$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80f286b3-4a79-4e70-a311-4b9c3c54436f.roa File: 80f286b3-4a79-4e70-a311-4b9c3c54436f.roa (raw, json) Hash identifier: N+XVKR8eEHTYeCWiD+xxAfUhEJOFW4vbE13VYM0KaZI= Subject key identifier: 95:A8:32:2E:C9:5A:88:36:0F:05:5C:0D:58:07:9F:4F:FD:C4:78:C8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0C793833F31C8D0533411EB9D5C8B904DB7AD00F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80f286b3-4a79-4e70-a311-4b9c3c54436f.roa Signing time: Sun 22 Feb 2026 00:10:58 +0000 ROA not before: Sun 22 Feb 2026 00:10:58 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:79:38:33:f3:1c:8d:05:33:41:1e:b9:d5:c8:b9:04:db:7a:d0:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:10:58 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=1b01e0ff750846aeecdc9dd9a992b0d43211b5eaeb28051a250b627874e0d0d7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:75:e9:15:93:2e:e1:71:6e:ac:1d:0f:85: d8:e7:e2:01:3e:f4:b7:50:6c:c5:fc:dc:3d:86:a3: 54:5b:b3:bf:15:a1:16:f0:07:a0:04:cc:ea:6d:30: a0:69:b2:40:54:99:3f:7d:5b:09:3e:7e:90:b2:e5: 53:5c:77:7e:d0:3f:a1:2f:eb:b3:cc:ba:dc:ad:d2: 72:57:1f:20:ed:47:1a:65:0c:c2:f0:09:7e:3f:cf: df:f3:e5:19:9e:a1:7f:46:5e:92:22:71:28:27:64: 98:96:05:98:b1:68:5d:4a:5c:be:4d:bf:64:3b:37: 62:aa:51:7c:3d:1e:5e:69:68:7a:57:3b:ec:58:a7: 17:4f:1f:1c:d6:84:7b:3b:f4:a7:4a:43:01:84:e6: 4d:41:61:0e:55:87:4e:6f:08:cd:b9:61:5d:e7:b5: 1a:08:9a:01:f3:71:e6:b4:4b:56:de:b6:4e:47:2b: 98:0e:ce:0f:67:ff:06:18:b9:00:13:79:32:fd:4c: 45:96:bf:1c:c5:16:14:b5:44:6b:39:aa:5e:72:54: 2c:dc:74:f9:61:89:18:e1:d9:2d:e2:67:3e:b6:92: 17:fa:26:89:73:2b:46:87:1d:99:04:53:65:c5:95: d3:97:7f:66:a8:93:df:b1:98:11:4c:32:2f:6d:6e: d2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A8:32:2E:C9:5A:88:36:0F:05:5C:0D:58:07:9F:4F:FD:C4:78:C8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80f286b3-4a79-4e70-a311-4b9c3c54436f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:400::/38 Signature Algorithm: sha256WithRSAEncryption c6:71:c5:b7:ce:d1:f7:9e:a9:95:70:3e:98:e7:87:6a:08:dc: 6b:bc:d8:ab:7d:d8:22:03:67:db:4e:13:c9:26:40:45:76:44: 14:a4:8c:20:68:e4:70:d2:44:93:ea:9e:bd:19:82:1d:20:97: 6e:cd:67:16:c3:be:f5:0e:e7:c5:c4:c7:db:5b:66:36:34:c2: ea:57:31:0e:71:67:ff:5e:ba:56:fb:7e:c6:ac:c9:7d:2f:d8: f3:e2:79:35:df:6b:3d:cf:c1:6d:38:93:93:81:2b:1f:96:48: 09:00:84:5e:30:4a:ed:6e:22:66:f3:6c:ee:93:d3:0a:f9:98: 26:fb:05:b6:ad:a7:bd:69:6a:f9:64:35:10:f2:3b:75:08:5b: 5c:c5:72:7c:3d:74:42:ae:03:b7:95:1a:e3:2c:63:af:a1:7e: 89:4f:01:30:e7:1b:c0:34:43:63:27:28:a4:77:e6:b5:86:89: d9:aa:f8:b8:4f:1b:6a:49:ca:0a:36:6e:62:f4:aa:ed:ed:cb: 45:89:62:a5:72:0c:f3:a6:0b:15:14:e4:3f:83:46:7d:38:45: 22:0a:59:56:28:d0:57:38:d7:f7:d0:cd:db:66:06:87:71:bd: 2d:cf:b4:ed:8a:da:eb:7f:7e:82:55:c5:f2:06:88:6d:04:90: e5:39:03:80 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDHk4M/McjQUzQR651ci5BNt60A8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMTA1OFoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAMWIwMWUwZmY3NTA4NDZhZWVjZGM5 ZGQ5YTk5MmIwZDQzMjExYjVlYWViMjgwNTFhMjUwYjYyNzg3NGUwZDBkNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspV16RWTLuFxbqwdD4XY5+IBPvS3 UGzF/Nw9hqNUW7O/FaEW8AegBMzqbTCgabJAVJk/fVsJPn6QsuVTXHd+0D+hL+uz zLrcrdJyVx8g7UcaZQzC8Al+P8/f8+UZnqF/Rl6SInEoJ2SYlgWYsWhdSly+Tb9k OzdiqlF8PR5eaWh6VzvsWKcXTx8c1oR7O/SnSkMBhOZNQWEOVYdObwjNuWFd57Ua CJoB83HmtEtW3rZORyuYDs4PZ/8GGLkAE3ky/UxFlr8cxRYUtURrOapeclQs3HT5 YYkY4dkt4mc+tpIX+iaJcytGhx2ZBFNlxZXTl39mqJPfsZgRTDIvbW7SjQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJWoMi7JWog2DwVcDVgHn0/9xHjIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgwZjI4NmIzLTRhNzktNGU3MC1hMzExLTRiOWMzYzU0NDM2Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFAQwDQYJKoZIhvcNAQELBQADggEBAMZxxbfO0feeqZVwPpjn h2oI3Gu82Kt92CIDZ9tOE8kmQEV2RBSkjCBo5HDSRJPqnr0Zgh0gl27NZxbDvvUO 58XEx9tbZjY0wupXMQ5xZ/9eulb7fsasyX0v2PPieTXfaz3PwW04k5OBKx+WSAkA hF4wSu1uImbzbO6T0wr5mCb7Bbatp71pavlkNRDyO3UIW1zFcnw9dEKuA7eVGuMs Y6+hfolPATDnG8A0Q2MnKKR35rWGidmq+LhPG2pJygo2bmL0qu3ty0WJYqVyDPOm CxUU5D+DRn04RSIKWVYo0Fc41/fQzdtmBodxvS3PtO2K2ut/foJVxfIGiG0EkOU5 A4A= -----END CERTIFICATE-----Generated at Mon Mar 2 08:50:32 2026 by rpki-client