$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3bcb6e17-236c-46bc-ae7b-650978abe133.roa File: 3bcb6e17-236c-46bc-ae7b-650978abe133.roa (raw, json) Hash identifier: hflY9B2Nl9Ao+r3aL7M3Rpc6kn1ApILV0au/0lqYdrQ= Subject key identifier: BF:F7:24:F4:CE:9C:4C:57:C0:B4:EF:78:FB:03:61:E0:02:17:06:DE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6B1E28E46C0C6AE468A8001FB4D6A2FD8183B2AA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3bcb6e17-236c-46bc-ae7b-650978abe133.roa Signing time: Wed 11 Feb 2026 00:10:29 +0000 ROA not before: Wed 11 Feb 2026 00:10:29 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1e:28:e4:6c:0c:6a:e4:68:a8:00:1f:b4:d6:a2:fd:81:83:b2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:10:29 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=88f7058dbf6bbd9ce3864804457519196b0c933108d0ad717b3ee453a56f2897, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ee:67:94:f7:d3:60:48:f1:3f:25:f5:2f:7b: ec:72:93:2f:3a:03:e0:89:a3:fa:5c:2c:8e:5b:64: dd:32:b1:c7:4c:d4:78:d4:e6:49:0e:fb:ec:0a:2b: 5e:9b:3a:57:d7:0e:af:a2:2e:df:55:0a:8c:71:e7: 9c:50:57:68:c6:a9:49:27:95:81:41:04:c5:a7:36: 19:55:88:5a:0f:cb:1a:18:36:1a:61:ba:ab:2a:9f: 87:e9:0b:5f:19:d2:60:9d:34:25:93:88:79:8b:92: 2f:5d:3d:10:88:2f:e8:da:4c:c1:6d:92:e4:59:d7: e1:85:49:f2:20:24:e9:9c:e6:61:c2:e5:7b:00:8f: 5f:09:b3:0b:75:86:8d:b7:3d:f5:4e:83:64:60:c2: ac:43:2c:5b:d9:a1:8b:26:6e:b1:64:8a:29:70:52: af:5e:bd:65:64:a0:08:2d:c4:73:b0:0c:98:53:7d: 93:00:ff:0c:47:50:81:bf:cb:47:46:69:c7:bf:2c: a6:4c:0a:3f:a2:a8:6a:e6:5d:9c:ed:c8:ee:18:fe: 79:36:6a:7a:52:b8:31:61:a9:24:55:ba:03:72:3c: 17:91:64:fe:1f:41:75:fa:46:32:65:be:2f:7a:54: 74:e0:ae:ef:d9:62:ea:c3:0d:4f:dd:43:17:50:9d: f5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F7:24:F4:CE:9C:4C:57:C0:B4:EF:78:FB:03:61:E0:02:17:06:DE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3bcb6e17-236c-46bc-ae7b-650978abe133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption 88:c9:36:69:97:9b:dd:5b:07:10:93:08:06:d8:a5:96:6a:f3: 98:c3:17:f4:4b:c5:f3:a4:0c:61:41:4d:4e:21:0c:b9:47:bb: b0:65:d2:cf:53:7f:a5:94:e9:db:88:dd:37:a8:fd:4c:64:38: 56:09:bc:35:04:b8:4f:0c:c2:98:4c:8d:67:0e:c6:ca:31:76: d9:bf:87:a5:4c:ed:d2:b3:07:bc:52:70:5a:4a:6b:d1:09:48: 3d:01:fc:2e:dd:97:3e:20:1e:29:7b:4c:68:a9:eb:60:be:c8: fb:2a:96:3b:84:4c:ec:97:1c:e6:ad:14:d8:8d:d1:f1:4b:3e: 76:f7:4a:de:87:36:30:2e:13:a9:8a:58:84:ee:9e:3c:d3:83: a1:01:4c:ec:50:55:9f:5d:7e:a4:94:17:76:2d:79:a4:ab:e0: 38:00:30:b5:7b:93:f0:ce:95:fb:d4:1c:5f:54:41:82:36:93: 21:e0:18:25:44:bf:8a:4b:a5:a0:f0:8e:f7:9c:85:61:cd:cf: 25:d2:f2:bc:50:4a:23:e8:44:b8:36:7e:18:36:33:89:3e:81: 64:01:2c:82:36:18:56:df:5c:f4:a1:61:ed:ca:cf:e1:7c:b7: 8d:36:c8:90:9e:3b:ff:7a:84:11:d6:27:da:05:67:0a:0c:7c: 2b:0b:c3:38 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUax4o5GwMauRoqAAftNai/YGDsqowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMTAyOVoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAODhmNzA1OGRiZjZiYmQ5Y2UzODY0 ODA0NDU3NTE5MTk2YjBjOTMzMTA4ZDBhZDcxN2IzZWU0NTNhNTZmMjg5NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3O5nlPfTYEjxPyX1L3vscpMvOgPg iaP6XCyOW2TdMrHHTNR41OZJDvvsCitemzpX1w6voi7fVQqMceecUFdoxqlJJ5WB QQTFpzYZVYhaD8saGDYaYbqrKp+H6QtfGdJgnTQlk4h5i5IvXT0QiC/o2kzBbZLk WdfhhUnyICTpnOZhwuV7AI9fCbMLdYaNtz31ToNkYMKsQyxb2aGLJm6xZIopcFKv Xr1lZKAILcRzsAyYU32TAP8MR1CBv8tHRmnHvyymTAo/oqhq5l2c7cjuGP55Nmp6 UrgxYakkVboDcjwXkWT+H0F1+kYyZb4velR04K7v2WLqww1P3UMXUJ31TQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFL/3JPTOnExXwLTvePsDYeACFwbeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNiY2I2ZTE3LTIzNmMtNDZiYy1hZTdiLTY1MDk3OGFiZTEzMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6vDAMA0GCSqGSIb3DQEBCwUAA4IBAQCIyTZpl5vdWwcQkwgG 2KWWavOYwxf0S8XzpAxhQU1OIQy5R7uwZdLPU3+llOnbiN03qP1MZDhWCbw1BLhP DMKYTI1nDsbKMXbZv4elTO3Sswe8UnBaSmvRCUg9Afwu3Zc+IB4pe0xoqetgvsj7 KpY7hEzslxzmrRTYjdHxSz5290rehzYwLhOpiliE7p4804OhAUzsUFWfXX6klBd2 LXmkq+A4ADC1e5PwzpX71BxfVEGCNpMh4BglRL+KS6Wg8I73nIVhzc8l0vK8UEoj 6ES4Nn4YNjOJPoFkASyCNhhW31z0oWHtys/hfLeNNsiQnjv/eoQR1ifaBWcKDHwr C8M4 -----END CERTIFICATE-----Generated at Sun Mar 1 22:19:23 2026 by rpki-client