$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/590bbdd1-35ba-48a7-9d01-91fa16220f4e.roa File: 590bbdd1-35ba-48a7-9d01-91fa16220f4e.roa (raw, json) Hash identifier: hywPLGjnrqefY2F96pr2y8GziHSS9JoOiiUfsMi+soE= Subject key identifier: B5:FF:23:BB:2A:4A:20:D2:F9:42:A5:B7:D5:BE:93:79:DC:91:0A:2A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1115D4F919D0F8D4512B432843C376A03B1BCD32 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/590bbdd1-35ba-48a7-9d01-91fa16220f4e.roa Signing time: Thu 26 Feb 2026 00:00:12 +0000 ROA not before: Thu 26 Feb 2026 00:00:12 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:15:d4:f9:19:d0:f8:d4:51:2b:43:28:43:c3:76:a0:3b:1b:cd:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 26 00:00:12 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=3860b10455e566db01a574361ca8b9cfe4b78bf9c371a917f078664f86f765d3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:4d:61:2a:f6:15:65:f2:ec:03:4a:03:ad: 84:a0:fc:c5:1b:fa:03:ad:2e:b4:6a:7d:e9:86:ec: e9:67:2b:69:af:1a:bb:94:e8:57:2a:65:ca:03:a2: dd:35:49:17:94:88:30:b1:74:9c:79:ff:16:b3:22: 68:57:0b:fb:61:c1:00:31:b9:9e:83:6a:0c:26:f3: 2b:b2:5d:00:b9:fc:1c:29:d6:a3:ed:50:92:5c:d9: 15:84:43:35:e9:b8:d3:52:23:e9:04:f0:5a:35:64: 76:8c:3c:58:c7:c9:08:3b:2b:03:ca:dd:09:e1:6f: cf:c6:9d:ef:b2:8a:de:d5:19:f6:79:c1:a1:34:b2: 02:46:01:36:53:b8:71:5c:e9:15:f8:76:12:e4:db: 68:bb:c6:2c:d0:cc:f5:67:60:ce:da:7c:ce:cb:76: 46:d8:05:6f:86:e7:d0:b3:2c:76:25:d5:d9:0d:ff: a7:d2:29:ec:b1:96:13:e0:ce:33:71:41:82:f3:7f: 59:86:d1:62:38:67:57:4c:00:39:c2:3c:bf:1e:cf: bc:f9:0f:a6:6d:a3:a5:cc:67:f3:25:20:20:df:3a: 00:18:84:eb:3e:84:2a:d2:62:20:c4:97:ed:a7:5b: 47:70:d4:08:de:24:78:d9:f0:cf:8b:3f:7c:09:82: a2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FF:23:BB:2A:4A:20:D2:F9:42:A5:B7:D5:BE:93:79:DC:91:0A:2A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/590bbdd1-35ba-48a7-9d01-91fa16220f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:e000::/40 Signature Algorithm: sha256WithRSAEncryption 51:97:38:ff:d4:81:2f:88:7a:67:03:ae:8d:97:82:ac:99:67: 78:d9:1c:da:5e:82:9a:ea:27:5f:1b:ab:d5:1f:a8:93:33:01: 96:df:2f:7f:b3:07:fc:c4:94:fd:e0:f9:28:7e:3f:d6:79:6d: eb:b7:92:09:30:56:17:54:61:37:e8:89:b4:f6:55:8e:bd:ae: b6:77:88:cb:3f:53:66:3b:f2:5e:28:9a:67:f1:ee:3a:8c:5e: ce:d1:5f:3f:7e:3e:82:e7:74:df:63:a0:2b:e6:7c:47:b6:a5: 6b:e5:bb:b7:60:5a:6e:74:6a:46:30:ff:9b:61:bd:09:57:d1: c5:d6:ed:67:49:98:f3:fa:04:74:8c:76:91:91:20:9c:02:3f: e0:ff:dc:07:e1:3e:fc:80:96:60:8b:83:d4:51:c9:90:d6:77: da:66:fc:f5:e8:1f:a5:e6:f4:a6:86:e8:2d:b3:bd:9f:3f:f0: 9f:81:5a:ba:49:00:19:14:76:a1:aa:1e:d2:f5:38:d7:bf:42: 90:a7:fc:41:a2:f7:6d:69:77:7d:a4:1a:35:41:a2:b5:4b:04: 82:ef:e2:cf:eb:c2:51:6b:b0:c0:5a:c3:fa:10:bd:c8:aa:6a: a4:67:c8:21:14:c9:30:e9:c6:a9:01:24:74:ec:15:83:7f:50: bd:93:51:1f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUERXU+RnQ+NRRK0MoQ8N2oDsbzTIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyNjAwMDAxMloX DTI2MDUyNzIzNTk1OVowejFJMEcGA1UEBRNAMzg2MGIxMDQ1NWU1NjZkYjAxYTU3 NDM2MWNhOGI5Y2ZlNGI3OGJmOWMzNzFhOTE3ZjA3ODY2NGY4NmY3NjVkMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8FNYSr2FWXy7ANKA62EoPzFG/oD rS60an3phuzpZytprxq7lOhXKmXKA6LdNUkXlIgwsXScef8WsyJoVwv7YcEAMbme g2oMJvMrsl0AufwcKdaj7VCSXNkVhEM16bjTUiPpBPBaNWR2jDxYx8kIOysDyt0J 4W/Pxp3vsore1Rn2ecGhNLICRgE2U7hxXOkV+HYS5Ntou8Ys0Mz1Z2DO2nzOy3ZG 2AVvhufQsyx2JdXZDf+n0inssZYT4M4zcUGC839ZhtFiOGdXTAA5wjy/Hs+8+Q+m baOlzGfzJSAg3zoAGITrPoQq0mIgxJftp1tHcNQI3iR42fDPiz98CYKivQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLX/I7sqSiDS+UKlt9W+k3nckQoqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU5MGJiZGQxLTM1YmEtNDhhNy05ZDAxLTkxZmExNjIyMGY0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7eAwDQYJKoZIhvcNAQELBQADggEBAFGXOP/UgS+IemcDro2X gqyZZ3jZHNpegprqJ18bq9UfqJMzAZbfL3+zB/zElP3g+Sh+P9Z5beu3kgkwVhdU YTfoibT2VY69rrZ3iMs/U2Y78l4ommfx7jqMXs7RXz9+PoLndN9joCvmfEe2pWvl u7dgWm50akYw/5thvQlX0cXW7WdJmPP6BHSMdpGRIJwCP+D/3AfhPvyAlmCLg9RR yZDWd9pm/PXoH6Xm9KaG6C2zvZ8/8J+BWrpJABkUdqGqHtL1ONe/QpCn/EGi921p d32kGjVBorVLBILv4s/rwlFrsMBaw/oQvciqaqRnyCEUyTDpxqkBJHTsFYN/UL2T UR8= -----END CERTIFICATE-----Generated at Sun Mar 1 23:37:51 2026 by rpki-client