$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9527f74b-7eee-4a36-8f8c-a845b7e60ae9.roa File: 9527f74b-7eee-4a36-8f8c-a845b7e60ae9.roa (raw, json) Hash identifier: eRe9pBlxKt7dRyq9Laov9voo0G0iCgv8elZZ1XLTM78= Subject key identifier: E2:9C:73:0C:B8:7A:73:13:55:57:8A:DA:62:BC:F9:50:10:AB:69:B5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 720754B60DD9E0D9C852F16BBD4880DF19345F0C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9527f74b-7eee-4a36-8f8c-a845b7e60ae9.roa Signing time: Fri 06 Feb 2026 00:00:32 +0000 ROA not before: Fri 06 Feb 2026 00:00:32 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da68:a080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:07:54:b6:0d:d9:e0:d9:c8:52:f1:6b:bd:48:80:df:19:34:5f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 6 00:00:32 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=1220fc4f9c3ad0645568520fb01fbc57e41556b2756c9ba3742176966799cc75, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:85:c7:39:0d:25:78:a3:c2:a8:62:d4:4a:91: c8:8a:c6:58:f6:43:df:12:8f:d9:a5:88:8f:71:03: 62:ea:30:2a:45:a3:c8:9e:a1:dc:82:0f:c4:46:d2: cb:da:e9:d1:ca:2b:db:03:10:0e:09:68:28:9f:90: 4b:f8:1f:e0:6f:4f:e6:0a:de:ab:b7:a4:ee:bb:db: 8e:6e:68:72:27:2c:c0:92:2f:8a:5b:75:fe:18:ce: 3d:62:60:af:e3:3a:50:ea:40:7d:4b:d0:ad:7b:df: a4:78:ac:a5:d8:5b:c7:a3:a6:ab:b2:98:0f:17:fa: c7:f7:23:db:d0:f2:83:7b:c2:3f:57:7f:7f:5e:ab: 91:03:18:e6:bb:93:d1:9a:2b:f7:1c:53:f2:a7:71: 2f:40:f1:35:dc:85:64:f5:4f:1e:aa:e4:36:98:a9: b4:9d:1d:ea:c9:a4:7c:2c:41:7d:a7:91:74:fb:54: 6f:a3:7e:09:45:e9:57:99:67:d0:42:fa:0f:f4:cf: 2b:1b:44:e5:14:6a:35:b6:3a:be:4d:48:f4:c7:3c: ae:2f:3a:c7:5f:eb:c5:c4:a3:5c:75:46:50:12:fb: 50:9a:75:44:37:7f:a9:34:f5:7a:9f:5e:ea:45:9f: b2:31:18:fd:09:47:d0:fc:5f:c3:ad:e3:9e:52:04: be:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9C:73:0C:B8:7A:73:13:55:57:8A:DA:62:BC:F9:50:10:AB:69:B5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9527f74b-7eee-4a36-8f8c-a845b7e60ae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:a080::/46 Signature Algorithm: sha256WithRSAEncryption 90:23:d3:d3:30:ec:87:08:00:f0:bc:04:cd:07:f8:d3:37:1c: 56:7a:7a:3d:b0:eb:3a:3f:45:dc:d3:f5:94:98:86:e0:82:f3: 26:11:92:41:f0:1b:70:38:e5:d8:b1:97:d7:05:25:12:91:cf: 27:27:2b:57:06:d3:33:d4:f2:b1:81:a7:3b:5d:85:4c:ab:f3: 58:1a:2b:79:90:d8:30:69:f2:85:93:b4:ff:82:e5:82:f8:81: b8:ac:7d:7a:6e:15:f8:43:e5:4e:58:9b:d2:e1:ab:3a:fd:13: 26:87:d9:c6:1b:4b:6e:0d:e2:c6:21:49:6d:c0:a5:a5:bc:e3: 2b:e7:0b:83:5b:f3:28:96:fd:a5:c7:83:9c:f9:ac:dd:dc:ba: dd:5d:37:27:38:a8:84:d6:28:64:46:d0:11:27:14:9f:49:0c: a6:02:c0:51:bd:a2:bc:34:ef:12:7d:87:29:02:92:45:62:da: da:ad:dd:d1:b4:6f:a9:44:2e:fb:21:c3:91:04:a3:e5:66:67: 7e:54:2c:2e:e6:ba:4f:0f:de:4c:c4:c7:94:45:79:11:d6:9a: 09:db:77:45:2b:52:8e:b5:fd:67:8f:b8:cf:07:29:4a:3b:64: 06:2f:d9:c3:e9:a8:84:aa:24:5e:ee:91:a3:76:01:92:c9:62: 25:0e:55:86 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcgdUtg3Z4NnIUvFrvUiA3xk0XwwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIwNjAwMDAzMloX DTI2MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAMTIyMGZjNGY5YzNhZDA2NDU1Njg1 MjBmYjAxZmJjNTdlNDE1NTZiMjc1NmM5YmEzNzQyMTc2OTY2Nzk5Y2M3NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54XHOQ0leKPCqGLUSpHIisZY9kPf Eo/ZpYiPcQNi6jAqRaPInqHcgg/ERtLL2unRyivbAxAOCWgon5BL+B/gb0/mCt6r t6Tuu9uObmhyJyzAki+KW3X+GM49YmCv4zpQ6kB9S9Cte9+keKyl2FvHo6arspgP F/rH9yPb0PKDe8I/V39/XquRAxjmu5PRmiv3HFPyp3EvQPE13IVk9U8equQ2mKm0 nR3qyaR8LEF9p5F0+1Rvo34JRelXmWfQQvoP9M8rG0TlFGo1tjq+TUj0xzyuLzrH X+vFxKNcdUZQEvtQmnVEN3+pNPV6n17qRZ+yMRj9CUfQ/F/DreOeUgS+XwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOKccwy4enMTVVeK2mK8+VAQq2m1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk1MjdmNzRiLTdlZWUtNGEzNi04ZjhjLWE4NDViN2U2MGFlOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaKCAMA0GCSqGSIb3DQEBCwUAA4IBAQCQI9PTMOyHCADwvATN B/jTNxxWeno9sOs6P0Xc0/WUmIbggvMmEZJB8BtwOOXYsZfXBSUSkc8nJytXBtMz 1PKxgac7XYVMq/NYGit5kNgwafKFk7T/guWC+IG4rH16bhX4Q+VOWJvS4as6/RMm h9nGG0tuDeLGIUltwKWlvOMr5wuDW/Molv2lx4Oc+azd3LrdXTcnOKiE1ihkRtAR JxSfSQymAsBRvaK8NO8SfYcpApJFYtrard3RtG+pRC77IcORBKPlZmd+VCwu5rpP D95MxMeURXkR1poJ23dFK1KOtf1nj7jPBylKO2QGL9nD6aiEqiRe7pGjdgGSyWIl DlWG -----END CERTIFICATE-----Generated at Sun Mar 1 23:48:58 2026 by rpki-client