$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31f81ea6-74ce-4274-9ac4-8387da206374.roa File: 31f81ea6-74ce-4274-9ac4-8387da206374.roa (raw, json) Hash identifier: HSIAtSbKyphECqA2eCiTrWVw/xJM4B2lezWNnzQoVl4= Subject key identifier: 4E:C5:BA:46:44:7A:AF:18:B5:7F:55:AB:FA:F9:45:55:B2:FD:0F:B2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7C6737779ED06BFE6469B759CF8348B858B66934 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31f81ea6-74ce-4274-9ac4-8387da206374.roa Signing time: Fri 20 Feb 2026 00:10:06 +0000 ROA not before: Fri 20 Feb 2026 00:10:06 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:67:37:77:9e:d0:6b:fe:64:69:b7:59:cf:83:48:b8:58:b6:69:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:10:06 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=f6f4a49eec2caa2f09836f49dfdc2a31845a85e2a4da572402c08c6fbbaa8266, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:15:a6:c4:f7:d2:92:f7:6b:8c:b1:9c:37: 2d:01:cd:60:6d:8e:14:01:de:1d:65:90:fd:75:95: 8b:16:87:45:dd:8d:97:8f:74:74:09:89:c3:94:2c: df:c1:60:9e:f8:27:f4:48:f5:40:14:05:64:a3:fb: 3d:6e:42:4a:98:67:62:9c:ce:fb:cd:7a:b7:af:d8: b3:a4:2d:92:d2:5d:b9:1d:9f:f5:69:17:b7:9c:0e: 99:8a:26:78:93:e9:df:f2:70:46:c8:69:7b:71:af: 18:9d:3c:ec:6a:63:7f:10:47:19:e9:96:45:ae:2f: 53:46:bf:0e:9c:9d:d9:06:85:12:2b:05:9e:68:bf: 6c:29:21:18:12:64:54:6d:61:e1:93:24:3c:60:9b: fd:58:be:df:a4:60:2f:d0:3a:bd:db:4f:37:90:f2: cb:2f:0d:e9:55:ec:02:53:cf:c0:5d:1e:43:66:b0: 65:b2:85:f8:91:94:8a:4c:bc:b7:b4:98:8f:7e:d1: fd:92:b1:db:93:85:67:2f:4a:bd:21:51:37:3f:57: cc:c5:68:ba:41:cf:94:94:fa:dc:4a:97:eb:40:24: 0e:71:cf:3f:c2:54:f7:e6:98:78:7f:7d:c5:0d:6f: 5c:6a:97:7c:42:48:60:81:6b:d6:0a:fc:a4:90:6c: 51:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C5:BA:46:44:7A:AF:18:B5:7F:55:AB:FA:F9:45:55:B2:FD:0F:B2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31f81ea6-74ce-4274-9ac4-8387da206374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:8040::/48 Signature Algorithm: sha256WithRSAEncryption 45:94:91:d8:3b:ef:27:e4:2d:11:1c:84:8a:10:62:03:26:6f: 05:99:04:35:f9:a0:83:e1:ac:b3:a4:06:b6:5e:ea:39:e3:52: 69:75:3f:8a:91:c9:cd:4a:fa:59:22:13:78:a8:d7:1d:d1:5f: 7f:20:3e:7c:9c:1f:84:f3:c6:dd:9a:82:42:46:a4:89:67:9c: 31:00:3a:02:5c:61:11:19:bd:3a:26:6a:85:46:0f:6d:95:d8: b7:c6:5b:85:8a:d0:a8:dd:90:aa:8d:7b:98:06:98:71:3f:3d: ea:92:fe:0b:21:19:cd:79:6b:3b:18:c2:31:67:f6:dd:35:19: 80:38:25:ff:2c:48:c3:d7:07:e3:d8:b3:3f:b8:9f:2b:be:8d: 0c:31:ed:aa:dd:e4:ab:37:24:9a:0e:2f:9e:08:9c:12:2e:c9: f6:5d:d2:67:9a:83:44:cc:d2:b4:05:20:46:cf:39:90:32:c5: 9e:e5:f9:4d:65:b9:2d:43:ef:03:3c:4f:af:6e:3d:97:b7:48: 6c:fe:02:77:41:4d:17:93:52:5d:41:74:b0:b3:5a:58:8d:67: d7:36:6f:53:63:32:0c:08:e2:0f:51:85:9b:04:5a:00:01:60: 05:1a:94:9e:01:47:9a:0e:84:eb:41:5e:18:22:96:a6:f5:73: 0d:78:55:78 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfGc3d57Qa/5kabdZz4NIuFi2aTQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMTAwNloX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAZjZmNGE0OWVlYzJjYWEyZjA5ODM2 ZjQ5ZGZkYzJhMzE4NDVhODVlMmE0ZGE1NzI0MDJjMDhjNmZiYmFhODI2NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2UVpsT30pL3a4yxnDctAc1gbY4U Ad4dZZD9dZWLFodF3Y2Xj3R0CYnDlCzfwWCe+Cf0SPVAFAVko/s9bkJKmGdinM77 zXq3r9izpC2S0l25HZ/1aRe3nA6ZiiZ4k+nf8nBGyGl7ca8YnTzsamN/EEcZ6ZZF ri9TRr8OnJ3ZBoUSKwWeaL9sKSEYEmRUbWHhkyQ8YJv9WL7fpGAv0Dq92083kPLL Lw3pVewCU8/AXR5DZrBlsoX4kZSKTLy3tJiPftH9krHbk4VnL0q9IVE3P1fMxWi6 Qc+UlPrcSpfrQCQOcc8/wlT35ph4f33FDW9capd8QkhggWvWCvykkGxRYwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE7FukZEeq8YtX9Vq/r5RVWy/Q+yMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMxZjgxZWE2LTc0Y2UtNDI3NC05YWM0LTgzODdkYTIwNjM3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYYBAMA0GCSqGSIb3DQEBCwUAA4IBAQBFlJHYO+8n5C0RHISK EGIDJm8FmQQ1+aCD4ayzpAa2Xuo541JpdT+KkcnNSvpZIhN4qNcd0V9/ID58nB+E 88bdmoJCRqSJZ5wxADoCXGERGb06JmqFRg9tldi3xluFitCo3ZCqjXuYBphxPz3q kv4LIRnNeWs7GMIxZ/bdNRmAOCX/LEjD1wfj2LM/uJ8rvo0MMe2q3eSrNySaDi+e CJwSLsn2XdJnmoNEzNK0BSBGzzmQMsWe5flNZbktQ+8DPE+vbj2Xt0hs/gJ3QU0X k1JdQXSws1pYjWfXNm9TYzIMCOIPUYWbBFoAAWAFGpSeAUeaDoTrQV4YIpam9XMN eFV4 -----END CERTIFICATE-----Generated at Sun Mar 1 22:20:35 2026 by rpki-client