$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa File: 23ecebb0-098e-41b3-815b-beadfef6484a.roa (raw, json) Hash identifier: fd7Dpd+LIvib+7lS0I5SDp8Loj6eWTZKD6uHkD9nBNU= Subject key identifier: AE:1A:86:BB:80:A6:0A:C0:D9:99:85:23:DE:B3:70:4B:CD:2A:85:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1F37A6E1CC346FF56C37C41DC4058E22C690E281 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa Signing time: Sun 22 Feb 2026 00:01:00 +0000 ROA not before: Sun 22 Feb 2026 00:01:00 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:37:a6:e1:cc:34:6f:f5:6c:37:c4:1d:c4:05:8e:22:c6:90:e2:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:01:00 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=c069b46eb1ae0c21a689b123442d765d9e8cdd998f1e86afab1f7e57961ffb31, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:37:0d:07:46:65:de:f5:af:f3:eb:28:e6:6e: ae:fa:d9:ee:51:a7:b6:e0:c9:71:3b:ef:66:1b:f1: 1d:27:24:c2:94:ac:2c:ce:25:e8:d9:b6:bf:4b:f5: c9:df:69:71:0d:c5:24:1a:70:61:19:04:52:c0:4d: ad:b5:24:ba:c6:97:37:09:9e:c0:67:3e:c4:34:6d: 75:f2:59:6e:72:e7:66:56:82:69:96:7b:5c:68:42: 3a:2e:29:fd:83:45:de:bc:aa:2b:66:9f:c8:15:0d: 6b:38:bb:af:17:5f:27:9b:1f:f8:0f:a4:78:9c:65: 18:51:58:54:b9:75:61:75:6b:06:cc:80:e5:3d:94: 64:19:d1:92:5f:18:23:cc:e6:d3:e8:c9:e2:a8:db: 50:21:60:6b:0f:07:a7:2f:aa:8a:f4:85:78:10:1d: 77:a6:70:38:a9:97:20:5d:76:fb:66:bc:71:86:af: 06:27:4f:ca:cc:38:b5:51:08:10:a6:ee:9b:38:df: 9a:99:2b:5d:e4:55:16:3a:16:5b:a0:9a:3a:66:77: f7:ad:12:fa:d3:80:6f:87:87:70:1b:83:29:02:68: be:30:53:ec:96:e7:d0:7f:a1:c1:91:1a:b0:0a:36: fd:5a:d7:27:22:d3:ab:9b:c6:2f:d8:16:0a:22:44: bc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1A:86:BB:80:A6:0A:C0:D9:99:85:23:DE:B3:70:4B:CD:2A:85:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6::/32 Signature Algorithm: sha256WithRSAEncryption 95:7b:e2:4a:6e:a0:69:16:c4:f3:e9:ea:2e:41:77:cd:83:4f: e3:58:d5:91:c2:72:7c:20:f8:43:32:8c:ca:49:a7:34:79:90: 70:a6:99:b2:ef:62:ce:9b:8e:a2:e1:93:8b:3d:b8:16:13:a8: da:83:b3:54:83:2e:a0:0f:34:d8:af:18:d2:76:e5:35:b0:f0: 13:9b:92:48:49:be:a0:f7:ea:9a:08:68:4f:29:2f:d5:a4:70: dc:77:c7:a2:41:bc:9c:09:e3:58:ac:cc:4f:e1:71:a3:86:fc: 8a:c8:40:5e:6d:4d:fe:b8:56:b9:e3:d9:a6:b9:95:48:4e:34: 0e:ae:2b:84:87:34:16:d1:c0:d6:ee:ff:59:e9:07:64:f8:21: 85:fb:a8:53:ec:85:cd:2d:5b:7c:fc:75:f2:83:a8:99:7c:1e: a7:07:e1:c4:83:7c:bc:c3:cb:fc:fe:f0:29:86:cb:b4:52:0b: 54:92:07:72:5c:3d:1f:8b:c6:e1:77:0e:11:fc:18:0a:4e:0d: d9:cc:30:9d:fe:4a:2a:73:c2:c4:8d:32:ab:31:15:2b:a7:2e: 34:5e:d1:2c:b7:e0:45:7e:ac:af:6c:28:9f:9a:90:ae:64:f5: cc:2e:e7:7d:f2:b6:7a:e1:41:a6:f1:39:51:a1:41:49:91:6c: cc:12:76:c2 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUHzem4cw0b/VsN8QdxAWOIsaQ4oEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMDEwMFoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAYzA2OWI0NmViMWFlMGMyMWE2ODli MTIzNDQyZDc2NWQ5ZThjZGQ5OThmMWU4NmFmYWIxZjdlNTc5NjFmZmIzMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jcNB0Zl3vWv8+so5m6u+tnuUae2 4MlxO+9mG/EdJyTClKwsziXo2ba/S/XJ32lxDcUkGnBhGQRSwE2ttSS6xpc3CZ7A Zz7ENG118llucudmVoJplntcaEI6Lin9g0XevKorZp/IFQ1rOLuvF18nmx/4D6R4 nGUYUVhUuXVhdWsGzIDlPZRkGdGSXxgjzObT6MniqNtQIWBrDwenL6qK9IV4EB13 pnA4qZcgXXb7Zrxxhq8GJ0/KzDi1UQgQpu6bON+amStd5FUWOhZboJo6Znf3rRL6 04Bvh4dwG4MpAmi+MFPslufQf6HBkRqwCjb9WtcnItOrm8Yv2BYKIkS8VQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFK4ahruApgrA2ZmFI96zcEvNKoUgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzZWNlYmIwLTA5OGUtNDFiMy04MTViLWJlYWRmZWY2NDg0YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba9jANBgkqhkiG9w0BAQsFAAOCAQEAlXviSm6gaRbE8+nqLkF3 zYNP41jVkcJyfCD4QzKMykmnNHmQcKaZsu9izpuOouGTiz24FhOo2oOzVIMuoA80 2K8Y0nblNbDwE5uSSEm+oPfqmghoTykv1aRw3HfHokG8nAnjWKzMT+Fxo4b8ishA Xm1N/rhWuePZprmVSE40Dq4rhIc0FtHA1u7/WekHZPghhfuoU+yFzS1bfPx18oOo mXwepwfhxIN8vMPL/P7wKYbLtFILVJIHclw9H4vG4XcOEfwYCk4N2cwwnf5KKnPC xI0yqzEVK6cuNF7RLLfgRX6sr2won5qQrmT1zC7nffK2euFBpvE5UaFBSZFszBJ2 wg== -----END CERTIFICATE-----Generated at Sun Mar 1 21:55:07 2026 by rpki-client