$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d3756cb-3d90-4f28-96d5-2e8b14556142.roa File: 2d3756cb-3d90-4f28-96d5-2e8b14556142.roa (raw, json) Hash identifier: Qui4fD/V4C8NMq28Wv2DZaF+mV7itS2ihwZGKaGNEGI= Subject key identifier: D0:DE:BA:B9:11:3A:53:38:73:39:6D:D2:8A:8D:1D:4A:74:3D:DF:16 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 70BE7B61C45BA1ECDA34CF230C61339BF1449828 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d3756cb-3d90-4f28-96d5-2e8b14556142.roa Signing time: Wed 18 Feb 2026 00:01:18 +0000 ROA not before: Wed 18 Feb 2026 00:01:18 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:40e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:be:7b:61:c4:5b:a1:ec:da:34:cf:23:0c:61:33:9b:f1:44:98:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 18 00:01:18 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=79aa21b8fc7ffe046c1567d1e9e57e08ea4aeb8cdc2844a111ce9f44699c3a0c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d5:36:55:e0:90:f4:94:df:df:1a:3a:a1:13: 14:b5:37:b6:0a:42:43:1e:12:92:c2:01:6a:91:83: 92:c8:86:dc:eb:d0:09:5f:2d:94:9b:c0:49:3a:4c: b0:12:8d:78:b6:f0:9f:ab:9d:ec:18:e5:be:98:4c: 65:fb:c0:a1:75:02:40:12:8c:d8:cc:7d:97:74:c2: 9e:5a:35:d5:c9:cd:87:e6:59:37:4c:90:17:bf:f5: 09:16:ae:53:ab:08:40:ea:87:2c:67:a5:4a:c7:2e: 17:90:d6:4a:bd:6f:e1:d4:e0:9c:ed:d2:1d:cd:9b: 3b:ee:b6:16:c4:33:25:b1:bb:f3:5b:51:53:e3:88: d6:85:e8:cd:55:26:19:3e:6e:93:3f:dc:4d:27:93: 8e:37:4e:08:da:42:aa:f3:a6:f3:ce:8a:fb:4a:a4: f9:e1:3b:43:3e:e5:83:2d:66:a0:fb:9a:7f:2a:ab: 16:78:98:01:78:4e:36:8b:cd:7b:2b:5e:de:27:e6: 6a:dc:b3:8d:08:43:25:ce:b6:f4:93:bd:94:e2:98: 82:50:a1:ec:e2:e3:82:e2:e9:a1:49:57:8e:c3:4b: 33:a4:91:a3:ae:bf:a9:a6:7e:76:71:f2:8f:32:bf: 15:02:6f:f7:22:b1:18:88:80:b9:dc:3d:fe:79:e3: 1d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DE:BA:B9:11:3A:53:38:73:39:6D:D2:8A:8D:1D:4A:74:3D:DF:16 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d3756cb-3d90-4f28-96d5-2e8b14556142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:40e0::/48 Signature Algorithm: sha256WithRSAEncryption a1:80:5d:b5:49:dc:ab:c0:2c:75:6c:3f:0d:32:d7:6e:a5:60: dd:10:a9:27:7b:9e:46:f0:14:e3:93:26:c1:00:91:f5:47:7c: 89:03:43:13:c7:db:d8:c8:a4:bc:15:8c:45:29:bb:c8:d1:3f: e3:35:88:0f:4b:09:68:e1:26:7a:4d:00:cd:dc:2b:9b:a2:36: 7e:97:59:4a:85:05:f8:f9:4c:a9:5e:d1:5e:9d:ca:1d:4f:5e: 12:92:45:e5:4f:e6:ba:f8:4a:ee:cd:03:60:50:b8:a4:05:ce: 09:de:7e:30:37:1e:be:98:0a:0b:25:a8:ed:ef:2d:40:52:be: 12:ee:5a:ff:23:64:8c:b8:a7:9a:70:4c:f6:93:90:13:a8:14: d6:74:34:fb:73:f7:4c:f3:1a:3a:73:46:29:49:11:af:62:ff: 4b:79:ad:52:54:36:06:cd:db:e9:bc:09:03:e3:61:87:b6:c4: 23:1d:d1:13:75:ce:2f:61:9c:3d:58:9c:ae:57:52:b2:db:1a: d2:3c:77:2f:4a:5f:9d:2d:ea:7d:fc:2e:6e:8c:ad:93:8a:06: fe:ef:c0:26:bf:90:bd:60:aa:29:34:ff:46:a9:2e:0f:df:be: a7:e1:6b:8b:24:46:b2:61:7e:73:35:e9:9c:a2:b3:bc:15:65: 4d:8a:b7:3c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcL57YcRboezaNM8jDGEzm/FEmCgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxODAwMDExOFoX DTI2MDUxOTIzNTk1OVowejFJMEcGA1UEBRNANzlhYTIxYjhmYzdmZmUwNDZjMTU2 N2QxZTllNTdlMDhlYTRhZWI4Y2RjMjg0NGExMTFjZTlmNDQ2OTljM2EwYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdU2VeCQ9JTf3xo6oRMUtTe2CkJD HhKSwgFqkYOSyIbc69AJXy2Um8BJOkywEo14tvCfq53sGOW+mExl+8ChdQJAEozY zH2XdMKeWjXVyc2H5lk3TJAXv/UJFq5TqwhA6ocsZ6VKxy4XkNZKvW/h1OCc7dId zZs77rYWxDMlsbvzW1FT44jWhejNVSYZPm6TP9xNJ5OON04I2kKq86bzzor7SqT5 4TtDPuWDLWag+5p/KqsWeJgBeE42i817K17eJ+Zq3LONCEMlzrb0k72U4piCUKHs 4uOC4umhSVeOw0szpJGjrr+ppn52cfKPMr8VAm/3IrEYiIC53D3+eeMdKwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNDeurkROlM4czlt0oqNHUp0Pd8WMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJkMzc1NmNiLTNkOTAtNGYyOC05NmQ1LTJlOGIxNDU1NjE0Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0DgMA0GCSqGSIb3DQEBCwUAA4IBAQChgF21SdyrwCx1bD8N MtdupWDdEKkne55G8BTjkybBAJH1R3yJA0MTx9vYyKS8FYxFKbvI0T/jNYgPSwlo 4SZ6TQDN3CubojZ+l1lKhQX4+UypXtFencodT14SkkXlT+a6+EruzQNgULikBc4J 3n4wNx6+mAoLJajt7y1AUr4S7lr/I2SMuKeacEz2k5ATqBTWdDT7c/dM8xo6c0Yp SRGvYv9Lea1SVDYGzdvpvAkD42GHtsQjHdETdc4vYZw9WJyuV1Ky2xrSPHcvSl+d Lep9/C5ujK2Tigb+78Amv5C9YKopNP9GqS4P376n4WuLJEayYX5zNemcorO8FWVN irc8 -----END CERTIFICATE-----Generated at Sun Mar 1 23:49:57 2026 by rpki-client