$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9725a002-ebcc-4b84-98d3-40c085343993.roa File: 9725a002-ebcc-4b84-98d3-40c085343993.roa (raw, json) Hash identifier: Eg6R1IrwimisyU/3kkzBE71RbCPGo9zOS3X/HHvSbD0= Subject key identifier: A9:BB:19:64:BE:0F:AC:72:DE:EA:49:25:D6:F8:BA:1A:F0:D0:E5:57 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 542510E02153078A8C3F1A640829AE920C71681A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9725a002-ebcc-4b84-98d3-40c085343993.roa Signing time: Sun 22 Feb 2026 00:30:10 +0000 ROA not before: Sun 22 Feb 2026 00:30:10 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:25:10:e0:21:53:07:8a:8c:3f:1a:64:08:29:ae:92:0c:71:68:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:30:10 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=1b5514f209aa7a7c6bd3c9d0d4cc9195e268f8ec609a7daa41c26539a23b94a2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4e:1d:85:cd:d3:04:37:64:ac:a7:d2:9b:46: a1:ee:20:95:37:75:29:2f:b4:01:0a:1c:ca:5b:48: 60:0b:4d:a5:f4:ef:8b:ba:59:b8:9f:a0:a6:2c:25: 72:dc:a0:0d:79:14:a0:7d:60:ba:3c:df:7f:7c:c7: 4a:db:a7:0b:48:cb:4f:47:5e:1f:f9:cc:d2:f4:5d: ab:e4:36:94:7f:9f:4c:bc:32:2e:44:b8:b8:7d:5e: b8:18:e7:93:70:4c:fd:0a:59:2b:82:c3:55:84:d6: 4a:98:f3:0b:3b:04:dc:37:70:1d:f4:9c:fe:b6:cd: 16:99:87:8c:24:e6:08:db:59:19:af:fd:10:9b:00: 28:34:58:73:e1:ec:34:74:e5:09:3f:2f:84:f5:47: fc:3b:b0:c7:f1:a4:31:ce:a0:1f:b2:c1:3c:0f:25: 9f:c3:96:64:a3:54:14:30:95:3c:78:3f:7b:3a:9b: 48:cb:9f:29:5a:8e:89:bb:40:52:3c:a5:25:b6:8c: d8:56:32:04:75:ec:fe:dc:a1:cb:50:7a:bd:ec:1b: 91:e3:a5:e9:92:7c:31:6c:9b:df:47:b5:a0:a4:3e: bd:e2:a4:e1:95:82:10:13:4f:28:2b:8d:d6:39:d6: 5f:cd:5e:4b:45:3d:32:87:d2:5d:da:7e:37:f1:41: 1a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BB:19:64:BE:0F:AC:72:DE:EA:49:25:D6:F8:BA:1A:F0:D0:E5:57 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9725a002-ebcc-4b84-98d3-40c085343993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:f000::/40 Signature Algorithm: sha256WithRSAEncryption c8:06:18:e1:44:3d:b4:b3:5b:3f:8a:eb:c7:bd:f6:05:e0:95: ed:c1:f2:fd:5b:6a:1e:8d:d4:43:95:cb:11:85:c8:dd:fd:6e: ff:ee:77:1e:bd:32:2b:db:c6:c9:d0:ab:59:99:b5:14:2f:1c: 0d:67:30:f1:b2:55:77:81:be:1c:03:8c:59:d8:bf:5c:18:5f: c7:1f:4b:2e:89:44:76:ee:19:78:92:6a:4f:1f:2f:69:3e:83: 4d:e6:86:7c:16:3a:86:f8:26:49:5b:5e:f6:74:c8:db:ae:dc: 31:12:68:70:8c:75:66:09:58:6f:8c:1c:b5:9e:6a:89:3d:bf: a5:c0:72:89:bc:64:d8:f3:ee:d9:75:cd:26:8a:2d:df:a0:ae: 37:3e:12:8c:87:6c:b1:6d:e9:38:02:77:15:7f:8c:b6:9b:b0: 50:d7:01:af:49:4a:d8:a0:f8:7c:cd:47:03:39:81:60:a1:50: c3:96:2f:25:81:97:d7:29:34:dc:98:71:36:a4:b8:9f:95:f5: 0b:68:e7:cd:d6:4b:3d:ff:56:0b:36:0e:68:8f:1e:2d:08:91: 34:1f:3a:89:88:8a:a2:9f:2a:ad:72:39:f7:9f:31:d8:e5:cd: 9f:09:59:75:0e:b3:46:26:c5:f6:83:66:8c:c1:3b:1f:ba:91: 38:bf:0c:9d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVCUQ4CFTB4qMPxpkCCmukgxxaBowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMzAxMFoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAMWI1NTE0ZjIwOWFhN2E3YzZiZDNj OWQwZDRjYzkxOTVlMjY4ZjhlYzYwOWE3ZGFhNDFjMjY1MzlhMjNiOTRhMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU4dhc3TBDdkrKfSm0ah7iCVN3Up L7QBChzKW0hgC02l9O+Lulm4n6CmLCVy3KANeRSgfWC6PN9/fMdK26cLSMtPR14f +czS9F2r5DaUf59MvDIuRLi4fV64GOeTcEz9ClkrgsNVhNZKmPMLOwTcN3Ad9Jz+ ts0WmYeMJOYI21kZr/0QmwAoNFhz4ew0dOUJPy+E9Uf8O7DH8aQxzqAfssE8DyWf w5Zko1QUMJU8eD97OptIy58pWo6Ju0BSPKUltozYVjIEdez+3KHLUHq97BuR46Xp knwxbJvfR7WgpD694qThlYIQE08oK43WOdZfzV5LRT0yh9Jd2n438UEaCQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKm7GWS+D6xy3upJJdb4uhrw0OVXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk3MjVhMDAyLWViY2MtNGI4NC05OGQzLTQwYzA4NTM0Mzk5My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMvAwDQYJKoZIhvcNAQELBQADggEBAMgGGOFEPbSzWz+K68e9 9gXgle3B8v1bah6N1EOVyxGFyN39bv/udx69MivbxsnQq1mZtRQvHA1nMPGyVXeB vhwDjFnYv1wYX8cfSy6JRHbuGXiSak8fL2k+g03mhnwWOob4JklbXvZ0yNuu3DES aHCMdWYJWG+MHLWeaok9v6XAcom8ZNjz7tl1zSaKLd+grjc+EoyHbLFt6TgCdxV/ jLabsFDXAa9JStig+HzNRwM5gWChUMOWLyWBl9cpNNyYcTakuJ+V9Qto583WSz3/ Vgs2DmiPHi0IkTQfOomIiqKfKq1yOfefMdjlzZ8JWXUOs0YmxfaDZozBOx+6kTi/ DJ0= -----END CERTIFICATE-----Generated at Sun Mar 1 22:15:20 2026 by rpki-client