$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8d0314b7-fdd6-4cd4-9bd7-5dc63f6343a8.roa File: 8d0314b7-fdd6-4cd4-9bd7-5dc63f6343a8.roa (raw, json) Hash identifier: WE0wIdDkRq4vP8lmQ2zLwRynbCN+R1hDscaS6VnB+cI= Subject key identifier: EE:14:1A:19:65:F6:66:36:BA:0C:DB:B4:F9:88:35:57:4F:7E:A1:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0F068CD3711F47F9FAF2522D3C68188FAAE3C86C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8d0314b7-fdd6-4cd4-9bd7-5dc63f6343a8.roa Signing time: Sat 21 Feb 2026 00:11:04 +0000 ROA not before: Sat 21 Feb 2026 00:11:04 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:06:8c:d3:71:1f:47:f9:fa:f2:52:2d:3c:68:18:8f:aa:e3:c8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:11:04 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=f85410afd864241247f86bc6d28043bf71c5122527a811db13cfb862f463e23f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:f3:ba:36:79:fc:d7:2d:5a:64:6e:5f:96: 92:dd:a6:fa:94:2a:02:67:af:75:42:80:a0:1e:3d: 73:d2:93:be:0d:df:3b:13:19:e5:26:09:4a:b9:f3: bc:36:3d:fb:98:df:35:98:ae:08:bb:36:81:67:18: ac:4d:9f:ea:88:ca:f9:0d:88:32:a5:de:27:b8:b0: 4f:5c:50:ac:66:e4:91:60:10:9b:87:63:d2:65:a5: 6a:1a:43:91:25:b9:23:f7:42:6d:23:23:5e:7e:ab: 65:8e:85:58:eb:73:59:91:c3:af:43:a1:34:b5:fa: c3:e0:ea:3f:4e:a7:a7:92:c4:2d:ab:34:11:e2:d9: f7:6d:84:51:c9:62:d0:b0:a0:44:3d:72:cb:46:b9: ab:a4:0d:d9:4d:9b:1d:74:9f:43:d7:5d:47:0c:b3: a4:eb:8c:6e:9c:50:81:f6:8e:c5:f9:9c:20:bf:85: 44:be:64:3f:0d:88:01:0d:a0:83:39:17:b9:93:8c: e8:d5:6a:5c:a1:fc:41:92:91:fd:23:df:54:86:26: cb:a7:8f:44:6a:b9:fb:77:8c:c5:ec:aa:1f:62:91: 93:91:15:da:4b:c7:8e:15:69:57:a9:04:11:ad:d9: b8:ea:a2:bc:55:dc:fe:fd:9b:75:67:33:71:df:ed: f2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:14:1A:19:65:F6:66:36:BA:0C:DB:B4:F9:88:35:57:4F:7E:A1:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8d0314b7-fdd6-4cd4-9bd7-5dc63f6343a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c000::/40 Signature Algorithm: sha256WithRSAEncryption 76:61:48:5c:8f:e7:ae:14:71:e8:35:e9:79:0e:8b:c6:9e:36: c0:97:51:8b:52:e7:2e:61:07:55:57:9f:68:06:8c:dc:e8:3e: d7:ee:7e:10:1d:00:fe:8b:14:ef:9d:59:b5:5b:54:f5:86:28: b2:76:50:0b:3c:ef:f2:54:bf:e0:cd:34:fe:41:0e:95:62:e1: fe:0c:ed:f8:24:60:3e:70:a7:df:65:81:c7:08:4f:4e:97:75: 47:1f:f2:c6:89:dc:3a:ed:5a:70:82:00:73:65:a2:92:45:43: dc:8e:a8:f6:e2:c4:25:64:50:a8:69:ae:48:14:9d:35:6d:38: 0c:60:62:bd:23:30:eb:1d:78:56:0f:62:ed:5b:37:58:ae:14: 34:bb:7a:0f:34:2b:ab:0c:81:65:c4:85:1b:9a:98:8f:98:bf: 64:e5:a2:88:f0:f1:38:1d:b3:47:1a:32:04:1b:95:5e:bd:03: d5:f7:14:bf:98:f0:cf:b2:0a:3d:c9:77:a0:bc:9d:be:5c:e0: 5d:79:35:76:42:06:3c:5b:a5:f2:50:f9:d9:e2:aa:9e:80:83: d1:48:a7:a6:cb:3a:96:2c:e4:21:42:35:a4:c8:c4:59:9a:cc: e2:12:00:8c:9d:2d:6b:b8:b4:50:15:d4:f7:54:a3:4d:0c:75: de:a1:ae:84 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDwaM03EfR/n68lItPGgYj6rjyGwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMTEwNFoX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAZjg1NDEwYWZkODY0MjQxMjQ3Zjg2 YmM2ZDI4MDQzYmY3MWM1MTIyNTI3YTgxMWRiMTNjZmI4NjJmNDYzZTIzZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPLzujZ5/NctWmRuX5aS3ab6lCoC Z691QoCgHj1z0pO+Dd87ExnlJglKufO8Nj37mN81mK4IuzaBZxisTZ/qiMr5DYgy pd4nuLBPXFCsZuSRYBCbh2PSZaVqGkORJbkj90JtIyNefqtljoVY63NZkcOvQ6E0 tfrD4Oo/TqenksQtqzQR4tn3bYRRyWLQsKBEPXLLRrmrpA3ZTZsddJ9D111HDLOk 64xunFCB9o7F+Zwgv4VEvmQ/DYgBDaCDORe5k4zo1WpcofxBkpH9I99UhibLp49E arn7d4zF7KofYpGTkRXaS8eOFWlXqQQRrdm46qK8Vdz+/Zt1ZzNx3+3yHwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFO4UGhll9mY2ugzbtPmINVdPfqFYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhkMDMxNGI3LWZkZDYtNGNkNC05YmQ3LTVkYzYzZjYzNDNhOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/8AwDQYJKoZIhvcNAQELBQADggEBAHZhSFyP564Uceg16XkO i8aeNsCXUYtS5y5hB1VXn2gGjNzoPtfufhAdAP6LFO+dWbVbVPWGKLJ2UAs87/JU v+DNNP5BDpVi4f4M7fgkYD5wp99lgccIT06XdUcf8saJ3DrtWnCCAHNlopJFQ9yO qPbixCVkUKhprkgUnTVtOAxgYr0jMOsdeFYPYu1bN1iuFDS7eg80K6sMgWXEhRua mI+Yv2Tloojw8Tgds0caMgQblV69A9X3FL+Y8M+yCj3Jd6C8nb5c4F15NXZCBjxb pfJQ+dniqp6Ag9FIp6bLOpYs5CFCNaTIxFmazOISAIydLWu4tFAV1PdUo00Mdd6h roQ= -----END CERTIFICATE-----Generated at Sun Mar 1 23:52:46 2026 by rpki-client