$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bd7eded-c7ab-48c4-8c04-ddd5ef73c985.roa File: 8bd7eded-c7ab-48c4-8c04-ddd5ef73c985.roa (raw, json) Hash identifier: dclz0bjU8Z+tFoGeacsa+1IJIZtcBVEiws9lL7vjOYg= Subject key identifier: C2:87:19:34:14:F2:4A:25:EB:6C:50:0C:9A:8D:6D:2E:DE:56:D0:BC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 30627E022F93E59AF5EC10610AA7C72A6052B337 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bd7eded-c7ab-48c4-8c04-ddd5ef73c985.roa Signing time: Sun 22 Feb 2026 00:40:39 +0000 ROA not before: Sun 22 Feb 2026 00:40:39 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da11::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:62:7e:02:2f:93:e5:9a:f5:ec:10:61:0a:a7:c7:2a:60:52:b3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:40:39 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=505351cefa31588f5611f5e9d007f5756b8c6cc95dcb40964b453082e6051215, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:48:62:8f:f5:dd:cb:72:f9:b1:8a:3d:73: a5:3e:22:5f:63:a5:7a:15:c3:43:c4:3b:11:c5:c5: 2e:63:1f:bf:e6:93:14:ee:3b:5b:3e:00:5b:d5:44: c7:26:31:8f:14:c3:66:89:bc:9a:cc:2b:37:fb:1f: 44:05:13:19:b7:09:99:08:5e:6b:44:f2:2a:5b:7c: 89:cb:4c:06:15:2d:a0:9e:39:23:1f:d3:e5:3b:55: ea:3e:d0:b4:99:1b:9e:e2:57:c3:73:48:59:06:98: 6f:b0:4f:9e:8d:e1:94:86:e0:e7:fd:c5:f1:5e:7e: dd:9f:ad:4a:64:83:51:05:90:b2:45:ea:d3:3d:28: 40:0c:40:dd:1e:8f:60:1d:7e:fd:19:26:f1:b4:43: 5d:76:af:ee:d2:60:a1:ec:26:20:6d:1f:a3:31:8f: 57:2f:09:0a:3b:bb:2f:e4:c9:96:e3:fe:8f:0a:3b: 84:a4:0d:44:73:13:95:e0:31:f3:24:5e:d0:bb:88: b9:69:8f:62:55:ea:c3:04:7d:15:30:93:c2:48:8b: 19:24:e5:d5:92:35:3c:d7:3e:5f:95:25:35:6f:15: 28:00:3e:49:90:4a:f9:3a:38:0d:b7:9c:fd:ab:85: cd:73:42:ad:2b:c9:ba:92:9f:95:fe:55:8c:3d:a2: 9d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:87:19:34:14:F2:4A:25:EB:6C:50:0C:9A:8D:6D:2E:DE:56:D0:BC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bd7eded-c7ab-48c4-8c04-ddd5ef73c985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da11::/36 Signature Algorithm: sha256WithRSAEncryption b5:64:44:98:8b:ed:eb:4f:20:bc:12:55:63:99:e8:b3:81:19: d8:6a:56:83:dd:a4:3f:0f:37:36:e7:88:a8:68:f2:4b:13:04: 82:f0:fa:e9:05:4c:d4:21:07:52:73:db:06:43:ba:dc:e7:20: 87:92:48:8e:ae:e6:d6:de:3f:c4:c4:03:64:43:22:c0:06:ac: d7:0a:c4:20:a9:65:75:52:04:07:3a:e3:d4:7c:c0:9c:1a:42: e1:6c:7a:c2:93:20:cb:97:a9:45:12:62:55:93:49:e3:e4:4f: 95:e5:58:b7:f0:d5:4c:7c:88:b0:dd:c2:d9:d2:c0:70:8d:50: db:4f:d8:fc:71:ad:cd:8a:ae:10:90:a0:6c:99:25:c0:cb:39: 02:f4:dc:60:1f:3f:e8:a4:f0:18:d7:ea:46:8d:ff:ff:d8:8e: 43:b1:69:03:3f:52:80:08:fb:c1:f7:fe:dd:3c:c1:c3:f9:92: 85:7f:71:2a:c0:19:28:41:3a:b4:2c:62:e6:5d:5a:4d:db:a9: f1:e0:f9:e9:9a:20:d2:26:80:e6:64:d7:14:7c:97:b2:7b:76: e1:9d:d2:87:20:36:d0:e2:e4:87:73:10:31:6e:78:63:95:57: 8c:67:b1:66:11:44:a9:ff:ef:ed:0f:b5:c4:15:ba:12:b9:f3: dd:65:d0:2c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMGJ+Ai+T5Zr17BBhCqfHKmBSszcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwNDAzOVoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNANTA1MzUxY2VmYTMxNTg4ZjU2MTFm NWU5ZDAwN2Y1NzU2YjhjNmNjOTVkY2I0MDk2NGI0NTMwODJlNjA1MTIxNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI9IYo/13cty+bGKPXOlPiJfY6V6 FcNDxDsRxcUuYx+/5pMU7jtbPgBb1UTHJjGPFMNmibyazCs3+x9EBRMZtwmZCF5r RPIqW3yJy0wGFS2gnjkjH9PlO1XqPtC0mRue4lfDc0hZBphvsE+ejeGUhuDn/cXx Xn7dn61KZINRBZCyRerTPShADEDdHo9gHX79GSbxtENddq/u0mCh7CYgbR+jMY9X LwkKO7sv5MmW4/6PCjuEpA1EcxOV4DHzJF7Qu4i5aY9iVerDBH0VMJPCSIsZJOXV kjU81z5flSU1bxUoAD5JkEr5OjgNt5z9q4XNc0KtK8m6kp+V/lWMPaKdrQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMKHGTQU8kol62xQDJqNbS7eVtC8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiZDdlZGVkLWM3YWItNDhjNC04YzA0LWRkZDVlZjczYzk4NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaEQAwDQYJKoZIhvcNAQELBQADggEBALVkRJiL7etPILwSVWOZ 6LOBGdhqVoPdpD8PNzbniKho8ksTBILw+ukFTNQhB1Jz2wZDutznIIeSSI6u5tbe P8TEA2RDIsAGrNcKxCCpZXVSBAc649R8wJwaQuFsesKTIMuXqUUSYlWTSePkT5Xl WLfw1Ux8iLDdwtnSwHCNUNtP2Pxxrc2KrhCQoGyZJcDLOQL03GAfP+ik8BjX6kaN ///YjkOxaQM/UoAI+8H3/t08wcP5koV/cSrAGShBOrQsYuZdWk3bqfHg+emaINIm gOZk1xR8l7J7duGd0ocgNtDi5IdzEDFueGOVV4xnsWYRRKn/7+0PtcQVuhK5891l 0Cw= -----END CERTIFICATE-----Generated at Sun Mar 1 21:54:43 2026 by rpki-client