$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3df16135-87fe-480c-90d5-ba22a1787aa1.roa File: 3df16135-87fe-480c-90d5-ba22a1787aa1.roa (raw, json) Hash identifier: SoJ+af5IsLQOrAV9+kMo/SxCTr5tUyqJeIPEf68lJuI= Subject key identifier: CC:EE:1C:08:12:3E:84:03:E1:6E:C4:5F:83:9F:9F:2C:52:E0:64:15 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2F214CF8343B62A18AE29D2D613C7361B36C8708 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3df16135-87fe-480c-90d5-ba22a1787aa1.roa Signing time: Sat 21 Feb 2026 00:00:32 +0000 ROA not before: Sat 21 Feb 2026 00:00:32 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:21:4c:f8:34:3b:62:a1:8a:e2:9d:2d:61:3c:73:61:b3:6c:87:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:00:32 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=e166ef77dbe06b5ef03ce38d907b17d809f4e8eadeecd6483a67e1756015fc8f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:31:0e:fc:00:29:7a:92:83:44:84:be:23:30: 46:08:74:e5:bf:2d:3a:1e:73:ce:4d:4f:b6:ea:9c: f0:95:a5:ba:61:42:31:6c:2f:69:37:c4:f6:b4:33: 37:19:08:18:80:ed:cf:15:d0:9e:92:00:f1:01:a1: 71:d7:92:6f:cb:e2:47:b6:06:94:13:1c:ab:6b:25: 9b:29:98:fd:09:b0:d3:6c:02:c4:a9:25:44:26:b4: 69:c5:44:62:c8:a1:73:38:ec:6d:b9:55:86:62:e9: 2b:44:94:f2:1b:f1:a6:6e:4b:6b:86:12:38:b5:47: a6:a2:a9:56:b7:75:ff:7f:34:ac:e6:5c:70:01:85: 5c:65:b4:a6:bf:7e:56:7b:33:07:41:3a:64:7b:dc: 23:f7:72:d5:a5:57:6e:fa:7c:52:f6:13:99:a0:f5: 53:25:47:4c:20:d5:10:c9:82:06:36:50:b7:38:a8: bf:fa:eb:07:7b:72:6c:ac:37:1a:02:5f:af:b7:41: b4:7d:48:0a:c6:51:5e:35:9e:31:1e:6c:c8:d9:2e: 99:1d:08:44:77:ce:d1:97:d1:5e:59:07:a8:78:ca: 6c:00:a9:87:3a:65:03:e5:c2:88:5f:34:6b:69:ab: 21:14:7a:ab:d2:ba:7f:61:3c:d1:e2:20:5a:ea:36: eb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EE:1C:08:12:3E:84:03:E1:6E:C4:5F:83:9F:9F:2C:52:E0:64:15 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3df16135-87fe-480c-90d5-ba22a1787aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:f000::/40 Signature Algorithm: sha256WithRSAEncryption 26:62:a8:11:e1:e4:68:84:40:a8:7f:65:73:e9:84:51:27:55: ce:7e:9f:d0:56:8e:3d:ee:ee:b3:0f:aa:39:6d:1e:85:fe:bb: 80:2c:0a:e3:1d:c1:c7:31:a8:e6:ef:5a:5b:3a:8b:56:d0:f1: e6:3e:c7:e5:1f:e0:a6:e7:26:4b:12:74:04:4d:23:ba:d3:60: 32:e7:80:4a:3a:4f:0a:72:d2:5c:61:43:45:89:81:ad:ec:65: 01:89:19:57:13:f2:78:29:39:63:6a:7e:2d:44:7e:37:ae:88: aa:6a:9c:88:53:d3:7d:9c:ef:79:ab:2c:b2:af:b5:37:bd:0c: c9:f8:6f:cd:d7:5a:cb:27:99:0b:f0:1b:92:11:67:4d:06:dc: 51:0d:91:a6:61:0a:d2:97:bc:ea:99:02:1e:93:74:3f:b6:d4: 2d:6d:30:81:1a:7c:6b:66:bf:4f:c6:2e:02:37:e5:94:ba:17: fb:af:0a:9e:a4:17:aa:d9:ad:0e:42:e1:4f:40:d6:0a:82:77: b2:6a:53:5b:f8:08:8f:fa:77:91:c1:0b:ab:9c:12:db:ed:59: 60:96:40:87:f1:f0:1c:f6:3b:57:5b:ec:37:63:02:94:70:f7: a1:2a:4a:d4:7a:97:77:7f:7b:a5:cc:ed:e8:fe:0e:8f:96:91: 10:b3:a8:15 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULyFM+DQ7YqGK4p0tYTxzYbNshwgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMDAzMloX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAZTE2NmVmNzdkYmUwNmI1ZWYwM2Nl MzhkOTA3YjE3ZDgwOWY0ZThlYWRlZWNkNjQ4M2E2N2UxNzU2MDE1ZmM4ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjEO/AApepKDRIS+IzBGCHTlvy06 HnPOTU+26pzwlaW6YUIxbC9pN8T2tDM3GQgYgO3PFdCekgDxAaFx15Jvy+JHtgaU ExyrayWbKZj9CbDTbALEqSVEJrRpxURiyKFzOOxtuVWGYukrRJTyG/GmbktrhhI4 tUemoqlWt3X/fzSs5lxwAYVcZbSmv35WezMHQTpke9wj93LVpVdu+nxS9hOZoPVT JUdMINUQyYIGNlC3OKi/+usHe3JsrDcaAl+vt0G0fUgKxlFeNZ4xHmzI2S6ZHQhE d87Rl9FeWQeoeMpsAKmHOmUD5cKIXzRraashFHqr0rp/YTzR4iBa6jbraQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMzuHAgSPoQD4W7EX4OfnyxS4GQVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNkZjE2MTM1LTg3ZmUtNDgwYy05MGQ1LWJhMjJhMTc4N2FhMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+/AwDQYJKoZIhvcNAQELBQADggEBACZiqBHh5GiEQKh/ZXPp hFEnVc5+n9BWjj3u7rMPqjltHoX+u4AsCuMdwccxqObvWls6i1bQ8eY+x+Uf4Kbn JksSdARNI7rTYDLngEo6Twpy0lxhQ0WJga3sZQGJGVcT8ngpOWNqfi1EfjeuiKpq nIhT032c73mrLLKvtTe9DMn4b83XWssnmQvwG5IRZ00G3FENkaZhCtKXvOqZAh6T dD+21C1tMIEafGtmv0/GLgI35ZS6F/uvCp6kF6rZrQ5C4U9A1gqCd7JqU1v4CI/6 d5HBC6ucEtvtWWCWQIfx8Bz2O1db7DdjApRw96EqStR6l3d/e6XM7ej+Do+WkRCz qBU= -----END CERTIFICATE-----Generated at Sun Mar 1 22:09:20 2026 by rpki-client