$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03cd7736-a6da-4943-bb7c-dc740cfb292c.roa File: 03cd7736-a6da-4943-bb7c-dc740cfb292c.roa (raw, json) Hash identifier: d7AXh+CX5WjGmHmjSzLKzJrSC/oWLohJ5P3QVC2i9mk= Subject key identifier: 8C:70:37:4D:36:FE:24:02:C0:9D:B8:30:89:F3:14:A7:16:A3:0B:1C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5BDB9BA77E639EF0F5406649DADBAD4A82E92999 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03cd7736-a6da-4943-bb7c-dc740cfb292c.roa Signing time: Sat 21 Feb 2026 00:10:43 +0000 ROA not before: Sat 21 Feb 2026 00:10:43 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:db:9b:a7:7e:63:9e:f0:f5:40:66:49:da:db:ad:4a:82:e9:29:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:10:43 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=a04fdf1e70c7d69a7c2f549e7ef46b8752fd16ef80b07cb914d33df36d7ab5f5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:6b:35:ef:fe:75:b2:e5:f8:cd:cf:7c:6e: 20:64:28:d7:ef:7e:0b:50:7b:c6:1d:f5:de:48:87: a9:fe:61:c9:54:78:8b:b0:a9:0c:2e:01:7e:3a:b4: f0:6e:e1:8b:00:a2:1a:08:d1:f6:83:20:84:bd:ee: e8:d5:ff:5a:66:c4:47:ca:21:02:e7:9d:62:3d:30: d5:7e:2b:68:d9:d7:13:a1:eb:cf:ab:df:da:8c:ef: 41:d4:40:45:f0:b2:99:de:c4:40:97:9c:73:4e:78: ab:f2:bb:ca:b4:24:0e:05:17:c5:e9:db:49:a8:19: 92:9a:03:81:c6:36:2b:fd:52:3f:83:39:e3:ea:98: e3:7e:a3:74:e3:35:52:57:c1:8a:ac:30:cc:2d:61: f5:4c:d4:2e:e0:94:aa:ce:b8:05:bf:41:db:a7:a1: c4:31:a3:1f:90:89:5d:28:ec:a1:b6:62:c3:69:01: ed:c5:0b:a2:cd:b6:7d:a5:08:18:1b:27:03:fd:fa: c4:1a:44:e5:8a:39:78:71:89:38:94:b5:94:0e:95: b5:72:e3:54:47:8c:15:26:b0:3f:7e:91:3d:0c:b2: 8f:9c:dc:e4:75:8c:c3:53:9c:4f:0c:84:e1:42:75: ec:5d:cd:f6:3e:3e:ab:23:61:58:08:46:ec:42:8f: 15:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:70:37:4D:36:FE:24:02:C0:9D:B8:30:89:F3:14:A7:16:A3:0B:1C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03cd7736-a6da-4943-bb7c-dc740cfb292c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:6000::/48 Signature Algorithm: sha256WithRSAEncryption 51:be:bc:59:f4:58:8a:b9:16:eb:c4:57:bb:4a:9a:48:89:2e: e6:33:5b:6e:73:ed:f2:f2:90:67:26:b4:cf:4c:64:82:69:9f: c0:63:c9:eb:55:bb:fd:26:1e:2e:43:8e:f0:9f:ba:d3:2d:e8: a7:6d:f1:1e:2d:c8:c1:01:22:b6:a0:fe:99:76:62:5b:ee:ff: 59:36:32:f5:ce:1d:5e:11:ee:02:6d:c5:e6:11:14:df:aa:6d: 1b:73:30:a9:23:e6:51:25:38:b3:39:26:d5:01:72:72:59:82: 9b:89:30:3e:4f:44:1b:ba:f7:e6:1b:3e:ea:d0:54:34:a6:b4: fb:0c:35:04:b3:4c:af:97:c4:e1:c0:1c:9d:aa:14:b1:74:a0: ea:a3:69:f7:76:30:28:c0:34:f6:b7:23:a3:a2:f2:6a:06:ca: 14:ed:27:6a:cc:ce:dd:fe:dd:13:c2:35:4a:f9:97:f6:4a:02: c4:5f:40:e1:73:97:38:ec:2d:84:3f:51:97:c0:93:22:cc:a4: c1:6c:5b:1d:0d:80:d6:34:3c:6d:50:d2:b8:2a:fc:90:4a:3b: df:56:a7:11:6c:28:e1:15:f2:3f:85:b3:88:ea:e5:62:73:cb: de:92:a8:be:0b:22:5d:a8:2f:a3:07:eb:d5:28:78:58:91:1b: 00:7b:2b:c6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUW9ubp35jnvD1QGZJ2tutSoLpKZkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMTA0M1oX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAYTA0ZmRmMWU3MGM3ZDY5YTdjMmY1 NDllN2VmNDZiODc1MmZkMTZlZjgwYjA3Y2I5MTRkMzNkZjM2ZDdhYjVmNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtutrNe/+dbLl+M3PfG4gZCjX734L UHvGHfXeSIep/mHJVHiLsKkMLgF+OrTwbuGLAKIaCNH2gyCEve7o1f9aZsRHyiEC 551iPTDVfito2dcToevPq9/ajO9B1EBF8LKZ3sRAl5xzTnir8rvKtCQOBRfF6dtJ qBmSmgOBxjYr/VI/gznj6pjjfqN04zVSV8GKrDDMLWH1TNQu4JSqzrgFv0Hbp6HE MaMfkIldKOyhtmLDaQHtxQuizbZ9pQgYGycD/frEGkTlijl4cYk4lLWUDpW1cuNU R4wVJrA/fpE9DLKPnNzkdYzDU5xPDIThQnXsXc32Pj6rI2FYCEbsQo8V4wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIxwN002/iQCwJ24MInzFKcWowscMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzY2Q3NzM2LWE2ZGEtNDk0My1iYjdjLWRjNzQwY2ZiMjkyYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7GAAMA0GCSqGSIb3DQEBCwUAA4IBAQBRvrxZ9FiKuRbrxFe7 SppIiS7mM1tuc+3y8pBnJrTPTGSCaZ/AY8nrVbv9Jh4uQ47wn7rTLeinbfEeLcjB ASK2oP6ZdmJb7v9ZNjL1zh1eEe4CbcXmERTfqm0bczCpI+ZRJTizOSbVAXJyWYKb iTA+T0QbuvfmGz7q0FQ0prT7DDUEs0yvl8ThwBydqhSxdKDqo2n3djAowDT2tyOj ovJqBsoU7SdqzM7d/t0TwjVK+Zf2SgLEX0Dhc5c47C2EP1GXwJMizKTBbFsdDYDW NDxtUNK4KvyQSjvfVqcRbCjhFfI/hbOI6uVic8vekqi+CyJdqC+jB+vVKHhYkRsA eyvG -----END CERTIFICATE-----Generated at Mon Mar 2 07:06:26 2026 by rpki-client