$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0039c81b-fc89-4464-95a8-ff72c12ea5dc.roa File: 0039c81b-fc89-4464-95a8-ff72c12ea5dc.roa (raw, json) Hash identifier: +Sk8ef8IMpydzSA2hg1yQIUhSxu5hZw1iJ0tLzZpaBM= Subject key identifier: 50:24:5A:93:5D:E8:24:8F:1E:62:EE:41:40:93:9C:69:4B:68:1E:79 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1090FDB53EE746BEC3561F37A9671563534AE8CD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0039c81b-fc89-4464-95a8-ff72c12ea5dc.roa Signing time: Sun 22 Feb 2026 00:30:35 +0000 ROA not before: Sun 22 Feb 2026 00:30:35 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:dab9:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:90:fd:b5:3e:e7:46:be:c3:56:1f:37:a9:67:15:63:53:4a:e8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:30:35 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=f91e5bc94d1a3c03e1b1dcc5519fc5f605c1564659da5f025240ad67b2a92543, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:48:7c:a2:6f:e1:11:2f:b9:61:82:35:76:dd: 16:1c:e2:22:8f:ed:f0:b0:51:41:64:02:66:4b:59: dc:d8:f8:10:dd:b2:1d:e0:f3:9b:f8:c9:a5:11:75: 9d:0b:f1:45:04:ec:87:39:8b:c4:42:21:f6:9e:b2: 2e:73:ce:1a:97:0b:d3:18:ca:af:66:ad:83:13:92: fb:7c:0f:9f:b8:2e:68:20:e2:04:ab:47:66:45:0a: 5e:cd:32:a0:c4:15:4d:60:01:6e:7b:6d:6c:cd:4e: 98:e4:40:af:47:b1:f8:c3:f7:16:b6:1a:dc:70:72: 6c:e3:96:b9:54:92:91:8b:3e:32:28:9a:cc:a4:02: 99:10:94:ae:28:39:bb:49:ed:5d:48:c9:26:82:e1: b1:05:4f:df:d0:7b:05:51:08:f1:0b:cf:07:fc:6d: 09:f7:85:e6:3d:63:42:05:08:4a:4e:13:0a:8d:2b: 42:85:52:4a:11:2a:fc:68:c8:1e:8d:9e:97:56:46: 58:fb:76:de:0f:98:ec:0c:ca:f3:b3:ea:a3:e1:09: 1b:a4:92:dc:43:16:e5:6e:7c:3b:55:95:48:c0:d6: d5:95:7d:41:bc:15:90:c7:fb:18:07:d9:7e:bf:5f: 59:a1:c1:c8:c2:ac:29:21:05:6b:2f:15:95:8f:d3: f1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:24:5A:93:5D:E8:24:8F:1E:62:EE:41:40:93:9C:69:4B:68:1E:79 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0039c81b-fc89-4464-95a8-ff72c12ea5dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:4000::/40 Signature Algorithm: sha256WithRSAEncryption 9e:f4:18:81:18:88:b1:ce:2d:2c:03:fe:27:eb:b7:bb:f9:23: 0f:31:ad:a0:08:9a:39:6e:3e:9f:1b:e9:f8:0f:f8:b6:a4:f7: 85:3b:9e:36:d0:6d:31:f5:42:df:71:ec:f6:a6:49:53:f0:36: 50:34:16:af:b3:73:5f:c1:b9:58:4a:e3:13:71:ee:48:14:5e: 76:32:5e:36:3c:95:65:c4:94:26:98:c9:84:b4:f7:29:49:07: 8e:7d:d9:87:7c:80:07:3c:e3:6e:a4:fa:7b:02:03:3e:0e:a7: 43:f3:2b:a2:d7:4d:e8:c5:48:52:dc:23:40:90:1e:2f:03:2e: 34:47:ce:21:78:19:18:fb:8e:73:3b:74:e7:fd:33:c2:f5:de: 82:fa:97:f5:27:37:ea:f8:06:fe:a4:89:88:51:a0:1a:1c:b1: 26:85:73:44:bd:37:b4:9c:6b:0c:31:0c:a6:a5:e3:66:95:cc: 32:fd:bf:df:fa:2b:8d:38:cb:d2:58:c5:c0:c5:28:86:30:52: 7a:3b:3b:17:92:a0:ef:1f:81:e6:08:9d:81:43:8d:50:85:3e: fc:23:68:d3:c6:46:97:14:21:73:79:dd:b0:bd:4b:31:78:99: 74:41:e2:62:b5:6c:8f:21:99:11:81:57:22:4c:2b:73:38:17: 25:65:ea:0f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEJD9tT7nRr7DVh83qWcVY1NK6M0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMzAzNVoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAZjkxZTViYzk0ZDFhM2MwM2UxYjFk Y2M1NTE5ZmM1ZjYwNWMxNTY0NjU5ZGE1ZjAyNTI0MGFkNjdiMmE5MjU0MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20h8om/hES+5YYI1dt0WHOIij+3w sFFBZAJmS1nc2PgQ3bId4POb+MmlEXWdC/FFBOyHOYvEQiH2nrIuc84alwvTGMqv Zq2DE5L7fA+fuC5oIOIEq0dmRQpezTKgxBVNYAFue21szU6Y5ECvR7H4w/cWthrc cHJs45a5VJKRiz4yKJrMpAKZEJSuKDm7Se1dSMkmguGxBU/f0HsFUQjxC88H/G0J 94XmPWNCBQhKThMKjStChVJKESr8aMgejZ6XVkZY+3beD5jsDMrzs+qj4QkbpJLc Qxblbnw7VZVIwNbVlX1BvBWQx/sYB9l+v19ZocHIwqwpIQVrLxWVj9Px+wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFAkWpNd6CSPHmLuQUCTnGlLaB55MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAwMzljODFiLWZjODktNDQ2NC05NWE4LWZmNzJjMTJlYTVkYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauUAwDQYJKoZIhvcNAQELBQADggEBAJ70GIEYiLHOLSwD/ifr t7v5Iw8xraAImjluPp8b6fgP+Lak94U7njbQbTH1Qt9x7PamSVPwNlA0Fq+zc1/B uVhK4xNx7kgUXnYyXjY8lWXElCaYyYS09ylJB4592Yd8gAc8426k+nsCAz4Op0Pz K6LXTejFSFLcI0CQHi8DLjRHziF4GRj7jnM7dOf9M8L13oL6l/UnN+r4Bv6kiYhR oBocsSaFc0S9N7ScawwxDKal42aVzDL9v9/6K404y9JYxcDFKIYwUno7OxeSoO8f geYInYFDjVCFPvwjaNPGRpcUIXN53bC9SzF4mXRB4mK1bI8hmRGBVyJMK3M4FyVl 6g8= -----END CERTIFICATE-----Generated at Mon Mar 2 01:59:22 2026 by rpki-client