$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/053fadea-7e1b-46ba-9ab7-95b8d5ab118e.roa File: 053fadea-7e1b-46ba-9ab7-95b8d5ab118e.roa (raw, json) Hash identifier: TgLiwYRJNwyymgAy9Oq37b69Sam+N2Tx43dulMDvVBc= Subject key identifier: 41:14:FF:91:8D:8E:30:63:D4:6D:07:0F:4C:BD:F1:26:C5:AE:0B:F5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4A88E959D654E6FDCC6EFB20C71D2897E330450A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/053fadea-7e1b-46ba-9ab7-95b8d5ab118e.roa Signing time: Fri 06 Feb 2026 00:00:34 +0000 ROA not before: Fri 06 Feb 2026 00:00:34 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:88:e9:59:d6:54:e6:fd:cc:6e:fb:20:c7:1d:28:97:e3:30:45:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 6 00:00:34 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=327c5f6248e2692a3fa8711e1cbe09678c2c3de470730c1fe50634aeaa32988c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b1:f9:16:21:6d:c9:c7:ab:be:16:be:d9:ce: 0c:42:08:d9:db:80:9f:a8:d2:66:05:53:26:48:6e: ff:f4:03:82:96:f1:16:87:8f:db:d2:58:20:b4:99: 46:1e:2b:b8:2b:13:ac:ce:64:84:d1:dd:22:1d:d9: 10:af:88:bb:9d:ad:e6:7a:ec:e5:fe:ea:f8:5a:b1: e2:91:05:2c:c7:3d:a3:62:be:b2:e4:d9:05:9a:b2: ce:81:c2:28:1c:af:4d:a7:1d:90:8b:c7:c8:80:fb: 46:cb:2f:b5:63:4a:38:70:41:2c:81:af:02:87:78: 77:3c:33:4c:37:ad:70:d3:ed:c0:2b:68:d1:d5:2f: 99:30:95:24:38:ee:07:ae:0d:c0:1e:7f:06:d3:36: 32:29:ab:66:07:fd:65:fa:57:89:61:d4:6b:8d:f6: 76:95:3c:7e:b0:f9:1b:31:20:31:c4:0a:00:43:84: 8d:19:8a:44:0a:40:06:38:d6:cf:dc:76:0a:b4:21: 8a:d8:ed:24:10:6c:16:8e:8b:23:22:6b:33:7c:ef: b9:f1:66:47:0e:50:e9:f1:37:0a:39:db:54:30:7e: 67:28:78:e3:85:33:47:c9:7f:93:ad:b6:b9:0f:2f: 97:75:3a:09:7e:de:03:63:ef:71:4e:82:01:be:fd: 66:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:14:FF:91:8D:8E:30:63:D4:6D:07:0F:4C:BD:F1:26:C5:AE:0B:F5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/053fadea-7e1b-46ba-9ab7-95b8d5ab118e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 43:24:9b:86:0f:f4:d1:be:35:1f:1c:f0:88:ab:d9:11:90:fc: 59:db:a9:dc:10:a7:8a:e2:bd:a3:11:ff:0f:3d:ea:54:8e:dd: 38:c2:82:cc:95:68:01:2d:38:fd:23:2e:b2:e1:e3:a4:e6:93: d3:a6:87:cb:c0:c5:08:b3:de:7d:53:d4:57:3f:6b:af:04:c6: b5:f6:57:d9:c6:6a:5c:d3:84:01:32:9a:d2:a7:bc:b1:ba:51: 33:3f:36:39:2e:eb:b3:c7:7e:ad:3c:e4:7f:a9:81:93:4c:c1: 5b:70:88:c7:ed:73:39:d4:1b:9f:6c:d6:86:d2:4a:f6:ac:a7: ea:c7:86:c4:a4:1d:e2:80:bb:bf:97:fa:4d:c4:83:3e:5d:d5: 06:5e:d3:86:f9:be:68:c8:93:01:fc:0a:68:fc:f5:b6:57:59: 68:0e:92:a4:a3:3c:a0:af:a4:95:42:0a:93:b6:71:b4:6f:6d: 56:d4:a9:c4:c3:22:ca:a3:23:71:c3:34:7c:23:81:5c:f0:13: 4c:42:7d:6b:db:9a:2b:9c:da:95:f4:79:56:8a:29:4c:dc:40: 88:b6:06:1c:9a:bd:38:b5:68:93:a7:79:5a:66:df:a2:87:b6: 87:19:e2:8d:99:b0:c1:6e:3e:2f:d8:6a:8f:b0:b3:91:ce:69: 41:3e:23:e1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSojpWdZU5v3Mbvsgxx0ol+MwRQowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIwNjAwMDAzNFoX DTI2MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAMzI3YzVmNjI0OGUyNjkyYTNmYTg3 MTFlMWNiZTA5Njc4YzJjM2RlNDcwNzMwYzFmZTUwNjM0YWVhYTMyOTg4YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bH5FiFtycervha+2c4MQgjZ24Cf qNJmBVMmSG7/9AOClvEWh4/b0lggtJlGHiu4KxOszmSE0d0iHdkQr4i7na3meuzl /ur4WrHikQUsxz2jYr6y5NkFmrLOgcIoHK9Npx2Qi8fIgPtGyy+1Y0o4cEEsga8C h3h3PDNMN61w0+3AK2jR1S+ZMJUkOO4Hrg3AHn8G0zYyKatmB/1l+leJYdRrjfZ2 lTx+sPkbMSAxxAoAQ4SNGYpECkAGONbP3HYKtCGK2O0kEGwWjosjImszfO+58WZH DlDp8TcKOdtUMH5nKHjjhTNHyX+Trba5Dy+XdToJft4DY+9xToIBvv1mDwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEEU/5GNjjBj1G0HD0y98SbFrgv1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA1M2ZhZGVhLTdlMWItNDZiYS05YWI3LTk1YjhkNWFiMTE4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7UDAMA0GCSqGSIb3DQEBCwUAA4IBAQBDJJuGD/TRvjUfHPCI q9kRkPxZ26ncEKeK4r2jEf8PPepUjt04woLMlWgBLTj9Iy6y4eOk5pPTpofLwMUI s959U9RXP2uvBMa19lfZxmpc04QBMprSp7yxulEzPzY5Luuzx36tPOR/qYGTTMFb cIjH7XM51BufbNaG0kr2rKfqx4bEpB3igLu/l/pNxIM+XdUGXtOG+b5oyJMB/Apo /PW2V1loDpKkozygr6SVQgqTtnG0b21W1KnEwyLKoyNxwzR8I4Fc8BNMQn1r25or nNqV9HlWiilM3ECItgYcmr04tWiTp3laZt+ih7aHGeKNmbDBbj4v2GqPsLORzmlB PiPh -----END CERTIFICATE-----Generated at Mon Mar 2 03:22:28 2026 by rpki-client