$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dca0f327-3d17-47b3-9e0f-44a764e2e72d.roa File: dca0f327-3d17-47b3-9e0f-44a764e2e72d.roa (raw, json) Hash identifier: bvm9om2qgGY+CeD39wCNDypmHfKcIi4QJ4Rjp+WnaRc= Subject key identifier: 06:F1:AB:E9:82:23:AB:DD:90:D0:E1:15:BF:C9:7B:34:2F:1B:BD:F6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3842A0E1A39C8A805FC8442BCC2A8EDE5E6E8C20 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dca0f327-3d17-47b3-9e0f-44a764e2e72d.roa Signing time: Mon 11 May 2026 00:21:15 +0000 ROA not before: Mon 11 May 2026 00:21:15 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:a0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:42:a0:e1:a3:9c:8a:80:5f:c8:44:2b:cc:2a:8e:de:5e:6e:8c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:21:15 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=03e8762da476b75a136697338574c2ab29ac424bf11f3aaec05618f936483342, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:40:a8:5f:2b:34:eb:bd:97:20:f2:6d:8c: 96:1d:83:b1:f3:1b:c1:22:1f:3b:ab:78:60:5f:63: aa:7c:40:b0:05:49:64:62:1f:7a:ff:cd:37:55:67: 2d:52:af:ca:fa:59:54:1b:55:f1:4b:34:d4:84:d8: e2:a0:81:2b:95:6e:36:c2:68:f3:27:f7:e4:51:e2: 53:90:c1:97:c3:52:c2:ed:5c:fd:cc:e6:99:17:82: c5:9c:3d:76:02:96:f3:f9:e2:c2:9d:64:e2:95:57: 63:4d:75:ff:7b:b4:c7:1b:72:20:78:c3:07:5f:27: 03:06:38:c3:40:67:84:62:a0:fe:06:48:97:2d:94: ee:9d:1b:91:c9:b1:ca:e1:77:e0:95:77:04:5e:ba: 65:dd:6d:26:5f:83:c4:35:6c:e4:d0:b2:18:38:3c: 60:98:a9:f5:16:7b:fa:7c:5e:8e:f3:15:b4:1f:22: 82:14:39:81:1b:9f:1d:15:a4:01:81:6b:76:d7:eb: 5b:8c:c9:5b:f6:cc:41:a8:c0:42:da:cc:fd:b4:ef: d1:ab:bf:84:c6:ce:d1:9c:b7:20:b6:56:00:f8:54: 21:12:35:25:31:2b:cb:a1:6f:25:3c:22:78:33:f8: c6:a3:3f:e1:75:85:a2:f9:3a:71:7b:d1:c7:ef:fa: 24:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F1:AB:E9:82:23:AB:DD:90:D0:E1:15:BF:C9:7B:34:2F:1B:BD:F6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dca0f327-3d17-47b3-9e0f-44a764e2e72d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:a0c0::/48 Signature Algorithm: sha256WithRSAEncryption bf:a5:86:d0:a2:6a:58:8e:4c:2b:ab:b0:09:88:d0:26:3c:80: de:18:04:cb:da:d3:64:a2:d4:f4:bb:06:1b:4f:f4:f6:3c:54: 8f:35:b1:7f:4a:86:13:03:6a:4e:61:cd:f5:3d:84:2b:e7:c4: 06:0e:db:5a:0b:fd:e3:0d:ea:39:c3:35:64:c9:e8:a2:fa:60: 19:dd:c8:37:55:a2:3b:c2:d6:77:35:4a:19:e0:66:bf:d4:0e: c9:88:82:40:3c:dd:67:74:60:64:57:da:f4:37:6c:4b:f9:39: 3e:c8:ad:8a:df:70:1e:74:f1:80:2c:7f:e9:d6:44:81:1f:db: 1a:f7:0a:2d:2e:ae:8e:ae:2e:62:54:3f:c4:74:39:c3:51:70: 7f:63:f2:77:40:69:33:40:d1:bc:dd:1f:63:5b:7e:9b:de:31: b8:f6:7c:cf:ae:c3:61:63:62:30:46:03:99:aa:df:b0:79:68: df:49:d9:9b:42:8d:42:bd:f3:9a:c8:fe:5a:ff:90:f1:d1:13: 47:87:33:4c:35:b3:50:db:25:8f:37:a5:80:f4:16:7a:3f:71: 6e:b9:ce:78:0b:81:06:fc:d6:13:bf:01:c1:b8:28:9b:ec:59: ea:28:ee:3e:71:ae:2b:da:71:d1:6b:76:c9:91:7f:e4:98:91: 8a:e6:8c:cd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOEKg4aOcioBfyEQrzCqO3l5ujCAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMjExNVoX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAMDNlODc2MmRhNDc2Yjc1YTEzNjY5 NzMzODU3NGMyYWIyOWFjNDI0YmYxMWYzYWFlYzA1NjE4ZjkzNjQ4MzM0MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8dAqF8rNOu9lyDybYyWHYOx8xvB Ih87q3hgX2OqfECwBUlkYh96/803VWctUq/K+llUG1XxSzTUhNjioIErlW42wmjz J/fkUeJTkMGXw1LC7Vz9zOaZF4LFnD12Apbz+eLCnWTilVdjTXX/e7THG3IgeMMH XycDBjjDQGeEYqD+BkiXLZTunRuRybHK4XfglXcEXrpl3W0mX4PENWzk0LIYODxg mKn1Fnv6fF6O8xW0HyKCFDmBG58dFaQBgWt21+tbjMlb9sxBqMBC2sz9tO/Rq7+E xs7RnLcgtlYA+FQhEjUlMSvLoW8lPCJ4M/jGoz/hdYWi+Tpxe9HH7/okswIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAbxq+mCI6vdkNDhFb/JezQvG732MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RjYTBmMzI3LTNkMTctNDdiMy05ZTBmLTQ0YTc2NGUyZTcyZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/6DAMA0GCSqGSIb3DQEBCwUAA4IBAQC/pYbQompYjkwrq7AJ iNAmPIDeGATL2tNkotT0uwYbT/T2PFSPNbF/SoYTA2pOYc31PYQr58QGDttaC/3j Deo5wzVkyeii+mAZ3cg3VaI7wtZ3NUoZ4Ga/1A7JiIJAPN1ndGBkV9r0N2xL+Tk+ yK2K33AedPGALH/p1kSBH9sa9wotLq6Ori5iVD/EdDnDUXB/Y/J3QGkzQNG83R9j W36b3jG49nzPrsNhY2IwRgOZqt+weWjfSdmbQo1CvfOayP5a/5Dx0RNHhzNMNbNQ 2yWPN6WA9BZ6P3Fuuc54C4EG/NYTvwHBuCib7FnqKO4+ca4r2nHRa3bJkX/kmJGK 5ozN -----END CERTIFICATE-----Generated at Tue May 12 23:26:59 2026 by rpki-client