$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c327d37-0e2d-447d-aa31-66e378c4d35d.roa File: 7c327d37-0e2d-447d-aa31-66e378c4d35d.roa (raw, json) Hash identifier: ikYbVzIMb2cLztfPXenp3Dt/GOqz8F43BGbhkORNEZo= Subject key identifier: EF:13:69:42:54:E4:86:F9:78:72:1F:9E:28:2E:BE:2A:DD:45:66:40 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4495CB89EA982339A40CD9C33AE959D5A54D8493 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c327d37-0e2d-447d-aa31-66e378c4d35d.roa Signing time: Wed 11 Feb 2026 00:11:08 +0000 ROA not before: Wed 11 Feb 2026 00:11:08 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:b080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:95:cb:89:ea:98:23:39:a4:0c:d9:c3:3a:e9:59:d5:a5:4d:84:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:11:08 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=cf0eba12e83749d3331f5c1b9a5b4fe4e713be77a4cbfde7d8a82c291eb3a571, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:02:b3:96:c0:ea:3a:70:7f:fd:03:d4:a5:dc: 4c:73:61:1f:b8:d7:ac:6d:a3:2e:cd:28:e6:d9:45: 76:26:52:16:cd:9e:45:94:86:14:77:fa:a3:6c:85: b4:de:68:eb:45:46:91:fb:ba:b7:e2:f8:e1:4f:33: 5b:ad:c4:41:ba:fc:c2:99:2e:d9:e1:b1:7c:35:fc: 40:44:c7:6d:d3:4f:c4:60:e8:17:5a:f5:4c:e6:50: cb:eb:4a:5b:b7:78:4e:86:4f:3b:46:bf:27:b7:51: 8c:b9:d1:7d:70:28:69:80:fd:4a:61:66:63:79:04: 75:43:75:49:5b:d7:2a:ae:e4:f1:72:5e:61:b7:89: 37:93:a9:7f:fe:64:28:18:4a:bd:2a:ed:ba:c2:18: 0f:1a:5e:fe:d5:b6:d5:ca:0e:f7:14:91:21:28:65: ec:48:5c:23:3e:af:0c:2f:2a:c9:81:2f:dd:5f:9b: f4:a6:97:1c:92:02:76:46:9f:55:7e:c5:97:7a:61: d6:a7:1a:28:4d:61:d9:77:e5:bc:66:b7:61:ea:2f: 56:51:4f:45:c4:64:5c:b4:9f:ae:41:1c:58:60:54: 54:e9:a4:e0:5a:51:fb:d8:1b:51:fb:04:01:01:02: a9:65:9b:a6:aa:8d:1b:cb:d8:0e:b2:32:6d:95:e4: 9b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:13:69:42:54:E4:86:F9:78:72:1F:9E:28:2E:BE:2A:DD:45:66:40 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c327d37-0e2d-447d-aa31-66e378c4d35d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:b080::/46 Signature Algorithm: sha256WithRSAEncryption a0:71:2d:64:e2:40:3b:86:a5:d1:8f:89:dd:e4:94:c0:21:35: 47:57:dd:e3:8b:1a:3d:b8:c8:4f:5e:2e:25:1b:6d:f9:e1:d0: b7:68:46:2f:5e:3f:57:fa:ef:e9:e5:57:a0:aa:61:b2:b9:de: 22:c8:11:80:17:a6:2b:68:1f:c7:9a:07:95:0f:8a:bb:94:eb: cf:21:70:bc:cd:e4:06:45:f7:80:f4:81:e3:9e:6a:31:af:f8: bd:44:3d:be:c4:92:ba:b7:88:41:0d:d1:97:2d:7e:ad:fb:eb: be:5c:a6:05:1d:a4:1c:00:76:66:8f:28:bb:97:66:d4:5a:6c: 99:c3:89:ae:de:ed:d0:f7:98:2a:4c:c3:fa:54:33:f7:b2:e8: 6a:54:fa:44:30:92:b3:ec:95:76:27:50:e1:98:b3:31:36:c6: db:09:87:bb:a4:28:fa:8f:ce:93:1c:cb:8f:2e:77:f0:b3:35: 15:e9:7d:c7:4a:ee:95:81:2d:dd:ea:f6:b8:b5:64:c0:09:57: 1a:28:ea:e0:3a:e7:fd:b0:c3:83:c3:fa:36:29:7c:41:f8:06: 94:0f:75:eb:bc:8c:e3:52:2f:af:db:a6:06:18:97:2d:72:f1: d3:e4:dc:1d:76:cc:d4:21:9f:13:d1:21:cf:5e:85:ec:3d:41: ab:a9:01:60 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURJXLieqYIzmkDNnDOulZ1aVNhJMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMTEwOFoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAY2YwZWJhMTJlODM3NDlkMzMzMWY1 YzFiOWE1YjRmZTRlNzEzYmU3N2E0Y2JmZGU3ZDhhODJjMjkxZWIzYTU3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwKzlsDqOnB//QPUpdxMc2EfuNes baMuzSjm2UV2JlIWzZ5FlIYUd/qjbIW03mjrRUaR+7q34vjhTzNbrcRBuvzCmS7Z 4bF8NfxARMdt00/EYOgXWvVM5lDL60pbt3hOhk87Rr8nt1GMudF9cChpgP1KYWZj eQR1Q3VJW9cqruTxcl5ht4k3k6l//mQoGEq9Ku26whgPGl7+1bbVyg73FJEhKGXs SFwjPq8MLyrJgS/dX5v0ppcckgJ2Rp9VfsWXemHWpxooTWHZd+W8Zrdh6i9WUU9F xGRctJ+uQRxYYFRU6aTgWlH72BtR+wQBAQKpZZumqo0by9gOsjJtleSbNQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFO8TaUJU5Ib5eHIfniguvirdRWZAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdjMzI3ZDM3LTBlMmQtNDQ3ZC1hYTMxLTY2ZTM3OGM0ZDM1ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba87CAMA0GCSqGSIb3DQEBCwUAA4IBAQCgcS1k4kA7hqXRj4nd 5JTAITVHV93jixo9uMhPXi4lG2354dC3aEYvXj9X+u/p5VegqmGyud4iyBGAF6Yr aB/HmgeVD4q7lOvPIXC8zeQGRfeA9IHjnmoxr/i9RD2+xJK6t4hBDdGXLX6t++u+ XKYFHaQcAHZmjyi7l2bUWmyZw4mu3u3Q95gqTMP6VDP3suhqVPpEMJKz7JV2J1Dh mLMxNsbbCYe7pCj6j86THMuPLnfwszUV6X3HSu6VgS3d6va4tWTACVcaKOrgOuf9 sMODw/o2KXxB+AaUD3XrvIzjUi+v26YGGJctcvHT5NwddszUIZ8T0SHPXoXsPUGr qQFg -----END CERTIFICATE-----Generated at Mon Mar 2 08:50:43 2026 by rpki-client