$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b0176a0-5a88-466b-85b1-d79c298aa5ae.roa File: 9b0176a0-5a88-466b-85b1-d79c298aa5ae.roa (raw, json) Hash identifier: cy2nJBkdghKtAiR7gxT/Y9HOqLcK521XoDgICVJnvts= Subject key identifier: 4F:A5:50:2B:BC:BA:7C:8B:23:E7:BA:49:9C:EC:ED:0F:4E:76:ED:F6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 44CECEE096C47EA2264C57EAC415CF9DD529FAE8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b0176a0-5a88-466b-85b1-d79c298aa5ae.roa Signing time: Sat 21 Feb 2026 00:20:07 +0000 ROA not before: Sat 21 Feb 2026 00:20:07 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ce:ce:e0:96:c4:7e:a2:26:4c:57:ea:c4:15:cf:9d:d5:29:fa:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:20:07 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=9ec1dc6f1ec755e32fea1d6a3ec52601d1b0ff5608292a1d5cb1a0281dd2fab6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:10:e1:9e:ba:fa:df:6a:af:ea:0e:cd:0b:39: 81:54:71:29:6b:b1:1e:71:25:4e:1f:e3:ca:c4:d8: ce:5e:85:6f:0f:1a:5c:83:bd:04:f4:98:cb:85:16: 09:b3:5d:ce:00:63:99:88:44:0a:b7:c5:15:ff:e7: cc:c2:f9:5a:71:ca:6c:f5:64:f1:71:24:ca:53:28: f5:f2:81:bd:4c:a9:e9:44:0d:e7:24:69:00:1a:b9: af:39:86:3d:65:ba:3e:01:85:8d:37:59:a7:70:45: a0:6e:e3:bb:e1:13:dd:fd:fb:8c:98:6b:3d:fe:b5: ec:53:c7:4c:f1:d8:45:b3:c7:01:84:74:ce:11:c4: 1b:16:c9:36:ff:9d:ec:05:ae:3e:c5:2e:8f:ed:14: 56:45:65:8b:70:dd:37:31:10:c0:1f:f6:e3:11:8c: 0e:2d:91:20:7a:b3:a2:3b:cc:9b:b6:04:65:b7:9d: 53:98:84:b4:8a:e2:87:e9:d8:90:b1:18:be:90:cf: 90:01:e0:ea:5d:4c:72:f0:5a:ef:ab:b6:ab:98:39: 74:56:f8:04:02:cf:55:a4:6f:8f:6d:f2:86:de:37: e9:e4:f7:2e:f1:f3:e8:9d:c0:81:66:af:05:9e:90: a5:82:4b:40:ae:71:49:a8:41:70:c3:46:68:ba:f5: e2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A5:50:2B:BC:BA:7C:8B:23:E7:BA:49:9C:EC:ED:0F:4E:76:ED:F6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b0176a0-5a88-466b-85b1-d79c298aa5ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c840::/48 Signature Algorithm: sha256WithRSAEncryption 73:1d:fe:ec:a6:49:78:dd:ce:17:33:07:58:f8:c8:dd:32:9d: e1:04:12:94:0b:fe:13:0c:d8:3d:7d:77:4a:ba:ec:cd:df:04: b1:8b:7d:54:e1:f2:02:81:ed:a3:61:55:c2:a2:99:ad:c9:42: 22:92:5c:c2:c1:9c:88:16:05:8a:c6:84:2a:ce:8d:43:83:c9: bb:5a:4a:15:29:6a:b9:04:4a:fb:db:f4:af:e4:45:e2:29:cf: 5c:70:3f:9a:08:11:90:fe:8a:7c:b8:ed:26:fb:21:32:3e:4f: b9:43:ea:c8:de:d5:0b:4e:f8:6a:2b:40:01:40:4d:eb:b0:c7: a8:95:e7:54:9d:1b:61:9b:40:ef:2c:4e:c2:e9:59:0a:dd:24: fa:6d:51:48:6d:1a:a7:97:3c:1f:73:56:b5:e0:7d:b6:05:b7: 90:59:ae:47:5f:c6:42:c5:30:4a:b3:6f:aa:42:cb:dc:45:31: 09:66:2c:48:29:df:9a:2a:e2:40:42:67:5b:3c:bc:9e:82:d7: de:1b:30:ce:19:75:e6:fc:b1:32:57:0d:c1:dd:6e:88:2c:af: c8:8c:b3:b3:7c:a5:d3:c8:39:c4:74:bf:67:33:83:b3:3a:3f: 9e:39:cb:05:b2:4c:b8:8d:c5:fb:c9:2b:15:16:e7:7d:59:6e: 99:76:ae:2a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURM7O4JbEfqImTFfqxBXPndUp+ugwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMjAwN1oX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAOWVjMWRjNmYxZWM3NTVlMzJmZWEx ZDZhM2VjNTI2MDFkMWIwZmY1NjA4MjkyYTFkNWNiMWEwMjgxZGQyZmFiNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xDhnrr632qv6g7NCzmBVHEpa7Ee cSVOH+PKxNjOXoVvDxpcg70E9JjLhRYJs13OAGOZiEQKt8UV/+fMwvlaccps9WTx cSTKUyj18oG9TKnpRA3nJGkAGrmvOYY9Zbo+AYWNN1mncEWgbuO74RPd/fuMmGs9 /rXsU8dM8dhFs8cBhHTOEcQbFsk2/53sBa4+xS6P7RRWRWWLcN03MRDAH/bjEYwO LZEgerOiO8ybtgRlt51TmIS0iuKH6diQsRi+kM+QAeDqXUxy8Frvq7armDl0VvgE As9VpG+PbfKG3jfp5Pcu8fPoncCBZq8FnpClgktArnFJqEFww0ZouvXiXQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE+lUCu8unyLI+e6SZzs7Q9Odu32MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzliMDE3NmEwLTVhODgtNDY2Yi04NWIxLWQ3OWMyOThhYTVhZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYchAMA0GCSqGSIb3DQEBCwUAA4IBAQBzHf7spkl43c4XMwdY +MjdMp3hBBKUC/4TDNg9fXdKuuzN3wSxi31U4fICge2jYVXCopmtyUIiklzCwZyI FgWKxoQqzo1Dg8m7WkoVKWq5BEr72/Sv5EXiKc9ccD+aCBGQ/op8uO0m+yEyPk+5 Q+rI3tULTvhqK0ABQE3rsMeoledUnRthm0DvLE7C6VkK3ST6bVFIbRqnlzwfc1a1 4H22BbeQWa5HX8ZCxTBKs2+qQsvcRTEJZixIKd+aKuJAQmdbPLyegtfeGzDOGXXm /LEyVw3B3W6ILK/IjLOzfKXTyDnEdL9nM4OzOj+eOcsFsky4jcX7ySsVFud9WW6Z dq4q -----END CERTIFICATE-----Generated at Sun Mar 1 23:50:11 2026 by rpki-client