$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d59282ae-6903-45f8-98c4-8d23be381568.roa File: d59282ae-6903-45f8-98c4-8d23be381568.roa (raw, json) Hash identifier: 8R8xjrrtevrbpuN3h6gTjn09zOa/h5oz8fkERMD2oNc= Subject key identifier: C8:E4:84:B9:51:60:1D:19:F6:E4:3E:51:5F:6A:97:22:AB:3E:3A:22 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3836FF6A7B52CEB47FAAD2EA67DD8C495310F14A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d59282ae-6903-45f8-98c4-8d23be381568.roa Signing time: Fri 03 Apr 2026 00:00:11 +0000 ROA not before: Fri 03 Apr 2026 00:00:11 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:7040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:36:ff:6a:7b:52:ce:b4:7f:aa:d2:ea:67:dd:8c:49:53:10:f1:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 3 00:00:11 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=b16da42fa0b63323efae53e991d7747f5f49e626d387c8f289bff2a3c011bb61, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d3:1a:f5:c3:7c:97:12:34:58:0f:cb:78:78: 30:ec:f7:09:84:6c:2c:03:13:b4:ec:82:7f:32:77: 79:21:44:8d:1d:b1:14:a8:4e:b7:51:f2:e1:16:ea: b9:dd:c1:42:4a:7a:6e:db:b6:65:aa:c2:6e:fb:5e: 36:c5:38:9b:b7:f2:6b:1d:44:f8:02:f6:e5:47:a4: e8:a4:0b:68:f4:22:f7:e8:5a:e2:3f:af:c8:fa:41: fe:33:67:3b:c1:37:bf:15:87:0d:63:bc:79:62:46: aa:33:8b:2c:9c:b6:37:5b:b4:77:6e:79:ab:57:14: 60:03:4f:df:a2:18:a9:01:d5:8f:0a:1c:00:c1:c6: 1b:0d:43:dc:09:92:e4:48:25:e9:80:5a:ee:90:4f: 6d:2c:90:8d:ab:7d:fb:df:7c:6a:d9:d7:9b:25:0e: 81:d6:57:66:b4:22:70:5f:80:38:9d:49:4c:a9:e6: 6a:af:6e:d3:21:0c:0c:af:c7:db:9b:eb:9e:38:26: 32:e6:62:4f:9a:31:a6:df:20:d9:76:2b:53:61:93: c6:f3:75:3b:5b:5f:e4:43:16:27:1e:a1:cc:b0:22: 7e:c3:03:5d:b3:65:ef:50:a0:66:20:f0:b3:87:22: c0:74:d6:e9:7d:a1:77:70:f8:e0:58:73:49:cf:63: 07:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E4:84:B9:51:60:1D:19:F6:E4:3E:51:5F:6A:97:22:AB:3E:3A:22 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d59282ae-6903-45f8-98c4-8d23be381568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:7040::/48 Signature Algorithm: sha256WithRSAEncryption 84:48:a1:13:3c:22:93:a8:4e:2e:a3:9c:47:85:15:05:a0:0a: 5a:48:96:e9:03:95:15:19:01:2b:e2:b4:59:ee:bd:34:15:85: c6:34:d5:8d:25:e9:c0:fe:0e:f9:7c:65:be:4c:cf:d5:5b:fe: 27:e0:e7:e1:ca:da:20:92:95:71:b4:52:11:a1:8f:e8:96:63: 22:f5:54:76:ae:8c:c5:fe:95:20:9e:fb:5f:9a:4f:c0:49:fc: 0e:68:a0:2b:39:4f:8f:32:b2:f2:1a:4d:9b:ae:dc:55:92:84: 2c:f4:ec:ad:8d:47:29:ca:f4:69:ba:67:72:39:8a:d9:97:a5: 60:94:7d:ce:32:08:3d:45:22:b5:80:c8:09:33:a0:03:f6:d0: 41:4c:b1:ed:ce:10:bb:27:fa:e8:43:df:b4:41:80:50:bd:42: 4d:cc:3e:f9:53:a8:4e:90:e3:d6:b8:12:bc:51:9d:dd:44:43: d9:0e:88:c0:98:83:52:63:e9:fd:f1:09:fd:de:72:ce:78:a4: e4:0d:10:2c:ee:71:42:c2:a4:57:ed:10:64:c7:39:34:6c:f0: db:d3:48:9a:0e:19:bd:2c:85:fc:ad:24:f2:43:d5:3e:ea:3e: 30:ae:ef:07:07:11:86:9c:0e:ab:68:9a:62:b5:3c:68:f8:19: 5b:be:d7:6f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUODb/antSzrR/qtLqZ92MSVMQ8UowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQwMzAwMDAxMVoX DTI2MDcwMjIzNTk1OVowejFJMEcGA1UEBRNAYjE2ZGE0MmZhMGI2MzMyM2VmYWU1 M2U5OTFkNzc0N2Y1ZjQ5ZTYyNmQzODdjOGYyODliZmYyYTNjMDExYmI2MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tMa9cN8lxI0WA/LeHgw7PcJhGws AxO07IJ/Mnd5IUSNHbEUqE63UfLhFuq53cFCSnpu27ZlqsJu+142xTibt/JrHUT4 AvblR6TopAto9CL36FriP6/I+kH+M2c7wTe/FYcNY7x5YkaqM4ssnLY3W7R3bnmr VxRgA0/fohipAdWPChwAwcYbDUPcCZLkSCXpgFrukE9tLJCNq33733xq2debJQ6B 1ldmtCJwX4A4nUlMqeZqr27TIQwMr8fbm+ueOCYy5mJPmjGm3yDZditTYZPG83U7 W1/kQxYnHqHMsCJ+wwNds2XvUKBmIPCzhyLAdNbpfaF3cPjgWHNJz2MHqwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMjkhLlRYB0Z9uQ+UV9qlyKrPjoiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q1OTI4MmFlLTY5MDMtNDVmOC05OGM0LThkMjNiZTM4MTU2OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba63BAMA0GCSqGSIb3DQEBCwUAA4IBAQCESKETPCKTqE4uo5xH hRUFoApaSJbpA5UVGQEr4rRZ7r00FYXGNNWNJenA/g75fGW+TM/VW/4n4Ofhytog kpVxtFIRoY/olmMi9VR2rozF/pUgnvtfmk/ASfwOaKArOU+PMrLyGk2brtxVkoQs 9OytjUcpyvRpumdyOYrZl6VglH3OMgg9RSK1gMgJM6AD9tBBTLHtzhC7J/roQ9+0 QYBQvUJNzD75U6hOkOPWuBK8UZ3dREPZDojAmINSY+n98Qn93nLOeKTkDRAs7nFC wqRX7RBkxzk0bPDb00iaDhm9LIX8rSTyQ9U+6j4wru8HBxGGnA6raJpitTxo+Blb vtdv -----END CERTIFICATE-----Generated at Fri Apr 17 07:42:40 2026 by rpki-client