$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a018f2e9-f03d-4656-89f3-616151515896.roa File: a018f2e9-f03d-4656-89f3-616151515896.roa (raw, json) Hash identifier: NmnuDR61GDgirYXoQsx41/UA9b0vNcIGTgXvYsWGQJ4= Subject key identifier: 5E:CA:C1:32:81:CA:95:28:2E:71:3D:59:AD:23:9D:7D:8F:A6:62:69 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63BDB46B189EC19FE7FA486704F73B7D3F15CC84 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a018f2e9-f03d-4656-89f3-616151515896.roa Signing time: Sat 21 Feb 2026 00:11:06 +0000 ROA not before: Sat 21 Feb 2026 00:11:06 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 126.191.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:bd:b4:6b:18:9e:c1:9f:e7:fa:48:67:04:f7:3b:7d:3f:15:cc:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:11:06 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=a8ea8373079255afacf4547c17b5b94a8c2fd6937b25154d5f8a092b47df5a03, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:82:8b:7a:1e:9a:3e:eb:3c:8d:bb:5b:b3: 73:66:f6:07:d7:85:2b:86:a1:43:4f:7f:c6:37:b5: d4:c7:68:73:1d:97:2a:e5:cc:88:cd:e0:fe:bf:49: 64:99:01:38:ae:27:cf:34:92:57:af:04:b2:cd:a9: d8:da:91:ba:3f:64:77:5e:16:2f:93:9a:c7:ad:d6: f0:74:c4:e2:32:f5:aa:60:ed:ac:6d:37:23:10:64: 16:02:6d:f5:6a:31:43:e9:60:c9:72:32:be:c3:a0: bc:94:3b:6d:9f:25:1f:c5:28:7f:32:7d:eb:8f:57: 63:a1:1c:0b:6e:2f:7c:89:d5:77:b5:e7:28:4b:33: 03:61:69:ec:53:7d:68:d1:cc:ab:67:2b:f5:c2:e3: 04:d2:0b:2f:cf:3d:44:d3:b1:86:0b:30:16:37:70: 4d:7a:b5:aa:30:2e:e7:c1:23:65:5f:78:8b:19:c8: f9:85:78:56:c7:a9:72:76:60:0f:a8:f4:46:e8:c8: 25:7b:f2:f2:27:06:0a:93:a7:ca:6f:c0:da:0c:dc: 92:a8:b2:63:6e:52:b7:49:8e:6a:db:1e:b5:4c:c7: 71:b6:21:13:76:3f:cf:d6:7d:59:32:7c:05:21:75: 15:1e:a3:ae:f5:01:66:b0:1c:94:93:df:b3:12:57: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CA:C1:32:81:CA:95:28:2E:71:3D:59:AD:23:9D:7D:8F:A6:62:69 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a018f2e9-f03d-4656-89f3-616151515896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 126.191.0.0/16 Signature Algorithm: sha256WithRSAEncryption 28:58:ac:17:c6:5a:9b:fd:2f:b3:c0:28:70:fc:cd:79:21:14: 26:1f:dd:2c:96:f1:56:1d:e6:e1:3d:aa:7e:8c:77:0d:30:69: 9d:ed:95:5c:9b:61:72:48:1c:dd:7d:2f:4e:1c:8c:38:66:b7: fc:9c:1a:a0:30:ef:c3:2b:3c:c0:4f:67:0d:ff:13:ab:08:90: ee:1c:09:43:12:ba:0f:11:0b:24:41:1a:26:49:6f:56:a2:d5: 95:d5:ff:f5:97:61:77:72:73:d1:d8:c7:31:32:bd:72:06:c1: 1c:32:21:e4:cf:09:27:95:e8:5a:7f:59:37:2b:4f:85:d0:76: af:75:79:27:a3:27:82:67:3e:3e:c7:67:dc:48:cd:06:6b:5b: 1a:f5:a1:33:7e:1d:19:1b:bc:f9:d4:5b:ea:3e:f0:5d:7f:5d: dc:89:05:2b:27:df:29:3d:84:6a:65:b2:39:d3:40:b4:88:d5: d4:a0:30:6b:0f:07:1f:65:6c:9f:19:f6:90:7a:0d:d5:d0:a4: d3:af:54:fe:51:90:c4:ac:41:97:bf:ef:e7:b4:3c:04:d7:8a: 93:98:79:49:06:f2:e8:d1:0c:72:80:7d:fc:8c:d5:51:fe:c3: ae:31:0b:a3:f2:fa:87:71:4e:56:b2:2d:83:4d:12:ce:2f:f6: c1:8f:e6:54 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUY720axiewZ/n+khnBPc7fT8VzIQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMTEwNloX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAYThlYTgzNzMwNzkyNTVhZmFjZjQ1 NDdjMTdiNWI5NGE4YzJmZDY5MzdiMjUxNTRkNWY4YTA5MmI0N2RmNWEwMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDeCi3oemj7rPI27W7NzZvYH14Ur hqFDT3/GN7XUx2hzHZcq5cyIzeD+v0lkmQE4rifPNJJXrwSyzanY2pG6P2R3XhYv k5rHrdbwdMTiMvWqYO2sbTcjEGQWAm31ajFD6WDJcjK+w6C8lDttnyUfxSh/Mn3r j1djoRwLbi98idV3tecoSzMDYWnsU31o0cyrZyv1wuME0gsvzz1E07GGCzAWN3BN erWqMC7nwSNlX3iLGcj5hXhWx6lydmAPqPRG6Mgle/LyJwYKk6fKb8DaDNySqLJj blK3SY5q2x61TMdxtiETdj/P1n1ZMnwFIXUVHqOu9QFmsByUk9+zEle6ZQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFF7KwTKBypUoLnE9Wa0jnX2PpmJpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EwMThmMmU5LWYwM2QtNDY1Ni04OWYzLTYxNjE1MTUxNTg5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAfr8wDQYJKoZIhvcNAQELBQADggEBAChYrBfGWpv9L7PAKHD8zXkh FCYf3SyW8VYd5uE9qn6Mdw0waZ3tlVybYXJIHN19L04cjDhmt/ycGqAw78MrPMBP Zw3/E6sIkO4cCUMSug8RCyRBGiZJb1ai1ZXV//WXYXdyc9HYxzEyvXIGwRwyIeTP CSeV6Fp/WTcrT4XQdq91eSejJ4JnPj7HZ9xIzQZrWxr1oTN+HRkbvPnUW+o+8F1/ XdyJBSsn3yk9hGplsjnTQLSI1dSgMGsPBx9lbJ8Z9pB6DdXQpNOvVP5RkMSsQZe/ 7+e0PATXipOYeUkG8ujRDHKAffyM1VH+w64xC6Py+odxTlayLYNNEs4v9sGP5lQ= -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:36 2026 by rpki-client