$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bb4fc6d-b270-4df7-a776-77d2795dda17.roa File: 8bb4fc6d-b270-4df7-a776-77d2795dda17.roa (raw, json) Hash identifier: 2x+St0R7l6ySWQRELdbLMWsIQGmJ90L6QFBK7xyENwk= Subject key identifier: 5F:AA:D0:C8:AE:C9:D5:4F:77:AB:EB:C8:6D:5F:95:1D:37:30:54:07 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 03C195A75B6ED0919EEA0B0DA656D690EEDFA381 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bb4fc6d-b270-4df7-a776-77d2795dda17.roa Signing time: Sun 22 Feb 2026 00:00:58 +0000 ROA not before: Sun 22 Feb 2026 00:00:58 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da16:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c1:95:a7:5b:6e:d0:91:9e:ea:0b:0d:a6:56:d6:90:ee:df:a3:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:00:58 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=f2b5ab2c1aaefac51acfa9385059937163c4d87bbd8421ae309d88dd4a93e6bc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bf:e7:e9:c6:76:3f:15:8e:38:dc:af:d9:d8: 44:2a:84:28:2a:5b:73:de:99:fe:b8:22:f7:12:f6: 4b:81:aa:05:e1:1a:d1:44:94:3b:95:e4:d8:cc:ae: 44:3b:cd:db:11:a9:ca:a0:d4:76:51:72:5e:ae:3f: 4d:c1:d1:f5:b3:0c:a4:ae:ce:ad:c5:bb:ca:1b:f6: dd:65:c6:6e:e2:f5:d7:9c:a0:eb:6c:77:53:c4:6f: df:ef:51:9a:dd:fc:4d:43:f8:c3:d2:04:2a:c9:64: 84:f7:8f:49:f7:c6:b0:f2:d6:4e:2d:18:b3:41:ad: e2:96:9d:c9:09:f9:85:31:a7:fe:33:57:e2:6a:6d: 4b:70:89:55:08:b9:2c:06:de:26:34:52:6a:5b:99: c1:41:58:2f:53:94:7c:eb:74:74:ae:f2:cd:7d:dc: f2:6e:84:fb:44:7f:f0:5f:1b:14:1a:9b:d1:f4:95: f1:57:63:f2:56:05:33:41:e4:ad:7b:49:e4:d5:7a: b1:32:09:9f:71:db:0b:11:bc:32:08:4a:5f:b2:19: fc:6c:b8:1f:2e:b4:81:a8:59:e4:55:57:fa:3e:90: b0:77:e8:a9:c9:3e:c4:f0:63:25:04:e4:82:46:4a: 43:c3:8e:b9:0a:bc:ed:90:b8:e5:2c:85:e8:f7:d6: 64:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AA:D0:C8:AE:C9:D5:4F:77:AB:EB:C8:6D:5F:95:1D:37:30:54:07 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bb4fc6d-b270-4df7-a776-77d2795dda17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da16:c00::/38 Signature Algorithm: sha256WithRSAEncryption 23:45:ba:a9:8f:96:a7:b4:f8:6a:a8:be:10:67:a7:a4:9e:e0: 0b:4d:11:83:64:92:83:f2:5a:3a:b4:02:fd:a5:71:4f:0f:c5: 81:13:a4:1d:dc:19:fc:3c:a9:2a:2c:21:b2:20:aa:4b:5d:3a: ee:88:f8:85:cf:e0:75:65:8d:8b:55:0c:60:d5:90:d9:31:69: 88:de:fc:4c:2b:e5:bb:38:cf:fe:90:ac:79:c4:41:8b:62:8e: 34:d9:08:0e:1c:22:be:bc:2b:6d:b9:29:e4:bf:04:a2:d1:a5: d1:a2:4d:1a:04:d1:66:20:b1:3d:e9:3b:41:09:16:04:a7:f7: 8f:f4:37:84:db:45:bd:6a:68:9a:85:70:55:53:8c:57:f7:4c: fa:c9:78:40:66:59:b3:48:51:1b:6b:85:f1:3d:89:4f:26:36: 95:eb:c3:40:bf:15:38:8a:fc:2b:0a:ef:04:4b:e4:94:87:ae: cf:57:0b:34:c9:74:aa:95:7f:a2:ea:bb:d9:e2:07:9f:da:13: 09:94:6d:de:33:f4:f9:27:b9:3a:e5:97:d0:87:3d:bf:ba:03: 39:30:84:18:08:be:ca:dd:53:61:c6:c3:93:44:78:13:81:71: 81:21:ed:b3:4c:fc:19:e8:57:02:07:28:3b:5d:1b:2a:53:ec: 19:ea:bd:81 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUA8GVp1tu0JGe6gsNplbWkO7fo4EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMDA1OFoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAZjJiNWFiMmMxYWFlZmFjNTFhY2Zh OTM4NTA1OTkzNzE2M2M0ZDg3YmJkODQyMWFlMzA5ZDg4ZGQ0YTkzZTZiYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47/n6cZ2PxWOONyv2dhEKoQoKltz 3pn+uCL3EvZLgaoF4RrRRJQ7leTYzK5EO83bEanKoNR2UXJerj9NwdH1swykrs6t xbvKG/bdZcZu4vXXnKDrbHdTxG/f71Ga3fxNQ/jD0gQqyWSE949J98aw8tZOLRiz Qa3ilp3JCfmFMaf+M1fiam1LcIlVCLksBt4mNFJqW5nBQVgvU5R863R0rvLNfdzy boT7RH/wXxsUGpvR9JXxV2PyVgUzQeSte0nk1XqxMgmfcdsLEbwyCEpfshn8bLgf LrSBqFnkVVf6PpCwd+ipyT7E8GMlBOSCRkpDw465CrztkLjlLIXo99ZkCQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFF+q0MiuydVPd6vryG1flR03MFQHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiYjRmYzZkLWIyNzAtNGRmNy1hNzc2LTc3ZDI3OTVkZGExNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFgwwDQYJKoZIhvcNAQELBQADggEBACNFuqmPlqe0+GqovhBn p6Se4AtNEYNkkoPyWjq0Av2lcU8PxYETpB3cGfw8qSosIbIgqktdOu6I+IXP4HVl jYtVDGDVkNkxaYje/Ewr5bs4z/6QrHnEQYtijjTZCA4cIr68K225KeS/BKLRpdGi TRoE0WYgsT3pO0EJFgSn94/0N4TbRb1qaJqFcFVTjFf3TPrJeEBmWbNIURtrhfE9 iU8mNpXrw0C/FTiK/CsK7wRL5JSHrs9XCzTJdKqVf6Lqu9niB5/aEwmUbd4z9Pkn uTrll9CHPb+6AzkwhBgIvsrdU2HGw5NEeBOBcYEh7bNM/BnoVwIHKDtdGypT7Bnq vYE= -----END CERTIFICATE-----Generated at Mon Mar 2 07:07:34 2026 by rpki-client