$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f308446-71c0-4da7-9488-837b94b0ca9c.roa File: 0f308446-71c0-4da7-9488-837b94b0ca9c.roa (raw, json) Hash identifier: GzWU+/zQAhDF3nFWDWkHeCXreT4lXQij/GtzMEgGmQM= Subject key identifier: 7A:E1:01:19:56:34:A3:43:B0:F4:91:04:17:54:7C:35:47:E6:09:A0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 52BEC82654F64B21A54BAE314C6FBA794277AA3E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f308446-71c0-4da7-9488-837b94b0ca9c.roa Signing time: Fri 20 Feb 2026 00:21:20 +0000 ROA not before: Fri 20 Feb 2026 00:21:20 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:be:c8:26:54:f6:4b:21:a5:4b:ae:31:4c:6f:ba:79:42:77:aa:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:21:20 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=a8f56e6db46ba95cc0fc6e2c8873d82a07d1e2d99fa4e5c2a708d67d4f738673, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7f:8d:2f:59:d5:aa:ac:0f:4e:95:f2:4e:41: 31:b5:51:e8:17:16:ae:89:86:9d:df:c3:c5:73:b2: 0f:23:ef:21:37:a8:f5:e4:5c:55:10:d9:36:fd:28: b5:d0:81:3d:90:bf:0e:74:8f:19:b1:09:6e:98:d8: c0:d6:d4:80:d5:f2:dd:6d:b4:50:4f:0c:e6:5c:00: b0:52:cf:87:d4:81:07:67:c2:dd:0a:c2:f8:c4:9a: 38:03:ab:7d:4d:6b:70:bd:b6:cb:a1:68:37:cb:4b: bc:00:a5:59:46:cf:d9:82:57:67:40:d3:c1:56:6f: 61:20:a3:4b:31:56:cd:c5:d4:e8:c0:67:a8:2d:65: 57:06:d3:31:4d:c2:93:63:5a:70:f2:41:d8:45:c9: db:da:70:f5:67:39:76:b8:41:bf:91:e9:3e:f5:7e: c0:81:2c:ea:37:91:82:51:bd:98:5f:9e:2a:59:7c: c5:85:d0:fd:03:81:4e:73:a0:27:aa:ac:d4:fc:49: 97:00:ad:e9:b9:1d:81:f2:6e:3b:dd:71:45:2e:28: 74:32:1e:3f:b8:34:9f:e3:94:37:4f:ba:fe:18:d5: 03:88:b8:b2:fc:27:08:68:44:f5:d7:9d:0e:af:7e: c8:5d:a4:c6:2f:b1:73:32:03:81:b0:27:1f:66:0e: 58:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E1:01:19:56:34:A3:43:B0:F4:91:04:17:54:7C:35:47:E6:09:A0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f308446-71c0-4da7-9488-837b94b0ca9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4080::/48 Signature Algorithm: sha256WithRSAEncryption 62:2c:c3:0c:b4:0b:ec:11:56:de:2b:d2:2d:a1:95:65:23:7e: 38:ca:86:c3:af:40:9c:ea:b3:7e:2d:86:2d:65:76:27:6d:e1: 24:d1:ca:c8:06:69:80:67:bb:23:1d:62:84:be:f1:66:81:97: 6d:6f:16:43:bb:e0:32:4e:48:e1:87:72:49:55:3c:9d:23:7e: 96:5e:f9:82:ef:62:ed:25:f0:01:72:b4:7a:e8:f9:97:65:d4: e3:02:cd:0c:d3:54:50:2c:70:bc:a2:d3:8d:e0:a9:d9:6a:0b: 42:4e:d8:da:c7:9d:67:ef:9c:17:47:f5:42:20:59:60:f0:74: 25:61:52:06:95:5f:b9:83:cb:a5:e2:a4:38:cd:9a:9b:dc:85: 54:81:e9:66:bc:5d:2b:6f:c1:a7:e3:e1:a2:16:43:3f:a8:0c: 01:fd:f3:27:af:c8:8e:90:fb:43:30:02:8f:e9:61:ca:6b:da: c1:ea:1a:5a:48:43:ed:23:e7:01:4e:72:78:27:44:54:02:7e: f1:f3:a1:fe:d6:e1:70:5f:0a:48:0f:2c:05:8c:ee:ee:6e:11: 74:21:48:e7:fb:e3:c9:f2:26:ac:47:99:1e:1b:0d:cd:2d:73: 60:4f:69:e3:ed:78:28:b5:46:76:d0:73:49:ad:22:08:b4:4b: 7e:aa:06:f6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUr7IJlT2SyGlS64xTG+6eUJ3qj4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMjEyMFoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAYThmNTZlNmRiNDZiYTk1Y2MwZmM2 ZTJjODg3M2Q4MmEwN2QxZTJkOTlmYTRlNWMyYTcwOGQ2N2Q0ZjczODY3MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH+NL1nVqqwPTpXyTkExtVHoFxau iYad38PFc7IPI+8hN6j15FxVENk2/Si10IE9kL8OdI8ZsQlumNjA1tSA1fLdbbRQ TwzmXACwUs+H1IEHZ8LdCsL4xJo4A6t9TWtwvbbLoWg3y0u8AKVZRs/ZgldnQNPB Vm9hIKNLMVbNxdTowGeoLWVXBtMxTcKTY1pw8kHYRcnb2nD1Zzl2uEG/kek+9X7A gSzqN5GCUb2YX54qWXzFhdD9A4FOc6AnqqzU/EmXAK3puR2B8m473XFFLih0Mh4/ uDSf45Q3T7r+GNUDiLiy/CcIaET1150Or37IXaTGL7FzMgOBsCcfZg5YLQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHrhARlWNKNDsPSRBBdUfDVH5gmgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmMzA4NDQ2LTcxYzAtNGRhNy05NDg4LTgzN2I5NGIwY2E5Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8kCAMA0GCSqGSIb3DQEBCwUAA4IBAQBiLMMMtAvsEVbeK9It oZVlI344yobDr0Cc6rN+LYYtZXYnbeEk0crIBmmAZ7sjHWKEvvFmgZdtbxZDu+Ay Tkjhh3JJVTydI36WXvmC72LtJfABcrR66PmXZdTjAs0M01RQLHC8otON4KnZagtC Ttjax51n75wXR/VCIFlg8HQlYVIGlV+5g8ul4qQ4zZqb3IVUgelmvF0rb8Gn4+Gi FkM/qAwB/fMnr8iOkPtDMAKP6WHKa9rB6hpaSEPtI+cBTnJ4J0RUAn7x86H+1uFw XwpIDywFjO7ubhF0IUjn++PJ8iasR5keGw3NLXNgT2nj7XgotUZ20HNJrSIItEt+ qgb2 -----END CERTIFICATE-----Generated at Mon Mar 2 03:23:16 2026 by rpki-client