$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/94aecf12-a0a8-43cd-b24c-37950ef5429d.roa File: 94aecf12-a0a8-43cd-b24c-37950ef5429d.roa (raw, json) Hash identifier: qDgSUDjvy8W51LZ65nHFJEQ0GZToFp0/yCsJ43Okl0s= Subject key identifier: 8D:13:E1:20:4D:B6:08:18:75:5E:5A:B0:6B:21:3C:72:A7:C3:DC:52 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 72AA15D85BF4E8AFEB477751EDF7BEA7406A1C7C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/94aecf12-a0a8-43cd-b24c-37950ef5429d.roa Signing time: Fri 13 Feb 2026 00:00:35 +0000 ROA not before: Fri 13 Feb 2026 00:00:35 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da27::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:aa:15:d8:5b:f4:e8:af:eb:47:77:51:ed:f7:be:a7:40:6a:1c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 13 00:00:35 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=76c379d10838a23b534824a755e0f0ed62752f4cb85ee5c7310b11f0a72de799, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d2:d1:29:5d:39:04:d2:a4:7a:5d:49:61:bd: f1:1b:71:9c:06:9c:26:63:df:3e:ea:17:76:82:50: 97:ed:a5:d3:64:36:0b:5a:b7:3c:62:8a:e2:78:1f: f6:03:56:b0:fa:04:3e:ef:87:a5:8c:7c:2a:05:4d: ff:37:9b:dd:e5:47:c1:d4:c6:99:e5:7c:c2:98:4c: ea:37:a8:98:1e:b5:34:3d:f8:ee:10:78:eb:40:1a: 5d:75:8a:a8:8a:34:9c:43:22:cc:03:a6:4a:cb:c8: 63:16:88:b9:52:9b:4d:a3:4f:4d:61:94:3f:2e:31: c8:b4:8e:46:28:87:29:46:20:ee:bd:16:90:64:1d: cd:9b:8e:d7:b9:d1:61:64:d9:bf:80:e2:6b:50:ea: 1c:4f:9c:31:c7:ee:33:6d:52:04:fa:a6:be:71:38: 1b:1e:77:8f:72:5e:9d:fe:f0:4c:2a:f0:ca:4c:20: 5e:40:69:ef:a8:86:34:f8:fb:39:d0:f1:df:65:24: 94:f1:10:70:50:83:25:42:ea:ff:36:6a:f2:d0:01: f5:37:01:54:2a:8f:24:5c:77:42:ae:31:bd:45:c4: 39:ca:ee:fb:35:46:73:3a:06:69:f6:60:53:f6:02: 0c:d2:59:2b:fd:65:0c:88:35:23:84:78:6b:f7:83: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:13:E1:20:4D:B6:08:18:75:5E:5A:B0:6B:21:3C:72:A7:C3:DC:52 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/94aecf12-a0a8-43cd-b24c-37950ef5429d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da27::/36 Signature Algorithm: sha256WithRSAEncryption 3d:b0:64:d8:56:3f:35:c8:32:f0:15:97:a8:10:12:cd:bb:67: e5:b9:b4:8f:dd:e3:c3:2e:12:f4:52:3e:ce:1f:6e:2b:94:ba: 84:eb:05:17:6d:38:82:50:45:bd:e8:83:6e:2f:b1:1c:36:70: d3:9b:cc:65:75:93:fd:fb:89:25:36:fd:43:42:44:c9:08:4e: 52:c5:f3:75:7f:27:36:bb:ba:82:b8:07:d0:00:15:38:82:6f: 80:a8:8f:af:f3:7c:0b:87:4d:40:9f:f8:a4:38:2d:df:87:93: 62:51:4f:76:b0:8b:d5:43:fd:26:9a:b8:64:d8:71:ca:aa:67: 1d:3e:8d:33:01:51:61:7c:be:c4:bb:8d:b4:c0:b9:7b:6d:f1: 7c:9b:0b:a2:00:54:a3:2f:8b:36:b4:8d:91:78:0c:aa:a6:77: d6:4b:ce:fb:e4:b9:e4:db:d0:c0:5a:be:d0:43:f9:f7:8a:97: 73:7a:99:0a:ac:7d:48:00:d1:0f:28:5e:ac:fc:03:4a:89:44: 2d:89:73:5c:14:24:1f:a6:d4:d4:e4:d3:04:2c:60:63:55:40: c3:6f:93:8a:34:53:80:93:30:51:75:f8:ce:9b:d9:b8:39:d7: 5a:50:fb:61:4c:3a:a2:8a:26:c1:da:12:64:d5:46:e9:32:a5: a3:8b:a0:78 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcqoV2Fv06K/rR3dR7fe+p0BqHHwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMzAwMDAzNVoX DTI2MDUxNDIzNTk1OVowejFJMEcGA1UEBRNANzZjMzc5ZDEwODM4YTIzYjUzNDgy NGE3NTVlMGYwZWQ2Mjc1MmY0Y2I4NWVlNWM3MzEwYjExZjBhNzJkZTc5OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NLRKV05BNKkel1JYb3xG3GcBpwm Y98+6hd2glCX7aXTZDYLWrc8YorieB/2A1aw+gQ+74eljHwqBU3/N5vd5UfB1MaZ 5XzCmEzqN6iYHrU0PfjuEHjrQBpddYqoijScQyLMA6ZKy8hjFoi5UptNo09NYZQ/ LjHItI5GKIcpRiDuvRaQZB3Nm47XudFhZNm/gOJrUOocT5wxx+4zbVIE+qa+cTgb HnePcl6d/vBMKvDKTCBeQGnvqIY0+Ps50PHfZSSU8RBwUIMlQur/Nmry0AH1NwFU Ko8kXHdCrjG9RcQ5yu77NUZzOgZp9mBT9gIM0lkr/WUMiDUjhHhr94MExQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFI0T4SBNtggYdV5asGshPHKnw9xSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk0YWVjZjEyLWEwYTgtNDNjZC1iMjRjLTM3OTUwZWY1NDI5ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaJwAwDQYJKoZIhvcNAQELBQADggEBAD2wZNhWPzXIMvAVl6gQ Es27Z+W5tI/d48MuEvRSPs4fbiuUuoTrBRdtOIJQRb3og24vsRw2cNObzGV1k/37 iSU2/UNCRMkITlLF83V/Jza7uoK4B9AAFTiCb4Coj6/zfAuHTUCf+KQ4Ld+Hk2JR T3awi9VD/SaauGTYccqqZx0+jTMBUWF8vsS7jbTAuXtt8XybC6IAVKMviza0jZF4 DKqmd9ZLzvvkueTb0MBavtBD+feKl3N6mQqsfUgA0Q8oXqz8A0qJRC2Jc1wUJB+m 1NTk0wQsYGNVQMNvk4o0U4CTMFF1+M6b2bg511pQ+2FMOqKKJsHaEmTVRukypaOL oHg= -----END CERTIFICATE-----Generated at Mon Mar 2 03:24:27 2026 by rpki-client