$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49c7ee93-3655-4ca9-8897-c8e3d1d0f9ea.roa File: 49c7ee93-3655-4ca9-8897-c8e3d1d0f9ea.roa (raw, json) Hash identifier: xW3ztsy6WuFU+pSrXiRLek9MJNxCOn3kdNFhovwB8Ac= Subject key identifier: 48:3E:3F:99:C4:74:8C:3A:A8:D4:80:6F:F2:1B:94:66:16:1A:30:62 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4DBA759582885822FECBA7C08175F00D907770FC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49c7ee93-3655-4ca9-8897-c8e3d1d0f9ea.roa Signing time: Sun 22 Feb 2026 00:40:38 +0000 ROA not before: Sun 22 Feb 2026 00:40:38 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ba:75:95:82:88:58:22:fe:cb:a7:c0:81:75:f0:0d:90:77:70:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:40:38 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=60785c9a8a42de625ed0fc069efe22cf03e168f9e2a7712a99c51508371915e9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:7d:1b:9f:7e:f2:00:76:0f:62:ad:5c:90: c7:02:40:ad:55:e2:01:2e:51:2f:00:24:01:34:88: a2:79:71:02:51:80:6e:35:64:7a:1f:23:34:5a:ad: c3:15:57:6c:bc:69:76:db:7c:9c:b4:4b:ac:71:b5: 64:c8:fe:1e:31:94:84:10:f4:ab:b1:90:91:df:73: a1:a5:96:e6:8d:08:86:72:c9:06:3b:95:5c:02:3f: 85:f9:42:42:c5:7b:ef:cd:db:10:c5:c2:e8:d9:8f: fd:35:8d:44:08:d4:6a:dc:a2:02:44:94:7c:c8:2d: 54:f4:a8:71:c4:d5:07:cd:1d:92:43:d0:c9:04:ba: de:86:10:02:c0:c3:2a:7e:96:f3:1e:7a:88:ab:da: 43:ec:ca:57:8a:a2:d8:62:a2:89:68:89:2b:eb:82: 96:54:b6:17:42:54:06:15:0b:89:44:bf:17:07:74: b7:44:41:61:d7:03:1c:e5:a8:53:ae:14:e5:ee:e4: 61:c4:1f:d6:24:ed:f0:8d:d3:a1:e5:17:4a:45:71: 21:f2:96:36:69:41:7a:7e:f6:fb:80:85:47:0e:5e: 9d:ca:7e:80:2c:c1:24:d1:72:2f:c1:a9:ac:11:41: 1c:7a:8c:47:01:76:e8:43:5b:20:bc:af:03:48:5a: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3E:3F:99:C4:74:8C:3A:A8:D4:80:6F:F2:1B:94:66:16:1A:30:62 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49c7ee93-3655-4ca9-8897-c8e3d1d0f9ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:4800::/40 Signature Algorithm: sha256WithRSAEncryption 81:1b:56:06:83:30:ca:a1:67:fa:51:3d:1c:1c:bd:ba:06:db: a8:80:9c:80:8d:6b:23:d7:a9:b6:ac:36:1f:e8:a9:56:aa:46: b2:63:86:de:e8:f0:8f:9f:bb:96:b4:18:85:6f:dd:fa:ee:1b: 2d:d2:7b:9c:7f:de:8c:86:4b:ed:d1:06:45:f2:28:3c:85:fe: f4:1e:4c:7c:eb:7a:f8:a7:f5:0b:22:53:91:a6:bd:2c:95:95: 06:64:dc:3f:f7:a6:10:3d:42:24:66:95:d1:cb:86:76:bd:aa: f7:c0:f3:56:46:c8:80:f8:fc:fe:c6:0c:d6:e2:ed:24:83:90: e3:3b:98:7f:1c:50:0d:2a:18:2d:af:90:8a:87:74:03:46:f8: b7:22:61:5f:2f:c8:29:3f:56:7c:87:78:39:1c:58:75:76:e8: 75:86:18:cf:22:0f:37:f2:a1:cb:26:ec:ca:45:34:77:a3:02: 3c:40:0e:b4:38:b8:a7:91:a7:a1:d5:bb:cd:b0:e3:ba:81:bd: 02:6f:6b:de:85:18:aa:40:7d:2d:eb:72:b9:1a:b1:15:fe:d6: e9:af:fc:a2:ee:a9:dd:d7:7c:11:ce:16:fb:00:fe:1a:e2:7d: 01:a1:9b:c5:16:69:02:27:bb:88:50:55:ed:b1:73:a4:d1:4c: 89:4f:4b:23 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTbp1lYKIWCL+y6fAgXXwDZB3cPwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwNDAzOFoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNANjA3ODVjOWE4YTQyZGU2MjVlZDBm YzA2OWVmZTIyY2YwM2UxNjhmOWUyYTc3MTJhOTljNTE1MDgzNzE5MTVlOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssl9G59+8gB2D2KtXJDHAkCtVeIB LlEvACQBNIiieXECUYBuNWR6HyM0Wq3DFVdsvGl223yctEuscbVkyP4eMZSEEPSr sZCR33OhpZbmjQiGcskGO5VcAj+F+UJCxXvvzdsQxcLo2Y/9NY1ECNRq3KICRJR8 yC1U9KhxxNUHzR2SQ9DJBLrehhACwMMqfpbzHnqIq9pD7MpXiqLYYqKJaIkr64KW VLYXQlQGFQuJRL8XB3S3REFh1wMc5ahTrhTl7uRhxB/WJO3wjdOh5RdKRXEh8pY2 aUF6fvb7gIVHDl6dyn6ALMEk0XIvwamsEUEceoxHAXboQ1sgvK8DSFoykwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEg+P5nEdIw6qNSAb/IblGYWGjBiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ5YzdlZTkzLTM2NTUtNGNhOS04ODk3LWM4ZTNkMWQwZjllYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9kgwDQYJKoZIhvcNAQELBQADggEBAIEbVgaDMMqhZ/pRPRwc vboG26iAnICNayPXqbasNh/oqVaqRrJjht7o8I+fu5a0GIVv3fruGy3Se5x/3oyG S+3RBkXyKDyF/vQeTHzrevin9QsiU5GmvSyVlQZk3D/3phA9QiRmldHLhna9qvfA 81ZGyID4/P7GDNbi7SSDkOM7mH8cUA0qGC2vkIqHdANG+LciYV8vyCk/VnyHeDkc WHV26HWGGM8iDzfyocsm7MpFNHejAjxADrQ4uKeRp6HVu82w47qBvQJva96FGKpA fS3rcrkasRX+1umv/KLuqd3XfBHOFvsA/hrifQGhm8UWaQInu4hQVe2xc6TRTIlP SyM= -----END CERTIFICATE-----Generated at Sun Mar 1 23:47:20 2026 by rpki-client