$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/564bcbed-0561-4889-868c-6cfcb0ba50ec.roa File: 564bcbed-0561-4889-868c-6cfcb0ba50ec.roa (raw, json) Hash identifier: OompS6qQ9RQz+zQxpGzE6wVClevLQfMLzHQMKbUtG68= Subject key identifier: 91:F5:E7:3A:09:C7:68:6E:CB:AE:C6:D5:74:27:16:61:17:8C:08:64 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5EAF226005013A1EC526DC17B3DF973983930CF5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/564bcbed-0561-4889-868c-6cfcb0ba50ec.roa Signing time: Sun 22 Feb 2026 00:01:22 +0000 ROA not before: Sun 22 Feb 2026 00:01:22 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da12:8c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:af:22:60:05:01:3a:1e:c5:26:dc:17:b3:df:97:39:83:93:0c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:01:22 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=f6c1ea31afe50a832769e8bc0808ba458aa05eac0700a5991b1a6fd2fa59811c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:0d:48:14:7d:10:37:68:0e:35:79:64:0e: cf:85:7e:0c:ec:25:56:c1:21:d9:e6:66:ae:74:e0: 31:69:41:ba:a0:2e:4a:dc:a3:44:de:e2:1c:0e:e6: e0:a0:fa:1c:9a:59:1d:aa:07:8c:fc:41:e7:6c:74: ea:46:69:a8:d7:70:e6:66:30:27:f9:5a:f1:9a:37: 3d:55:6b:29:a7:a8:b4:aa:93:9b:00:fd:2f:6e:08: e4:ee:55:22:1f:d6:b5:49:f8:07:67:18:3e:f1:2f: 30:fb:91:e5:b1:b3:15:1d:f4:c1:c2:ec:26:4f:32: a8:a5:22:3a:0f:cf:ca:9b:f2:32:52:c3:c1:6b:43: 38:8a:32:31:5b:cc:ac:1c:f6:db:9e:35:e1:f2:e3: c5:cc:f5:57:e8:a8:05:69:6c:9d:15:57:1e:75:69: a9:cd:f2:e8:c3:43:7b:f9:12:f4:d6:ce:50:12:02: 3c:da:0c:68:32:39:b1:1a:50:ad:80:ed:ab:ef:98: 5c:4d:5c:bc:f9:ab:52:39:df:16:5c:2e:45:bf:e8: be:b8:5a:c8:74:ee:d4:2e:3c:2f:b1:bf:bf:72:e4: 90:c3:80:04:5f:e3:1d:ac:dc:a5:4c:23:c9:40:9a: d6:f6:fd:98:72:ce:11:77:0b:63:38:23:ab:a6:7d: 4d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F5:E7:3A:09:C7:68:6E:CB:AE:C6:D5:74:27:16:61:17:8C:08:64 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/564bcbed-0561-4889-868c-6cfcb0ba50ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da12:8c00::/38 Signature Algorithm: sha256WithRSAEncryption b3:b3:fc:e0:d6:0d:04:83:0d:fa:df:1b:4a:c4:9e:7a:24:8b: 34:88:c0:e3:5c:31:db:c9:74:09:fa:61:45:e0:48:cb:31:e2: d5:9e:cb:5d:17:8f:36:32:5d:b6:6e:f5:8d:8c:41:bd:ad:df: 1c:8f:94:5e:9a:33:09:9c:26:92:49:75:9a:45:2e:07:09:6a: 4c:4c:a0:2a:3e:78:aa:b3:0b:6c:16:54:27:89:eb:38:d4:c6: 4b:3d:66:dd:55:c8:e2:8e:65:95:d8:a7:37:99:53:d2:74:5e: d8:11:be:03:6b:00:1e:8f:7a:4d:e4:e4:f9:15:c8:5f:63:f5: a5:15:f3:75:b8:c6:78:2c:37:ec:16:ed:7e:54:ef:9e:ae:26: d9:6f:69:13:4c:01:13:4f:cf:d9:fc:89:70:2d:b6:20:9e:5b: a0:d1:7a:02:54:94:3c:8d:23:27:6b:c0:2d:68:c0:e8:25:30: 21:13:3a:1b:eb:f6:c8:f7:61:26:4c:88:fa:d1:69:d7:f6:f5: 5e:42:05:7a:21:27:d5:ee:b5:13:51:33:0f:9f:6f:e6:1b:ef: 2d:73:23:9d:f3:f9:d0:e4:2d:a4:95:c5:a4:4c:4a:c9:84:2c: b2:23:20:ad:75:dc:c8:e9:63:39:dd:f5:3a:87:e1:85:9a:17: 28:3b:06:95 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXq8iYAUBOh7FJtwXs9+XOYOTDPUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMDEyMloX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAZjZjMWVhMzFhZmU1MGE4MzI3Njll OGJjMDgwOGJhNDU4YWEwNWVhYzA3MDBhNTk5MWIxYTZmZDJmYTU5ODExYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua8NSBR9EDdoDjV5ZA7PhX4M7CVW wSHZ5maudOAxaUG6oC5K3KNE3uIcDubgoPocmlkdqgeM/EHnbHTqRmmo13DmZjAn +Vrxmjc9VWspp6i0qpObAP0vbgjk7lUiH9a1SfgHZxg+8S8w+5HlsbMVHfTBwuwm TzKopSI6D8/Km/IyUsPBa0M4ijIxW8ysHPbbnjXh8uPFzPVX6KgFaWydFVcedWmp zfLow0N7+RL01s5QEgI82gxoMjmxGlCtgO2r75hcTVy8+atSOd8WXC5Fv+i+uFrI dO7ULjwvsb+/cuSQw4AEX+MdrNylTCPJQJrW9v2Ycs4RdwtjOCOrpn1NAQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJH15zoJx2huy67G1XQnFmEXjAhkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2NGJjYmVkLTA1NjEtNDg4OS04NjhjLTZjZmNiMGJhNTBlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEowwDQYJKoZIhvcNAQELBQADggEBALOz/ODWDQSDDfrfG0rE nnokizSIwONcMdvJdAn6YUXgSMsx4tWey10XjzYyXbZu9Y2MQb2t3xyPlF6aMwmc JpJJdZpFLgcJakxMoCo+eKqzC2wWVCeJ6zjUxks9Zt1VyOKOZZXYpzeZU9J0XtgR vgNrAB6Pek3k5PkVyF9j9aUV83W4xngsN+wW7X5U756uJtlvaRNMARNPz9n8iXAt tiCeW6DRegJUlDyNIydrwC1owOglMCETOhvr9sj3YSZMiPrRadf29V5CBXohJ9Xu tRNRMw+fb+Yb7y1zI53z+dDkLaSVxaRMSsmELLIjIK113MjpYznd9TqH4YWaFyg7 BpU= -----END CERTIFICATE-----Generated at Mon Mar 2 05:16:25 2026 by rpki-client