$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24e2e024-4bd3-4f6b-874c-0ef7a4cbebc1.roa File: 24e2e024-4bd3-4f6b-874c-0ef7a4cbebc1.roa (raw, json) Hash identifier: U/Z5fKpoLujfYQTID7CZSpYEYRS1x3EcxlsKgNFderE= Subject key identifier: 20:5D:56:45:57:DF:C6:09:BC:40:C7:7D:1E:21:0A:20:DA:DA:7C:42 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5E803E8E70390CC561B6E1D9594252FAC42A1A50 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24e2e024-4bd3-4f6b-874c-0ef7a4cbebc1.roa Signing time: Tue 17 Feb 2026 00:00:49 +0000 ROA not before: Tue 17 Feb 2026 00:00:49 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:80:3e:8e:70:39:0c:c5:61:b6:e1:d9:59:42:52:fa:c4:2a:1a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 17 00:00:49 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=92348dcf9da439c0950d57618c5d99e007f6f2630f25c3fad40c516f1022da4d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:93:01:20:19:8d:a4:b0:4c:ef:07:16:2b: 76:4e:17:61:f1:8e:b3:bd:66:e8:c3:64:55:8d:d5: af:ec:ab:33:74:e6:a3:13:12:a1:8d:0e:db:83:b0: 35:2b:d3:31:94:15:31:8f:70:d9:38:65:49:ec:eb: 8f:61:96:c2:e6:52:a9:8c:c4:59:f2:39:fa:28:9d: 53:49:2a:97:0f:5f:8f:09:05:22:1b:9d:e8:4c:51: e6:28:30:dd:8e:3b:2e:22:2c:98:57:8e:92:4c:81: e1:f7:b6:da:18:5b:46:ae:8f:8b:6d:25:0a:d0:52: 30:20:3c:81:28:bf:da:38:46:f0:27:d7:3b:4b:14: fc:71:8c:81:35:e3:a5:4a:ab:44:4a:ce:5d:39:47: 7b:cb:6d:a6:5c:42:f8:1c:ea:e3:6b:bd:88:29:bb: a6:86:59:4f:ff:be:9c:8b:ed:fd:b9:05:49:5c:e5: 2f:c8:27:44:9f:d3:27:9c:4c:4d:b3:35:5c:5e:c9: 32:7e:fc:b3:30:17:85:f6:b3:3b:86:5c:55:c6:e1: 3c:c1:bb:fe:d2:6d:48:1c:13:03:16:1f:ad:df:98: ee:f0:33:e3:12:d8:14:88:6d:9c:37:97:bd:57:e6: 9a:57:17:5c:61:4d:b1:0d:7b:9b:2f:b9:2d:ce:95: 1e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5D:56:45:57:DF:C6:09:BC:40:C7:7D:1E:21:0A:20:DA:DA:7C:42 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24e2e024-4bd3-4f6b-874c-0ef7a4cbebc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:e000::/48 Signature Algorithm: sha256WithRSAEncryption 57:52:ce:8a:08:7e:9f:86:ee:3d:0f:7a:b9:80:56:ae:87:f0: 62:f4:05:28:4a:79:b3:a4:ab:9e:be:cc:fc:7f:ea:eb:56:8a: 5f:31:aa:b5:29:3d:79:8d:ae:8e:27:f4:ef:ff:27:70:ef:c6: 6f:ca:cc:b5:87:24:fc:f6:22:48:d3:c1:e0:82:76:1f:f8:7d: 3a:57:8d:ed:ee:8a:72:53:a4:7f:72:ca:63:57:36:07:53:6f: 85:97:de:e3:21:7a:f7:b5:33:e7:17:68:86:bb:7d:43:a8:6a: 5e:dd:9b:8b:75:f5:d1:91:d3:e1:56:19:17:c1:aa:5d:32:72: 9c:aa:0c:23:f5:43:40:4f:f5:cc:01:46:fe:f5:97:c6:f2:ee: 36:4d:5b:42:13:41:26:ea:d5:79:23:a5:4f:ae:b7:8a:84:4d: 78:04:09:14:cd:a3:d8:0f:e0:e5:dd:32:c4:93:4d:e0:c7:44: 0b:19:f8:bd:4a:fa:eb:07:03:55:c2:e2:92:4b:e3:99:1f:3d: 61:2a:65:1c:b4:d0:64:41:31:0c:a6:2c:a4:67:31:73:45:50: 58:60:35:82:37:78:7a:73:64:ca:31:a4:d3:30:97:5d:3e:64: 6c:18:63:5d:59:b8:24:5a:3e:98:b3:76:98:6a:52:8a:c0:9a: 4a:e9:28:23 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXoA+jnA5DMVhtuHZWUJS+sQqGlAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNzAwMDA0OVoX DTI2MDUxODIzNTk1OVowejFJMEcGA1UEBRNAOTIzNDhkY2Y5ZGE0MzljMDk1MGQ1 NzYxOGM1ZDk5ZTAwN2Y2ZjI2MzBmMjVjM2ZhZDQwYzUxNmYxMDIyZGE0ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUmTASAZjaSwTO8HFit2Thdh8Y6z vWbow2RVjdWv7KszdOajExKhjQ7bg7A1K9MxlBUxj3DZOGVJ7OuPYZbC5lKpjMRZ 8jn6KJ1TSSqXD1+PCQUiG53oTFHmKDDdjjsuIiyYV46STIHh97baGFtGro+LbSUK 0FIwIDyBKL/aOEbwJ9c7SxT8cYyBNeOlSqtESs5dOUd7y22mXEL4HOrja72IKbum hllP/76ci+39uQVJXOUvyCdEn9MnnExNszVcXskyfvyzMBeF9rM7hlxVxuE8wbv+ 0m1IHBMDFh+t35ju8DPjEtgUiG2cN5e9V+aaVxdcYU2xDXubL7ktzpUe7wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCBdVkVX38YJvEDHfR4hCiDa2nxCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0ZTJlMDI0LTRiZDMtNGY2Yi04NzRjLTBlZjdhNGNiZWJjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9uAAMA0GCSqGSIb3DQEBCwUAA4IBAQBXUs6KCH6fhu49D3q5 gFauh/Bi9AUoSnmzpKuevsz8f+rrVopfMaq1KT15ja6OJ/Tv/ydw78Zvysy1hyT8 9iJI08HggnYf+H06V43t7opyU6R/cspjVzYHU2+Fl97jIXr3tTPnF2iGu31DqGpe 3ZuLdfXRkdPhVhkXwapdMnKcqgwj9UNAT/XMAUb+9ZfG8u42TVtCE0Em6tV5I6VP rreKhE14BAkUzaPYD+Dl3TLEk03gx0QLGfi9SvrrBwNVwuKSS+OZHz1hKmUctNBk QTEMpiykZzFzRVBYYDWCN3h6c2TKMaTTMJddPmRsGGNdWbgkWj6Ys3aYalKKwJpK 6Sgj -----END CERTIFICATE-----Generated at Sun Mar 1 21:51:23 2026 by rpki-client