$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07945819-d82c-427a-b71b-535d57170872.roa File: 07945819-d82c-427a-b71b-535d57170872.roa (raw, json) Hash identifier: dR4X/8Rpre5Hza9kVzCDQgOc/7Ma1A+fpnHq9T1I7k8= Subject key identifier: 02:20:C5:65:A1:8E:95:88:60:34:80:5A:D7:BE:C4:FB:4B:87:C1:79 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0CABE869FE00972876BDEBA36930FF6FF77992E7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07945819-d82c-427a-b71b-535d57170872.roa Signing time: Sat 21 Feb 2026 00:00:31 +0000 ROA not before: Sat 21 Feb 2026 00:00:31 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ab:e8:69:fe:00:97:28:76:bd:eb:a3:69:30:ff:6f:f7:79:92:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:00:31 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=c9a674bf9975da313df37e137da672a75a1d8b311621360e54990d7e40827ecd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ae:3c:be:5f:04:56:39:bf:9c:d4:44:41:9a: 43:29:fe:5b:08:9c:b3:12:c2:0f:58:5c:71:9d:40: ff:5e:86:51:72:78:68:a2:43:ee:1a:6c:57:03:e9: 6e:15:d4:f3:3f:6a:01:14:94:a0:8c:35:fc:7b:f1: 43:3d:88:3d:19:9a:c4:07:eb:f1:15:ec:1a:f9:7e: 26:51:9c:2c:20:b2:f7:b1:45:57:8e:ce:40:36:03: da:04:60:58:a9:49:04:c6:95:4f:7e:5d:9d:5c:85: 53:dd:38:82:0f:d0:28:40:f0:c0:0c:01:26:b7:3e: 52:ee:36:6e:81:21:15:12:f4:86:4f:0b:4b:a4:c4: 52:1d:f7:5d:6f:65:b0:16:26:f1:96:8f:20:d5:89: 4b:08:13:e0:a5:f3:1f:85:89:a7:e3:24:16:c0:44: d6:de:f7:f3:bc:d8:81:10:ca:af:58:ce:ba:59:c2: 9d:a2:77:4e:a6:f9:a1:2a:cb:73:10:ec:42:d3:4e: 27:da:ae:f5:89:5c:e5:32:7c:1a:7d:c9:d1:96:d0: 13:28:9c:d8:ca:b7:78:0b:54:1f:eb:91:cc:08:c0: e9:10:0c:93:ef:bb:40:64:41:d9:92:d6:41:bf:9f: 6b:13:15:1c:e7:ef:82:79:85:00:05:ea:7c:99:e2: a1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:20:C5:65:A1:8E:95:88:60:34:80:5A:D7:BE:C4:FB:4B:87:C1:79 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07945819-d82c-427a-b71b-535d57170872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:b000::/40 Signature Algorithm: sha256WithRSAEncryption 19:d3:10:fe:dd:15:d5:d8:f0:c0:28:b3:21:eb:eb:38:af:77: 2d:f3:1a:60:05:e1:66:15:82:33:f6:5f:2c:84:71:7c:6f:51: f1:dd:af:13:f2:50:75:af:7c:fb:3b:f0:c0:89:08:62:6e:2b: 0e:11:9c:dd:81:50:57:7f:eb:a1:0f:0e:37:e4:11:4d:5c:16: b6:0e:79:a1:e2:48:f6:cf:da:9e:2a:a5:12:17:e5:d0:16:07: b6:0c:32:bb:f2:78:70:a0:09:d8:0e:c9:1f:59:30:57:6c:d4: 93:93:8b:8b:63:90:de:ad:0d:f8:bb:f3:ba:89:cc:63:9f:6c: 7e:94:06:00:01:01:d0:b4:28:35:5a:4a:fe:23:ba:48:cd:4e: 74:d6:dd:7e:e6:68:1e:c1:bd:00:e3:7d:b0:51:57:9c:43:e0: 8a:65:88:14:45:fb:16:1d:81:ef:76:45:6e:19:d3:1d:9b:9a: d9:c7:e6:e3:32:5c:c6:70:e3:e8:6b:1a:82:ee:fd:64:c2:05: 9e:99:78:df:cd:8d:1d:d6:91:2a:7f:7b:e6:b3:d4:37:3c:65: 35:d5:93:52:e7:dd:e2:ad:38:49:3a:fa:95:c8:01:30:8f:62: 1b:f1:5b:6d:6a:b5:2d:3c:d8:c8:db:67:18:f9:d6:21:13:c5: d2:c1:fc:2c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDKvoaf4Alyh2veujaTD/b/d5kucwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMDAzMVoX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAYzlhNjc0YmY5OTc1ZGEzMTNkZjM3 ZTEzN2RhNjcyYTc1YTFkOGIzMTE2MjEzNjBlNTQ5OTBkN2U0MDgyN2VjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq648vl8EVjm/nNREQZpDKf5bCJyz EsIPWFxxnUD/XoZRcnhookPuGmxXA+luFdTzP2oBFJSgjDX8e/FDPYg9GZrEB+vx Fewa+X4mUZwsILL3sUVXjs5ANgPaBGBYqUkExpVPfl2dXIVT3TiCD9AoQPDADAEm tz5S7jZugSEVEvSGTwtLpMRSHfddb2WwFibxlo8g1YlLCBPgpfMfhYmn4yQWwETW 3vfzvNiBEMqvWM66WcKdondOpvmhKstzEOxC004n2q71iVzlMnwafcnRltATKJzY yrd4C1Qf65HMCMDpEAyT77tAZEHZktZBv59rExUc5++CeYUABep8meKh6QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAIgxWWhjpWIYDSAWte+xPtLh8F5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3OTQ1ODE5LWQ4MmMtNDI3YS1iNzFiLTUzNWQ1NzE3MDg3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaabAwDQYJKoZIhvcNAQELBQADggEBABnTEP7dFdXY8MAosyHr 6zivdy3zGmAF4WYVgjP2XyyEcXxvUfHdrxPyUHWvfPs78MCJCGJuKw4RnN2BUFd/ 66EPDjfkEU1cFrYOeaHiSPbP2p4qpRIX5dAWB7YMMrvyeHCgCdgOyR9ZMFds1JOT i4tjkN6tDfi787qJzGOfbH6UBgABAdC0KDVaSv4jukjNTnTW3X7maB7BvQDjfbBR V5xD4IpliBRF+xYdge92RW4Z0x2bmtnH5uMyXMZw4+hrGoLu/WTCBZ6ZeN/NjR3W kSp/e+az1Dc8ZTXVk1Ln3eKtOEk6+pXIATCPYhvxW21qtS082MjbZxj51iETxdLB /Cw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:04 2026 by rpki-client