$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa File: 0f3544c3-90af-45ac-b6c1-f680a3230f34.roa (raw, json) Hash identifier: Y+sup/jfWQe1u/4WwibYhcMY839AZcKrg60x3PVVCLk= Subject key identifier: 01:31:DB:F2:37:FF:D2:B2:A9:49:4B:77:B1:AF:0E:81:34:76:12:EA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 384B526AD7E7ABB6DDB2CDA7A36E0C834599E4ED Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa Signing time: Fri 20 Feb 2026 00:01:12 +0000 ROA not before: Fri 20 Feb 2026 00:01:12 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:4b:52:6a:d7:e7:ab:b6:dd:b2:cd:a7:a3:6e:0c:83:45:99:e4:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:01:12 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=9669fb2964afa05b9c378cc36492627594fdf32f381836a16040f6c79f9d9af3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:b4:03:94:69:49:d3:36:cb:2e:7e:28:78: 95:8f:d8:77:c8:91:43:e1:63:f8:a0:11:2b:86:3a: b4:2e:c4:11:12:48:e8:42:24:d2:22:93:66:c5:a4: 87:e5:79:31:30:8d:0d:db:bf:73:a4:f2:13:c9:30: 49:a5:a3:a9:76:ad:e1:f4:41:4f:01:b5:20:17:6f: 10:c7:32:89:1b:57:8c:f2:be:99:a1:31:c7:f4:ed: 97:6f:d4:82:47:71:a2:9b:53:8c:d5:3f:50:91:de: f3:84:67:90:2f:d6:39:a9:40:8a:c6:f6:bb:35:c5: 8f:f7:49:ca:ef:76:0e:db:e5:7a:40:92:79:f5:b9: 8c:34:21:98:52:ca:cb:c0:a4:21:8a:38:8c:54:3f: 53:54:a6:ba:33:64:0b:d9:28:53:8c:9f:81:c3:78: 10:1d:a6:0d:20:92:d5:e9:f6:a6:7f:26:cc:c1:13: ae:ff:8d:0e:1e:a2:2e:17:f3:cd:01:5d:5c:3a:16: 45:17:18:a6:18:ec:50:4c:c6:41:66:06:98:01:a1: 8c:95:93:89:21:b1:af:49:56:84:cd:7b:1d:65:90: 2a:42:b3:57:4f:88:2a:2b:59:6c:04:da:d4:c2:b4: be:78:b4:19:f7:ca:d5:d3:67:46:47:be:b3:69:ab: e7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:31:DB:F2:37:FF:D2:B2:A9:49:4B:77:B1:AF:0E:81:34:76:12:EA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f3544c3-90af-45ac-b6c1-f680a3230f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:b040::/48 Signature Algorithm: sha256WithRSAEncryption 76:9a:75:05:2d:57:2c:4f:b4:c3:3c:55:5f:76:a4:32:2f:fa: 40:f9:bf:9b:b4:da:02:74:60:8c:0c:a2:9e:e9:e3:f5:ac:c0: 31:08:7d:26:e7:27:dc:94:cc:e6:ca:82:b3:f0:0f:30:3a:d8: dc:ef:7d:09:71:fa:63:64:66:02:c1:e7:96:c1:e5:2f:11:59: 8a:b4:21:75:fb:06:68:3c:c4:c2:dc:24:30:d5:19:3a:9b:fb: 04:23:71:e6:20:7b:d6:00:fd:00:04:f9:05:de:9c:1b:26:d3: 92:06:39:d5:cd:bd:29:cc:31:56:ec:b7:bb:e4:e9:e5:00:48: 96:e8:91:73:e6:6b:40:d4:5d:16:c5:04:8c:dc:78:f3:66:1a: e6:15:ab:22:55:a0:5f:69:e0:bd:39:8b:03:07:55:1f:83:f8: 53:bd:7c:ef:d3:c6:90:73:05:c5:e1:c1:6a:e8:cb:b3:47:0f: 2f:02:7d:fb:8e:40:6e:3b:4f:07:68:6b:4b:48:61:91:63:60: 0e:c1:38:e5:6a:9e:fd:cf:4c:83:e0:29:89:13:10:e9:4a:81: 78:bc:05:b1:e9:01:7c:b8:d5:ca:28:bf:55:5a:1b:89:21:ff: 04:c6:da:27:b9:5d:67:8d:9e:83:9f:d2:25:0c:84:60:92:26: c8:39:0a:8a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOEtSatfnq7bdss2no24Mg0WZ5O0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMDExMloX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAOTY2OWZiMjk2NGFmYTA1YjljMzc4 Y2MzNjQ5MjYyNzU5NGZkZjMyZjM4MTgzNmExNjA0MGY2Yzc5ZjlkOWFmMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZq0A5RpSdM2yy5+KHiVj9h3yJFD 4WP4oBErhjq0LsQREkjoQiTSIpNmxaSH5XkxMI0N279zpPITyTBJpaOpdq3h9EFP AbUgF28QxzKJG1eM8r6ZoTHH9O2Xb9SCR3Gim1OM1T9Qkd7zhGeQL9Y5qUCKxva7 NcWP90nK73YO2+V6QJJ59bmMNCGYUsrLwKQhijiMVD9TVKa6M2QL2ShTjJ+Bw3gQ HaYNIJLV6famfybMwROu/40OHqIuF/PNAV1cOhZFFximGOxQTMZBZgaYAaGMlZOJ IbGvSVaEzXsdZZAqQrNXT4gqK1lsBNrUwrS+eLQZ98rV02dGR76zaavnrQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAEx2/I3/9KyqUlLd7GvDoE0dhLqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmMzU0NGMzLTkwYWYtNDVhYy1iNmMxLWY2ODBhMzIzMGYzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaALBAMA0GCSqGSIb3DQEBCwUAA4IBAQB2mnUFLVcsT7TDPFVf dqQyL/pA+b+btNoCdGCMDKKe6eP1rMAxCH0m5yfclMzmyoKz8A8wOtjc730Jcfpj ZGYCweeWweUvEVmKtCF1+wZoPMTC3CQw1Rk6m/sEI3HmIHvWAP0ABPkF3pwbJtOS BjnVzb0pzDFW7Le75OnlAEiW6JFz5mtA1F0WxQSM3HjzZhrmFasiVaBfaeC9OYsD B1Ufg/hTvXzv08aQcwXF4cFq6MuzRw8vAn37jkBuO08HaGtLSGGRY2AOwTjlap79 z0yD4CmJExDpSoF4vAWx6QF8uNXKKL9VWhuJIf8ExtonuV1njZ6Dn9IlDIRgkibI OQqK -----END CERTIFICATE-----Generated at Mon Mar 2 01:59:38 2026 by rpki-client