$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ed818df-143b-4879-87c8-ff614b5e443e.roa File: 8ed818df-143b-4879-87c8-ff614b5e443e.roa (raw, json) Hash identifier: EWXGnLL01OFaWhhb5tcfVfGG9DfGdLfNW59D6v5+vkk= Subject key identifier: FE:72:48:CB:A2:40:0C:68:90:D3:03:49:F7:77:D0:B3:42:57:D1:66 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 01925C467100D4767A2DBF44DF60E2950332F239 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ed818df-143b-4879-87c8-ff614b5e443e.roa Signing time: Fri 03 Apr 2026 00:01:14 +0000 ROA not before: Fri 03 Apr 2026 00:01:14 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:92:5c:46:71:00:d4:76:7a:2d:bf:44:df:60:e2:95:03:32:f2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 3 00:01:14 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=e26fd65250427757da9234fa0c796aca83ec2f60a7941741486caaa031316024, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:d5:99:17:b4:da:dc:77:fd:9f:3c:f1:4d: be:b9:e9:41:01:fe:b0:9f:c6:53:fa:74:c5:fc:2c: 1b:d8:20:97:fa:a2:be:87:9e:4d:24:4e:df:29:e1: de:38:a2:82:9c:91:26:77:19:8b:c2:6e:62:20:c3: f5:95:6b:95:02:62:6f:84:a9:b4:c7:bb:25:e3:8b: 99:5e:d1:38:bc:3c:5b:90:78:13:0c:ca:99:45:5e: b3:50:46:c7:f0:a9:c8:53:be:23:d7:bf:5f:d1:ef: 11:73:3c:4e:d3:98:94:06:69:c6:70:46:c9:5a:41: 95:ed:9c:19:68:82:38:c6:3e:fe:70:5a:b4:f2:1f: 30:d1:41:26:04:28:9c:fc:13:05:08:e2:b2:76:ad: f4:90:ed:39:bc:59:11:87:76:3b:a2:fc:53:c9:59: 96:48:ad:ee:15:64:2a:0e:43:6b:1e:e4:d9:f0:b9: 68:d2:43:c7:3b:b7:a0:03:5e:2a:a3:09:45:f4:90: 1d:1f:6b:13:94:e4:47:bd:05:d4:6b:75:d7:e1:45: c3:35:9e:40:bd:c2:e6:49:fe:70:b4:73:1f:c3:9a: 04:a0:23:92:94:d5:fc:2b:03:4f:9b:d7:88:1b:f0: db:f6:bb:44:42:2e:10:93:de:3f:75:7a:33:c5:62: db:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:72:48:CB:A2:40:0C:68:90:D3:03:49:F7:77:D0:B3:42:57:D1:66 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ed818df-143b-4879-87c8-ff614b5e443e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:b040::/48 Signature Algorithm: sha256WithRSAEncryption 2b:64:c1:52:cd:3b:7a:00:22:06:6e:14:aa:c4:e2:d6:a3:3f: 01:0e:23:3d:41:43:0b:45:fa:ec:f0:28:19:9c:ba:08:14:68: 29:d5:66:2e:96:1f:da:0d:b3:ec:87:66:4a:62:30:23:e1:9c: 7a:ee:58:02:78:f7:bf:98:e1:43:59:7f:1c:5f:f8:34:1f:ae: 13:5b:3c:12:5b:ee:e0:9b:9f:18:ce:2d:e7:4e:33:f6:5e:85: 86:ef:ca:f9:4c:8f:5c:73:86:a6:32:4b:a1:83:70:d6:fd:0a: 44:8a:7d:96:7c:b5:96:58:e8:fe:9f:3e:25:98:22:31:ae:db: da:6a:6f:5c:43:e7:8a:b0:4b:b3:b2:fe:71:1e:ce:84:0f:44: de:26:32:24:60:17:77:4c:82:0e:0d:85:ef:25:bc:33:7e:57: 11:f7:21:c2:a4:ca:e5:45:7b:25:6b:96:92:83:d6:bd:70:93: 1a:05:90:a5:cc:c9:08:f6:b6:34:11:9c:34:66:03:bb:f0:ee: 84:34:74:80:5b:43:02:58:be:ae:44:eb:59:11:2a:06:77:80: a5:19:04:56:34:20:4d:8a:64:e8:52:f2:a6:32:7b:97:b7:a6: ee:ee:6a:7e:88:0c:5e:58:ce:35:bc:d7:ec:96:76:7c:04:f5: 39:1a:94:6b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAZJcRnEA1HZ6Lb9E32DilQMy8jkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQwMzAwMDExNFoX DTI2MDcwMjIzNTk1OVowejFJMEcGA1UEBRNAZTI2ZmQ2NTI1MDQyNzc1N2RhOTIz NGZhMGM3OTZhY2E4M2VjMmY2MGE3OTQxNzQxNDg2Y2FhYTAzMTMxNjAyNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvDVmRe02tx3/Z888U2+uelBAf6w n8ZT+nTF/Cwb2CCX+qK+h55NJE7fKeHeOKKCnJEmdxmLwm5iIMP1lWuVAmJvhKm0 x7sl44uZXtE4vDxbkHgTDMqZRV6zUEbH8KnIU74j179f0e8RczxO05iUBmnGcEbJ WkGV7ZwZaII4xj7+cFq08h8w0UEmBCic/BMFCOKydq30kO05vFkRh3Y7ovxTyVmW SK3uFWQqDkNrHuTZ8Llo0kPHO7egA14qowlF9JAdH2sTlORHvQXUa3XX4UXDNZ5A vcLmSf5wtHMfw5oEoCOSlNX8KwNPm9eIG/Db9rtEQi4Qk94/dXozxWLbUwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP5ySMuiQAxokNMDSfd30LNCV9FmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhlZDgxOGRmLTE0M2ItNDg3OS04N2M4LWZmNjE0YjVlNDQzZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba67BAMA0GCSqGSIb3DQEBCwUAA4IBAQArZMFSzTt6ACIGbhSq xOLWoz8BDiM9QUMLRfrs8CgZnLoIFGgp1WYulh/aDbPsh2ZKYjAj4Zx67lgCePe/ mOFDWX8cX/g0H64TWzwSW+7gm58Yzi3nTjP2XoWG78r5TI9cc4amMkuhg3DW/QpE in2WfLWWWOj+nz4lmCIxrtvaam9cQ+eKsEuzsv5xHs6ED0TeJjIkYBd3TIIODYXv JbwzflcR9yHCpMrlRXsla5aSg9a9cJMaBZClzMkI9rY0EZw0ZgO78O6ENHSAW0MC WL6uROtZESoGd4ClGQRWNCBNimToUvKmMnuXt6bu7mp+iAxeWM41vNfslnZ8BPU5 GpRr -----END CERTIFICATE-----Generated at Fri Apr 17 05:59:09 2026 by rpki-client