$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1219e8ec-d527-4910-8cb6-e0e4e3503f2a.roa File: 1219e8ec-d527-4910-8cb6-e0e4e3503f2a.roa (raw, json) Hash identifier: FOO9WAYZCMsVT8ShDQlwhT9uFZMLheBf2R0ZnRdWD7w= Subject key identifier: 25:AD:F2:0F:C7:8B:63:FF:4F:E5:4E:47:B5:55:DC:46:8E:44:36:17 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4BFF12584F73CACD12651555B8113472502F6AA6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1219e8ec-d527-4910-8cb6-e0e4e3503f2a.roa Signing time: Fri 06 Feb 2026 00:00:35 +0000 ROA not before: Fri 06 Feb 2026 00:00:35 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da68:a0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ff:12:58:4f:73:ca:cd:12:65:15:55:b8:11:34:72:50:2f:6a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 6 00:00:35 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=bd46b4ab3af8a4bcbefd5113bb14836e76927e0c181028a3403e9dd1ab56cfad, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:de:d7:20:91:eb:30:f6:37:04:99:62:a0: 79:a3:7e:6a:c3:9e:18:d8:82:30:31:c5:3f:a2:41: 31:a5:c6:41:33:7c:5d:57:d6:22:83:1c:75:9e:70: 98:34:31:68:28:23:71:6e:e6:97:4c:12:4b:fa:5f: 62:cb:a0:5f:37:ec:25:c3:20:5a:bd:57:52:32:a5: df:e5:52:2e:4b:9f:81:22:19:00:35:2e:f8:e8:50: 02:74:31:aa:b9:50:72:cb:49:bf:c3:f0:fa:9a:09: 33:89:f4:43:7a:d4:92:e6:84:b4:0f:66:5a:94:bf: e0:29:f6:81:e0:57:7e:85:e5:31:fb:4f:6c:f8:34: 2d:6e:95:89:41:9e:4e:67:96:15:aa:7d:36:02:e7: 06:5b:5a:42:e4:af:54:77:de:94:1f:93:1a:3d:cb: 98:82:8c:80:20:60:6b:b1:2a:2d:c8:98:fa:d1:97: 70:9e:cd:10:de:2d:81:9f:54:05:81:d0:3d:46:c3: 5b:a3:41:20:31:37:4b:18:95:58:79:92:f7:da:56: 9f:25:56:f1:41:bc:45:cb:67:e3:0a:12:7e:d3:cd: 32:e5:3b:be:a0:78:b8:c4:6e:f7:52:1b:e8:a8:cc: 91:2f:9c:53:f9:f2:32:68:1b:a1:82:ad:70:1d:57: 68:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AD:F2:0F:C7:8B:63:FF:4F:E5:4E:47:B5:55:DC:46:8E:44:36:17 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1219e8ec-d527-4910-8cb6-e0e4e3503f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:a0c0::/46 Signature Algorithm: sha256WithRSAEncryption 33:f5:64:f1:ad:4c:ea:81:c0:93:99:33:06:a8:4a:37:d4:8f: 66:50:b5:8f:31:0e:3c:c8:f3:3e:09:d9:ca:4d:0f:88:64:60: 0e:33:8c:42:7a:96:09:8b:d7:72:a4:56:20:f3:99:45:48:03: e9:11:f2:99:2c:a6:cb:f2:95:5d:f1:d1:2e:db:38:e0:d8:92: 7f:4f:a5:6a:14:cb:c2:75:70:0a:d7:ce:31:28:19:d7:c4:31: 32:6c:bc:ed:7d:64:66:8c:04:8b:6a:75:f7:b1:25:9a:0a:ed: 08:08:73:2f:3e:43:5b:8a:32:29:bb:43:9d:ab:05:e8:b3:5d: fa:05:6d:67:da:7e:5b:a4:d6:5c:4b:a6:cf:58:41:a6:fb:dc: 4c:da:50:00:38:90:13:35:20:81:ac:83:1f:3a:a0:67:c5:9b: 7d:03:b9:35:7e:4f:57:4f:b8:e2:f2:b9:31:11:c9:41:7c:77: 08:68:d6:1f:53:ad:ac:ec:a1:ab:9a:1c:75:2a:91:e8:6b:fb: e7:9a:5b:60:96:ff:8f:e1:9d:3b:bd:0e:2e:bd:30:c8:87:43: 7d:f3:26:6d:83:be:9e:5a:50:0c:75:9b:9b:99:94:8c:3e:67: 45:b0:28:34:58:64:5f:c5:f5:ac:28:78:d9:93:d4:c4:ad:6f: cd:b1:04:0b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUS/8SWE9zys0SZRVVuBE0clAvaqYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIwNjAwMDAzNVoX DTI2MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAYmQ0NmI0YWIzYWY4YTRiY2JlZmQ1 MTEzYmIxNDgzNmU3NjkyN2UwYzE4MTAyOGEzNDAzZTlkZDFhYjU2Y2ZhZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFve1yCR6zD2NwSZYqB5o35qw54Y 2IIwMcU/okExpcZBM3xdV9Yigxx1nnCYNDFoKCNxbuaXTBJL+l9iy6BfN+wlwyBa vVdSMqXf5VIuS5+BIhkANS746FACdDGquVByy0m/w/D6mgkzifRDetSS5oS0D2Za lL/gKfaB4Fd+heUx+09s+DQtbpWJQZ5OZ5YVqn02AucGW1pC5K9Ud96UH5MaPcuY goyAIGBrsSotyJj60Zdwns0Q3i2Bn1QFgdA9RsNbo0EgMTdLGJVYeZL32lafJVbx QbxFy2fjChJ+080y5Tu+oHi4xG73UhvoqMyRL5xT+fIyaBuhgq1wHVdoFwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCWt8g/Hi2P/T+VOR7VV3EaORDYXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEyMTllOGVjLWQ1MjctNDkxMC04Y2I2LWUwZTRlMzUwM2YyYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaKDAMA0GCSqGSIb3DQEBCwUAA4IBAQAz9WTxrUzqgcCTmTMG qEo31I9mULWPMQ48yPM+CdnKTQ+IZGAOM4xCepYJi9dypFYg85lFSAPpEfKZLKbL 8pVd8dEu2zjg2JJ/T6VqFMvCdXAK184xKBnXxDEybLztfWRmjASLanX3sSWaCu0I CHMvPkNbijIpu0OdqwXos136BW1n2n5bpNZcS6bPWEGm+9xM2lAAOJATNSCBrIMf OqBnxZt9A7k1fk9XT7ji8rkxEclBfHcIaNYfU62s7KGrmhx1KpHoa/vnmltglv+P 4Z07vQ4uvTDIh0N98yZtg76eWlAMdZubmZSMPmdFsCg0WGRfxfWsKHjZk9TErW/N sQQL -----END CERTIFICATE-----Generated at Sun Mar 1 23:37:07 2026 by rpki-client