$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93628203-b0e1-4510-b021-531c535d1c54.roa File: 93628203-b0e1-4510-b021-531c535d1c54.roa (raw, json) Hash identifier: NA056JibXzal7gBsLEAKONpHTT4Mapzn3/7I0pn8Ees= Subject key identifier: 40:CF:E1:3A:50:65:0B:F7:13:38:67:51:22:8E:9D:74:AD:92:7A:16 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 104759A0AE3824F7A7FAD5416E4C5ED275425D57 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93628203-b0e1-4510-b021-531c535d1c54.roa Signing time: Sun 22 Feb 2026 00:30:17 +0000 ROA not before: Sun 22 Feb 2026 00:30:17 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da12:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:47:59:a0:ae:38:24:f7:a7:fa:d5:41:6e:4c:5e:d2:75:42:5d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:30:17 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=ee5c2caa17a115815c1bf56514f6b9ec5e8854c4617e5e9d85b6e414b25f63ed, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:48:3c:18:b1:83:cf:26:33:a1:23:f6:94:a9: 73:db:5d:ac:88:99:af:cb:42:2a:34:37:32:3d:72: a3:1f:72:9d:06:6d:17:9e:17:2e:cb:1f:75:bb:0b: db:35:0f:7f:0a:df:32:c9:28:08:84:06:50:86:eb: af:66:b8:c7:fb:9d:a7:1e:30:33:c8:45:a2:ab:19: 01:24:e9:e1:ba:4e:16:bb:e9:2b:a4:5b:96:06:29: 41:38:f3:24:12:96:dd:c6:37:aa:6d:3d:b1:96:9d: 5a:7d:29:07:f5:f3:3d:cc:4d:08:e0:81:58:b6:df: 2d:b9:04:31:1f:8c:90:c3:3e:0a:fd:b9:d8:02:b3: c0:05:12:8e:fb:e5:b4:70:c2:d6:0d:a2:bc:42:19: 4f:1d:0b:4e:97:f7:36:ef:05:e0:72:e7:ab:7d:e6: f9:13:55:c3:fb:c2:cb:b0:4b:d0:df:9f:69:b1:69: 68:7d:dd:45:dc:fd:13:67:92:17:12:24:2e:26:1f: 06:fc:6b:5f:af:26:d0:0c:2e:2e:42:5b:f0:e5:12: ce:62:d2:f5:28:e3:99:ed:7b:3d:24:48:84:5b:d8: a7:19:22:89:e6:69:c3:c4:62:5b:bd:9a:af:1b:e8: 87:8b:50:5d:24:4a:bc:e8:80:57:53:95:c3:e3:45: 04:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CF:E1:3A:50:65:0B:F7:13:38:67:51:22:8E:9D:74:AD:92:7A:16 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93628203-b0e1-4510-b021-531c535d1c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da12:800::/38 Signature Algorithm: sha256WithRSAEncryption 8c:09:52:69:15:72:6e:bf:b0:0e:06:34:d8:0d:97:c0:8a:b1: 41:41:97:18:6f:6f:d7:ec:62:a9:1b:7e:df:f5:a7:01:be:0b: fa:ef:74:5d:da:4e:65:81:99:db:83:dc:c2:fa:0d:a3:fd:84: 2d:87:b8:90:2c:b0:14:80:bd:16:15:63:70:34:9b:19:05:94: e5:8e:53:9e:4c:36:f9:c9:94:2e:84:73:66:a0:8c:32:df:d1: 0e:6c:4d:bc:04:e1:09:4f:92:17:a3:a1:da:43:0e:ab:be:30: 09:68:54:56:10:40:4a:31:9c:b8:fe:17:38:af:a9:71:ad:a4: cb:4b:3e:7f:b1:9c:1d:bd:5b:e1:42:93:20:e8:5a:a2:37:01: a5:01:72:51:fa:69:4d:e9:4d:32:4f:01:0e:f9:6b:d3:ad:13: 74:f3:9d:e5:9c:9d:f2:5d:7f:4a:cb:44:64:d1:b0:00:66:03: 89:16:a9:f7:75:ca:53:fa:3e:f3:c7:2a:ba:47:43:50:a5:19: 4f:a4:d5:e0:84:e4:bc:cf:aa:df:71:2b:06:2c:fd:a5:fe:39: 17:e5:fd:30:55:3d:26:39:84:a1:37:8e:f8:c7:20:5c:4a:f8: a7:fa:d1:8c:c5:cf:28:b7:29:7b:dc:20:df:87:5e:cd:5f:ea: c9:00:c1:dc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEEdZoK44JPen+tVBbkxe0nVCXVcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMzAxN1oX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAZWU1YzJjYWExN2ExMTU4MTVjMWJm NTY1MTRmNmI5ZWM1ZTg4NTRjNDYxN2U1ZTlkODViNmU0MTRiMjVmNjNlZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUg8GLGDzyYzoSP2lKlz212siJmv y0IqNDcyPXKjH3KdBm0Xnhcuyx91uwvbNQ9/Ct8yySgIhAZQhuuvZrjH+52nHjAz yEWiqxkBJOnhuk4Wu+krpFuWBilBOPMkEpbdxjeqbT2xlp1afSkH9fM9zE0I4IFY tt8tuQQxH4yQwz4K/bnYArPABRKO++W0cMLWDaK8QhlPHQtOl/c27wXgcuerfeb5 E1XD+8LLsEvQ359psWlofd1F3P0TZ5IXEiQuJh8G/GtfrybQDC4uQlvw5RLOYtL1 KOOZ7Xs9JEiEW9inGSKJ5mnDxGJbvZqvG+iHi1BdJEq86IBXU5XD40UEVQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEDP4TpQZQv3EzhnUSKOnXStknoWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkzNjI4MjAzLWIwZTEtNDUxMC1iMDIxLTUzMWM1MzVkMWM1NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEggwDQYJKoZIhvcNAQELBQADggEBAIwJUmkVcm6/sA4GNNgN l8CKsUFBlxhvb9fsYqkbft/1pwG+C/rvdF3aTmWBmduD3ML6DaP9hC2HuJAssBSA vRYVY3A0mxkFlOWOU55MNvnJlC6Ec2agjDLf0Q5sTbwE4QlPkhejodpDDqu+MAlo VFYQQEoxnLj+FzivqXGtpMtLPn+xnB29W+FCkyDoWqI3AaUBclH6aU3pTTJPAQ75 a9OtE3TzneWcnfJdf0rLRGTRsABmA4kWqfd1ylP6PvPHKrpHQ1ClGU+k1eCE5LzP qt9xKwYs/aX+ORfl/TBVPSY5hKE3jvjHIFxK+Kf60YzFzyi3KXvcIN+HXs1f6skA wdw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:23:56 2026 by rpki-client