$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/825b729c-7c4f-404b-b26e-13e5d882a631.roa File: 825b729c-7c4f-404b-b26e-13e5d882a631.roa (raw, json) Hash identifier: PqNdMlByGLSbJdDNgcBOBz+X02kD8ijNYHltMQMteC8= Subject key identifier: 71:78:24:A3:1C:24:CC:AF:7C:68:52:58:AC:2E:1F:F0:9F:D8:8A:9B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 043D004D77646BC19461AFA3BD7936E97E003A62 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/825b729c-7c4f-404b-b26e-13e5d882a631.roa Signing time: Sun 15 Feb 2026 00:00:45 +0000 ROA not before: Sun 15 Feb 2026 00:00:45 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3d:00:4d:77:64:6b:c1:94:61:af:a3:bd:79:36:e9:7e:00:3a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 15 00:00:45 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=e07864bdbd58f4fd253a7fd2423f196cadb8bca07381dad6ccdba6757fdd6985, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f7:c4:31:85:88:77:0b:c3:8e:45:01:c4:3d: 1e:e2:7f:76:49:7e:44:1f:d8:a9:d2:d3:88:96:90: 3e:38:50:af:ee:87:53:f7:1f:69:aa:13:05:e7:29: b1:bb:e3:09:6e:fb:89:3c:bf:1f:e1:82:0a:62:e1: 9b:29:79:cf:ff:e5:82:0c:5f:f4:a6:fd:2f:f9:98: 98:b9:e2:1d:5a:57:c9:64:e5:bd:9b:63:86:ce:13: bc:28:eb:82:9b:4a:78:2a:ce:51:15:2b:9a:75:bd: 43:4d:63:87:d2:da:73:e6:dd:e3:63:16:3e:d8:74: ca:06:e8:9c:5b:4f:9a:28:ee:a5:b8:9c:2b:09:d3: 93:e2:04:27:58:e5:51:30:91:8a:2a:1d:23:47:e2: 3e:48:d2:b8:bc:34:93:c8:be:7a:72:24:a0:35:46: 4c:29:46:6c:02:ee:63:1d:7f:75:7d:d4:b4:24:2c: 7a:75:e0:5e:6a:6e:8b:a3:3a:c5:7b:a1:54:6d:da: a0:e9:6e:a6:ec:f8:69:c4:78:13:6a:58:1d:26:81: 31:0b:80:46:4e:29:a4:db:51:1d:c0:08:9b:a9:63: a3:87:e3:b2:98:72:ea:c0:95:88:e3:3a:43:78:29: dc:f2:36:68:67:d7:c5:99:8c:76:0f:b9:2b:25:c3: 6d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:78:24:A3:1C:24:CC:AF:7C:68:52:58:AC:2E:1F:F0:9F:D8:8A:9B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/825b729c-7c4f-404b-b26e-13e5d882a631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:b000::/40 Signature Algorithm: sha256WithRSAEncryption a0:c3:5b:a8:28:ff:74:cf:46:64:e8:48:ef:79:42:d1:85:bf: 2a:94:44:e8:8d:61:a2:b8:0f:6a:d1:32:93:c1:bf:44:48:41: 57:e3:6c:52:47:74:9d:58:84:82:76:17:f3:1a:f5:e7:de:c2: 3e:90:3f:0e:21:c6:91:dc:b1:e4:90:a8:b2:83:ea:cf:92:ab: fe:3d:13:21:19:ab:c1:25:52:a5:e3:b3:21:a8:67:3b:65:86: 00:c5:42:b7:18:98:72:ec:0f:ef:d1:b0:3a:06:6c:9f:85:ec: 0a:87:b4:e5:89:6e:b9:d8:da:35:7b:86:a6:ce:8b:10:a4:8a: 71:3e:3c:3c:47:b0:e9:c2:e7:35:ce:3c:a9:8d:25:b9:9f:77: 31:f2:64:90:a5:47:38:82:1d:c4:5a:ef:68:80:9e:d4:fb:c9: f0:e0:90:f7:37:37:48:71:6b:bd:79:e0:47:40:c0:b0:65:9b: be:a6:5b:3a:b6:06:9b:29:4d:65:a2:a6:50:42:ac:b8:a3:f1: a0:24:f1:83:e3:f4:ad:45:26:f2:05:b3:de:71:1f:d0:5a:24: f0:20:df:ea:36:65:26:aa:62:40:0a:fd:4b:ec:9a:9c:ef:a0: d6:e1:80:07:2d:24:b0:67:e2:dd:2c:b4:cc:63:80:3f:91:bb: 47:89:7a:96 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBD0ATXdka8GUYa+jvXk26X4AOmIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNTAwMDA0NVoX DTI2MDUxNjIzNTk1OVowejFJMEcGA1UEBRNAZTA3ODY0YmRiZDU4ZjRmZDI1M2E3 ZmQyNDIzZjE5NmNhZGI4YmNhMDczODFkYWQ2Y2NkYmE2NzU3ZmRkNjk4NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzffEMYWIdwvDjkUBxD0e4n92SX5E H9ip0tOIlpA+OFCv7odT9x9pqhMF5ymxu+MJbvuJPL8f4YIKYuGbKXnP/+WCDF/0 pv0v+ZiYueIdWlfJZOW9m2OGzhO8KOuCm0p4Ks5RFSuadb1DTWOH0tpz5t3jYxY+ 2HTKBuicW0+aKO6luJwrCdOT4gQnWOVRMJGKKh0jR+I+SNK4vDSTyL56ciSgNUZM KUZsAu5jHX91fdS0JCx6deBeam6LozrFe6FUbdqg6W6m7PhpxHgTalgdJoExC4BG Timk21EdwAibqWOjh+OymHLqwJWI4zpDeCnc8jZoZ9fFmYx2D7krJcNtOwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHF4JKMcJMyvfGhSWKwuH/Cf2IqbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgyNWI3MjljLTdjNGYtNDA0Yi1iMjZlLTEzZTVkODgyYTYzMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYLAwDQYJKoZIhvcNAQELBQADggEBAKDDW6go/3TPRmToSO95 QtGFvyqUROiNYaK4D2rRMpPBv0RIQVfjbFJHdJ1YhIJ2F/Ma9efewj6QPw4hxpHc seSQqLKD6s+Sq/49EyEZq8ElUqXjsyGoZztlhgDFQrcYmHLsD+/RsDoGbJ+F7AqH tOWJbrnY2jV7hqbOixCkinE+PDxHsOnC5zXOPKmNJbmfdzHyZJClRziCHcRa72iA ntT7yfDgkPc3N0hxa7154EdAwLBlm76mWzq2BpspTWWiplBCrLij8aAk8YPj9K1F JvIFs95xH9BaJPAg3+o2ZSaqYkAK/UvsmpzvoNbhgActJLBn4t0stMxjgD+Ru0eJ epY= -----END CERTIFICATE-----Generated at Sun Mar 1 23:50:58 2026 by rpki-client