$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/45401176-46b4-41a0-8882-3584e31e9718.roa File: 45401176-46b4-41a0-8882-3584e31e9718.roa (raw, json) Hash identifier: 47Q24N5ZXdlmsPQtiOr44KSnklBkSe/jvsKLx0L5KBk= Subject key identifier: DD:FB:45:4B:5A:D8:D8:72:06:D9:B7:F0:36:D5:CA:43:98:1A:B6:A6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5A71275AB8EA62734AA22B5005701C8A12D756D7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/45401176-46b4-41a0-8882-3584e31e9718.roa Signing time: Fri 06 Feb 2026 00:00:06 +0000 ROA not before: Fri 06 Feb 2026 00:00:06 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:40c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:71:27:5a:b8:ea:62:73:4a:a2:2b:50:05:70:1c:8a:12:d7:56:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 6 00:00:06 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=d813beb7805e31d5a5780564809f50db98e3e11d1e09fd79306bcb26b1311cef, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fe:a2:4e:fa:8e:9b:c9:39:f8:be:77:78:35: 4a:53:ef:6b:4c:12:f3:e9:1a:72:92:fe:83:cc:b2: b1:bf:5b:56:b2:0d:94:2d:49:29:9a:b8:e0:07:d6: 8f:3a:00:96:b2:85:07:c3:04:cf:f4:ac:92:22:58: 31:16:ec:98:b1:35:76:b3:0c:47:46:dd:39:e8:6b: f6:72:e8:ba:5e:49:57:7d:21:c4:bc:62:f3:8e:88: 4e:88:8a:a7:ab:82:f5:13:07:f2:db:79:ce:6f:7d: 16:a4:f9:7e:77:49:5b:19:b6:66:1e:c1:4d:fe:37: d2:eb:13:5f:0a:a0:cf:b6:40:57:d6:ec:84:d7:85: 86:bc:ac:60:dc:2a:b3:7e:a2:bf:dd:25:01:7b:e8: 5d:e6:0f:ba:86:32:8a:da:9a:3c:00:19:85:8e:69: 0d:41:a0:c5:cf:da:c7:3a:eb:55:da:86:06:b3:d8: 9e:82:bb:e8:13:0e:54:b5:1d:47:b2:53:2b:27:47: 13:dc:ab:64:12:05:ca:4c:87:66:64:c8:1f:e7:df: ff:4c:52:3e:2c:6d:8c:97:9f:87:a4:f0:2d:58:9e: 1e:1b:1f:0e:81:8b:81:67:56:0d:26:c2:45:c7:39: 5f:6b:81:d1:f6:16:14:62:8d:50:dd:85:ea:26:a6: ac:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FB:45:4B:5A:D8:D8:72:06:D9:B7:F0:36:D5:CA:43:98:1A:B6:A6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/45401176-46b4-41a0-8882-3584e31e9718.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:40c0::/46 Signature Algorithm: sha256WithRSAEncryption b0:4b:5c:9a:6d:c2:7d:52:71:b6:78:8c:5a:3c:da:50:6f:98: 80:e2:67:5c:b3:38:98:8f:9c:0a:22:51:56:1b:39:be:9c:17: f8:6c:69:d7:a2:d2:7d:78:6a:e1:ce:b6:0d:9f:d9:ef:86:f2: 19:9a:57:a3:22:f6:f5:e0:cc:9a:2c:8b:7b:62:94:fc:b6:60: d0:92:87:81:60:78:40:53:ae:a5:38:1d:4f:9c:8f:29:24:e5: 2c:ee:17:67:a7:4c:c0:07:b0:1d:56:45:d9:ac:92:8e:6a:03: c2:33:b1:95:94:92:f1:d5:b7:65:64:c0:bf:6c:41:ba:98:ab: 1e:3a:47:09:b0:15:90:88:26:c8:91:7b:c3:3e:f7:bf:e5:bd: 83:73:0c:e3:3a:f3:cb:56:0c:6f:8d:25:94:73:d8:44:ef:22: a3:55:36:f6:2b:05:b5:8c:13:df:81:43:f9:bf:77:eb:dd:86: f2:8d:6e:f8:76:fb:25:60:c6:9e:fb:4d:56:ba:a2:62:cf:13: 63:64:56:dc:fc:ba:92:7b:86:08:ec:e7:52:9a:a2:c3:c5:8b: 55:4d:72:b7:d8:93:34:33:45:59:79:5d:48:1c:51:77:b6:37: c2:cd:89:cc:8c:2d:20:80:14:bc:b2:37:64:e2:1c:70:e2:be: be:ae:3d:54 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWnEnWrjqYnNKoitQBXAcihLXVtcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIwNjAwMDAwNloX DTI2MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAZDgxM2JlYjc4MDVlMzFkNWE1Nzgw NTY0ODA5ZjUwZGI5OGUzZTExZDFlMDlmZDc5MzA2YmNiMjZiMTMxMWNlZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv6iTvqOm8k5+L53eDVKU+9rTBLz 6Rpykv6DzLKxv1tWsg2ULUkpmrjgB9aPOgCWsoUHwwTP9KySIlgxFuyYsTV2swxH Rt056Gv2cui6XklXfSHEvGLzjohOiIqnq4L1Ewfy23nOb30WpPl+d0lbGbZmHsFN /jfS6xNfCqDPtkBX1uyE14WGvKxg3CqzfqK/3SUBe+hd5g+6hjKK2po8ABmFjmkN QaDFz9rHOutV2oYGs9iegrvoEw5UtR1HslMrJ0cT3KtkEgXKTIdmZMgf59//TFI+ LG2Ml5+HpPAtWJ4eGx8OgYuBZ1YNJsJFxzlfa4HR9hYUYo1Q3YXqJqasGQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFN37RUta2NhyBtm38DbVykOYGramMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ1NDAxMTc2LTQ2YjQtNDFhMC04ODgyLTM1ODRlMzFlOTcxOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaEDAMA0GCSqGSIb3DQEBCwUAA4IBAQCwS1yabcJ9UnG2eIxa PNpQb5iA4mdcsziYj5wKIlFWGzm+nBf4bGnXotJ9eGrhzrYNn9nvhvIZmlejIvb1 4MyaLIt7YpT8tmDQkoeBYHhAU66lOB1PnI8pJOUs7hdnp0zAB7AdVkXZrJKOagPC M7GVlJLx1bdlZMC/bEG6mKseOkcJsBWQiCbIkXvDPve/5b2DcwzjOvPLVgxvjSWU c9hE7yKjVTb2KwW1jBPfgUP5v3fr3YbyjW74dvslYMae+01WuqJizxNjZFbc/LqS e4YI7OdSmqLDxYtVTXK32JM0M0VZeV1IHFF3tjfCzYnMjC0ggBS8sjdk4hxw4r6+ rj1U -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:52 2026 by rpki-client