$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac620d43-bae2-4977-92ae-a49214b6262c.roa File: ac620d43-bae2-4977-92ae-a49214b6262c.roa (raw, json) Hash identifier: lJe1VhtAXYIMDS8PLTTUimQsKtWLzZ9685ex6Lawqog= Subject key identifier: E0:76:1C:D5:BD:DC:14:81:02:D7:06:0B:88:DB:37:25:48:6A:F8:81 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 50C4E7C06CBA649D829734A1DD1109F04F261410 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac620d43-bae2-4977-92ae-a49214b6262c.roa Signing time: Fri 03 Apr 2026 00:00:16 +0000 ROA not before: Fri 03 Apr 2026 00:00:16 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c4:e7:c0:6c:ba:64:9d:82:97:34:a1:dd:11:09:f0:4f:26:14:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 3 00:00:16 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=41b72f5a7476bf819c3fd467a99b5c7b233740f8abb6cb0e5543fcd7085f39e2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d2:bb:f4:7b:ea:81:41:bc:02:47:a8:db:bc: 09:4f:91:b6:bd:64:3e:10:68:66:57:00:50:55:21: a1:27:c9:a5:5f:9a:eb:21:94:72:c2:91:f7:de:a8: a3:22:0b:41:7f:4c:3d:42:b1:fd:b9:7c:a6:6b:54: c0:b0:ce:09:97:81:06:f5:de:a0:48:d8:c3:00:23: c8:ec:26:a1:ed:8b:68:23:bd:65:f5:e6:43:bc:a5: c9:7f:ad:1e:4b:b0:10:1b:ee:38:60:d4:97:3f:d2: 9f:41:b0:b1:54:2f:9e:b9:1a:88:95:70:de:5d:14: 3f:7c:ae:8d:82:13:7f:f1:e0:a0:4e:9b:ab:22:a5: d9:1e:f3:f3:2f:61:f9:b2:2f:fd:1d:da:78:21:ee: fb:ba:37:15:f0:b7:94:7b:2f:07:65:af:08:69:16: 54:c2:68:fb:03:a7:38:14:c8:b7:bf:d1:db:ef:4e: bc:d4:c9:ae:78:04:5d:9d:4b:11:41:0c:a6:23:e3: 81:b1:12:87:0f:f8:b2:0d:a3:fd:14:3f:df:93:23: f3:fd:03:fc:a2:fe:64:eb:53:00:18:5d:3b:5e:54: 38:ad:da:de:52:94:2f:b7:6a:ae:03:c6:30:27:b1: 63:cc:0d:f9:03:08:0d:12:d6:e3:95:96:26:14:49: f3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:76:1C:D5:BD:DC:14:81:02:D7:06:0B:88:DB:37:25:48:6A:F8:81 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac620d43-bae2-4977-92ae-a49214b6262c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:9000::/40 Signature Algorithm: sha256WithRSAEncryption cb:7f:9e:a9:f2:ba:ec:ef:79:db:5a:dd:b6:99:87:17:c5:66: 4a:70:37:b6:35:74:5e:3b:ee:ba:6f:9e:01:0f:7f:8a:3f:81: 08:8f:b9:fc:c6:cb:a1:c7:20:9a:cd:01:74:5d:92:53:35:7b: 52:3a:76:f0:48:b0:87:8b:3f:d2:4c:ac:52:e3:86:7d:cb:82: 1c:0e:0b:bd:12:a9:a7:8a:e8:fd:94:7e:13:1c:e9:79:f6:83: a9:c3:28:72:d1:fd:fa:97:a3:45:d2:0f:6c:9b:ca:d7:46:43: d8:64:43:e4:d6:dd:4d:d0:59:3a:3b:25:b2:dc:37:da:aa:e8: ed:d6:1b:44:43:a8:1c:1e:68:16:79:38:b4:ae:41:24:c7:69: 34:f2:c8:ca:b6:40:cc:a8:20:ab:83:63:94:5c:92:af:93:79: 86:4b:d9:54:0a:ea:91:d9:34:63:40:8f:7e:33:7f:a4:91:e9: 41:4e:25:74:71:e5:31:9b:af:a7:42:c8:56:1a:64:6e:71:72: d3:bb:e1:e7:47:da:1e:bf:68:cf:dd:b8:3e:99:fc:95:02:15: 4d:24:57:79:1a:2f:a1:bd:94:fe:6d:0c:92:fb:b1:6b:8b:11: 91:c3:39:d1:f8:ab:a0:61:07:26:4f:e6:e0:e6:29:fe:b1:c9: 40:ef:2d:b2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUMTnwGy6ZJ2ClzSh3REJ8E8mFBAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQwMzAwMDAxNloX DTI2MDcwMjIzNTk1OVowejFJMEcGA1UEBRNANDFiNzJmNWE3NDc2YmY4MTljM2Zk NDY3YTk5YjVjN2IyMzM3NDBmOGFiYjZjYjBlNTU0M2ZjZDcwODVmMzllMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NK79HvqgUG8Akeo27wJT5G2vWQ+ EGhmVwBQVSGhJ8mlX5rrIZRywpH33qijIgtBf0w9QrH9uXyma1TAsM4Jl4EG9d6g SNjDACPI7Cah7YtoI71l9eZDvKXJf60eS7AQG+44YNSXP9KfQbCxVC+euRqIlXDe XRQ/fK6NghN/8eCgTpurIqXZHvPzL2H5si/9Hdp4Ie77ujcV8LeUey8HZa8IaRZU wmj7A6c4FMi3v9Hb70681MmueARdnUsRQQymI+OBsRKHD/iyDaP9FD/fkyPz/QP8 ov5k61MAGF07XlQ4rdreUpQvt2quA8YwJ7FjzA35AwgNEtbjlZYmFEnzqQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOB2HNW93BSBAtcGC4jbNyVIaviBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FjNjIwZDQzLWJhZTItNDk3Ny05MmFlLWE0OTIxNGI2MjYyYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba65AwDQYJKoZIhvcNAQELBQADggEBAMt/nqnyuuzvedta3baZ hxfFZkpwN7Y1dF477rpvngEPf4o/gQiPufzGy6HHIJrNAXRdklM1e1I6dvBIsIeL P9JMrFLjhn3LghwOC70SqaeK6P2UfhMc6Xn2g6nDKHLR/fqXo0XSD2ybytdGQ9hk Q+TW3U3QWTo7JbLcN9qq6O3WG0RDqBweaBZ5OLSuQSTHaTTyyMq2QMyoIKuDY5Rc kq+TeYZL2VQK6pHZNGNAj34zf6SR6UFOJXRx5TGbr6dCyFYaZG5xctO74edH2h6/ aM/duD6Z/JUCFU0kV3kaL6G9lP5tDJL7sWuLEZHDOdH4q6BhByZP5uDmKf6xyUDv LbI= -----END CERTIFICATE-----Generated at Fri Apr 17 08:18:53 2026 by rpki-client