$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a198eb49-1497-483a-ae8b-bfc84a056462.roa File: a198eb49-1497-483a-ae8b-bfc84a056462.roa (raw, json) Hash identifier: zjKSSNJwBj/1+ULx0xopOjhzD1wNRnEiTrlwMcC+DIo= Subject key identifier: 4F:E3:5F:45:7C:BC:5C:DD:F9:8D:F6:41:94:9A:6D:58:79:42:5D:38 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2D2491F6593F5226D41F9DB073CAD63164579AEE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a198eb49-1497-483a-ae8b-bfc84a056462.roa Signing time: Sun 15 Feb 2026 00:00:37 +0000 ROA not before: Sun 15 Feb 2026 00:00:37 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:24:91:f6:59:3f:52:26:d4:1f:9d:b0:73:ca:d6:31:64:57:9a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 15 00:00:37 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=7138b2b67eacd77e7cc9466088f611963a58e1cf47fd501a6175a0e6dc302dbc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:16:ea:79:61:69:8c:48:b6:a0:0d:90:f4: fa:ef:14:cd:9a:72:78:ef:ee:d4:c3:d9:4e:b2:f9: 2d:6e:b4:95:3d:1e:1d:10:95:63:d6:17:2b:fa:03: c9:ab:44:08:c0:a1:cb:7d:3c:ad:f9:28:20:e3:2c: 45:68:ba:d5:ea:14:14:05:38:90:09:55:ad:d2:07: 16:df:59:ee:59:f5:55:b6:3e:4b:a0:d9:0c:10:7f: 62:74:49:0e:ad:19:ca:ec:ad:8b:60:2d:7c:d7:54: 24:34:9f:8b:c9:ea:ce:97:c2:50:85:e3:88:96:a3: dc:9a:68:c8:2b:a4:7e:5d:5a:3e:91:e2:96:d8:e3: c7:5b:ec:2b:67:61:67:b7:3e:84:a0:cd:29:74:86: 53:3c:39:99:62:02:c5:9c:f0:4e:06:1d:e3:2d:cd: d7:2d:d0:2d:d7:92:7a:7c:32:50:17:2a:1a:21:62: 42:a8:44:84:9b:a7:66:34:83:af:be:41:ef:14:c4: 9b:18:fd:a3:7b:e2:82:17:11:91:e4:01:11:6a:94: 0e:a8:fb:25:65:02:d4:ce:89:e9:3a:b2:fb:83:b1: b0:e0:e0:d0:e8:8e:37:6e:4c:74:f5:b0:34:7c:f8: 70:e2:4c:6b:c7:39:07:c4:93:29:ac:9a:19:e9:69: 2b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E3:5F:45:7C:BC:5C:DD:F9:8D:F6:41:94:9A:6D:58:79:42:5D:38 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a198eb49-1497-483a-ae8b-bfc84a056462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:c800::/40 Signature Algorithm: sha256WithRSAEncryption 4b:20:86:95:8d:e9:85:ee:17:c2:e0:dc:10:c1:18:e4:96:6d: 77:13:c2:fa:26:0a:75:ef:8f:ea:0b:dd:ce:6c:78:64:e8:ec: b3:79:3a:ed:08:2a:c8:ca:d7:88:00:fb:8b:8b:67:e4:1e:f3: f5:c4:e3:72:83:44:6c:8f:0c:e2:af:6b:6d:4d:94:90:6c:3d: d6:6c:f7:db:37:01:e4:a7:43:79:5d:f8:58:6f:e8:72:56:3c: 69:7d:15:c5:58:33:e3:87:d4:6c:55:37:b0:69:4e:9c:7e:9b: 6a:22:17:47:98:b5:29:6e:92:a2:4c:70:4f:96:18:28:ad:eb: 34:11:cc:0d:5e:06:52:f0:f1:0a:5d:87:6d:40:f7:5f:ec:5a: 8a:76:f9:20:cf:e7:15:8e:1c:75:e8:31:83:2b:0a:9f:7b:5e: 2c:ba:72:8c:9a:7f:b0:71:f7:e8:72:ca:5f:33:8b:5f:b8:09: b8:fa:7e:de:bb:c5:b7:af:e9:88:29:25:2d:26:8d:70:c0:8f: e6:63:d2:71:1a:b6:a6:eb:51:a7:53:7d:75:e4:d6:f2:92:3b: c2:e0:e0:93:0a:16:fc:72:5b:87:ea:7b:c1:49:fc:a9:bd:e6: fc:cd:5a:98:79:f4:9a:c3:2a:2b:9c:93:bc:df:b9:39:13:66: 60:6f:57:be -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULSSR9lk/UibUH52wc8rWMWRXmu4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNTAwMDAzN1oX DTI2MDUxNjIzNTk1OVowejFJMEcGA1UEBRNANzEzOGIyYjY3ZWFjZDc3ZTdjYzk0 NjYwODhmNjExOTYzYTU4ZTFjZjQ3ZmQ1MDFhNjE3NWEwZTZkYzMwMmRiYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQYW6nlhaYxItqANkPT67xTNmnJ4 7+7Uw9lOsvktbrSVPR4dEJVj1hcr+gPJq0QIwKHLfTyt+Sgg4yxFaLrV6hQUBTiQ CVWt0gcW31nuWfVVtj5LoNkMEH9idEkOrRnK7K2LYC1811QkNJ+LyerOl8JQheOI lqPcmmjIK6R+XVo+keKW2OPHW+wrZ2Fntz6EoM0pdIZTPDmZYgLFnPBOBh3jLc3X LdAt15J6fDJQFyoaIWJCqESEm6dmNIOvvkHvFMSbGP2je+KCFxGR5AERapQOqPsl ZQLUzonpOrL7g7Gw4ODQ6I43bkx09bA0fPhw4kxrxzkHxJMprJoZ6WkrHQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE/jX0V8vFzd+Y32QZSabVh5Ql04MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ExOThlYjQ5LTE0OTctNDgzYS1hZThiLWJmYzg0YTA1NjQ2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYMgwDQYJKoZIhvcNAQELBQADggEBAEsghpWN6YXuF8Lg3BDB GOSWbXcTwvomCnXvj+oL3c5seGTo7LN5Ou0IKsjK14gA+4uLZ+Qe8/XE43KDRGyP DOKva21NlJBsPdZs99s3AeSnQ3ld+Fhv6HJWPGl9FcVYM+OH1GxVN7BpTpx+m2oi F0eYtSlukqJMcE+WGCit6zQRzA1eBlLw8Qpdh21A91/sWop2+SDP5xWOHHXoMYMr Cp97Xiy6coyaf7Bx9+hyyl8zi1+4Cbj6ft67xbev6YgpJS0mjXDAj+Zj0nEatqbr UadTfXXk1vKSO8Lg4JMKFvxyW4fqe8FJ/Km95vzNWph59JrDKiuck7zfuTkTZmBv V74= -----END CERTIFICATE-----Generated at Sun Mar 1 23:56:47 2026 by rpki-client