$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f2d32b4-5213-4ecc-9172-ea72fd47e165.roa File: 2f2d32b4-5213-4ecc-9172-ea72fd47e165.roa (raw, json) Hash identifier: nSzAiYmJoR/KgcJK6Le0hBxgr+6RX6u0wvDEGfD4bno= Subject key identifier: FE:26:23:75:97:94:32:B8:96:36:86:5A:B2:48:55:72:1B:A2:64:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2061B06D952E1CEFC48DEE8EFA7DCA170F83C8C0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f2d32b4-5213-4ecc-9172-ea72fd47e165.roa Signing time: Wed 18 Feb 2026 00:00:11 +0000 ROA not before: Wed 18 Feb 2026 00:00:11 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:61:b0:6d:95:2e:1c:ef:c4:8d:ee:8e:fa:7d:ca:17:0f:83:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 18 00:00:11 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=9dfc56d0ffd6bbd630e633cad2f8cf56ade6808cbc7493cbb62e8a3459863648, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:8e:63:d3:e8:5b:86:16:1b:c1:98:0d:46:ca: b4:15:aa:65:fa:78:fc:fd:c9:3f:a1:02:b9:23:78: f0:a2:67:3f:82:4e:98:ad:1f:f3:b8:5b:3c:8f:11: 24:c9:a7:cd:7e:bc:8e:db:9c:88:08:4e:63:1d:c0: 4b:e4:4a:2b:b3:ca:79:12:26:e6:73:9a:b9:61:39: d6:c1:82:dc:d2:47:f3:54:0e:d0:39:dd:84:6d:a3: 8f:98:ec:a1:1d:53:c8:4b:f1:67:24:04:85:44:61: 4f:e6:e0:7e:24:88:bc:a5:0c:43:08:f8:83:63:1c: 7b:30:d6:a2:09:cc:78:1f:e0:0e:56:36:52:4e:7d: c6:cb:07:bc:3b:16:45:c2:b3:87:ee:a1:45:90:a1: 8c:f3:63:71:a4:3b:d8:00:8b:60:6b:fe:66:94:88: 4e:41:f9:a1:f9:d5:00:e8:7d:fe:85:3e:88:ab:2e: c3:56:c2:e9:be:fe:82:eb:62:36:c4:17:60:a6:7d: f4:f5:d0:6c:68:79:c6:41:8c:e8:5c:a4:2b:fb:d3: 79:4c:a4:96:f7:ba:5c:4e:c8:b5:f6:dc:ed:49:3c: b3:d7:41:5b:69:89:8e:7d:96:37:8f:50:b0:54:c3: 15:80:17:1f:77:c3:dc:0d:aa:93:c3:de:ef:24:96: 5b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:26:23:75:97:94:32:B8:96:36:86:5A:B2:48:55:72:1B:A2:64:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f2d32b4-5213-4ecc-9172-ea72fd47e165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:e080::/48 Signature Algorithm: sha256WithRSAEncryption 3b:28:ec:6f:ef:6c:e7:df:73:26:52:80:08:02:7d:c8:ad:f6: 20:56:e7:e9:f6:e5:21:68:8a:e4:91:1d:54:eb:82:2b:37:03: 3c:72:71:bd:2a:cf:d4:21:fc:7d:02:b8:66:a4:a2:49:11:1c: 71:8b:9b:b0:90:b5:f2:f8:9a:0b:f2:c6:38:26:21:c4:97:40: 23:27:93:33:f5:ac:0f:87:64:25:8c:b3:c5:1a:f0:d7:d1:fa: e6:a3:13:c7:3b:56:74:a0:d2:b1:d3:25:ed:6b:25:89:ac:81: c7:9f:ae:14:92:17:06:c7:47:4f:33:7d:a8:16:00:77:a0:3e: 4d:5a:ab:f1:f4:21:f1:62:15:e9:a8:1a:ed:01:a0:42:f5:2a: e6:a8:63:00:24:ff:07:a3:b6:8a:90:ad:29:a3:81:f9:77:48: dd:a2:27:dc:99:c4:ff:25:82:3a:6d:ef:06:e8:01:ce:29:5a: 44:1f:d3:c4:ec:03:08:b4:b3:ca:03:ba:82:a8:b2:6d:38:80: c9:f6:3a:7b:89:80:62:46:7b:a1:33:21:7a:3e:73:7a:e4:f2: fb:58:28:11:1d:38:a5:74:d6:2c:ba:45:77:81:45:ff:1a:d3: 40:5d:36:0a:a5:43:47:06:a5:29:c6:7f:21:1a:c9:9f:a4:5e: b6:bd:71:d3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIGGwbZUuHO/Eje6O+n3KFw+DyMAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxODAwMDAxMVoX DTI2MDUxOTIzNTk1OVowejFJMEcGA1UEBRNAOWRmYzU2ZDBmZmQ2YmJkNjMwZTYz M2NhZDJmOGNmNTZhZGU2ODA4Y2JjNzQ5M2NiYjYyZThhMzQ1OTg2MzY0ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA945j0+hbhhYbwZgNRsq0Fapl+nj8 /ck/oQK5I3jwomc/gk6YrR/zuFs8jxEkyafNfryO25yICE5jHcBL5Eors8p5Eibm c5q5YTnWwYLc0kfzVA7QOd2EbaOPmOyhHVPIS/FnJASFRGFP5uB+JIi8pQxDCPiD Yxx7MNaiCcx4H+AOVjZSTn3Gywe8OxZFwrOH7qFFkKGM82NxpDvYAItga/5mlIhO Qfmh+dUA6H3+hT6Iqy7DVsLpvv6C62I2xBdgpn309dBsaHnGQYzoXKQr+9N5TKSW 97pcTsi19tztSTyz10FbaYmOfZY3j1CwVMMVgBcfd8PcDaqTw97vJJZbsQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP4mI3WXlDK4ljaGWrJIVXIbomRYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmMmQzMmI0LTUyMTMtNGVjYy05MTcyLWVhNzJmZDQ3ZTE2NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/+CAMA0GCSqGSIb3DQEBCwUAA4IBAQA7KOxv72zn33MmUoAI An3IrfYgVufp9uUhaIrkkR1U64IrNwM8cnG9Ks/UIfx9ArhmpKJJERxxi5uwkLXy +JoL8sY4JiHEl0AjJ5Mz9awPh2QljLPFGvDX0frmoxPHO1Z0oNKx0yXtayWJrIHH n64UkhcGx0dPM32oFgB3oD5NWqvx9CHxYhXpqBrtAaBC9SrmqGMAJP8Ho7aKkK0p o4H5d0jdoifcmcT/JYI6be8G6AHOKVpEH9PE7AMItLPKA7qCqLJtOIDJ9jp7iYBi RnuhMyF6PnN65PL7WCgRHTildNYsukV3gUX/GtNAXTYKpUNHBqUpxn8hGsmfpF62 vXHT -----END CERTIFICATE-----Generated at Mon Mar 2 01:40:06 2026 by rpki-client