$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa File: 9f814f86-a00e-47ae-afd0-75d7996777e3.roa (raw, json) Hash identifier: 1/HfWaJEhCmMsaEQ6aJ5yiMM8ziwbp8DSLye7davk4g= Subject key identifier: A5:5C:0E:CD:12:A2:A6:DC:52:3F:F6:A9:E0:5E:D5:AC:18:6F:4A:88 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 211487BB7C50C0C1BCC40D7E6C68B207FCEFA58A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa Signing time: Sun 22 Feb 2026 00:01:01 +0000 ROA not before: Sun 22 Feb 2026 00:01:01 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:14:87:bb:7c:50:c0:c1:bc:c4:0d:7e:6c:68:b2:07:fc:ef:a5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:01:01 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=6b312f240af43b79ba67c441ee191d4f85ea9e9cd999a3686222b991d09f2832, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b6:c9:cd:51:5f:b7:1a:d7:9c:ad:bd:3a:7b: 06:9e:53:bb:24:3f:ce:47:37:4b:5c:63:4f:bf:a4: d0:f8:dc:4e:0b:b0:3a:25:14:ce:ca:e5:2e:6c:1b: 0f:55:16:0b:95:50:41:3d:cc:a0:88:a4:32:9b:e7: 1d:76:5c:db:74:a1:5b:38:9e:97:8d:17:47:43:f3: 7e:e7:b0:9f:25:d0:cf:da:31:bb:27:a2:73:6d:dd: 1e:e1:ba:84:8c:95:01:94:5d:2b:48:26:e1:f5:f4: 77:11:4a:a7:63:65:82:b3:56:e1:54:1c:1b:f4:09: 11:53:f1:91:93:74:3f:41:c2:9e:b5:10:ac:47:49: 23:07:d9:16:af:c3:71:a6:67:5e:bb:41:dc:da:cd: 3f:9d:d9:b4:39:b1:65:2c:da:0e:9b:bc:e5:2d:82: e0:49:a7:1e:e0:4b:bd:72:76:bb:31:b8:44:c7:dc: 75:ea:0a:2d:f1:ab:6c:cf:e2:80:b6:e5:c9:4b:99: 42:b0:9e:39:7b:74:64:b4:58:19:1f:5e:18:aa:c1: 55:84:79:f5:49:8b:dc:e3:90:42:22:4d:44:2d:cf: 42:3b:42:f3:9d:33:9c:dd:fc:ab:c5:10:e6:7e:cc: 93:f1:a5:1b:9a:14:d6:4b:b2:d6:69:39:ce:d4:31: 4d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5C:0E:CD:12:A2:A6:DC:52:3F:F6:A9:E0:5E:D5:AC:18:6F:4A:88 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:9000::/40 Signature Algorithm: sha256WithRSAEncryption 43:0c:3f:4a:d1:80:3a:fc:60:30:6d:00:e5:7e:79:5b:f2:e0: c5:94:2d:6f:8a:a1:9a:d2:7f:24:c5:0b:21:6e:65:4d:4b:5a: 69:ff:4c:f2:35:4c:c2:30:d1:92:32:ea:75:d9:7f:5a:92:1e: 2b:2f:73:09:d9:4e:92:23:ba:e9:00:b4:00:be:86:14:9c:6c: cc:a3:19:c4:67:74:96:19:88:72:11:b1:19:19:1f:2c:b3:f6: 4c:bb:ba:92:8b:c1:f6:49:09:60:a3:0d:5d:13:09:e5:38:bc: a8:7e:e9:59:6a:f4:2b:f8:5c:23:cd:4a:16:ed:cd:79:6b:c5: 95:69:12:14:3e:ed:39:eb:d5:2a:77:0a:1c:a2:07:95:ba:58: ed:54:db:4f:fd:e9:5c:ae:3c:4d:4d:b5:40:35:f4:ae:f3:3c: 7e:cc:dc:aa:1f:28:54:75:f8:10:9d:14:70:14:52:3d:9b:82: 6e:8c:fe:64:33:06:42:6e:85:c0:d8:ac:09:d4:39:be:ec:c6: 0f:6a:0b:3c:a4:f0:6a:d8:e6:9e:6e:38:78:bb:bb:41:8a:04: aa:40:71:d2:09:1b:c3:03:9f:95:df:d4:8d:70:a2:c8:4d:1d: 60:78:ab:6b:c5:3c:33:4d:18:d5:17:65:9e:85:cb:8e:c3:73: 23:9c:02:df -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIRSHu3xQwMG8xA1+bGiyB/zvpYowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMDEwMVoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNANmIzMTJmMjQwYWY0M2I3OWJhNjdj NDQxZWUxOTFkNGY4NWVhOWU5Y2Q5OTlhMzY4NjIyMmI5OTFkMDlmMjgzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLbJzVFftxrXnK29OnsGnlO7JD/O RzdLXGNPv6TQ+NxOC7A6JRTOyuUubBsPVRYLlVBBPcygiKQym+cddlzbdKFbOJ6X jRdHQ/N+57CfJdDP2jG7J6Jzbd0e4bqEjJUBlF0rSCbh9fR3EUqnY2WCs1bhVBwb 9AkRU/GRk3Q/QcKetRCsR0kjB9kWr8Nxpmdeu0Hc2s0/ndm0ObFlLNoOm7zlLYLg Sace4Eu9cna7MbhEx9x16got8atsz+KAtuXJS5lCsJ45e3RktFgZH14YqsFVhHn1 SYvc45BCIk1ELc9CO0LznTOc3fyrxRDmfsyT8aUbmhTWS7LWaTnO1DFN5QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKVcDs0SoqbcUj/2qeBe1awYb0qIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmODE0Zjg2LWEwMGUtNDdhZS1hZmQwLTc1ZDc5OTY3NzdlMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+JAwDQYJKoZIhvcNAQELBQADggEBAEMMP0rRgDr8YDBtAOV+ eVvy4MWULW+KoZrSfyTFCyFuZU1LWmn/TPI1TMIw0ZIy6nXZf1qSHisvcwnZTpIj uukAtAC+hhScbMyjGcRndJYZiHIRsRkZHyyz9ky7upKLwfZJCWCjDV0TCeU4vKh+ 6Vlq9Cv4XCPNShbtzXlrxZVpEhQ+7Tnr1Sp3ChyiB5W6WO1U20/96VyuPE1NtUA1 9K7zPH7M3KofKFR1+BCdFHAUUj2bgm6M/mQzBkJuhcDYrAnUOb7sxg9qCzyk8GrY 5p5uOHi7u0GKBKpAcdIJG8MDn5Xf1I1woshNHWB4q2vFPDNNGNUXZZ6Fy47DcyOc At8= -----END CERTIFICATE-----Generated at Sun Mar 1 23:50:16 2026 by rpki-client