$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/663fa6aa-9936-47d7-9f13-719ba997b9b3.roa File: 663fa6aa-9936-47d7-9f13-719ba997b9b3.roa (raw, json) Hash identifier: 9jHOnfKcdcnTqxegQOMZoKWsaSFsmph1MixO+GCZjqs= Subject key identifier: A1:17:C5:0F:4E:1D:34:C0:75:09:74:77:33:C8:AD:C5:28:7D:A1:AA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2CD45D92D5D665A534E773DA1AF76788ED44E6FC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/663fa6aa-9936-47d7-9f13-719ba997b9b3.roa Signing time: Sun 22 Feb 2026 00:30:44 +0000 ROA not before: Sun 22 Feb 2026 00:30:44 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1c:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d4:5d:92:d5:d6:65:a5:34:e7:73:da:1a:f7:67:88:ed:44:e6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:30:44 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=630e8d2aeb58a98b92d9f5eb04bc78b258d417250a8fabc0ff042d99ce3ac1d5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:c1:d5:3f:16:1b:66:db:36:e0:b6:a5:59: d9:fa:5c:cd:47:81:29:ed:d7:04:82:e7:b4:19:dc: b4:5a:5a:6f:2c:78:45:18:13:62:b3:f2:88:84:38: 88:17:95:a1:e5:e9:d8:b9:46:78:fe:36:7e:bb:fc: f6:95:36:67:b8:46:9b:4a:ed:4b:ff:cc:c3:2a:bc: 18:1b:18:87:91:bf:f6:28:ce:e5:c8:80:23:ca:49: e9:7d:02:40:de:d9:e8:cd:07:a8:f6:3a:1a:c9:dc: 46:8e:41:82:3d:06:d7:96:18:06:18:54:2c:12:88: 39:2a:3a:47:11:6a:37:09:23:c1:f3:d5:28:05:ce: 5a:d5:67:04:aa:81:eb:d6:b4:93:17:3d:15:eb:43: 50:e0:3e:67:1b:f8:6b:f5:ff:b4:93:d9:5d:d3:96: 1c:73:3d:5f:af:b1:d2:2b:66:c3:ad:17:5c:3e:a5: f3:14:dc:8e:22:9d:77:10:5e:ab:2d:9b:19:f1:e0: 10:d7:69:3d:b7:e5:d7:be:23:86:95:19:cf:e6:d8: 7a:dd:4c:c5:7f:fb:05:80:2e:37:aa:d6:7f:b0:ed: 72:e1:6a:18:94:e7:2b:79:d4:94:6f:52:9f:56:85: a4:7f:e1:dc:77:83:e9:d4:85:0c:cb:aa:9b:a6:8f: 33:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:17:C5:0F:4E:1D:34:C0:75:09:74:77:33:C8:AD:C5:28:7D:A1:AA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/663fa6aa-9936-47d7-9f13-719ba997b9b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1c:8000::/36 Signature Algorithm: sha256WithRSAEncryption 5a:1b:b4:1f:40:bd:c2:4a:92:e6:ea:9c:77:83:50:f1:a1:94: ae:48:f8:23:62:d6:09:1b:b2:76:1f:9c:eb:ad:94:67:b9:26: fb:bf:cc:02:3d:17:14:65:26:be:ff:37:0d:bb:a3:4e:6f:e7: d2:56:c1:be:11:ee:98:21:3f:4b:bd:32:ce:d8:5f:74:18:5f: 34:a8:92:38:55:75:40:33:91:7d:dd:8f:11:0e:90:cd:ff:db: 6d:3b:59:bd:88:29:c7:d0:51:3a:9d:41:fe:d3:3c:9f:c7:c0: 01:24:e4:57:87:fb:f9:66:b3:5a:23:1e:93:a0:30:2b:c5:e3: b0:6e:a4:b0:3b:0b:29:a2:62:a3:73:e2:89:f3:4c:6e:0a:51: b5:5d:27:56:c3:d6:3d:61:58:78:3c:22:29:72:c5:60:27:9a: f2:90:a0:da:4a:0d:c5:1f:d6:1e:f5:30:ed:4e:2b:5f:d7:de: ba:0b:66:5e:33:c7:41:e6:d1:06:e0:dc:99:27:49:d8:a5:30: 55:6c:f1:12:9e:bf:64:cb:a8:ab:4f:ed:14:85:06:b4:05:c9: 41:58:28:bf:04:5f:db:80:51:02:65:1b:14:fb:72:a2:68:9b: fd:86:a9:ac:85:87:d1:0d:f4:d0:f0:55:6c:e5:1c:5a:5e:af: 65:4d:74:59 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULNRdktXWZaU053PaGvdniO1E5vwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMzA0NFoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNANjMwZThkMmFlYjU4YTk4YjkyZDlm NWViMDRiYzc4YjI1OGQ0MTcyNTBhOGZhYmMwZmYwNDJkOTljZTNhYzFkNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYPB1T8WG2bbNuC2pVnZ+lzNR4Ep 7dcEgue0Gdy0WlpvLHhFGBNis/KIhDiIF5Wh5enYuUZ4/jZ+u/z2lTZnuEabSu1L /8zDKrwYGxiHkb/2KM7lyIAjyknpfQJA3tnozQeo9joaydxGjkGCPQbXlhgGGFQs Eog5KjpHEWo3CSPB89UoBc5a1WcEqoHr1rSTFz0V60NQ4D5nG/hr9f+0k9ld05Yc cz1fr7HSK2bDrRdcPqXzFNyOIp13EF6rLZsZ8eAQ12k9t+XXviOGlRnP5th63UzF f/sFgC43qtZ/sO1y4WoYlOcredSUb1KfVoWkf+Hcd4Pp1IUMy6qbpo8z5QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKEXxQ9OHTTAdQl0dzPIrcUofaGqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY2M2ZhNmFhLTk5MzYtNDdkNy05ZjEzLTcxOWJhOTk3YjliMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaHIAwDQYJKoZIhvcNAQELBQADggEBAFobtB9AvcJKkubqnHeD UPGhlK5I+CNi1gkbsnYfnOutlGe5Jvu/zAI9FxRlJr7/Nw27o05v59JWwb4R7pgh P0u9Ms7YX3QYXzSokjhVdUAzkX3djxEOkM3/2207Wb2IKcfQUTqdQf7TPJ/HwAEk 5FeH+/lms1ojHpOgMCvF47BupLA7CymiYqNz4onzTG4KUbVdJ1bD1j1hWHg8Iily xWAnmvKQoNpKDcUf1h71MO1OK1/X3roLZl4zx0Hm0Qbg3JknSdilMFVs8RKev2TL qKtP7RSFBrQFyUFYKL8EX9uAUQJlGxT7cqJom/2GqayFh9EN9NDwVWzlHFper2VN dFk= -----END CERTIFICATE-----Generated at Sun Mar 1 22:03:06 2026 by rpki-client