$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/206f10d0-0840-46e9-be47-09127e97b837.roa File: 206f10d0-0840-46e9-be47-09127e97b837.roa (raw, json) Hash identifier: 2KGNK9RMvPau+HCSuckmbdigZUHH4dzvMJLOQBu0fP0= Subject key identifier: DB:8D:F1:AC:EF:5D:15:14:E9:F3:20:40:FA:E8:0F:0D:44:49:47:E9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41451509754BA1B6EB2C0AF56718F6F2F4A9E127 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/206f10d0-0840-46e9-be47-09127e97b837.roa Signing time: Wed 18 Feb 2026 00:01:10 +0000 ROA not before: Wed 18 Feb 2026 00:01:10 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:45:15:09:75:4b:a1:b6:eb:2c:0a:f5:67:18:f6:f2:f4:a9:e1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 18 00:01:10 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=91ae43b23e5e3efb8e6cce99483080a40600e25662b59a66160ecbe19f98a087, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:87:44:bb:58:84:a2:44:8f:8f:c0:b8:0b: 25:a5:0b:ce:a3:fd:07:5a:dc:80:0a:07:fd:73:a8: f5:75:b4:73:24:2a:cb:bc:96:cc:02:42:f4:c3:8c: 11:22:10:17:54:7e:89:92:29:a1:47:9c:14:ba:49: e3:4d:26:f0:a2:d4:89:77:f0:1c:0e:00:cb:38:c2: 02:70:3f:6a:9c:63:5e:e8:f5:c5:ae:b6:ef:14:2b: 25:a7:aa:ce:fa:b7:bb:a1:52:4b:88:a4:8d:19:0a: 4b:30:c4:0a:fc:60:69:d3:c4:23:12:8d:59:c0:ea: fb:f0:b0:51:c7:02:ca:f6:96:b1:65:99:5d:e9:e1: 7a:24:40:3f:c1:b7:e9:48:49:0d:b7:c3:14:2d:b3: 65:a4:8f:3e:32:ac:02:3f:8f:43:76:0a:67:26:29: 6d:c2:67:22:70:95:3e:f3:9e:e5:91:9c:98:ec:26: 94:6d:1e:f7:ee:51:ea:19:cd:c3:6c:36:00:2a:89: b6:6b:b5:be:8e:c7:12:2d:62:12:86:07:14:aa:97: a3:d5:11:1a:4a:ed:71:e6:45:57:b5:60:ac:2a:08: 5f:fd:a7:9d:eb:f2:59:27:92:c7:79:f5:3d:ed:02: 69:d6:21:4f:3d:88:46:e1:81:c8:07:a4:ec:65:bd: be:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8D:F1:AC:EF:5D:15:14:E9:F3:20:40:FA:E8:0F:0D:44:49:47:E9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/206f10d0-0840-46e9-be47-09127e97b837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:70c0::/48 Signature Algorithm: sha256WithRSAEncryption ad:a2:0f:cc:a2:93:a2:95:be:b9:b4:79:5f:5d:5a:a8:ec:01: bb:20:93:3a:15:c5:53:b9:e5:fb:cc:00:c6:bd:91:d2:44:d2: 99:0b:7b:23:dd:cd:84:86:64:f5:39:eb:59:b5:53:09:b4:d7: a4:d0:b5:f3:d6:d7:3a:d6:31:6a:c6:45:98:99:74:3a:18:f1: 1c:0c:3b:45:4b:45:a1:64:2f:92:27:9d:eb:a4:13:03:6a:93: ef:1b:f4:e2:68:28:c3:9a:cd:c1:86:20:04:96:ef:ee:6e:3b: 8e:fb:dc:b5:74:c8:f1:c4:c0:34:3b:23:da:27:12:66:fd:8a: 6c:2e:57:70:b6:7c:2a:53:a0:4e:4d:c8:cd:fc:5d:37:82:9a: 32:9b:c0:e1:f9:0f:df:22:c2:3d:c0:6e:4e:4f:8b:55:ba:14: ff:8d:1f:8c:45:3c:7d:71:53:99:03:7b:70:80:a2:82:35:8b: 3b:d6:c7:ff:e6:33:90:ad:55:18:ee:ff:2c:71:cc:33:71:b3: d0:8d:ca:d5:63:63:6b:e2:24:bb:b6:24:b9:38:4f:55:f9:64: 95:4c:9a:d2:46:39:5d:34:52:6b:f6:4f:99:23:be:09:80:6a: f1:9b:62:92:86:44:cf:c2:bf:eb:72:d6:d4:a3:07:1a:bb:4d: ba:22:a6:e6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQUUVCXVLobbrLAr1Zxj28vSp4ScwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxODAwMDExMFoX DTI2MDUxOTIzNTk1OVowejFJMEcGA1UEBRNAOTFhZTQzYjIzZTVlM2VmYjhlNmNj ZTk5NDgzMDgwYTQwNjAwZTI1NjYyYjU5YTY2MTYwZWNiZTE5Zjk4YTA4NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCiHRLtYhKJEj4/AuAslpQvOo/0H WtyACgf9c6j1dbRzJCrLvJbMAkL0w4wRIhAXVH6JkimhR5wUuknjTSbwotSJd/Ac DgDLOMICcD9qnGNe6PXFrrbvFCslp6rO+re7oVJLiKSNGQpLMMQK/GBp08QjEo1Z wOr78LBRxwLK9paxZZld6eF6JEA/wbfpSEkNt8MULbNlpI8+MqwCP49DdgpnJilt wmcicJU+857lkZyY7CaUbR737lHqGc3DbDYAKom2a7W+jscSLWIShgcUqpej1REa Su1x5kVXtWCsKghf/aed6/JZJ5LHefU97QJp1iFPPYhG4YHIB6TsZb2+pQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNuN8azvXRUU6fMgQProDw1ESUfpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIwNmYxMGQwLTA4NDAtNDZlOS1iZTQ3LTA5MTI3ZTk3YjgzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8nDAMA0GCSqGSIb3DQEBCwUAA4IBAQCtog/MopOilb65tHlf XVqo7AG7IJM6FcVTueX7zADGvZHSRNKZC3sj3c2EhmT1OetZtVMJtNek0LXz1tc6 1jFqxkWYmXQ6GPEcDDtFS0WhZC+SJ53rpBMDapPvG/TiaCjDms3BhiAElu/ubjuO +9y1dMjxxMA0OyPaJxJm/YpsLldwtnwqU6BOTcjN/F03gpoym8Dh+Q/fIsI9wG5O T4tVuhT/jR+MRTx9cVOZA3twgKKCNYs71sf/5jOQrVUY7v8sccwzcbPQjcrVY2Nr 4iS7tiS5OE9V+WSVTJrSRjldNFJr9k+ZI74JgGrxm2KShkTPwr/rctbUowcau026 Iqbm -----END CERTIFICATE-----Generated at Mon Mar 2 00:06:47 2026 by rpki-client