$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17fabf22-42c2-40f2-a722-0048c9eebd2c.roa File: 17fabf22-42c2-40f2-a722-0048c9eebd2c.roa (raw, json) Hash identifier: ZJFliXWrLFYBZAbAb31I/shXgJqImLZqFEQNUvdh2+U= Subject key identifier: 78:54:2E:5A:72:95:0E:07:DC:EE:29:57:7E:7D:FD:AD:36:2A:60:48 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 039BC68292D94C436653C9C5E48E2222BB900324 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17fabf22-42c2-40f2-a722-0048c9eebd2c.roa Signing time: Sun 22 Feb 2026 00:10:57 +0000 ROA not before: Sun 22 Feb 2026 00:10:57 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9b:c6:82:92:d9:4c:43:66:53:c9:c5:e4:8e:22:22:bb:90:03:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:10:57 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=ea29c97b44e674bde2db5b982d1498bfa1bf215a7691ad4e091e39ae40e00c58, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9a:5c:01:f7:05:46:23:09:9e:c5:05:e7:e8: 27:25:3c:21:4f:1b:3e:4e:a8:34:2e:b8:3c:4b:cf: e6:9e:b9:52:32:8f:6c:36:03:44:af:12:47:1e:fc: 49:1e:b9:22:03:8d:60:6c:07:72:a0:cb:a1:0d:92: ad:40:c5:37:61:b0:bb:20:48:af:14:c4:03:ae:92: c2:4d:f2:ed:15:12:52:db:74:13:13:30:0c:6e:8a: 0b:50:8d:cc:fe:9f:60:77:ff:3d:b2:eb:56:42:c1: 59:fe:d7:1a:2a:f9:bf:c4:85:e2:06:30:85:7b:a3: a0:4b:a4:6c:32:b7:93:ba:a3:36:4d:d1:1d:33:f7: 0d:2d:17:bf:0e:91:f9:65:d0:99:f4:99:06:aa:ff: 64:5e:f3:7a:8e:09:b2:da:55:be:fe:c0:dc:cf:1a: c9:6c:89:9e:8c:99:f3:c1:a3:eb:1d:e9:99:d7:a1: 6e:67:8d:8b:77:f5:b0:58:cf:62:dd:79:26:de:67: 1e:f5:26:fa:b1:3e:30:c1:20:a8:a3:ac:4a:40:3d: 7d:f7:9d:60:cf:83:1e:7f:b7:82:7d:48:7a:26:37: bb:a7:42:ca:8f:fe:a8:2c:a2:21:6f:2f:dd:25:eb: 2b:a6:66:97:0d:4b:6e:58:33:54:c4:08:ea:ce:d1: 8b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:54:2E:5A:72:95:0E:07:DC:EE:29:57:7E:7D:FD:AD:36:2A:60:48 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17fabf22-42c2-40f2-a722-0048c9eebd2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf0::/32 Signature Algorithm: sha256WithRSAEncryption 54:78:16:d8:c7:9d:02:1c:25:58:5f:a4:60:c0:b9:72:79:f9: 69:c6:9a:f3:a6:af:b8:54:59:d6:9c:5c:cc:73:22:0a:66:71: 2b:12:c8:eb:bf:db:92:18:2c:c3:8a:47:0e:35:9f:aa:c1:c2: 01:11:b4:fb:57:57:99:e9:80:cc:3c:f9:c0:03:f4:80:0e:c8: 9c:9d:93:88:d2:8f:f9:90:93:f9:99:09:ec:c1:3d:90:18:11: 7b:6d:e9:d5:c1:b9:b0:d9:37:d3:ea:f7:0e:23:9f:c0:ae:02: 6d:13:4f:ac:cd:8c:98:79:5f:dd:8a:e0:f9:bd:ee:99:70:c3: d5:a7:96:94:fb:de:1e:c5:81:91:ae:50:39:2f:c2:e9:77:2f: 6f:93:44:e0:9c:35:8f:15:97:f2:80:94:ec:69:7d:8c:8a:1c: b3:7e:60:5b:f6:09:7f:6a:45:d7:8b:4c:0c:a2:d2:38:5c:66: 9e:f7:3c:e6:97:86:3c:cf:4e:57:7f:3b:e6:05:61:50:3a:0a: 2f:65:31:17:02:7d:cc:3f:0f:00:14:41:d7:1b:f4:c9:50:99: 92:53:fe:47:5a:de:b1:be:47:f0:6e:8a:ec:fd:b8:fc:38:8c: dd:0a:84:2f:66:c1:6f:62:27:63:68:a9:8c:33:78:88:67:b7: f8:81:02:b9 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUA5vGgpLZTENmU8nF5I4iIruQAyQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMTA1N1oX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAZWEyOWM5N2I0NGU2NzRiZGUyZGI1 Yjk4MmQxNDk4YmZhMWJmMjE1YTc2OTFhZDRlMDkxZTM5YWU0MGUwMGM1ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZpcAfcFRiMJnsUF5+gnJTwhTxs+ Tqg0Lrg8S8/mnrlSMo9sNgNErxJHHvxJHrkiA41gbAdyoMuhDZKtQMU3YbC7IEiv FMQDrpLCTfLtFRJS23QTEzAMbooLUI3M/p9gd/89sutWQsFZ/tcaKvm/xIXiBjCF e6OgS6RsMreTuqM2TdEdM/cNLRe/DpH5ZdCZ9JkGqv9kXvN6jgmy2lW+/sDczxrJ bImejJnzwaPrHemZ16FuZ42Ld/WwWM9i3Xkm3mce9Sb6sT4wwSCoo6xKQD19951g z4Mef7eCfUh6Jje7p0LKj/6oLKIhby/dJesrpmaXDUtuWDNUxAjqztGLSQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFHhULlpylQ4H3O4pV359/a02KmBIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE3ZmFiZjIyLTQyYzItNDBmMi1hNzIyLTAwNDhjOWVlYmQyYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba8DANBgkqhkiG9w0BAQsFAAOCAQEAVHgW2MedAhwlWF+kYMC5 cnn5acaa86avuFRZ1pxczHMiCmZxKxLI67/bkhgsw4pHDjWfqsHCARG0+1dXmemA zDz5wAP0gA7InJ2TiNKP+ZCT+ZkJ7ME9kBgRe23p1cG5sNk30+r3DiOfwK4CbRNP rM2MmHlf3Yrg+b3umXDD1aeWlPveHsWBka5QOS/C6Xcvb5NE4Jw1jxWX8oCU7Gl9 jIocs35gW/YJf2pF14tMDKLSOFxmnvc85peGPM9OV3875gVhUDoKL2UxFwJ9zD8P ABRB1xv0yVCZklP+R1resb5H8G6K7P24/DiM3QqEL2bBb2InY2ipjDN4iGe3+IEC uQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:48:05 2026 by rpki-client