$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/53ac39b7-314a-41bd-b03b-7614d1b28030.roa File: 53ac39b7-314a-41bd-b03b-7614d1b28030.roa (raw, json) Hash identifier: WYV7fkaUXM7HNHpZ5b5mCmH3wP9Y+S5oU8nbdQtrS9Y= Subject key identifier: 20:8E:6F:E4:44:41:8A:2E:59:F6:97:9A:78:61:A4:39:9F:F9:28:F1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 36401A229437DA92843A151386CCF5AB59A83240 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/53ac39b7-314a-41bd-b03b-7614d1b28030.roa Signing time: Sat 21 Feb 2026 00:10:44 +0000 ROA not before: Sat 21 Feb 2026 00:10:44 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:a800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:40:1a:22:94:37:da:92:84:3a:15:13:86:cc:f5:ab:59:a8:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:10:44 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=3fa81842df01fdcf08f66200196f4a4ee41447d30ef3c57026e7f1bd4dab5d12, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:3e:be:a2:20:7e:01:fd:87:4b:55:db:c1: b4:aa:d1:45:e5:db:d2:a0:62:4a:61:6a:01:38:24: 8b:36:06:1f:74:fb:22:60:02:85:5b:d7:4f:40:49: 4f:74:68:94:76:2a:70:35:a5:c8:f4:29:a2:ec:9e: a0:eb:21:04:b5:d2:2a:7c:26:ec:d0:5a:0b:d6:a7: 43:61:56:50:69:f2:df:fd:4a:ee:c4:f3:23:ca:86: 85:50:23:16:68:54:5c:33:c8:98:da:a3:91:20:09: c5:a5:d5:58:6c:23:25:61:f9:47:af:f6:8e:a4:ff: e3:f2:4c:51:4e:2e:d3:34:86:4e:89:73:e4:3a:01: 46:62:82:ea:35:ec:d2:4c:2c:0e:92:74:3d:0c:34: 14:ed:00:99:b1:ae:01:6b:65:30:23:dd:d4:f0:62: c3:bb:18:46:42:4f:20:92:64:8b:ac:3b:57:d7:df: b1:25:31:50:16:4d:98:f0:5e:59:f3:fd:1c:26:a8: e2:fd:81:76:20:79:c1:ff:f7:70:1a:27:62:c6:a0: f9:07:d8:19:78:b5:72:61:39:11:de:ec:c1:de:e4: e3:88:32:4f:bc:bd:15:98:df:d2:46:51:63:5f:fe: 8e:de:74:64:8f:ac:28:d7:58:f5:61:07:78:b8:52: b1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8E:6F:E4:44:41:8A:2E:59:F6:97:9A:78:61:A4:39:9F:F9:28:F1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/53ac39b7-314a-41bd-b03b-7614d1b28030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:a800::/48 Signature Algorithm: sha256WithRSAEncryption 58:7f:26:ed:f4:9e:d4:c1:b2:2c:e9:fd:79:c5:c2:a9:05:b4: 2b:d0:ae:a2:d8:18:63:12:b4:87:78:0b:55:d9:20:99:c6:4f: eb:70:62:ff:00:6e:c5:17:1c:6f:26:d9:5e:eb:2f:58:92:6d: ab:03:19:98:c1:11:eb:9e:27:ad:b5:bf:9d:da:8a:eb:94:38: 50:72:cd:36:27:28:c0:46:0c:38:24:e9:b5:d6:d7:0d:bd:9a: f5:f4:50:c6:18:46:03:a2:f6:7d:64:b5:12:5a:41:a3:01:7a: 32:65:05:62:8d:19:d2:f5:06:61:6f:80:39:25:5f:c9:b9:63: 56:62:5c:7e:94:4f:88:ae:a8:8b:b1:1d:5c:61:79:08:6f:1c: 87:84:cf:a7:69:ef:a1:06:42:ea:36:ca:9c:eb:4d:59:ed:d2: c7:8f:1f:5a:ce:b3:23:c0:6a:00:aa:67:5d:49:f3:2a:f5:98: 47:fa:46:20:86:95:1f:f3:cf:1b:11:3d:fc:5b:80:b2:e3:2b: 49:ab:4b:e4:f7:93:3d:21:56:78:2b:2a:01:f7:c9:34:68:1f: 82:d5:a7:9d:59:cd:31:37:0a:cd:0e:da:ed:89:8c:47:96:9e: db:3e:f7:4d:96:d2:f5:3d:5f:44:98:d6:1d:ef:82:a8:6d:34: 91:48:be:47 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNkAaIpQ32pKEOhUThsz1q1moMkAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMTA0NFoX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAM2ZhODE4NDJkZjAxZmRjZjA4ZjY2 MjAwMTk2ZjRhNGVlNDE0NDdkMzBlZjNjNTcwMjZlN2YxYmQ0ZGFiNWQxMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusk+vqIgfgH9h0tV28G0qtFF5dvS oGJKYWoBOCSLNgYfdPsiYAKFW9dPQElPdGiUdipwNaXI9Cmi7J6g6yEEtdIqfCbs 0FoL1qdDYVZQafLf/UruxPMjyoaFUCMWaFRcM8iY2qORIAnFpdVYbCMlYflHr/aO pP/j8kxRTi7TNIZOiXPkOgFGYoLqNezSTCwOknQ9DDQU7QCZsa4Ba2UwI93U8GLD uxhGQk8gkmSLrDtX19+xJTFQFk2Y8F5Z8/0cJqji/YF2IHnB//dwGidixqD5B9gZ eLVyYTkR3uzB3uTjiDJPvL0VmN/SRlFjX/6O3nRkj6wo11j1YQd4uFKxGQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCCOb+REQYouWfaXmnhhpDmf+SjxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUzYWMzOWI3LTMxNGEtNDFiZC1iMDNiLTc2MTRkMWIyODAzMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7KgAMA0GCSqGSIb3DQEBCwUAA4IBAQBYfybt9J7UwbIs6f15 xcKpBbQr0K6i2BhjErSHeAtV2SCZxk/rcGL/AG7FFxxvJtle6y9Ykm2rAxmYwRHr niettb+d2orrlDhQcs02JyjARgw4JOm11tcNvZr19FDGGEYDovZ9ZLUSWkGjAXoy ZQVijRnS9QZhb4A5JV/JuWNWYlx+lE+IrqiLsR1cYXkIbxyHhM+nae+hBkLqNsqc 601Z7dLHjx9azrMjwGoAqmddSfMq9ZhH+kYghpUf888bET38W4Cy4ytJq0vk95M9 IVZ4KyoB98k0aB+C1aedWc0xNwrNDtrtiYxHlp7bPvdNltL1PV9EmNYd74KobTSR SL5H -----END CERTIFICATE-----Generated at Sun Mar 1 22:04:53 2026 by rpki-client