$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46906009-c3b9-49b3-a5f1-d017b200e422.roa File: 46906009-c3b9-49b3-a5f1-d017b200e422.roa (raw, json) Hash identifier: yfW/wp/8TmA30rq6KkauPwDHOGGV+XIPn8JvIqdoCP0= Subject key identifier: BC:0A:A4:F2:6F:3A:E1:92:E2:EA:BE:72:E4:21:15:5B:DC:C9:51:0E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 026DB82DC2318F031B121D5D954655DFE06FF9A6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46906009-c3b9-49b3-a5f1-d017b200e422.roa Signing time: Fri 20 Feb 2026 00:30:17 +0000 ROA not before: Fri 20 Feb 2026 00:30:17 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:48c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6d:b8:2d:c2:31:8f:03:1b:12:1d:5d:95:46:55:df:e0:6f:f9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:30:17 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=82112b7ec217a64f1403feaf5e473ef8824f438ed61281ef7a14ecbb91fc2e5d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:99:d3:8e:04:57:04:ea:b4:55:a4:a6:da:65: 8a:97:bc:bc:b0:08:0c:8d:e1:fa:9e:5d:48:26:10: 10:97:08:93:62:f0:5e:c3:67:82:41:2e:90:bc:40: f6:a6:3a:80:fc:e5:e5:e3:a8:0e:21:9b:b4:15:68: 3f:eb:9f:bc:41:df:fe:8e:56:c6:f5:d7:57:fb:f2: 89:2e:e4:e5:7a:be:af:98:3e:08:d2:75:22:51:c9: 05:6c:7e:99:1e:3b:23:19:28:f3:94:0a:c9:a5:5a: 38:58:ce:55:f4:a3:ba:06:1e:99:0e:59:b0:86:36: ce:69:cd:2a:b0:00:9f:5d:78:12:4b:ff:f5:e0:f2: 01:e8:81:2a:87:98:f2:5b:d1:02:38:ef:19:2b:19: 82:d1:41:ac:62:d7:be:4c:e7:bc:d2:60:31:5d:86: 39:20:97:98:a8:85:27:e6:56:ce:fa:e4:cb:fa:9f: 32:37:bf:db:8c:f0:f8:46:af:af:63:56:ed:14:1f: 2a:d9:1b:7b:5b:3d:d6:50:df:36:f3:52:03:44:eb: ad:bb:5e:7d:a5:22:9d:90:9e:9a:1d:25:1c:fe:55: 74:9c:d6:41:97:d3:39:91:ef:7d:04:d1:ab:1d:cd: 99:5c:70:50:50:52:c3:55:b1:79:be:c6:f2:1a:e7: f6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0A:A4:F2:6F:3A:E1:92:E2:EA:BE:72:E4:21:15:5B:DC:C9:51:0E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46906009-c3b9-49b3-a5f1-d017b200e422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:48c0::/48 Signature Algorithm: sha256WithRSAEncryption 7b:15:21:eb:5c:31:04:57:f6:c4:77:56:b6:d0:d4:07:ff:0d: 22:49:29:6c:b5:69:69:dc:f3:04:ef:0c:6c:b6:8b:c3:de:15: 51:25:93:c6:47:2d:6e:31:ad:c5:e9:f2:10:41:42:68:8f:09: 90:6e:1d:00:7b:ab:ef:1e:77:8e:6e:cf:8a:4e:3a:0d:92:56: 7e:bf:bb:21:d6:d5:24:cb:2a:93:d7:74:ff:2d:ff:f0:76:c5: 3c:92:a5:97:16:85:21:e6:04:7b:15:00:af:8c:6a:b5:ec:2b: fb:03:62:b6:34:7c:fa:c4:1c:3d:75:d5:0f:c3:06:8e:46:ba: 6a:c4:72:1a:71:fd:1e:6f:e9:96:7d:25:ac:4d:e7:20:3b:30: 4f:50:1a:0a:ac:ae:77:77:22:4e:f9:b3:9a:59:8a:6a:78:0a: a2:1c:d0:19:d1:63:db:c0:be:2d:c6:dd:a8:ea:13:cd:9b:e7: 07:ed:6f:db:62:00:8a:c6:88:67:85:f5:10:d1:21:3e:ac:72: 43:33:73:21:b2:41:95:c1:e4:cf:d7:62:a0:11:9b:22:b2:2a: ef:60:dc:b3:f0:c9:80:4d:72:89:72:1a:4f:25:e2:1b:95:c5: 24:aa:aa:08:ec:06:41:33:f8:8a:33:d0:e6:c7:92:85:e1:b7: 7d:fc:ce:c2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAm24LcIxjwMbEh1dlUZV3+Bv+aYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMzAxN1oX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAODIxMTJiN2VjMjE3YTY0ZjE0MDNm ZWFmNWU0NzNlZjg4MjRmNDM4ZWQ2MTI4MWVmN2ExNGVjYmI5MWZjMmU1ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspnTjgRXBOq0VaSm2mWKl7y8sAgM jeH6nl1IJhAQlwiTYvBew2eCQS6QvED2pjqA/OXl46gOIZu0FWg/65+8Qd/+jlbG 9ddX+/KJLuTler6vmD4I0nUiUckFbH6ZHjsjGSjzlArJpVo4WM5V9KO6Bh6ZDlmw hjbOac0qsACfXXgSS//14PIB6IEqh5jyW9ECOO8ZKxmC0UGsYte+TOe80mAxXYY5 IJeYqIUn5lbO+uTL+p8yN7/bjPD4Rq+vY1btFB8q2Rt7Wz3WUN8281IDROutu159 pSKdkJ6aHSUc/lV0nNZBl9M5ke99BNGrHc2ZXHBQUFLDVbF5vsbyGuf2lwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLwKpPJvOuGS4uq+cuQhFVvcyVEOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ2OTA2MDA5LWMzYjktNDliMy1hNWYxLWQwMTdiMjAwZTQyMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOEjAMA0GCSqGSIb3DQEBCwUAA4IBAQB7FSHrXDEEV/bEd1a2 0NQH/w0iSSlstWlp3PME7wxstovD3hVRJZPGRy1uMa3F6fIQQUJojwmQbh0Ae6vv HneObs+KTjoNklZ+v7sh1tUkyyqT13T/Lf/wdsU8kqWXFoUh5gR7FQCvjGq17Cv7 A2K2NHz6xBw9ddUPwwaORrpqxHIacf0eb+mWfSWsTecgOzBPUBoKrK53dyJO+bOa WYpqeAqiHNAZ0WPbwL4txt2o6hPNm+cH7W/bYgCKxohnhfUQ0SE+rHJDM3MhskGV weTP12KgEZsisirvYNyz8MmATXKJchpPJeIblcUkqqoI7AZBM/iKM9Dmx5KF4bd9 /M7C -----END CERTIFICATE-----Generated at Sun Mar 1 23:54:42 2026 by rpki-client