$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4c01d0b7-a36c-4fd4-8763-5cffae96bc6a.roa File: 4c01d0b7-a36c-4fd4-8763-5cffae96bc6a.roa (raw, json) Hash identifier: qEdB8jAMUWrvcsfwBNgmPwi1qrel08QVnQOLRXr9xj4= Subject key identifier: 77:EB:81:3C:CC:7D:A0:2A:CF:4A:0E:88:88:D7:70:72:FF:EE:40:2D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4DE17A32048A42DEEC97F41EFFEADEE2FAC87346 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4c01d0b7-a36c-4fd4-8763-5cffae96bc6a.roa Signing time: Fri 20 Feb 2026 00:30:39 +0000 ROA not before: Fri 20 Feb 2026 00:30:39 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e1:7a:32:04:8a:42:de:ec:97:f4:1e:ff:ea:de:e2:fa:c8:73:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:30:39 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=cda7f41d732afca6a7c2596be5090a8dc4d787c0bf240ea04cc33c43d638807a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d1:6a:28:6b:6c:7c:d0:11:24:66:94:8d:06: e1:2f:94:65:a2:f9:2e:af:f9:b1:78:f9:f7:79:19: 2e:5f:b5:49:e2:33:34:80:88:26:4c:80:2f:da:ed: 9f:d8:14:7d:56:51:e8:6b:64:8b:6e:58:71:f7:a1: 54:57:4e:dc:87:75:5f:1a:7a:ed:ac:51:51:7b:82: 85:a4:f7:e6:c6:aa:3f:9e:71:b7:55:7f:9d:5e:6a: 8b:54:b9:12:45:e4:b3:85:6f:c7:16:90:9d:4e:2e: 3c:07:c9:48:0c:6e:1e:d1:ee:56:25:82:d1:4e:38: 0d:e3:1b:d3:5e:d9:fd:3f:d4:07:63:c7:d8:51:94: be:b9:84:04:26:33:42:f3:8b:9f:91:dd:d8:e6:fa: 0b:81:67:81:1a:f2:6d:e5:b7:42:23:54:3f:a3:e9: e0:16:21:b0:02:e3:81:7b:21:3a:09:7b:02:0a:de: 04:bb:84:54:ab:1d:7a:f0:bd:4e:00:62:c2:a5:89: ed:a1:04:c7:79:86:8e:9c:37:9f:0b:0b:c5:08:9e: bf:77:11:49:bb:78:e9:a3:d4:4a:c8:d9:22:c9:d1: 1b:1e:42:53:c0:01:42:5c:0b:43:a9:ac:a8:62:0d: 02:f6:9a:39:bd:1e:9f:7b:f5:f8:b8:17:1e:fd:e4: 06:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EB:81:3C:CC:7D:A0:2A:CF:4A:0E:88:88:D7:70:72:FF:EE:40:2D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4c01d0b7-a36c-4fd4-8763-5cffae96bc6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:1080::/48 Signature Algorithm: sha256WithRSAEncryption 7c:0d:5d:d9:32:8c:e7:8d:11:f2:ff:bd:ff:47:93:6a:ec:79: b4:58:a6:73:7c:b6:45:2c:da:6c:f1:4e:02:80:aa:84:1d:64: 27:8e:c2:0b:7c:3b:d1:da:b2:16:07:61:a6:a0:55:b8:ed:ef: 55:30:b4:8f:2c:ef:66:1c:8e:13:6c:a2:d0:44:d5:25:7d:d2: a9:a7:01:d0:d1:88:ce:a4:76:38:bd:b1:cd:a6:b2:f5:d1:d5: de:04:3e:f5:ad:3c:21:b3:78:4b:e5:8d:c6:dc:d2:98:07:37: db:02:81:f0:18:ff:79:06:b8:c7:7d:44:05:9c:87:01:f8:78: 70:be:50:a8:ce:4d:81:a1:c0:14:d9:b6:f3:68:6a:b5:f0:f2: 8b:1f:d5:9d:c4:64:88:17:b4:5c:8b:5e:ca:e3:ca:c2:c8:33: 71:ac:34:b2:d7:a5:61:27:2f:af:46:f5:41:93:11:7d:a4:c1: f4:ee:18:73:6d:3a:b7:18:78:f3:0d:e9:47:a1:87:52:74:22: 2c:53:c6:ce:61:3d:29:94:cb:b2:3c:7e:e0:e9:2e:45:5c:82: 97:92:e7:40:55:89:40:b7:3b:a8:2d:9d:c3:ee:3d:06:d9:81: c2:97:7f:59:1a:15:b6:11:ec:ca:74:d3:57:fa:f5:44:56:ad: 57:99:a8:c1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTeF6MgSKQt7sl/Qe/+re4vrIc0YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMzAzOVoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAY2RhN2Y0MWQ3MzJhZmNhNmE3YzI1 OTZiZTUwOTBhOGRjNGQ3ODdjMGJmMjQwZWEwNGNjMzNjNDNkNjM4ODA3YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtFqKGtsfNARJGaUjQbhL5Rlovku r/mxePn3eRkuX7VJ4jM0gIgmTIAv2u2f2BR9VlHoa2SLblhx96FUV07ch3VfGnrt rFFRe4KFpPfmxqo/nnG3VX+dXmqLVLkSReSzhW/HFpCdTi48B8lIDG4e0e5WJYLR TjgN4xvTXtn9P9QHY8fYUZS+uYQEJjNC84ufkd3Y5voLgWeBGvJt5bdCI1Q/o+ng FiGwAuOBeyE6CXsCCt4Eu4RUqx168L1OAGLCpYntoQTHeYaOnDefCwvFCJ6/dxFJ u3jpo9RKyNkiydEbHkJTwAFCXAtDqayoYg0C9po5vR6fe/X4uBce/eQGbwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHfrgTzMfaAqz0oOiIjXcHL/7kAtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRjMDFkMGI3LWEzNmMtNGZkNC04NzYzLTVjZmZhZTk2YmM2YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaABCAMA0GCSqGSIb3DQEBCwUAA4IBAQB8DV3ZMoznjRHy/73/ R5Nq7Hm0WKZzfLZFLNps8U4CgKqEHWQnjsILfDvR2rIWB2GmoFW47e9VMLSPLO9m HI4TbKLQRNUlfdKppwHQ0YjOpHY4vbHNprL10dXeBD71rTwhs3hL5Y3G3NKYBzfb AoHwGP95BrjHfUQFnIcB+HhwvlCozk2BocAU2bbzaGq18PKLH9WdxGSIF7Rci17K 48rCyDNxrDSy16VhJy+vRvVBkxF9pMH07hhzbTq3GHjzDelHoYdSdCIsU8bOYT0p lMuyPH7g6S5FXIKXkudAVYlAtzuoLZ3D7j0G2YHCl39ZGhW2EezKdNNX+vVEVq1X majB -----END CERTIFICATE-----Generated at Mon Mar 2 05:10:09 2026 by rpki-client