$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/850e0fc5-88f5-49f5-b9de-6017e72e00eb.roa File: 850e0fc5-88f5-49f5-b9de-6017e72e00eb.roa (raw, json) Hash identifier: /7FUHcBAhNbHsHNGEP/da/s2qZX28WGok2LiYlX4aa8= Subject key identifier: 0D:85:EB:77:74:D2:37:F2:5A:80:59:E3:8E:87:13:26:28:1B:81:D7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7A9A03BAE6945E481FE4DEEE2A8E447009272E4D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/850e0fc5-88f5-49f5-b9de-6017e72e00eb.roa Signing time: Wed 11 Feb 2026 00:01:17 +0000 ROA not before: Wed 11 Feb 2026 00:01:17 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:c0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:9a:03:ba:e6:94:5e:48:1f:e4:de:ee:2a:8e:44:70:09:27:2e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:01:17 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=e59b18ee4ae6fa0a8e6803e27c8e4e2091160fbc6c8f6e7bbebb5f05abaf9736, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ec:50:7c:36:8e:a7:ed:26:76:52:9a:57:61: 13:1e:20:07:f5:c0:7b:cc:8a:8f:42:73:90:30:57: 91:5f:3e:47:72:7a:b3:a7:45:ea:16:fd:d3:89:a6: e5:90:bf:45:ea:4b:8b:9e:6e:b5:10:95:2b:85:ce: c9:26:bb:31:e7:de:ad:15:9e:c6:58:4d:41:1e:75: d2:b7:ce:a4:d4:f2:13:8d:cb:7b:67:85:2f:35:6b: 21:bf:78:c1:c4:21:e4:7f:d2:a6:2a:d8:c4:46:97: 47:2f:33:0d:43:0f:1b:75:24:d9:05:fe:3e:ca:ee: 56:48:5e:34:89:b7:03:0f:2e:e2:8a:35:80:15:a7: 8c:68:cb:9b:27:77:c1:4e:f2:f2:94:d1:82:de:73: e3:4d:de:88:cb:5e:e1:09:d5:78:01:d5:fd:95:13: 8d:40:f0:ae:fd:7e:5a:24:93:6b:cf:fd:c7:47:ca: a1:92:46:06:b8:b7:b2:a0:15:3b:90:84:93:ef:3e: ee:9c:3e:15:b1:92:6d:5a:d7:12:e2:01:31:1d:46: b5:c8:22:eb:95:88:6b:bb:58:73:72:a2:ea:f0:35: 57:97:03:2e:62:d9:36:02:e5:02:6f:5e:64:2c:bd: b2:9b:ad:8e:56:26:c8:1a:f1:27:8d:d6:21:2f:dc: a4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:85:EB:77:74:D2:37:F2:5A:80:59:E3:8E:87:13:26:28:1B:81:D7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/850e0fc5-88f5-49f5-b9de-6017e72e00eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:c0c0::/46 Signature Algorithm: sha256WithRSAEncryption 60:77:b3:d9:f9:88:91:83:d8:bd:7b:dd:eb:cd:a3:0a:3e:80: b8:e6:9c:ee:22:03:7b:10:e7:2b:53:11:d7:27:d3:91:c0:c4: a6:91:4d:3f:ef:4e:20:5c:df:80:ed:77:6e:6e:56:76:78:25: f1:47:d7:fc:62:08:8c:83:c0:6a:54:fa:e9:e6:cf:14:c8:e9: a7:06:ad:10:60:a2:6f:db:30:91:8b:89:f5:47:13:8a:50:cd: 0c:83:d7:15:9d:9e:7f:42:80:5f:6a:4e:69:24:b6:17:bd:5b: 68:82:10:2f:cf:b0:c7:8b:aa:ec:5a:31:77:cd:2e:ba:a5:36: 70:ca:41:7a:13:dc:2a:b4:33:cb:66:0a:b2:93:80:39:4a:43: 1d:59:0b:30:33:ae:85:ce:34:37:84:78:e8:ec:21:39:2d:65: 0e:c1:be:41:e4:37:ef:73:4f:9e:ad:99:5b:ad:55:e8:23:6c: db:e5:b4:2a:96:ba:4b:8d:44:d6:ae:92:02:65:32:22:0c:be: c3:c3:a7:cb:7d:a5:a8:68:99:b1:9f:18:27:4c:f9:57:42:ef: ea:ea:f5:d1:05:b1:08:21:31:32:16:53:5b:f0:d5:d8:70:47: 31:dd:04:9f:06:46:43:a5:1a:06:9c:71:bc:c1:99:85:c0:1c: e0:30:9b:52 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUepoDuuaUXkgf5N7uKo5EcAknLk0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMDExN1oX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAZTU5YjE4ZWU0YWU2ZmEwYThlNjgw M2UyN2M4ZTRlMjA5MTE2MGZiYzZjOGY2ZTdiYmViYjVmMDVhYmFmOTczNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOxQfDaOp+0mdlKaV2ETHiAH9cB7 zIqPQnOQMFeRXz5Hcnqzp0XqFv3TiablkL9F6kuLnm61EJUrhc7JJrsx596tFZ7G WE1BHnXSt86k1PITjct7Z4UvNWshv3jBxCHkf9KmKtjERpdHLzMNQw8bdSTZBf4+ yu5WSF40ibcDDy7iijWAFaeMaMubJ3fBTvLylNGC3nPjTd6Iy17hCdV4AdX9lRON QPCu/X5aJJNrz/3HR8qhkkYGuLeyoBU7kIST7z7unD4VsZJtWtcS4gExHUa1yCLr lYhru1hzcqLq8DVXlwMuYtk2AuUCb15kLL2ym62OVibIGvEnjdYhL9ykPwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFA2F63d00jfyWoBZ446HEyYoG4HXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg1MGUwZmM1LTg4ZjUtNDlmNS1iOWRlLTYwMTdlNzJlMDBlYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba88DAMA0GCSqGSIb3DQEBCwUAA4IBAQBgd7PZ+YiRg9i9e93r zaMKPoC45pzuIgN7EOcrUxHXJ9ORwMSmkU0/704gXN+A7XdublZ2eCXxR9f8YgiM g8BqVPrp5s8UyOmnBq0QYKJv2zCRi4n1RxOKUM0Mg9cVnZ5/QoBfak5pJLYXvVto ghAvz7DHi6rsWjF3zS66pTZwykF6E9wqtDPLZgqyk4A5SkMdWQswM66FzjQ3hHjo 7CE5LWUOwb5B5Dfvc0+erZlbrVXoI2zb5bQqlrpLjUTWrpICZTIiDL7Dw6fLfaWo aJmxnxgnTPlXQu/q6vXRBbEIITEyFlNb8NXYcEcx3QSfBkZDpRoGnHG8wZmFwBzg MJtS -----END CERTIFICATE-----Generated at Sun Mar 1 22:05:21 2026 by rpki-client