$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f24907e-93d5-49c5-9a11-37e2a6b6d0df.roa File: 5f24907e-93d5-49c5-9a11-37e2a6b6d0df.roa (raw, json) Hash identifier: cnJBgmQzXjhTNFVR+6/m6BXBHoWGf9Fo/OhwDdohBmc= Subject key identifier: EF:1B:D7:8A:BC:7F:A3:0F:F2:32:4D:BE:5F:54:69:79:17:39:FD:D2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 39F8AF1BB5FB1E0FF8B1B6323260C8E6D6F90312 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f24907e-93d5-49c5-9a11-37e2a6b6d0df.roa Signing time: Fri 06 Feb 2026 00:00:31 +0000 ROA not before: Fri 06 Feb 2026 00:00:31 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daed:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f8:af:1b:b5:fb:1e:0f:f8:b1:b6:32:32:60:c8:e6:d6:f9:03:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 6 00:00:31 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=6387439b4315d0334da26680d93e61f1c5fabdc6a61e3b2f27b49093214bfac2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:dc:21:73:9d:87:af:e5:18:92:25:f0:60: bc:2c:b7:10:da:e2:09:b6:bf:cc:06:c8:d9:f7:99: c8:9c:74:5f:66:08:17:37:bc:1e:f1:df:91:2b:e5: 30:e7:c5:ed:f7:95:d0:0e:6e:0e:f7:dc:28:09:ed: 10:31:cc:61:24:10:45:8f:8a:a5:7a:84:20:c6:c6: 4d:09:ae:00:24:e0:c3:fe:0a:49:06:7e:98:34:f0: d3:f7:f7:a0:47:ba:89:d1:3b:ab:df:73:39:20:34: 33:45:7f:87:60:e6:b2:e6:a9:fc:c7:cd:41:13:c5: 22:ce:0e:db:4f:dd:6d:91:60:d2:46:1c:dd:3d:c6: 0c:28:1e:4f:7f:d7:1b:05:69:1a:4b:cc:a2:50:a1: 93:ae:71:c6:0e:4b:ae:0f:e7:f9:7b:dc:eb:b8:d9: e6:e5:51:66:0f:a3:af:22:72:61:03:db:5c:d0:31: f8:a3:1a:6c:bd:88:80:aa:d4:62:15:9c:14:2e:a2: b4:21:3c:bf:19:4e:08:10:eb:5d:8a:7c:1c:5c:b0: 6b:d7:30:36:24:54:b7:f3:12:a8:21:e9:1c:54:36: 46:1b:7e:41:53:cc:d5:41:b4:da:bf:cc:7c:15:c3: 33:3d:61:80:c9:2d:9a:c3:80:84:85:c9:52:d5:83: 71:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1B:D7:8A:BC:7F:A3:0F:F2:32:4D:BE:5F:54:69:79:17:39:FD:D2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f24907e-93d5-49c5-9a11-37e2a6b6d0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:a080::/48 Signature Algorithm: sha256WithRSAEncryption 39:2c:ca:ba:4c:12:32:57:29:34:6f:0c:50:49:80:5b:d6:81: 14:72:76:cc:7e:61:5d:6d:a8:cf:ec:a8:7d:a7:40:a4:22:98: e1:c2:67:4a:b6:50:60:4f:de:ff:0e:87:43:38:c9:a2:2a:bf: 8c:5f:eb:aa:f7:72:06:be:8b:0e:ad:99:7c:d1:38:7c:b2:60: 8f:17:08:3b:e6:c9:77:2f:49:7c:3d:1a:86:8e:f0:a8:63:6f: fe:16:06:c4:09:63:7c:f5:3f:c4:ce:5e:f2:56:04:4f:11:52: ee:aa:cc:96:c5:76:a5:95:6e:85:ef:63:71:8c:ad:2a:32:7f: ac:5d:25:02:f8:9c:55:2e:e7:f0:f5:46:0e:df:c7:7c:9b:9d: f2:88:75:83:ad:e1:4d:f2:50:62:80:10:d3:3d:cd:6f:cb:25: 14:bd:83:0f:03:91:94:2f:ae:41:44:b3:8a:18:df:27:b9:07: bc:27:f6:11:6f:2d:ef:2a:36:ed:23:f7:8e:31:38:7a:53:4f: 01:3a:40:f6:3d:52:ac:25:42:20:fb:ba:28:e2:a3:e7:b0:81: 14:08:ae:00:31:05:1b:c5:ef:60:28:aa:1c:6c:70:d5:d0:70: d4:87:3a:02:da:2d:bb:ee:76:53:af:df:1b:c7:18:06:53:98: e8:bf:0e:42 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOfivG7X7Hg/4sbYyMmDI5tb5AxIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIwNjAwMDAzMVoX DTI2MDUwNzIzNTk1OVowejFJMEcGA1UEBRNANjM4NzQzOWI0MzE1ZDAzMzRkYTI2 NjgwZDkzZTYxZjFjNWZhYmRjNmE2MWUzYjJmMjdiNDkwOTMyMTRiZmFjMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3jcIXOdh6/lGJIl8GC8LLcQ2uIJ tr/MBsjZ95nInHRfZggXN7we8d+RK+Uw58Xt95XQDm4O99woCe0QMcxhJBBFj4ql eoQgxsZNCa4AJODD/gpJBn6YNPDT9/egR7qJ0Tur33M5IDQzRX+HYOay5qn8x81B E8Uizg7bT91tkWDSRhzdPcYMKB5Pf9cbBWkaS8yiUKGTrnHGDkuuD+f5e9zruNnm 5VFmD6OvInJhA9tc0DH4oxpsvYiAqtRiFZwULqK0ITy/GU4IEOtdinwcXLBr1zA2 JFS38xKoIekcVDZGG35BU8zVQbTav8x8FcMzPWGAyS2aw4CEhclS1YNxOwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFO8b14q8f6MP8jJNvl9UaXkXOf3SMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmMjQ5MDdlLTkzZDUtNDljNS05YTExLTM3ZTJhNmI2ZDBkZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7aCAMA0GCSqGSIb3DQEBCwUAA4IBAQA5LMq6TBIyVyk0bwxQ SYBb1oEUcnbMfmFdbajP7Kh9p0CkIpjhwmdKtlBgT97/DodDOMmiKr+MX+uq93IG vosOrZl80Th8smCPFwg75sl3L0l8PRqGjvCoY2/+FgbECWN89T/Ezl7yVgRPEVLu qsyWxXallW6F72NxjK0qMn+sXSUC+JxVLufw9UYO38d8m53yiHWDreFN8lBigBDT Pc1vyyUUvYMPA5GUL65BRLOKGN8nuQe8J/YRby3vKjbtI/eOMTh6U08BOkD2PVKs JUIg+7oo4qPnsIEUCK4AMQUbxe9gKKocbHDV0HDUhzoC2i277nZTr98bxxgGU5jo vw5C -----END CERTIFICATE-----Generated at Sun Mar 1 23:46:58 2026 by rpki-client