$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49e84179-b363-4bd7-a8a7-5203c6a98687.roa File: 49e84179-b363-4bd7-a8a7-5203c6a98687.roa (raw, json) Hash identifier: oQhn+aVsIvuXdh8kLCdNYgSIYItCGaaJcczhgXydYXA= Subject key identifier: 84:57:24:09:AE:4B:EB:99:E6:80:BF:60:1F:CD:D6:55:42:8B:3D:AD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 02957BA580D9B11F314B9A70C0183F3145055CA4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49e84179-b363-4bd7-a8a7-5203c6a98687.roa Signing time: Sat 21 Feb 2026 00:10:45 +0000 ROA not before: Sat 21 Feb 2026 00:10:45 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:95:7b:a5:80:d9:b1:1f:31:4b:9a:70:c0:18:3f:31:45:05:5c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:10:45 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=def4393f6df652d76c28dc56fb507b493c1bed87269513ea5b79e0f2a1f96da6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:9e:5a:6b:31:dc:9c:91:a4:af:f8:51:99: 38:d4:a8:0d:a8:2e:86:ab:4b:ec:c8:02:fe:91:76: 46:4e:d3:3b:e9:23:9d:b8:a7:6a:c9:b8:2e:f7:a5: c3:6f:ea:20:ae:39:c5:00:45:dc:31:e7:1d:33:5b: f9:77:7e:b2:12:94:b0:7e:99:fc:a3:e7:c6:f5:26: 96:4b:10:29:74:b2:c6:c1:ee:2f:76:f0:7e:9b:b9: b8:1c:40:b9:44:5d:13:65:cc:81:82:d2:fa:eb:40: 68:0d:21:ad:93:b1:50:6f:a4:08:3e:3b:40:20:d5: 69:1b:00:74:9b:a9:95:f8:37:ed:6a:5a:55:38:77: 1b:f8:fb:06:ec:a7:a8:6f:15:ca:4f:fd:81:d3:44: 5e:9e:db:40:11:06:c0:4c:2c:66:cf:6a:bc:ba:40: 85:fe:1e:68:1a:ed:eb:cf:a8:d4:8a:f6:d0:e1:ed: e3:f5:80:7a:f3:a7:8a:5c:ab:92:f0:4d:40:29:30: 67:6c:28:d1:71:51:41:2b:23:2b:41:ef:5b:4c:fd: 72:61:46:7d:13:b2:5b:dc:49:f7:0e:43:93:47:bc: fd:bb:fe:f6:96:64:2d:29:48:8f:be:62:9f:b2:d4: 49:8b:31:d8:3e:bb:7b:4d:57:7c:57:b0:7b:d2:8e: 87:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:57:24:09:AE:4B:EB:99:E6:80:BF:60:1F:CD:D6:55:42:8B:3D:AD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49e84179-b363-4bd7-a8a7-5203c6a98687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:e000::/40 Signature Algorithm: sha256WithRSAEncryption 29:22:39:14:4a:95:4a:b8:44:b0:68:75:bd:f2:ab:12:fc:c4: af:37:8a:51:96:a7:ee:3d:99:4d:fd:82:04:c5:1f:bb:8e:1d: d4:56:7f:60:4c:6f:af:cf:16:81:4e:e2:62:b4:83:be:c1:60: 21:0e:82:20:53:dc:de:81:45:41:8c:af:16:88:d9:e7:f5:76: 2d:f7:31:79:a0:c7:8c:03:8c:2d:0f:9b:3e:25:74:35:2d:ac: f1:ed:f2:c8:86:65:87:66:6a:c1:57:2e:c0:22:8a:0d:3b:78: f6:d9:07:60:41:6c:27:b4:45:5a:55:39:1c:db:bc:17:83:2d: 62:d1:d1:83:1c:70:92:94:32:a7:cc:88:9b:3b:0f:62:1d:3c: d7:a7:25:77:39:99:76:7d:4c:b9:dd:bb:40:3a:e5:91:ac:48: d6:ab:f8:d5:8d:fb:0c:86:94:ec:84:a2:34:db:2a:1d:f8:01: 21:50:11:4c:44:80:df:bc:e6:54:7d:2e:2c:f0:02:26:9e:bf: ed:d7:22:f1:28:d9:b3:c4:3b:de:d5:e4:c6:50:25:5f:4d:5c: 0b:98:ae:43:f0:1b:4b:06:81:c5:1e:1e:46:4d:56:6a:35:c9: ae:bc:83:f2:69:8e:5c:eb:79:9e:d8:24:5c:d7:23:c1:bb:90: 65:27:1c:78 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUApV7pYDZsR8xS5pwwBg/MUUFXKQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMTA0NVoX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAZGVmNDM5M2Y2ZGY2NTJkNzZjMjhk YzU2ZmI1MDdiNDkzYzFiZWQ4NzI2OTUxM2VhNWI3OWUwZjJhMWY5NmRhNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNKeWmsx3JyRpK/4UZk41KgNqC6G q0vsyAL+kXZGTtM76SOduKdqybgu96XDb+ogrjnFAEXcMecdM1v5d36yEpSwfpn8 o+fG9SaWSxApdLLGwe4vdvB+m7m4HEC5RF0TZcyBgtL660BoDSGtk7FQb6QIPjtA INVpGwB0m6mV+DftalpVOHcb+PsG7KeobxXKT/2B00RenttAEQbATCxmz2q8ukCF /h5oGu3rz6jUivbQ4e3j9YB686eKXKuS8E1AKTBnbCjRcVFBKyMrQe9bTP1yYUZ9 E7Jb3En3DkOTR7z9u/72lmQtKUiPvmKfstRJizHYPrt7TVd8V7B70o6H+wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIRXJAmuS+uZ5oC/YB/N1lVCiz2tMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ5ZTg0MTc5LWIzNjMtNGJkNy1hOGE3LTUyMDNjNmE5ODY4Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAOAwDQYJKoZIhvcNAQELBQADggEBACkiORRKlUq4RLBodb3y qxL8xK83ilGWp+49mU39ggTFH7uOHdRWf2BMb6/PFoFO4mK0g77BYCEOgiBT3N6B RUGMrxaI2ef1di33MXmgx4wDjC0Pmz4ldDUtrPHt8siGZYdmasFXLsAiig07ePbZ B2BBbCe0RVpVORzbvBeDLWLR0YMccJKUMqfMiJs7D2IdPNenJXc5mXZ9TLndu0A6 5ZGsSNar+NWN+wyGlOyEojTbKh34ASFQEUxEgN+85lR9LizwAiaev+3XIvEo2bPE O97V5MZQJV9NXAuYrkPwG0sGgcUeHkZNVmo1ya68g/JpjlzreZ7YJFzXI8G7kGUn HHg= -----END CERTIFICATE-----Generated at Sun Mar 1 23:53:47 2026 by rpki-client