$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b679b3-4697-405a-940d-1245ad38a867.roa File: 43b679b3-4697-405a-940d-1245ad38a867.roa (raw, json) Hash identifier: ucKopgEWnB1Gq2VwNjAgq9YsG2fTUkrFpJTkL0+PkbE= Subject key identifier: FA:9C:2A:1A:A3:1E:8F:2C:DD:91:D4:D4:98:19:36:76:06:3D:CA:FE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 78DB0D7720DD51C616D1E4C0D5D23CAD8AE9B27D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b679b3-4697-405a-940d-1245ad38a867.roa Signing time: Fri 20 Feb 2026 00:30:43 +0000 ROA not before: Fri 20 Feb 2026 00:30:43 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:db:0d:77:20:dd:51:c6:16:d1:e4:c0:d5:d2:3c:ad:8a:e9:b2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:30:43 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=51e3c9207fa244c9825543c3de8c0a4bdce53cac23b9e5d41e15c68a61f6cb78, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2b:cc:bb:03:5a:44:a1:5c:24:54:27:1f:ca: 68:4e:57:ed:cb:47:ee:0d:4a:06:ae:a5:6f:0d:b5: a3:02:34:a1:df:39:55:3d:6d:a2:8e:c6:1c:eb:c6: ef:1a:09:ae:5a:3c:fe:39:6f:82:c0:01:96:10:fd: 23:c8:91:53:8d:d4:b2:2f:9e:39:f8:d0:73:94:08: 1e:e6:e5:91:0f:9f:74:78:f0:8a:73:34:88:d3:60: 71:6b:ae:7d:60:cf:7c:84:0d:e0:d2:1f:d3:ee:d7: fd:72:19:07:35:b2:f5:e6:eb:94:95:55:1a:bd:10: fc:6c:27:8e:c9:ae:40:af:c5:7e:86:e2:1e:21:13: 39:2f:b1:1b:36:77:0e:3e:c1:41:91:2f:36:94:7b: 30:ba:d3:9e:a9:39:5b:23:b1:9a:fd:ef:b3:87:26: f5:e8:21:58:32:27:2e:07:95:f7:b0:f6:5b:c7:53: ac:99:8f:6f:f2:dc:8a:71:ea:0c:2c:97:51:95:a2: 65:2a:c4:cd:02:7d:49:0f:3f:91:26:96:04:12:31: 75:96:dc:06:45:c1:fb:cf:e8:28:22:30:08:5d:3d: f1:f6:0e:70:21:f5:24:11:ff:7f:c1:de:53:22:75: c1:ed:91:21:91:48:a1:ff:0c:6c:50:ce:c4:07:25: 2a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9C:2A:1A:A3:1E:8F:2C:DD:91:D4:D4:98:19:36:76:06:3D:CA:FE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b679b3-4697-405a-940d-1245ad38a867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:f000::/40 Signature Algorithm: sha256WithRSAEncryption a9:83:b6:80:2e:9a:dc:a4:15:a7:aa:1f:cb:72:a8:68:c8:e6: f5:2f:c0:77:31:99:1d:07:f1:21:51:c2:77:e6:c0:ec:39:df: fc:d7:a4:f8:a6:06:06:9e:51:e6:03:89:e2:57:b9:f4:f8:89: 9f:69:9d:e4:a1:c3:9a:c1:fa:39:e3:21:cb:be:c9:18:7e:1f: 38:d9:84:79:7b:bb:5b:9e:e3:fe:f9:ce:8d:ca:0f:b1:2e:8b: a0:32:48:36:c9:9c:dd:50:64:cc:39:4d:db:ed:a5:71:db:0f: ac:5e:77:c9:5e:9c:31:9c:b5:3e:27:92:21:36:8b:58:88:31: 1d:73:47:67:da:8c:2e:2e:46:f8:cd:41:f3:c9:b5:43:e7:f7: 8f:97:49:10:7d:ab:a9:1f:96:01:5a:f0:be:d0:88:3c:48:b1: e6:08:01:cf:e4:2d:ea:1e:0c:59:91:9d:2e:8f:f1:a9:7f:7e: e8:14:4d:11:58:05:70:b5:29:03:8b:d0:eb:85:a3:f9:01:9d: 05:fd:19:53:86:ad:e6:2b:d7:b2:fc:5f:64:82:e1:71:a1:79: f2:a6:7d:7e:cd:a5:85:71:f6:a3:75:e3:a1:4e:b0:cf:b8:30: 98:d9:4d:02:16:b2:55:30:b6:b6:42:0d:b5:7f:e7:0f:f0:fa: 00:5f:2c:20 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeNsNdyDdUcYW0eTA1dI8rYrpsn0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMzA0M1oX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNANTFlM2M5MjA3ZmEyNDRjOTgyNTU0 M2MzZGU4YzBhNGJkY2U1M2NhYzIzYjllNWQ0MWUxNWM2OGE2MWY2Y2I3ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyvMuwNaRKFcJFQnH8poTlfty0fu DUoGrqVvDbWjAjSh3zlVPW2ijsYc68bvGgmuWjz+OW+CwAGWEP0jyJFTjdSyL545 +NBzlAge5uWRD590ePCKczSI02Bxa659YM98hA3g0h/T7tf9chkHNbL15uuUlVUa vRD8bCeOya5Ar8V+huIeIRM5L7EbNncOPsFBkS82lHswutOeqTlbI7Ga/e+zhyb1 6CFYMicuB5X3sPZbx1OsmY9v8tyKceoMLJdRlaJlKsTNAn1JDz+RJpYEEjF1ltwG RcH7z+goIjAIXT3x9g5wIfUkEf9/wd5TInXB7ZEhkUih/wxsUM7EByUqpwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPqcKhqjHo8s3ZHU1JgZNnYGPcr+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzYjY3OWIzLTQ2OTctNDA1YS05NDBkLTEyNDVhZDM4YTg2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAPAwDQYJKoZIhvcNAQELBQADggEBAKmDtoAumtykFaeqH8ty qGjI5vUvwHcxmR0H8SFRwnfmwOw53/zXpPimBgaeUeYDieJXufT4iZ9pneShw5rB +jnjIcu+yRh+HzjZhHl7u1ue4/75zo3KD7Eui6AySDbJnN1QZMw5TdvtpXHbD6xe d8lenDGctT4nkiE2i1iIMR1zR2fajC4uRvjNQfPJtUPn94+XSRB9q6kflgFa8L7Q iDxIseYIAc/kLeoeDFmRnS6P8al/fugUTRFYBXC1KQOL0OuFo/kBnQX9GVOGreYr 17L8X2SC4XGhefKmfX7NpYVx9qN146FOsM+4MJjZTQIWslUwtrZCDbV/5w/w+gBf LCA= -----END CERTIFICATE-----Generated at Sun Mar 1 22:21:44 2026 by rpki-client