$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f1effb4-ca8a-40a4-896e-98e367faa742.roa File: 7f1effb4-ca8a-40a4-896e-98e367faa742.roa (raw, json) Hash identifier: m1a5DBELSZMefCH6DKJ+C5I7S0UBP1qZAqt2EnYlHKY= Subject key identifier: 5E:B3:88:7E:35:2F:35:DA:DC:36:14:87:DF:F1:7B:A4:9F:F6:1E:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5DDEDF518EE0FA26649C76E5D86E1CAD1B27755D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f1effb4-ca8a-40a4-896e-98e367faa742.roa Signing time: Fri 03 Apr 2026 00:00:14 +0000 ROA not before: Fri 03 Apr 2026 00:00:14 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:de:df:51:8e:e0:fa:26:64:9c:76:e5:d8:6e:1c:ad:1b:27:75:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 3 00:00:14 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=2fb653efb20a7d8e1bf107494f73590a58a61a7557ee4162664a947b1c8557a5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:6b:9a:d1:69:ae:75:b1:49:29:c4:07:f0: 60:23:21:d3:1d:72:bd:da:e2:09:ce:3e:c8:2a:41: 46:8b:1e:c6:e7:80:34:63:9c:72:10:7f:64:b9:01: 20:6c:47:72:93:38:55:6b:a4:4b:bb:9e:80:96:0b: f6:e0:cc:e5:ac:54:96:f1:46:65:80:51:d4:ac:e9: 80:75:8e:eb:f4:1e:b7:42:8f:66:14:37:a3:14:6c: 23:d0:e7:f1:36:60:5b:de:99:f0:49:8b:99:a0:30: 8b:7d:24:d4:bb:1a:ae:db:1c:78:4a:d5:f0:2a:0c: a8:b5:97:9a:14:a1:f1:1a:3c:57:11:ef:33:02:1a: 03:05:88:1b:1e:7e:9e:b4:c6:4b:25:af:dc:57:b8: a3:06:f5:74:64:d1:64:17:24:34:e1:57:44:62:72: ca:3b:7c:ae:29:a7:f0:6b:62:f0:8d:fa:e4:63:2c: f6:32:46:23:82:64:99:a7:fb:79:fc:64:a9:69:e4: 03:7b:67:9f:46:1f:dc:ac:24:01:63:6f:07:f1:32: cd:59:9f:ac:cc:d4:de:2b:44:91:7f:85:a9:09:5a: b3:d8:29:16:c3:a5:e0:4b:4c:b8:b4:86:9a:dc:34: 58:38:65:e7:df:01:e6:e1:9e:2d:dc:ac:d8:77:1e: 22:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B3:88:7E:35:2F:35:DA:DC:36:14:87:DF:F1:7B:A4:9F:F6:1E:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f1effb4-ca8a-40a4-896e-98e367faa742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:8840::/48 Signature Algorithm: sha256WithRSAEncryption 3e:4c:b0:c8:d1:06:f2:27:67:84:ee:b9:42:f3:c4:bf:cc:68: 5b:7d:c9:1b:1a:67:2a:47:9c:9d:a4:23:ed:94:e5:8c:ed:76: 75:02:dd:a9:4b:1c:14:5c:25:44:40:a2:93:56:d3:af:00:a3: 0b:3b:8f:24:85:51:3d:a2:1f:05:89:ab:33:02:cd:87:f7:75: 00:28:c4:db:d9:66:74:2e:4f:77:8b:f1:87:93:19:05:b8:4c: ee:2f:26:5f:00:58:5e:16:71:ae:89:f0:f2:79:12:c6:8c:60: d3:09:4a:2a:a1:bb:c8:cd:90:05:0a:b3:d9:18:37:93:34:e2: 51:97:54:54:a4:f5:69:b8:0b:a2:fc:27:a2:15:25:cb:fb:a4: 9f:1b:8a:0d:35:04:cd:f8:75:be:b7:9e:8f:cc:ef:bf:a7:70: 17:cc:41:20:2e:e8:c3:16:e6:54:01:67:38:c5:fe:ea:20:7e: fa:5e:b6:9f:c7:77:f6:97:17:ef:ef:17:17:34:e7:5f:28:8b: 0e:eb:a0:75:b1:8d:2c:41:0d:32:76:0a:88:2f:61:a8:57:1e: 12:9f:7f:26:c1:c0:6d:46:4d:ce:19:5f:13:df:52:bb:a6:ff: 67:47:7a:04:97:2a:15:e4:fb:e8:55:d7:4e:af:83:98:8a:b2: d3:2e:b6:77 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXd7fUY7g+iZknHbl2G4crRsndV0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQwMzAwMDAxNFoX DTI2MDcwMjIzNTk1OVowejFJMEcGA1UEBRNAMmZiNjUzZWZiMjBhN2Q4ZTFiZjEw NzQ5NGY3MzU5MGE1OGE2MWE3NTU3ZWU0MTYyNjY0YTk0N2IxYzg1NTdhNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWVrmtFprnWxSSnEB/BgIyHTHXK9 2uIJzj7IKkFGix7G54A0Y5xyEH9kuQEgbEdykzhVa6RLu56Algv24MzlrFSW8UZl gFHUrOmAdY7r9B63Qo9mFDejFGwj0OfxNmBb3pnwSYuZoDCLfSTUuxqu2xx4StXw KgyotZeaFKHxGjxXEe8zAhoDBYgbHn6etMZLJa/cV7ijBvV0ZNFkFyQ04VdEYnLK O3yuKafwa2LwjfrkYyz2MkYjgmSZp/t5/GSpaeQDe2efRh/crCQBY28H8TLNWZ+s zNTeK0SRf4WpCVqz2CkWw6XgS0y4tIaa3DRYOGXn3wHm4Z4t3KzYdx4itQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFF6ziH41LzXa3DYUh9/xe6Sf9h5YMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdmMWVmZmI0LWNhOGEtNDBhNC04OTZlLTk4ZTM2N2ZhYTc0Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba64hAMA0GCSqGSIb3DQEBCwUAA4IBAQA+TLDI0QbyJ2eE7rlC 88S/zGhbfckbGmcqR5ydpCPtlOWM7XZ1At2pSxwUXCVEQKKTVtOvAKMLO48khVE9 oh8FiaszAs2H93UAKMTb2WZ0Lk93i/GHkxkFuEzuLyZfAFheFnGuifDyeRLGjGDT CUoqobvIzZAFCrPZGDeTNOJRl1RUpPVpuAui/CeiFSXL+6SfG4oNNQTN+HW+t56P zO+/p3AXzEEgLujDFuZUAWc4xf7qIH76Xrafx3f2lxfv7xcXNOdfKIsO66B1sY0s QQ0ydgqIL2GoVx4Sn38mwcBtRk3OGV8T31K7pv9nR3oElyoV5PvoVddOr4OYirLT LrZ3 -----END CERTIFICATE-----Generated at Fri Apr 17 05:49:32 2026 by rpki-client