$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fc48dcc5-c9bd-44a1-a24c-5263a24b5c03.roa File: fc48dcc5-c9bd-44a1-a24c-5263a24b5c03.roa (raw, json) Hash identifier: IqiJ2KxGbQZ8E2qRfOtUxe+Q9NTp3OrIumWkJOR3YzA= Subject key identifier: 52:C2:8E:70:BA:7F:19:A6:5A:57:B6:8B:32:67:16:B4:FA:A7:36:2E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 381275C3FF01678598AA35CE21E0A47AEC418247 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fc48dcc5-c9bd-44a1-a24c-5263a24b5c03.roa Signing time: Fri 03 Apr 2026 00:01:16 +0000 ROA not before: Fri 03 Apr 2026 00:01:16 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:90c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:12:75:c3:ff:01:67:85:98:aa:35:ce:21:e0:a4:7a:ec:41:82:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 3 00:01:16 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=a610646de1541d8128a57cfbad612a6a3cedfb50fd20a78c1628d0f1e8ec33f1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:ad:5c:e4:50:d3:39:0f:96:18:87:b8:bd: 05:9b:73:cf:ef:63:1a:d6:63:31:0f:39:aa:74:01: 93:2a:d6:67:26:35:4e:23:e9:e7:9b:7a:00:90:72: 90:88:a0:14:55:42:8a:ed:1d:10:b3:c2:cd:46:4b: 93:94:b2:9e:9f:38:19:49:aa:2a:7b:a1:57:93:19: fe:5a:6b:cd:c8:b0:07:7e:b1:b4:e9:37:ae:7a:16: 64:5a:73:84:29:1d:fe:06:89:7e:31:26:6b:2b:ce: 24:27:3d:36:83:34:19:74:ac:2e:44:e0:0b:36:d1: d1:9a:ed:11:3b:0d:aa:61:87:31:c5:79:a3:16:e0: 74:7d:59:b2:19:3f:58:5c:53:27:70:d4:c0:29:2e: 8b:5d:e9:b7:85:51:86:84:1e:40:d5:e1:b7:fc:ca: 7a:00:d0:9f:7c:a2:bb:61:a4:0a:19:cb:cd:6b:6c: 44:9c:f4:2a:0a:58:b1:89:a1:11:65:ae:de:da:59: 3e:f3:cd:91:be:79:65:65:55:bf:18:16:98:28:b2: 09:98:8c:9e:15:03:f4:e3:87:12:bc:8e:ed:94:cf: ea:ff:cb:9b:06:24:1a:26:d0:6a:ca:2e:88:81:54: 96:3e:ff:eb:c5:d8:bc:39:a2:2b:9b:53:0d:d0:01: ad:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C2:8E:70:BA:7F:19:A6:5A:57:B6:8B:32:67:16:B4:FA:A7:36:2E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fc48dcc5-c9bd-44a1-a24c-5263a24b5c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:90c0::/48 Signature Algorithm: sha256WithRSAEncryption 95:8b:e0:bf:d5:9a:35:f3:8e:90:9c:42:3d:48:5c:8b:5c:a5: 25:29:3f:42:30:ca:0c:d6:61:87:4c:98:00:6b:28:1d:72:73: 1a:0f:a7:24:4a:cc:1c:2b:d5:bb:53:ea:35:df:11:7a:c6:cb: 23:2c:50:11:f6:56:4a:a7:55:4d:97:b0:47:5b:32:50:e5:0f: 2f:3b:07:13:05:e3:98:b3:59:96:0e:32:f2:03:d1:5e:84:42: c7:00:ed:8f:e3:af:84:73:97:99:e5:6f:13:5a:7c:b1:2c:81: e9:c1:2f:39:66:15:60:75:b1:4b:c8:fb:2c:d4:12:08:03:22: 9d:ff:57:4f:85:80:0f:77:f6:52:63:a7:35:ed:26:59:a6:a7: 96:54:24:4b:e8:3f:65:63:80:86:6c:88:5b:fb:0e:0a:cb:f2: 25:c6:dd:2a:d1:5a:c7:f4:74:4c:ad:c1:ca:51:6a:ba:8f:29: ec:b2:9c:19:29:fa:db:6c:35:2a:9b:10:1f:ac:f5:55:9a:06: 98:1e:a3:bd:b4:c9:a0:d9:65:e0:94:34:59:0c:ea:82:67:e8: 10:91:18:17:3d:6f:1e:af:ed:93:6b:41:e7:c5:e8:d0:f2:31: f8:e6:a0:4f:ac:84:18:d0:cd:3c:ed:cf:19:b0:ab:cc:e2:2e: fd:6e:24:91 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOBJ1w/8BZ4WYqjXOIeCkeuxBgkcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQwMzAwMDExNloX DTI2MDcwMjIzNTk1OVowejFJMEcGA1UEBRNAYTYxMDY0NmRlMTU0MWQ4MTI4YTU3 Y2ZiYWQ2MTJhNmEzY2VkZmI1MGZkMjBhNzhjMTYyOGQwZjFlOGVjMzNmMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1KtXORQ0zkPlhiHuL0Fm3PP72Ma 1mMxDzmqdAGTKtZnJjVOI+nnm3oAkHKQiKAUVUKK7R0Qs8LNRkuTlLKenzgZSaoq e6FXkxn+WmvNyLAHfrG06TeuehZkWnOEKR3+Bol+MSZrK84kJz02gzQZdKwuROAL NtHRmu0ROw2qYYcxxXmjFuB0fVmyGT9YXFMncNTAKS6LXem3hVGGhB5A1eG3/Mp6 ANCffKK7YaQKGcvNa2xEnPQqClixiaERZa7e2lk+882RvnllZVW/GBaYKLIJmIye FQP044cSvI7tlM/q/8ubBiQaJtBqyi6IgVSWPv/rxdi8OaIrm1MN0AGtvwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFLCjnC6fxmmWle2izJnFrT6pzYuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZjNDhkY2M1LWM5YmQtNDRhMS1hMjRjLTUyNjNhMjRiNWMwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba65DAMA0GCSqGSIb3DQEBCwUAA4IBAQCVi+C/1Zo1846QnEI9 SFyLXKUlKT9CMMoM1mGHTJgAaygdcnMaD6ckSswcK9W7U+o13xF6xssjLFAR9lZK p1VNl7BHWzJQ5Q8vOwcTBeOYs1mWDjLyA9FehELHAO2P46+Ec5eZ5W8TWnyxLIHp wS85ZhVgdbFLyPss1BIIAyKd/1dPhYAPd/ZSY6c17SZZpqeWVCRL6D9lY4CGbIhb +w4Ky/Ilxt0q0VrH9HRMrcHKUWq6jynsspwZKfrbbDUqmxAfrPVVmgaYHqO9tMmg 2WXglDRZDOqCZ+gQkRgXPW8er+2Ta0HnxejQ8jH45qBPrIQY0M087c8ZsKvM4i79 biSR -----END CERTIFICATE-----Generated at Fri Apr 17 05:59:56 2026 by rpki-client