$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa File: 92488c39-e92d-4c20-9728-7956e83ecf4e.roa (raw, json) Hash identifier: 6te0mPnczKvNlwY6ZEjxEe1nidnD4SqiuV41UGaMa5g= Subject key identifier: 60:15:2B:BD:24:D5:FB:17:01:B8:D4:2C:58:31:E4:65:7F:71:B5:AF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 568C0628FEA4AFC5501671D1B0C309BC21B13F96 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa Signing time: Sun 22 Feb 2026 00:30:48 +0000 ROA not before: Sun 22 Feb 2026 00:30:48 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da19:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8c:06:28:fe:a4:af:c5:50:16:71:d1:b0:c3:09:bc:21:b1:3f:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:30:48 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=5b0934dbd65383c57453eb32457cd51ab70b2f7b703f3b7be269a3ae33aa0050, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:34:1d:74:a7:66:41:af:e3:83:03:d6:95:fe: 8b:eb:0a:1f:8e:ab:9b:e8:a8:88:e9:ce:76:f1:6d: ac:a5:a2:9c:a8:d1:d0:05:c5:37:0d:47:9b:90:2b: da:73:19:52:d5:a8:fc:49:1c:9f:0a:ae:c9:b8:bb: d5:33:ec:d5:f9:11:f9:ef:70:9a:88:a1:10:a1:66: 1f:82:98:d6:af:d3:78:5a:d9:f3:9a:b8:98:11:32: a6:72:0b:70:8c:5b:0f:92:d1:c8:a2:8b:fd:05:f0: 9e:c7:75:a0:2e:ff:0b:4f:6e:c7:83:39:81:78:ee: 6d:fd:c3:c9:ba:dd:fb:26:09:0b:01:06:8c:33:ad: fd:a0:82:7c:84:16:ce:69:3f:fd:d4:ed:39:dc:7a: e9:b5:0a:8c:43:aa:92:c6:51:b7:30:08:6f:0b:5d: 8d:56:31:96:d5:3f:9a:37:e8:39:d6:97:55:3b:34: a8:09:25:2b:cd:e3:64:bb:44:8e:4f:26:a1:55:b4: a3:0e:de:80:94:70:ca:9b:3c:e7:a0:45:1f:29:b6: 78:83:35:92:d2:f6:99:c0:19:5c:65:8d:7f:d5:23: 0b:ee:5a:e0:76:00:d3:af:c8:2f:77:87:62:f7:5b: 94:68:99:2e:87:39:00:84:90:eb:76:30:0a:70:ab: 78:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:15:2B:BD:24:D5:FB:17:01:B8:D4:2C:58:31:E4:65:7F:71:B5:AF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da19:400::/38 Signature Algorithm: sha256WithRSAEncryption 39:fc:45:af:bf:65:02:58:50:a1:f3:43:e0:95:5a:cd:7f:97: cd:e4:9a:1c:f3:10:21:68:a7:1b:74:a0:63:25:07:fb:d6:e4: 20:06:aa:69:a7:3e:c5:eb:c3:9b:64:fa:03:07:2e:b5:d0:ae: 0a:b6:63:1c:5a:3e:96:a8:bd:21:5d:ca:cd:ba:31:47:e5:c3: 78:90:81:d7:68:cb:57:82:58:76:61:c0:d5:9c:ee:30:3e:17: c9:2e:9e:e0:4b:12:6a:59:06:0a:01:10:c2:91:b5:a4:85:55: b8:b6:22:5e:62:e7:7b:71:ea:1c:5a:d9:65:a6:99:22:35:2b: 5c:1b:d7:60:7d:f9:b7:73:8e:88:0e:57:71:69:04:c1:07:98: 0f:40:d5:bc:88:4e:c8:89:7b:5d:05:af:27:00:37:6e:93:c6: cb:fd:87:bc:10:02:6c:8c:9f:94:53:72:1f:0e:5c:06:65:45: 53:40:06:ba:e0:a8:13:41:a4:62:d6:90:05:66:18:c0:d7:24: 93:14:60:68:80:80:40:3f:b7:91:e7:11:e5:f4:35:4f:28:98: a8:4a:0d:16:0b:42:a4:1c:76:18:eb:53:bf:c0:42:bd:c6:39: 2d:84:4d:ed:39:34:e1:e8:68:db:08:77:2e:38:8c:c7:2c:b7: 5b:66:36:f0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVowGKP6kr8VQFnHRsMMJvCGxP5YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMzA0OFoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNANWIwOTM0ZGJkNjUzODNjNTc0NTNl YjMyNDU3Y2Q1MWFiNzBiMmY3YjcwM2YzYjdiZTI2OWEzYWUzM2FhMDA1MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDQddKdmQa/jgwPWlf6L6wofjqub 6KiI6c528W2spaKcqNHQBcU3DUebkCvacxlS1aj8SRyfCq7JuLvVM+zV+RH573Ca iKEQoWYfgpjWr9N4WtnzmriYETKmcgtwjFsPktHIoov9BfCex3WgLv8LT27HgzmB eO5t/cPJut37JgkLAQaMM639oIJ8hBbOaT/91O053HrptQqMQ6qSxlG3MAhvC12N VjGW1T+aN+g51pdVOzSoCSUrzeNku0SOTyahVbSjDt6AlHDKmzznoEUfKbZ4gzWS 0vaZwBlcZY1/1SML7lrgdgDTr8gvd4di91uUaJkuhzkAhJDrdjAKcKt4VwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGAVK70k1fsXAbjULFgx5GV/cbWvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkyNDg4YzM5LWU5MmQtNGMyMC05NzI4LTc5NTZlODNlY2Y0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGQQwDQYJKoZIhvcNAQELBQADggEBADn8Ra+/ZQJYUKHzQ+CV Ws1/l83kmhzzECFopxt0oGMlB/vW5CAGqmmnPsXrw5tk+gMHLrXQrgq2YxxaPpao vSFdys26MUflw3iQgddoy1eCWHZhwNWc7jA+F8kunuBLEmpZBgoBEMKRtaSFVbi2 Il5i53tx6hxa2WWmmSI1K1wb12B9+bdzjogOV3FpBMEHmA9A1byITsiJe10FrycA N26Txsv9h7wQAmyMn5RTch8OXAZlRVNABrrgqBNBpGLWkAVmGMDXJJMUYGiAgEA/ t5HnEeX0NU8omKhKDRYLQqQcdhjrU7/AQr3GOS2ETe05NOHoaNsIdy44jMcst1tm NvA= -----END CERTIFICATE-----Generated at Sun Mar 1 21:51:27 2026 by rpki-client