$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e9c95df-834b-4f90-b50a-380e8ec88ce4.roa File: 9e9c95df-834b-4f90-b50a-380e8ec88ce4.roa (raw, json) Hash identifier: h9qV5ft4lRSVu+sbgYiFXo5r3MBwSPCCEkkx2bfSnHo= Subject key identifier: 6F:EA:2C:3B:23:3F:47:22:72:CE:50:0E:E8:F8:8B:14:8D:F7:E6:8B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7BB0BB34D3B3936E1E5693CFD602559101B10B15 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e9c95df-834b-4f90-b50a-380e8ec88ce4.roa Signing time: Wed 11 Feb 2026 00:01:18 +0000 ROA not before: Wed 11 Feb 2026 00:01:18 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:2020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b0:bb:34:d3:b3:93:6e:1e:56:93:cf:d6:02:55:91:01:b1:0b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:01:18 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=21d6dda891b11e52e0dc26751f05bcd8a831649b296df001adf8dbc9490eab3c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fa:5c:b8:c1:c8:14:07:d9:4d:a9:e7:37:16: 69:42:d6:56:bb:3a:db:68:4e:d5:3e:24:9a:43:af: ab:fd:a7:56:d3:9f:3d:5d:49:c9:ad:a0:c3:99:14: bb:28:81:0b:e4:13:59:eb:33:8d:fc:8d:f1:98:b0: ec:be:2a:ee:2f:82:ad:bb:12:66:1d:67:9f:bf:57: 43:9e:18:f5:08:85:09:a2:7f:53:19:e9:71:65:bc: 24:d8:be:42:ed:f0:d6:b2:d3:95:53:97:ff:05:82: 09:16:b0:f1:ec:d3:e8:4d:fd:7d:79:b3:9a:8e:c9: 26:11:51:6e:3c:5a:b3:94:1d:09:b6:04:12:4a:45: e2:2b:d7:e9:08:9a:13:19:4f:54:50:ca:90:43:86: fb:67:a9:18:4a:f3:91:0c:29:50:53:13:3e:70:83: 81:27:0e:bb:cb:a7:a9:00:6f:a1:b8:08:f0:a8:33: bc:16:ce:fb:5e:ac:03:81:85:c4:e6:d0:f0:d7:bd: 7a:c9:cb:dd:59:e3:1c:14:ea:ef:ee:b6:85:27:62: ca:74:c2:91:2f:6e:6d:57:9e:28:60:e5:02:39:90: e0:5b:54:8c:a3:29:aa:07:79:e2:e8:6a:7c:3d:4e: fb:3b:5e:de:83:14:05:40:0a:86:74:66:1e:97:04: 21:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EA:2C:3B:23:3F:47:22:72:CE:50:0E:E8:F8:8B:14:8D:F7:E6:8B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e9c95df-834b-4f90-b50a-380e8ec88ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:2020::/46 Signature Algorithm: sha256WithRSAEncryption 3a:18:64:ac:2a:a3:ab:4d:02:ac:0a:37:4d:25:3c:a8:a0:5f: 33:f4:e9:d5:a0:76:d1:6e:71:76:bb:cb:24:cb:08:79:31:a9: fe:8d:1a:c6:67:6a:7c:ff:70:c0:c6:94:33:d2:a8:12:57:02: 7d:66:a7:29:90:0d:5e:a6:15:67:d1:45:22:37:e9:de:a4:ee: 39:70:1b:2d:24:f4:9e:27:ac:62:55:42:e4:fd:2b:1e:d0:c5: 09:2a:a7:e6:31:48:a4:85:e3:05:35:9a:5a:f0:de:23:26:a7: 93:52:ae:20:2c:6d:b2:02:1e:29:f2:63:0e:c7:a9:f9:47:30: a0:d9:b2:15:0b:e5:1f:34:88:08:f4:05:9f:90:1e:b2:87:c0: df:59:8f:32:6b:07:ae:ec:69:51:1b:82:4a:0a:45:ac:d0:5b: 3f:f9:3b:dd:8e:38:71:b3:ef:4e:bf:67:ba:6a:be:fd:f8:69: 2a:fe:bf:d2:52:55:75:ac:23:46:80:3c:92:ba:f0:31:57:eb: d8:bb:a4:d0:4e:91:7e:59:03:7b:55:9a:4a:ac:80:f9:ef:2e: e9:fe:60:51:7d:03:26:1d:d8:5d:7d:1c:e2:93:11:4e:73:97: d5:73:f2:ea:30:93:0b:2c:bd:e7:80:b0:9e:d1:71:bc:54:9d: 91:42:55:77 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUe7C7NNOzk24eVpPP1gJVkQGxCxUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMDExOFoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAMjFkNmRkYTg5MWIxMWU1MmUwZGMy Njc1MWYwNWJjZDhhODMxNjQ5YjI5NmRmMDAxYWRmOGRiYzk0OTBlYWIzYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PpcuMHIFAfZTannNxZpQtZWuzrb aE7VPiSaQ6+r/adW0589XUnJraDDmRS7KIEL5BNZ6zON/I3xmLDsviruL4KtuxJm HWefv1dDnhj1CIUJon9TGelxZbwk2L5C7fDWstOVU5f/BYIJFrDx7NPoTf19ebOa jskmEVFuPFqzlB0JtgQSSkXiK9fpCJoTGU9UUMqQQ4b7Z6kYSvORDClQUxM+cIOB Jw67y6epAG+huAjwqDO8Fs77XqwDgYXE5tDw1716ycvdWeMcFOrv7raFJ2LKdMKR L25tV54oYOUCOZDgW1SMoymqB3ni6Gp8PU77O17egxQFQAqGdGYelwQh5QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFG/qLDsjP0cics5QDuj4ixSN9+aLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzllOWM5NWRmLTgzNGItNGY5MC1iNTBhLTM4MGU4ZWM4OGNlNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8yAgMA0GCSqGSIb3DQEBCwUAA4IBAQA6GGSsKqOrTQKsCjdN JTyooF8z9OnVoHbRbnF2u8skywh5Man+jRrGZ2p8/3DAxpQz0qgSVwJ9ZqcpkA1e phVn0UUiN+nepO45cBstJPSeJ6xiVULk/Sse0MUJKqfmMUikheMFNZpa8N4jJqeT Uq4gLG2yAh4p8mMOx6n5RzCg2bIVC+UfNIgI9AWfkB6yh8DfWY8yaweu7GlRG4JK CkWs0Fs/+Tvdjjhxs+9Ov2e6ar79+Gkq/r/SUlV1rCNGgDySuvAxV+vYu6TQTpF+ WQN7VZpKrID57y7p/mBRfQMmHdhdfRzikxFOc5fVc/LqMJMLLL3ngLCe0XG8VJ2R QlV3 -----END CERTIFICATE-----Generated at Sun Mar 1 23:51:01 2026 by rpki-client