$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/359ec231-6db5-4986-92a6-b2cf6ca2ad72.roa File: 359ec231-6db5-4986-92a6-b2cf6ca2ad72.roa (raw, json) Hash identifier: SYpn1HGUPnVdzJHfCTmh8s2QThmXtsKGZ+no19LSulc= Subject key identifier: 99:16:30:89:D4:6B:24:E9:17:56:50:66:8E:68:79:E2:66:CA:B1:38 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7C59D2E8430ED562783F0889BA035B3AD559E354 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/359ec231-6db5-4986-92a6-b2cf6ca2ad72.roa Signing time: Sun 15 Feb 2026 00:00:48 +0000 ROA not before: Sun 15 Feb 2026 00:00:48 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:59:d2:e8:43:0e:d5:62:78:3f:08:89:ba:03:5b:3a:d5:59:e3:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 15 00:00:48 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=9aee9206ac82017d97d32f56339d08e28a2c7aa85fbbc3a9b7ed00d9b6196202, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:72:52:87:6b:a8:e3:59:85:2b:aa:ef:08:98: ed:16:f8:e5:e3:3b:ec:47:93:14:e9:f5:90:aa:1f: 71:a4:5c:cb:c6:52:00:21:44:11:b0:80:15:98:ee: 42:7f:be:e3:f0:9e:4c:2a:7c:ce:70:bd:da:5c:00: 1c:5e:c6:e1:15:da:72:79:69:bd:bc:5e:bc:fc:d5: 1a:e5:81:da:a4:7a:dd:8c:32:46:55:b9:92:01:33: 2c:69:04:a5:d9:a9:a9:e7:89:37:e7:9b:f3:ed:05: 77:07:43:a8:58:7d:a2:f1:ac:b3:e2:c0:9f:5e:e5: 8b:1b:6a:2a:1d:d8:fa:5a:b1:ef:10:7e:72:9a:8e: da:26:da:54:5c:9b:5b:33:e1:0b:ba:b2:c8:58:0b: 05:3a:10:27:92:34:b9:47:a6:04:80:a0:56:a8:1c: cc:3c:28:20:52:18:ce:86:a4:4b:13:73:77:60:66: 89:5b:78:bb:20:d6:9d:25:a0:ef:ff:dd:1f:7f:4b: 7d:29:36:25:06:26:8c:24:84:2f:fb:93:8b:57:5c: ad:30:f5:b9:b0:8e:16:76:d4:2d:04:13:aa:19:3d: 03:44:b7:fa:06:d6:76:b8:64:1a:4a:93:7e:73:14: 45:98:0a:ed:d0:92:c5:02:d2:60:85:b1:7b:f1:62: 18:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:16:30:89:D4:6B:24:E9:17:56:50:66:8E:68:79:E2:66:CA:B1:38 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/359ec231-6db5-4986-92a6-b2cf6ca2ad72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:9000::/40 Signature Algorithm: sha256WithRSAEncryption 2a:67:ac:86:48:15:8b:ca:57:b2:ff:15:c1:22:13:9d:8d:12: 53:80:fc:03:dd:49:40:95:a8:df:b2:22:5f:f5:c7:d3:d0:07: fe:ba:c3:c6:e7:31:4c:f5:8f:dc:7c:92:11:c0:a5:5d:14:7f: 53:9a:e7:fa:cb:9a:ce:e5:91:01:f3:8e:6e:c3:c7:88:d8:d6: f6:04:5d:b1:c3:59:f6:8b:02:61:d7:64:7b:a0:7b:34:ca:ce: 6a:a9:bd:ba:ae:5a:ae:fc:46:43:9d:76:d2:9d:d7:9a:1b:c2: 74:07:1f:19:78:26:d6:b8:47:6c:ec:7d:18:db:76:2c:00:6a: e7:3c:6b:f1:5e:03:93:55:cc:92:2d:b2:2e:cc:42:da:c8:14: 5a:50:98:95:fd:01:82:98:b4:8c:57:50:51:ae:25:81:0a:cb: dd:02:0d:be:01:73:14:dc:4a:a0:d2:cc:71:37:03:5c:11:34: 2a:7d:44:0b:62:4e:04:20:3b:fb:b1:06:9a:77:56:3f:25:be: cd:15:32:b9:9b:5d:7e:d5:d4:68:e3:68:ac:36:ba:9a:fa:30: b8:8d:2d:81:a1:5f:10:c5:bb:97:c7:d7:b5:17:18:e2:c5:6d: e2:05:1f:63:64:c8:49:81:98:4e:d9:57:a0:4a:1b:f4:87:a7: 54:8e:88:27 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfFnS6EMO1WJ4PwiJugNbOtVZ41QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNTAwMDA0OFoX DTI2MDUxNjIzNTk1OVowejFJMEcGA1UEBRNAOWFlZTkyMDZhYzgyMDE3ZDk3ZDMy ZjU2MzM5ZDA4ZTI4YTJjN2FhODVmYmJjM2E5YjdlZDAwZDliNjE5NjIwMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHJSh2uo41mFK6rvCJjtFvjl4zvs R5MU6fWQqh9xpFzLxlIAIUQRsIAVmO5Cf77j8J5MKnzOcL3aXAAcXsbhFdpyeWm9 vF68/NUa5YHapHrdjDJGVbmSATMsaQSl2amp54k355vz7QV3B0OoWH2i8ayz4sCf XuWLG2oqHdj6WrHvEH5ymo7aJtpUXJtbM+ELurLIWAsFOhAnkjS5R6YEgKBWqBzM PCggUhjOhqRLE3N3YGaJW3i7INadJaDv/90ff0t9KTYlBiaMJIQv+5OLV1ytMPW5 sI4WdtQtBBOqGT0DRLf6BtZ2uGQaSpN+cxRFmArt0JLFAtJghbF78WIYKwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJkWMInUayTpF1ZQZo5oeeJmyrE4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM1OWVjMjMxLTZkYjUtNDk4Ni05MmE2LWIyY2Y2Y2EyYWQ3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9pAwDQYJKoZIhvcNAQELBQADggEBACpnrIZIFYvKV7L/FcEi E52NElOA/APdSUCVqN+yIl/1x9PQB/66w8bnMUz1j9x8khHApV0Uf1Oa5/rLms7l kQHzjm7Dx4jY1vYEXbHDWfaLAmHXZHugezTKzmqpvbquWq78RkOddtKd15obwnQH Hxl4Jta4R2zsfRjbdiwAauc8a/FeA5NVzJItsi7MQtrIFFpQmJX9AYKYtIxXUFGu JYEKy90CDb4BcxTcSqDSzHE3A1wRNCp9RAtiTgQgO/uxBpp3Vj8lvs0VMrmbXX7V 1GjjaKw2upr6MLiNLYGhXxDFu5fH17UXGOLFbeIFH2NkyEmBmE7ZV6BKG/SHp1SO iCc= -----END CERTIFICATE-----Generated at Sun Mar 1 21:57:35 2026 by rpki-client