWhVWx+UfW929NhAmBC xVW91ZdlsQmQeqsUA/D0ATUqvKCKnYfBDh9ohC5Eu2et+5ofPm6OsbbWIS1ilIl/ fkqgurCdmmP3SkZ3YYn97VWtGlRTXual/uXe0y5xtupY9GbSz+/5PzDk+FlT1D9H rQ2Nhzv+gDBH0UivGJlrywaIXrzlC72gWVzpTe4pS0CDj8slghv3poVUg40b1hfu FMCrdUDlP79oje+CxPzt3YhCUCHFt8YYLA1e10Dr3sdnhIg9ZOpOy/4zQ3D9ODe3 4j7H -----END CERTIFICATE-----Generated at Fri Apr 17 09:32:37 2026 by rpki-client