$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71671b18-662e-4750-ba75-21e2b5919f34.roa File: 71671b18-662e-4750-ba75-21e2b5919f34.roa (raw, json) Hash identifier: HhZega4DSJW5YNojOkNi1QF3sQrF6OJqeZOc9DEtpE0= Subject key identifier: 21:84:D4:FA:C6:D5:C4:1E:B3:C5:D6:2F:98:81:DD:00:50:E2:6D:EF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42683CFAAB41129F2C863EBF164BC71069BD8023 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71671b18-662e-4750-ba75-21e2b5919f34.roa Signing time: Sun 22 Feb 2026 00:00:11 +0000 ROA not before: Sun 22 Feb 2026 00:00:11 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1b::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:68:3c:fa:ab:41:12:9f:2c:86:3e:bf:16:4b:c7:10:69:bd:80:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:00:11 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=d80b035ab4d5db9f3280ed11938e9443a529e8bf32c12d9ac1b2b332d030a676, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:dd:99:2d:ac:eb:9a:cd:2c:e2:68:49:2d: 7c:ed:bc:fc:69:00:17:98:1d:9a:6f:0f:dc:ac:fe: 41:49:50:b4:b8:0c:76:ab:00:61:6d:f0:ec:a1:7b: 97:1c:e9:1b:56:e4:07:c6:29:b8:7e:2a:74:55:7b: 9d:3f:70:3a:e0:7d:03:e6:fa:7c:1c:3a:e3:b4:2a: 93:2e:02:b2:b9:b6:26:73:7f:da:c4:69:cc:7b:4d: 3f:5a:bb:39:30:34:13:4b:db:31:1b:18:13:d3:4a: 3d:55:93:a0:41:7a:de:3c:97:f0:03:64:2b:79:26: c8:fe:f4:58:b6:5e:ce:9d:aa:5b:ed:08:dd:20:44: ab:d4:cf:15:75:0f:34:75:ad:b7:12:cf:31:a6:8e: 2a:c1:c3:b7:9e:4d:c8:62:fd:a4:a5:d4:4f:50:37: 22:0b:9a:71:12:a4:e5:48:d7:6b:8a:c8:56:4a:a7: fa:89:cf:37:76:90:ea:d9:b5:f9:ad:2f:c4:e7:26: d5:32:98:f6:6a:11:1d:61:1d:3f:2c:dc:85:66:9a: 37:47:7f:9c:e7:ca:e4:b9:f3:e1:08:a0:86:4d:4c: 9c:f5:89:91:ab:ee:ea:51:67:9f:48:06:a2:c3:1c: eb:43:2b:a0:44:53:bc:e9:68:c7:81:63:75:6e:50: b3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:84:D4:FA:C6:D5:C4:1E:B3:C5:D6:2F:98:81:DD:00:50:E2:6D:EF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71671b18-662e-4750-ba75-21e2b5919f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1b::/36 Signature Algorithm: sha256WithRSAEncryption 5f:12:2b:37:62:5d:c8:91:1b:18:ae:45:af:aa:1b:b3:08:42: fd:f2:81:59:11:65:83:97:52:31:64:a2:cc:e3:e5:74:df:d0: a3:b2:4c:ee:fe:38:0e:c8:73:fc:b8:4e:c8:b9:e6:cc:03:49: 2f:30:8b:e8:28:2e:98:d8:1d:80:e2:24:12:5a:99:35:d3:f7: 75:0f:5d:a0:93:7d:0b:cd:fb:53:7e:a7:a5:03:ba:5d:9c:40: 78:18:2c:ad:68:2c:3d:fe:5c:75:b5:a5:52:de:33:9c:02:61: db:7a:7c:64:6a:5e:9d:8c:46:57:c0:2c:63:d8:84:87:5c:74: ae:42:da:c8:4f:7f:71:42:57:f7:5e:cf:2a:53:b1:6d:d1:a3: 3a:3a:38:f4:de:b5:3d:b9:13:2e:aa:55:86:9d:26:7f:84:89: 6b:3c:28:eb:3c:f9:2c:e3:de:3d:f0:72:d6:f1:53:1f:14:bc: 51:87:6f:9b:e4:99:3d:cc:bf:4a:88:5e:fd:0d:2b:5b:ba:1e: 82:3c:17:a4:de:89:1a:bc:4c:ac:21:c9:8a:51:00:57:de:f9: 64:2d:5f:8e:79:7c:d5:45:ed:b1:c5:be:89:13:37:33:76:0f: e0:e6:ca:84:77:53:65:bd:ac:4a:7e:75:55:40:c1:47:49:36: 73:40:1c:b1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQmg8+qtBEp8shj6/FkvHEGm9gCMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMDAxMVoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAZDgwYjAzNWFiNGQ1ZGI5ZjMyODBl ZDExOTM4ZTk0NDNhNTI5ZThiZjMyYzEyZDlhYzFiMmIzMzJkMDMwYTY3NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsHdmS2s65rNLOJoSS187bz8aQAX mB2abw/crP5BSVC0uAx2qwBhbfDsoXuXHOkbVuQHxim4fip0VXudP3A64H0D5vp8 HDrjtCqTLgKyubYmc3/axGnMe00/Wrs5MDQTS9sxGxgT00o9VZOgQXrePJfwA2Qr eSbI/vRYtl7Onapb7QjdIESr1M8VdQ80da23Es8xpo4qwcO3nk3IYv2kpdRPUDci C5pxEqTlSNdrishWSqf6ic83dpDq2bX5rS/E5ybVMpj2ahEdYR0/LNyFZpo3R3+c 58rkufPhCKCGTUyc9YmRq+7qUWefSAaiwxzrQyugRFO86WjHgWN1blCzHQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCGE1PrG1cQes8XWL5iB3QBQ4m3vMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcxNjcxYjE4LTY2MmUtNDc1MC1iYTc1LTIxZTJiNTkxOWYzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaGwAwDQYJKoZIhvcNAQELBQADggEBAF8SKzdiXciRGxiuRa+q G7MIQv3ygVkRZYOXUjFkoszj5XTf0KOyTO7+OA7Ic/y4Tsi55swDSS8wi+goLpjY HYDiJBJamTXT93UPXaCTfQvN+1N+p6UDul2cQHgYLK1oLD3+XHW1pVLeM5wCYdt6 fGRqXp2MRlfALGPYhIdcdK5C2shPf3FCV/dezypTsW3Rozo6OPTetT25Ey6qVYad Jn+EiWs8KOs8+Szj3j3wctbxUx8UvFGHb5vkmT3Mv0qIXv0NK1u6HoI8F6TeiRq8 TKwhyYpRAFfe+WQtX455fNVF7bHFvokTNzN2D+DmyoR3U2W9rEp+dVVAwUdJNnNA HLE= -----END CERTIFICATE-----Generated at Sun Mar 1 22:08:43 2026 by rpki-client