$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa File: 4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa (raw, json) Hash identifier: JyQuBBE9S23nWqArmOVp8rG8D8QElC2NB37mF2rF570= Subject key identifier: 8B:07:63:D2:3C:84:03:94:E7:CB:CD:CF:39:AB:98:86:76:1B:9F:56 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5E08073D66FF1F49EBC9FF390D5005B9501EB190 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa Signing time: Wed 11 Feb 2026 00:20:39 +0000 ROA not before: Wed 11 Feb 2026 00:20:39 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:a080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:08:07:3d:66:ff:1f:49:eb:c9:ff:39:0d:50:05:b9:50:1e:b1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:20:39 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=39fb6bdae88ad4be7e1bf115469bae8f97e0bb611b638fe2a30a25ae980f5d97, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:10:29:1a:f0:a8:98:e5:0f:38:8f:3b:fb:3b: 99:1c:7b:43:97:ff:ab:6c:73:73:40:39:79:3a:6c: 57:5a:6c:90:88:39:14:cc:55:29:2a:ce:6d:bd:93: 04:e1:c0:e8:7e:79:39:0a:2e:b9:d4:02:3b:18:11: b2:3b:67:e1:cb:31:ce:e0:b7:4a:33:82:e6:6c:4a: be:db:5c:b5:89:7f:f7:25:84:59:0c:c3:11:85:cd: 64:f7:ed:a9:16:47:ac:d5:80:cd:37:37:7a:fd:8e: 5e:19:2d:99:1e:bf:80:2e:68:db:da:1e:7d:81:b1: ae:00:23:53:14:b0:bc:d8:85:ca:85:57:0b:4f:ec: e5:80:34:ad:8a:4a:6b:d8:4c:3f:8b:b7:7d:0e:ef: 79:3b:b0:e6:89:80:12:52:06:4c:81:f6:6f:dc:0f: 93:46:b6:09:2f:7c:ed:2a:79:32:1b:c7:64:a5:54: c9:cf:9d:ae:3d:62:64:a2:64:09:ed:cf:fe:5b:76: 09:51:39:c5:cb:78:9b:20:45:ba:29:a9:23:37:99: aa:64:09:47:32:de:93:c2:71:7e:01:27:1c:3f:1d: 32:b6:a0:7f:e5:bf:6a:8a:df:a6:06:88:57:64:35: 66:98:40:d9:1e:62:df:71:91:54:f8:d2:b3:4a:c9: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:07:63:D2:3C:84:03:94:E7:CB:CD:CF:39:AB:98:86:76:1B:9F:56 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:a080::/46 Signature Algorithm: sha256WithRSAEncryption 0c:2e:fc:2a:54:f0:d0:1c:c6:6d:e6:49:76:69:2a:56:b2:85: 61:84:c7:5a:37:31:c7:81:81:e5:10:eb:44:99:6a:6c:a3:7c: 29:57:58:de:3d:ff:4a:fc:9d:e4:34:5c:19:06:47:39:d5:ef: 59:4e:49:93:c7:f3:94:d6:ec:60:a7:72:19:d3:99:96:48:3f: e0:0c:9b:ac:76:30:63:71:b0:91:e8:97:67:ae:2b:0d:68:66: 2b:09:38:ca:9d:a1:71:be:88:98:5d:88:59:43:2f:72:73:95: ca:49:82:b6:41:f7:96:cc:e1:ae:4d:4f:fb:9b:a8:a9:33:11: 62:f8:98:ba:b3:39:a1:d3:01:26:d6:a3:58:de:d5:9f:b8:5e: ec:7b:0e:41:56:b3:ff:cb:a6:a8:75:74:f5:37:8c:70:3b:03: ca:50:60:6f:d2:cf:15:64:29:0d:7d:7d:a7:1d:08:45:31:1c: 80:ef:75:8d:78:82:93:bc:ea:7a:45:8f:2d:73:50:03:d9:a8: 56:92:8d:b8:82:f5:da:c8:65:70:55:0f:c3:00:62:c7:e2:c0: 96:85:52:f2:09:13:fd:f0:2a:4f:5b:f7:14:9a:2c:fb:da:79: f3:15:b3:9b:dc:88:ea:a0:f7:61:d8:3d:50:c3:8d:3f:82:74: dd:07:8f:ba -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXggHPWb/H0nryf85DVAFuVAesZAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMjAzOVoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAMzlmYjZiZGFlODhhZDRiZTdlMWJm MTE1NDY5YmFlOGY5N2UwYmI2MTFiNjM4ZmUyYTMwYTI1YWU5ODBmNWQ5NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hApGvComOUPOI87+zuZHHtDl/+r bHNzQDl5OmxXWmyQiDkUzFUpKs5tvZME4cDofnk5Ci651AI7GBGyO2fhyzHO4LdK M4LmbEq+21y1iX/3JYRZDMMRhc1k9+2pFkes1YDNNzd6/Y5eGS2ZHr+ALmjb2h59 gbGuACNTFLC82IXKhVcLT+zlgDStikpr2Ew/i7d9Du95O7DmiYASUgZMgfZv3A+T RrYJL3ztKnkyG8dkpVTJz52uPWJkomQJ7c/+W3YJUTnFy3ibIEW6KakjN5mqZAlH Mt6TwnF+ASccPx0ytqB/5b9qit+mBohXZDVmmEDZHmLfcZFU+NKzSsk/3wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIsHY9I8hAOU58vNzzmrmIZ2G59WMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRhZmNmYmNjLWE2ZDItNDJkNy1iZWU1LTNiMDhiZjYyYTg2MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba86CAMA0GCSqGSIb3DQEBCwUAA4IBAQAMLvwqVPDQHMZt5kl2 aSpWsoVhhMdaNzHHgYHlEOtEmWpso3wpV1jePf9K/J3kNFwZBkc51e9ZTkmTx/OU 1uxgp3IZ05mWSD/gDJusdjBjcbCR6JdnrisNaGYrCTjKnaFxvoiYXYhZQy9yc5XK SYK2QfeWzOGuTU/7m6ipMxFi+Ji6szmh0wEm1qNY3tWfuF7sew5BVrP/y6aodXT1 N4xwOwPKUGBv0s8VZCkNfX2nHQhFMRyA73WNeIKTvOp6RY8tc1AD2ahWko24gvXa yGVwVQ/DAGLH4sCWhVLyCRP98CpPW/cUmiz72nnzFbOb3IjqoPdh2D1Qw40/gnTd B4+6 -----END CERTIFICATE-----Generated at Sun Mar 1 21:53:19 2026 by rpki-client