$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/167733fe-6ab1-443d-bc7d-702a6bfa6dbc.roa File: 167733fe-6ab1-443d-bc7d-702a6bfa6dbc.roa (raw, json) Hash identifier: s9sEL0NBn0W2RHzessJOR47mZqux86HylNVd4tR/Wj8= Subject key identifier: BD:3F:E2:0E:4F:8C:9E:7F:2A:8D:B3:CA:8C:6B:43:A5:39:3B:4E:CF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1221C7946A37361325FD00FB8B40380057B6F814 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/167733fe-6ab1-443d-bc7d-702a6bfa6dbc.roa Signing time: Fri 06 Feb 2026 00:00:04 +0000 ROA not before: Fri 06 Feb 2026 00:00:04 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:21:c7:94:6a:37:36:13:25:fd:00:fb:8b:40:38:00:57:b6:f8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 6 00:00:04 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=a1870a0968735f0074a134219e7c66df090436e43da66d6daec315b2b649f38e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:47:c6:94:a9:30:af:2c:55:db:33:3c:1a:7d: dd:88:db:d1:e1:36:d2:9d:94:74:e9:3c:30:d5:b4: 39:42:bd:77:a0:a6:ad:43:af:9e:99:f6:08:8e:62: 97:66:5f:70:7a:d3:c7:f5:11:e6:19:8f:35:5f:1d: 9d:b1:41:3a:0f:57:eb:57:f1:3d:49:ea:bc:26:63: 49:20:c3:ab:ea:61:5b:bc:db:19:7b:5c:dc:22:c4: 42:00:d3:62:8a:93:02:57:40:82:85:da:8c:35:92: 45:25:d1:15:2d:ad:2a:6d:4b:e5:55:05:3b:06:74: fc:64:19:33:1d:cc:dc:db:2b:cf:d9:eb:eb:84:e5: 4a:e7:2e:49:38:51:4e:86:21:9d:09:cd:23:af:c8: 04:fe:df:33:bb:97:20:99:ec:9c:5f:dc:d2:70:06: 88:63:bb:0a:0d:27:19:7a:a6:15:01:c1:3d:06:94: 6b:54:44:88:50:f4:08:b3:a3:fb:51:a7:61:3f:b2: 71:b9:3a:a1:61:9b:23:b5:30:9d:b9:1c:9a:a9:89: 2f:de:fa:dc:3a:82:17:93:e1:53:dc:25:d1:f8:f4: 44:5d:b0:0f:bc:ee:03:38:49:27:dc:ac:82:92:37: 58:69:c7:bc:cf:fb:06:74:de:b5:af:50:3d:b3:ad: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3F:E2:0E:4F:8C:9E:7F:2A:8D:B3:CA:8C:6B:43:A5:39:3B:4E:CF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/167733fe-6ab1-443d-bc7d-702a6bfa6dbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:4000::/40 Signature Algorithm: sha256WithRSAEncryption 69:ef:57:6d:32:f5:7e:03:e9:c9:53:6d:16:c9:07:db:9b:ed: 78:27:3f:2c:40:b9:ca:e0:5a:bd:47:f8:87:9b:93:20:7b:79: ec:88:d0:e0:d8:d5:fc:59:0b:65:8b:b9:4b:9c:ad:65:b5:08: 5c:fb:f7:14:8a:6a:b5:23:26:f5:8a:9d:b1:ee:31:0f:a0:40: a6:a8:95:d8:f2:91:3f:cf:89:ac:ff:0f:5a:4f:a7:d1:80:eb: e9:2d:99:a5:9a:e4:28:db:17:e7:35:2f:d7:de:8e:7a:57:48: 33:00:66:95:aa:47:84:ff:3e:39:a6:dd:61:f4:e0:3f:36:ee: 84:0a:ab:2b:de:c2:99:8f:96:12:ef:a7:fe:a4:b5:55:13:fe: 4d:ba:a5:5b:8a:40:5b:1d:dc:9c:9b:91:a0:bc:65:41:e5:25: c6:2b:92:8f:7a:ab:ba:ad:ef:a5:29:b9:d5:8d:04:fd:4c:93: 00:cf:08:35:0f:96:03:12:27:db:ad:ef:52:57:a5:4c:91:0c: a0:b6:23:53:11:a9:b6:8d:1b:fc:7c:f8:d0:4e:32:e8:a5:0f: c8:ac:49:2d:bf:4a:98:3d:a9:0e:6c:8c:04:c3:18:76:4b:f8: 39:b6:ca:a8:c4:82:d5:e3:d4:06:b9:b8:bd:b0:42:b9:a0:d3: fc:ff:41:f8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEiHHlGo3NhMl/QD7i0A4AFe2+BQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIwNjAwMDAwNFoX DTI2MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAYTE4NzBhMDk2ODczNWYwMDc0YTEz NDIxOWU3YzY2ZGYwOTA0MzZlNDNkYTY2ZDZkYWVjMzE1YjJiNjQ5ZjM4ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkfGlKkwryxV2zM8Gn3diNvR4TbS nZR06Tww1bQ5Qr13oKatQ6+emfYIjmKXZl9wetPH9RHmGY81Xx2dsUE6D1frV/E9 Seq8JmNJIMOr6mFbvNsZe1zcIsRCANNiipMCV0CChdqMNZJFJdEVLa0qbUvlVQU7 BnT8ZBkzHczc2yvP2evrhOVK5y5JOFFOhiGdCc0jr8gE/t8zu5cgmeycX9zScAaI Y7sKDScZeqYVAcE9BpRrVESIUPQIs6P7UadhP7JxuTqhYZsjtTCduRyaqYkv3vrc OoIXk+FT3CXR+PREXbAPvO4DOEkn3KyCkjdYace8z/sGdN61r1A9s63eXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL0/4g5PjJ5/Ko2zyoxrQ6U5O07PMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE2NzczM2ZlLTZhYjEtNDQzZC1iYzdkLTcwMmE2YmZhNmRiYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7UAwDQYJKoZIhvcNAQELBQADggEBAGnvV20y9X4D6clTbRbJ B9ub7XgnPyxAucrgWr1H+IebkyB7eeyI0ODY1fxZC2WLuUucrWW1CFz79xSKarUj JvWKnbHuMQ+gQKaoldjykT/Piaz/D1pPp9GA6+ktmaWa5CjbF+c1L9fejnpXSDMA ZpWqR4T/Pjmm3WH04D827oQKqyvewpmPlhLvp/6ktVUT/k26pVuKQFsd3JybkaC8 ZUHlJcYrko96q7qt76UpudWNBP1MkwDPCDUPlgMSJ9ut71JXpUyRDKC2I1MRqbaN G/x8+NBOMuilD8isSS2/Spg9qQ5sjATDGHZL+Dm2yqjEgtXj1Aa5uL2wQrmg0/z/ Qfg= -----END CERTIFICATE-----Generated at Sun Mar 1 21:57:23 2026 by rpki-client