$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9771a9b1-0ca1-4d5c-aabf-23e3c1aeecb3.roa File: 9771a9b1-0ca1-4d5c-aabf-23e3c1aeecb3.roa (raw, json) Hash identifier: 8ns03HNRL1tj1jGhg9E0Ak1rviaF260rOlhtJZy+wJw= Subject key identifier: 20:31:7F:40:21:ED:24:3E:C8:D5:86:C1:BE:1F:52:CF:14:D7:3B:39 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 21F9F0FC87940954A61DF9B2AF6514C6F498F1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9771a9b1-0ca1-4d5c-aabf-23e3c1aeecb3.roa Signing time: Sun 22 Feb 2026 00:41:04 +0000 ROA not before: Sun 22 Feb 2026 00:41:04 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1a:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f9:f0:fc:87:94:09:54:a6:1d:f9:b2:af:65:14:c6:f4:98:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:41:04 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=e4fab4e2cedd24459c8c4192f37122ba299454d44236c0baf84664480ccc0c93, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:e1:36:f6:a9:a0:c7:21:b5:bf:8c:8d:5d: 3d:13:21:54:f5:c1:31:6a:5f:c3:54:fe:43:9e:8e: 2f:e4:a5:f6:e0:34:2a:14:c5:c5:33:b8:76:28:b2: 59:13:3c:59:ff:ac:ff:78:f2:14:17:7a:48:bd:21: d2:3a:7e:7b:2e:9d:9b:2a:2c:d7:33:6f:34:45:48: bd:02:ab:c2:cf:72:ef:73:de:8a:ad:74:e4:dd:4d: b6:b7:b0:08:7d:73:2c:27:a4:d6:d7:b6:12:41:99: f3:4c:54:35:75:26:2e:81:3c:3f:71:a1:84:8c:38: b4:7d:bf:ac:77:ac:e3:1d:1e:8b:7d:90:1d:eb:cd: 98:ec:0c:9e:1a:f0:63:9b:47:8e:0e:71:b5:39:66: 56:0f:83:87:91:cc:d5:20:0d:24:be:62:78:d9:f5: 70:ff:5f:9d:ff:e8:c3:4e:76:19:72:d4:4b:b2:44: e5:da:4e:1b:ed:da:b7:ca:9a:72:12:67:18:16:3d: f0:cb:db:ad:32:85:c4:ba:79:1d:4e:e5:a0:f6:67: f8:a4:8c:8f:ba:4f:a6:74:41:df:9d:12:fd:90:07: b7:60:a9:a6:d3:59:be:f3:25:20:f0:85:e0:92:1d: 4f:d1:16:22:11:d5:2e:fd:51:b8:c2:a1:b5:4a:6e: 74:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:31:7F:40:21:ED:24:3E:C8:D5:86:C1:BE:1F:52:CF:14:D7:3B:39 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9771a9b1-0ca1-4d5c-aabf-23e3c1aeecb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1a:800::/38 Signature Algorithm: sha256WithRSAEncryption 8b:f8:0d:7f:38:a8:ac:5e:f5:5a:62:0f:ba:65:a4:ea:17:7a: bc:28:3c:e0:8e:04:d5:1f:02:cd:fc:6e:e2:e2:a7:b0:8b:3d: 91:a0:cf:de:c6:7e:ee:fd:ea:80:0f:d4:b0:e0:76:b8:e2:16: df:fd:d1:13:52:7d:fa:54:04:31:26:12:4c:3b:ff:9b:54:5f: 41:5e:3e:49:cd:58:75:a3:99:92:6d:e5:88:ec:dc:56:3a:0d: a4:40:10:dd:58:e4:13:6d:e0:cc:24:05:b0:3e:eb:55:f5:2f: 00:e4:b8:f7:3a:ec:3c:4c:67:35:12:5c:dd:bf:08:d5:c5:15: 3f:c8:e7:12:b2:5c:0e:4f:56:be:ed:fa:5f:22:20:4d:af:70: 3e:4e:d6:ff:4b:6a:7a:c3:77:7e:14:eb:f5:c8:00:6a:9f:4f: b6:25:c9:6a:0b:ad:df:d9:5e:1f:37:b5:2d:b9:a9:e1:06:cc: 93:d5:30:4a:2d:5f:95:bc:66:f8:05:13:6f:ce:c0:17:d3:73: 77:1f:c2:31:a6:a8:89:72:4c:cb:80:8c:88:d7:8e:10:f0:b4: 4b:d7:7a:81:c4:75:c2:9e:f9:f4:2a:cd:e1:de:bc:0b:a1:00: 5d:f6:9a:b6:cc:aa:a6:40:2c:31:f3:a2:5c:3d:f7:c8:3d:94: 2d:19:4d:cd -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgITIfnw/IeUCVSmHfmyr2UUxvSY8TANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjYwMjIyMDA0MTA0WhcN MjYwNTIzMjM1OTU5WjB6MUkwRwYDVQQFE0BlNGZhYjRlMmNlZGQyNDQ1OWM4YzQx OTJmMzcxMjJiYTI5OTQ1NGQ0NDIzNmMwYmFmODQ2NjQ0ODBjY2MwYzkzMS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAOE29qmgxyG1v4yNXT0TIVT1wTFq X8NU/kOeji/kpfbgNCoUxcUzuHYoslkTPFn/rP948hQXeki9IdI6fnsunZsqLNcz bzRFSL0Cq8LPcu9z3oqtdOTdTba3sAh9cywnpNbXthJBmfNMVDV1Ji6BPD9xoYSM OLR9v6x3rOMdHot9kB3rzZjsDJ4a8GObR44OcbU5ZlYPg4eRzNUgDSS+YnjZ9XD/ X53/6MNOdhly1EuyROXaThvt2rfKmnISZxgWPfDL260yhcS6eR1O5aD2Z/ikjI+6 T6Z0Qd+dEv2QB7dgqabTWb7zJSDwheCSHU/RFiIR1S79UbjCobVKbnRPAgMBAAGj ggJKMIICRjAdBgNVHQ4EFgQUIDF/QCHtJD7I1YbBvh9SzxTXOzkwHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv OTc3MWE5YjEtMGNhMS00ZDVjLWFhYmYtMjNlM2MxYWVlY2IzLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgIkBtoaCDANBgkqhkiG9w0BAQsFAAOCAQEAi/gNfziorF71WmIPumWk 6hd6vCg84I4E1R8Czfxu4uKnsIs9kaDP3sZ+7v3qgA/UsOB2uOIW3/3RE1J9+lQE MSYSTDv/m1RfQV4+Sc1YdaOZkm3liOzcVjoNpEAQ3VjkE23gzCQFsD7rVfUvAOS4 9zrsPExnNRJc3b8I1cUVP8jnErJcDk9Wvu36XyIgTa9wPk7W/0tqesN3fhTr9cgA ap9PtiXJagut39leHze1Lbmp4QbMk9UwSi1flbxm+AUTb87AF9Nzdx/CMaaoiXJM y4CMiNeOEPC0S9d6gcR1wp759CrN4d68C6EAXfaatsyqpkAsMfOiXD33yD2ULRlN zQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:48:49 2026 by rpki-client