$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830802a5-d8f4-4fa8-945f-86772db3ed31.roa File: 830802a5-d8f4-4fa8-945f-86772db3ed31.roa (raw, json) Hash identifier: SUyI4CaPZ1Gmlpj8g8560vDGq3fUwnB8mhU2rh3LJd8= Subject key identifier: 41:08:A0:50:0A:0D:A0:BE:96:40:C3:F3:95:53:8C:12:B1:9A:E5:F5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 54170820F48FAB06364DE055F9485C1D552CB917 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830802a5-d8f4-4fa8-945f-86772db3ed31.roa Signing time: Sun 15 Feb 2026 00:00:34 +0000 ROA not before: Sun 15 Feb 2026 00:00:34 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:17:08:20:f4:8f:ab:06:36:4d:e0:55:f9:48:5c:1d:55:2c:b9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 15 00:00:34 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=36c482055547231f5cc4acd07c9eef7057ac05827938640dcda8b7efd62c122d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:a5:5a:bf:5d:2f:69:a5:23:50:c5:5e:c1: 33:59:b5:9f:d9:f7:35:0d:2b:55:61:30:b4:df:57: 85:f4:18:b7:7f:a2:fa:56:6d:46:22:ab:65:37:f9: f4:a1:b0:29:c6:fb:b2:7a:bb:44:d7:bf:9b:af:18: f1:d5:56:b2:08:82:58:75:b8:a3:5d:de:fb:f4:34: 6a:94:bb:f9:25:a6:10:e0:c4:de:a1:6c:cd:23:81: cd:55:1d:5c:a7:11:15:08:ec:96:9d:8c:5a:cb:84: f9:0e:fa:b2:4c:de:26:93:34:da:8c:1c:1e:55:25: d3:bb:02:fa:35:15:93:72:79:03:73:0b:10:17:2a: b8:f1:32:d4:7e:85:ae:5a:fb:72:6a:bb:84:3f:6f: e5:44:80:3b:fe:90:9a:8b:a1:df:99:b0:5c:ff:1e: 8a:1e:fa:10:f0:e5:b9:ac:d8:6a:41:bc:71:cb:88: a7:2f:52:98:99:3f:bb:e4:10:62:fe:ca:49:17:92: ab:25:aa:86:fb:ec:8e:e7:dc:25:9b:9b:7b:56:21: 76:34:c0:74:0a:26:00:df:62:09:37:5d:cd:36:3e: e1:ad:78:d2:2f:9f:9f:60:70:67:4d:ed:95:f4:3f: a4:d3:a8:6c:7d:68:e2:db:03:a3:d5:c2:c2:90:9d: 43:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:08:A0:50:0A:0D:A0:BE:96:40:C3:F3:95:53:8C:12:B1:9A:E5:F5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830802a5-d8f4-4fa8-945f-86772db3ed31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:f000::/40 Signature Algorithm: sha256WithRSAEncryption 35:cb:9d:37:96:44:fd:d9:df:c3:88:74:45:78:0e:43:55:3c: d2:70:ce:fa:03:d8:99:2e:a4:fb:1a:58:8a:0d:78:17:e9:ca: 3c:ef:01:79:e8:d7:5f:56:88:fe:60:04:94:41:4f:a5:a0:5b: 6a:26:12:62:fd:ba:5a:a9:fc:1f:6a:50:18:7f:e6:38:c2:c5: 5b:04:c3:b4:6f:57:6b:12:2d:4f:9f:ed:e4:2d:86:c9:06:ce: b6:f9:fe:84:af:e7:ff:32:5f:ef:af:4b:26:39:07:34:7f:1d: 38:87:52:11:4c:6f:ae:1e:6a:06:2a:6c:3b:a5:05:a5:5f:9c: f1:7a:80:f8:0b:2e:b7:09:e7:b2:63:c4:74:aa:42:19:a8:6b: a2:64:38:2d:4b:bf:82:0e:45:f4:2e:5e:39:bd:44:ef:bb:ce: ba:c7:d1:cb:5d:f4:d7:f5:02:9f:8d:33:e1:4e:12:dc:b9:0c: 17:df:5b:d2:cf:68:5a:b5:0e:52:42:8c:d6:6a:e5:bf:b9:0e: ee:c1:82:fd:b5:15:4e:39:6d:e9:22:7c:d7:b8:54:a2:cb:df: 32:a0:95:ff:cf:a1:db:fc:80:94:6d:70:53:d8:11:f8:36:98: 4c:eb:98:f9:9c:c3:f3:b4:82:9f:76:d9:88:87:ba:b1:83:f5: 39:07:77:29 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVBcIIPSPqwY2TeBV+UhcHVUsuRcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNTAwMDAzNFoX DTI2MDUxNjIzNTk1OVowejFJMEcGA1UEBRNAMzZjNDgyMDU1NTQ3MjMxZjVjYzRh Y2QwN2M5ZWVmNzA1N2FjMDU4Mjc5Mzg2NDBkY2RhOGI3ZWZkNjJjMTIyZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtselWr9dL2mlI1DFXsEzWbWf2fc1 DStVYTC031eF9Bi3f6L6Vm1GIqtlN/n0obApxvuyertE17+brxjx1VayCIJYdbij Xd779DRqlLv5JaYQ4MTeoWzNI4HNVR1cpxEVCOyWnYxay4T5DvqyTN4mkzTajBwe VSXTuwL6NRWTcnkDcwsQFyq48TLUfoWuWvtyaruEP2/lRIA7/pCai6HfmbBc/x6K HvoQ8OW5rNhqQbxxy4inL1KYmT+75BBi/spJF5KrJaqG++yO59wlm5t7ViF2NMB0 CiYA32IJN13NNj7hrXjSL5+fYHBnTe2V9D+k06hsfWji2wOj1cLCkJ1D8wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEEIoFAKDaC+lkDD85VTjBKxmuX1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzMDgwMmE1LWQ4ZjQtNGZhOC05NDVmLTg2NzcyZGIzZWQzMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYPAwDQYJKoZIhvcNAQELBQADggEBADXLnTeWRP3Z38OIdEV4 DkNVPNJwzvoD2JkupPsaWIoNeBfpyjzvAXno119WiP5gBJRBT6WgW2omEmL9ulqp /B9qUBh/5jjCxVsEw7RvV2sSLU+f7eQthskGzrb5/oSv5/8yX++vSyY5BzR/HTiH UhFMb64eagYqbDulBaVfnPF6gPgLLrcJ57JjxHSqQhmoa6JkOC1Lv4IORfQuXjm9 RO+7zrrH0ctd9Nf1Ap+NM+FOEty5DBffW9LPaFq1DlJCjNZq5b+5Du7Bgv21FU45 bekifNe4VKLL3zKglf/Podv8gJRtcFPYEfg2mEzrmPmcw/O0gp922YiHurGD9TkH dyk= -----END CERTIFICATE-----Generated at Sun Mar 1 21:56:05 2026 by rpki-client