$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996cc3b8-0df0-4f17-97f0-d59aa845427c.roa File: 996cc3b8-0df0-4f17-97f0-d59aa845427c.roa (raw, json) Hash identifier: WW1o0fje117G50UbCeMN1nn7GVuH1lZ51HBuStKrkzM= Subject key identifier: D4:75:AD:C6:51:17:D5:2B:EF:6A:6E:9B:35:10:16:4C:8E:8D:27:AC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 524242127DD82B36787C857EAD4CDFD70F90E157 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996cc3b8-0df0-4f17-97f0-d59aa845427c.roa Signing time: Fri 06 Feb 2026 00:00:37 +0000 ROA not before: Fri 06 Feb 2026 00:00:37 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da00:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:42:42:12:7d:d8:2b:36:78:7c:85:7e:ad:4c:df:d7:0f:90:e1:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 6 00:00:37 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=70d5878af91273a8b6632db2d54275cec11bb74b9100bd7b0a16aac2cee1ed1c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:df:5e:7f:1a:c2:d3:08:80:e9:d2:f8:91: 9a:45:ec:06:89:53:c9:26:73:77:54:29:39:95:2e: 98:38:83:83:26:d9:75:90:48:b1:49:02:a7:cb:75: d8:6f:21:dd:81:10:01:f3:62:ae:f8:fd:1f:7e:a5: ab:23:c0:64:c3:f6:90:4b:aa:29:e7:0c:b3:cd:0c: e6:26:09:76:94:f2:ce:2f:46:86:9a:60:fb:f0:30: 03:2c:b9:e8:94:11:27:b3:b3:18:a7:43:ad:3a:b1: 0c:ee:9f:0b:2a:84:62:52:32:da:20:da:5e:67:93: c9:17:eb:15:6b:9c:14:b7:3e:68:d2:eb:6c:ac:93: 37:83:0d:d7:18:5c:23:1c:65:1b:fe:2b:7e:d2:a0: eb:5c:51:ef:b3:e8:e0:53:b6:f1:bf:21:48:3c:33: 94:d6:0c:58:cf:7a:81:ba:4c:f8:41:bc:f2:85:ac: cc:bc:06:3e:5e:fb:f6:51:e6:aa:31:26:c0:aa:54: 03:5a:39:34:96:49:50:51:1f:c8:cc:e7:66:2a:3c: cc:11:ef:48:60:eb:6a:88:a5:11:04:54:44:ea:6e: 09:ec:df:b3:a4:02:eb:48:df:f3:b8:39:20:dd:03: f8:31:2b:42:7f:bf:e1:de:4e:41:0b:26:1e:e1:4d: c9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:75:AD:C6:51:17:D5:2B:EF:6A:6E:9B:35:10:16:4C:8E:8D:27:AC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996cc3b8-0df0-4f17-97f0-d59aa845427c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:ff00::/48 Signature Algorithm: sha256WithRSAEncryption 76:80:c3:e6:9b:21:69:ba:49:89:36:40:a7:87:0d:1b:70:ee: 1a:00:15:37:22:1a:02:f5:cd:2e:a9:2a:d9:51:ac:cc:b4:d7: fe:10:d4:02:c3:1a:79:7a:05:f8:c3:d5:e9:a0:a0:c8:2a:a4: 9d:1d:23:83:f5:3c:94:43:d5:4c:7a:82:17:13:fa:24:82:67: 77:81:de:4e:b7:02:d0:59:dd:0a:0f:5a:cd:de:90:22:6b:66: e9:50:b2:6e:af:72:02:f1:5b:99:d4:f2:6e:e8:4a:68:8f:4b: 0f:ef:76:0b:28:ba:85:f0:79:37:61:df:fb:72:78:1f:8e:45: b2:d4:2d:de:01:65:c8:ac:ce:99:d8:d0:b4:d6:f7:20:cd:5e: f2:18:b5:dd:cf:15:f0:3b:28:c4:06:e5:4d:3e:ae:5e:60:bb: ce:d8:b2:df:c7:e2:75:9e:7c:c3:cc:bd:9a:ae:61:30:46:b8: ce:3f:e3:ad:fd:a6:d7:af:a9:53:69:f9:7f:e2:d6:9a:76:5a: 08:13:d1:12:7b:55:05:43:2e:e6:fb:87:3d:9c:8d:81:cb:f7: a4:56:b5:f8:ec:fa:ea:33:8e:b7:8c:4c:17:86:cd:5e:87:14: 32:67:08:5f:bd:03:4b:c6:0a:6d:4b:13:de:a7:45:14:db:bb: 33:de:82:12 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUkJCEn3YKzZ4fIV+rUzf1w+Q4VcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIwNjAwMDAzN1oX DTI2MDUwNzIzNTk1OVowejFJMEcGA1UEBRNANzBkNTg3OGFmOTEyNzNhOGI2NjMy ZGIyZDU0Mjc1Y2VjMTFiYjc0YjkxMDBiZDdiMGExNmFhYzJjZWUxZWQxYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB3fXn8awtMIgOnS+JGaRewGiVPJ JnN3VCk5lS6YOIODJtl1kEixSQKny3XYbyHdgRAB82Ku+P0ffqWrI8Bkw/aQS6op 5wyzzQzmJgl2lPLOL0aGmmD78DADLLnolBEns7MYp0OtOrEM7p8LKoRiUjLaINpe Z5PJF+sVa5wUtz5o0utsrJM3gw3XGFwjHGUb/it+0qDrXFHvs+jgU7bxvyFIPDOU 1gxYz3qBukz4QbzyhazMvAY+Xvv2UeaqMSbAqlQDWjk0lklQUR/IzOdmKjzMEe9I YOtqiKURBFRE6m4J7N+zpALrSN/zuDkg3QP4MStCf7/h3k5BCyYe4U3JqwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNR1rcZRF9Ur72pumzUQFkyOjSesMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5NmNjM2I4LTBkZjAtNGYxNy05N2YwLWQ1OWFhODQ1NDI3Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAP8AMA0GCSqGSIb3DQEBCwUAA4IBAQB2gMPmmyFpukmJNkCn hw0bcO4aABU3IhoC9c0uqSrZUazMtNf+ENQCwxp5egX4w9XpoKDIKqSdHSOD9TyU Q9VMeoIXE/okgmd3gd5OtwLQWd0KD1rN3pAia2bpULJur3IC8VuZ1PJu6Epoj0sP 73YLKLqF8Hk3Yd/7cngfjkWy1C3eAWXIrM6Z2NC01vcgzV7yGLXdzxXwOyjEBuVN Pq5eYLvO2LLfx+J1nnzDzL2armEwRrjOP+Ot/abXr6lTafl/4taadloIE9ESe1UF Qy7m+4c9nI2By/ekVrX47PrqM463jEwXhs1ehxQyZwhfvQNLxgptSxPep0UU27sz 3oIS -----END CERTIFICATE-----Generated at Sun Mar 1 22:08:36 2026 by rpki-client