$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa File: 8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa (raw, json) Hash identifier: fAnKVqA9rit3uW5iXfY2sei2SYDBabFyoQMgB6YmeLk= Subject key identifier: 49:C0:DE:79:BB:24:4B:84:9F:27:59:ED:7A:CB:B0:13:B9:0B:51:1F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C3130F8A54CAC0AEBA5F022AEB38CDDE754E9F1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa Signing time: Fri 20 Feb 2026 00:30:38 +0000 ROA not before: Fri 20 Feb 2026 00:30:38 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:8020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:31:30:f8:a5:4c:ac:0a:eb:a5:f0:22:ae:b3:8c:dd:e7:54:e9:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:30:38 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=5a1967bbc82a5868156a7f2a2db6826941d456ae31178e3932189ff0d772d912, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5c:1d:48:a6:1d:6d:b5:08:2c:76:a1:8c:93: 1d:48:e2:24:75:4a:5d:23:73:38:2d:73:89:e0:3e: 5e:cb:d0:54:2a:62:47:46:bd:9b:b4:02:36:e1:9d: c1:ab:23:d0:2d:73:12:14:73:a8:e0:2e:e1:2d:0e: cd:13:c6:82:b0:80:39:61:52:a4:3d:3f:99:71:2a: 52:52:c4:bb:68:31:34:79:88:dc:ac:7d:d3:3a:c1: 4b:c4:f0:26:c7:0d:71:fa:e6:f3:f1:42:31:5e:ee: d8:7c:3c:09:f2:4f:aa:32:80:c4:43:b6:80:dd:e4: f4:da:43:37:92:bc:c7:5c:45:04:7d:bc:03:6a:bc: 55:8a:8e:04:f7:40:4a:3b:1a:cb:16:b3:9e:a0:88: be:80:5a:e6:ed:8e:f1:7b:33:a7:a0:56:af:55:e5: 95:56:2e:6d:06:14:8d:30:8e:02:76:91:e6:9b:8f: a5:7f:da:8a:ac:ac:ed:54:87:10:63:2d:e2:ce:56: 24:ad:18:8b:5c:70:53:6d:ae:eb:3e:ee:45:07:71: 6b:59:6f:35:aa:40:d0:08:c9:8e:58:34:7d:20:1c: e8:66:27:b5:5d:57:99:00:d7:41:6f:4c:6c:85:8a: 5c:98:87:91:8f:3c:86:3d:c5:52:0f:cd:9b:ea:9e: 1b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C0:DE:79:BB:24:4B:84:9F:27:59:ED:7A:CB:B0:13:B9:0B:51:1F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:8020::/48 Signature Algorithm: sha256WithRSAEncryption c2:11:bd:78:9b:66:28:55:a2:64:30:9e:e2:ae:54:39:91:dd: 66:5d:0c:e6:65:1a:cc:86:d1:c0:fa:53:c4:d4:4a:31:00:96: 8c:7f:ce:6f:42:0f:6d:7f:93:0e:db:b8:be:e8:22:f9:c7:dc: 2a:7e:bc:64:7d:89:0e:9f:03:bd:92:e0:0a:47:f5:4d:01:17: e4:cb:e3:9f:6a:7e:38:a1:59:1a:74:22:84:10:a7:11:8f:f6: a6:a2:be:b3:6c:1d:5e:29:b3:90:32:bb:a9:ea:e5:33:42:c3: ca:ac:52:a9:82:5b:5e:ce:5d:ba:48:6c:3f:e7:4b:d9:51:95: e0:8e:a3:00:a4:bf:db:fd:3b:44:7c:72:dc:37:de:bd:3e:47: 77:91:81:f6:bc:43:86:e7:a4:7a:91:56:d0:1b:1e:57:21:a3: 6d:61:da:47:2f:47:b1:a2:5a:5a:90:ce:28:1c:45:8e:a5:ca: 87:bb:ca:c4:f0:e1:22:8d:58:06:ab:84:47:4c:a3:ce:da:a1: 59:16:60:7e:0b:57:07:6c:a2:46:4f:e6:8a:28:f5:25:d9:51: 70:db:62:42:cc:7a:cc:8d:50:9d:3d:f7:c7:04:a7:63:60:25: 06:90:f1:38:d7:d3:3b:87:57:28:bf:0f:b3:8f:0d:30:26:62: ce:11:16:b6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPDEw+KVMrArrpfAirrOM3edU6fEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMzAzOFoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNANWExOTY3YmJjODJhNTg2ODE1NmE3 ZjJhMmRiNjgyNjk0MWQ0NTZhZTMxMTc4ZTM5MzIxODlmZjBkNzcyZDkxMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVwdSKYdbbUILHahjJMdSOIkdUpd I3M4LXOJ4D5ey9BUKmJHRr2btAI24Z3BqyPQLXMSFHOo4C7hLQ7NE8aCsIA5YVKk PT+ZcSpSUsS7aDE0eYjcrH3TOsFLxPAmxw1x+ubz8UIxXu7YfDwJ8k+qMoDEQ7aA 3eT02kM3krzHXEUEfbwDarxVio4E90BKOxrLFrOeoIi+gFrm7Y7xezOnoFavVeWV Vi5tBhSNMI4CdpHmm4+lf9qKrKztVIcQYy3izlYkrRiLXHBTba7rPu5FB3FrWW81 qkDQCMmOWDR9IBzoZie1XVeZANdBb0xshYpcmIeRjzyGPcVSD82b6p4b0wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEnA3nm7JEuEnydZ7XrLsBO5C1EfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhjYTM3MWQ5LTIxNTMtNDA1My05OWFjLTFiZGMwYzQyOTRhYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAIAgMA0GCSqGSIb3DQEBCwUAA4IBAQDCEb14m2YoVaJkMJ7i rlQ5kd1mXQzmZRrMhtHA+lPE1EoxAJaMf85vQg9tf5MO27i+6CL5x9wqfrxkfYkO nwO9kuAKR/VNARfky+Ofan44oVkadCKEEKcRj/amor6zbB1eKbOQMrup6uUzQsPK rFKpgltezl26SGw/50vZUZXgjqMApL/b/TtEfHLcN969Pkd3kYH2vEOG56R6kVbQ Gx5XIaNtYdpHL0exolpakM4oHEWOpcqHu8rE8OEijVgGq4RHTKPO2qFZFmB+C1cH bKJGT+aKKPUl2VFw22JCzHrMjVCdPffHBKdjYCUGkPE419M7h1covw+zjw0wJmLO ERa2 -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:09 2026 by rpki-client