$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a21dee66-37c0-469d-8b01-08b0f731a865.roa File: a21dee66-37c0-469d-8b01-08b0f731a865.roa (raw, json) Hash identifier: LkVrL9b1k0C3AnIj2Hv6CaXTx6obf5A9J/gV34BAjMo= Subject key identifier: 37:E5:EA:FF:58:50:BA:49:69:6B:46:C3:42:97:57:A5:18:F4:51:B7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 079A02B31F149F408512FEDA2A7333771E89E80A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a21dee66-37c0-469d-8b01-08b0f731a865.roa Signing time: Sun 22 Feb 2026 00:00:39 +0000 ROA not before: Sun 22 Feb 2026 00:00:39 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9a:02:b3:1f:14:9f:40:85:12:fe:da:2a:73:33:77:1e:89:e8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:00:39 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=731ed644616c1f091c89896926f9e72a625c3d1ad1cba94b9d6324b3834d9647, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d4:cd:33:59:9e:d9:9b:83:d6:e6:73:2b:a7: e5:c7:e1:64:fc:b0:2f:bc:83:91:41:e5:15:e4:81: f2:76:8e:b8:99:2e:2e:63:22:93:a1:ac:d7:e9:23: 3d:da:e3:89:5a:36:f9:67:aa:c6:40:18:e3:16:0b: 1e:7f:0f:0f:f3:a6:ab:4d:09:f5:5f:0f:3b:da:c3: 94:e2:ee:d9:8e:76:7f:36:87:15:94:a9:d9:57:95: f1:fa:77:91:0e:31:01:48:17:a3:50:69:ff:45:58: 50:51:43:07:c7:46:4f:36:ee:e2:d1:8c:e2:75:5f: 92:63:18:62:ee:f3:08:bb:b8:8f:1c:d5:62:63:57: b0:2e:56:ac:2d:53:dd:ef:f6:50:36:fc:87:61:78: c4:bb:9e:12:a6:f0:a5:9a:c4:42:5f:2f:6b:dd:e8: 06:38:93:91:11:2d:f9:6b:b5:a6:b8:ef:ed:27:d4: 4b:41:dc:a7:26:23:ac:8e:9f:4b:af:f7:12:e4:9f: a0:5a:fd:c9:10:f5:a0:1d:c9:da:73:0e:a4:a3:4e: 94:93:e3:9a:b4:35:f5:7f:dd:77:90:13:81:f0:d3: 94:23:56:ae:19:79:02:21:ac:ba:24:4d:cc:b4:73: 19:a5:d3:e3:42:6e:5b:47:e1:4e:fc:77:84:5a:71: 1a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E5:EA:FF:58:50:BA:49:69:6B:46:C3:42:97:57:A5:18:F4:51:B7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a21dee66-37c0-469d-8b01-08b0f731a865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:b000::/40 Signature Algorithm: sha256WithRSAEncryption 84:39:cc:4c:7d:18:4a:1e:c1:c4:81:59:cb:2a:34:7c:73:58: 64:67:4e:1e:e3:53:8f:79:ce:e9:a2:2e:57:1b:4d:3b:35:14: 56:40:8c:79:5a:03:bd:f3:b4:5d:64:42:a9:5c:58:7f:6a:cd: de:17:94:38:ba:8f:bf:2e:ff:ee:23:45:cf:a9:ee:2d:58:fb: 0e:ff:fe:30:62:12:09:91:64:de:cc:1b:88:b7:48:92:55:55: 36:23:dc:7d:59:b4:df:a8:7c:fc:7f:02:2b:2b:e7:4a:2b:a4: 94:67:15:ae:d9:29:4d:37:68:5f:75:d0:ad:53:cb:f8:cc:b2: af:02:2c:ef:2d:f8:1a:3a:84:d2:9d:25:49:98:f9:7a:6b:b5: 42:ac:74:c9:d4:1f:90:a5:05:ff:a8:ed:59:fa:2f:10:03:a5: 55:12:6a:e7:05:ca:38:a5:66:c3:d4:5d:55:1a:64:d9:e4:1e: 9d:41:0a:36:c7:a2:79:ac:07:f7:e5:95:fa:8d:6f:2c:7e:43: a7:0b:26:91:65:14:5f:e9:0b:26:33:05:75:f9:87:93:b6:88: b0:02:93:23:87:f3:e5:e5:c3:76:01:7b:2c:1d:8b:61:ef:aa: 55:db:08:31:29:e2:61:a3:e8:1f:d9:be:3e:39:0f:71:4a:b7: 36:7e:89:52 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUB5oCsx8Un0CFEv7aKnMzdx6J6AowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMDAzOVoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNANzMxZWQ2NDQ2MTZjMWYwOTFjODk4 OTY5MjZmOWU3MmE2MjVjM2QxYWQxY2JhOTRiOWQ2MzI0YjM4MzRkOTY0NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodTNM1me2ZuD1uZzK6flx+Fk/LAv vIORQeUV5IHydo64mS4uYyKToazX6SM92uOJWjb5Z6rGQBjjFgsefw8P86arTQn1 Xw872sOU4u7ZjnZ/NocVlKnZV5Xx+neRDjEBSBejUGn/RVhQUUMHx0ZPNu7i0Yzi dV+SYxhi7vMIu7iPHNViY1ewLlasLVPd7/ZQNvyHYXjEu54SpvClmsRCXy9r3egG OJORES35a7WmuO/tJ9RLQdynJiOsjp9Lr/cS5J+gWv3JEPWgHcnacw6ko06Uk+Oa tDX1f913kBOB8NOUI1auGXkCIay6JE3MtHMZpdPjQm5bR+FO/HeEWnEalwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDfl6v9YULpJaWtGw0KXV6UY9FG3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EyMWRlZTY2LTM3YzAtNDY5ZC04YjAxLTA4YjBmNzMxYTg2NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNrAwDQYJKoZIhvcNAQELBQADggEBAIQ5zEx9GEoewcSBWcsq NHxzWGRnTh7jU495zumiLlcbTTs1FFZAjHlaA73ztF1kQqlcWH9qzd4XlDi6j78u /+4jRc+p7i1Y+w7//jBiEgmRZN7MG4i3SJJVVTYj3H1ZtN+ofPx/Aisr50orpJRn Fa7ZKU03aF910K1Ty/jMsq8CLO8t+Bo6hNKdJUmY+XprtUKsdMnUH5ClBf+o7Vn6 LxADpVUSaucFyjilZsPUXVUaZNnkHp1BCjbHonmsB/fllfqNbyx+Q6cLJpFlFF/p CyYzBXX5h5O2iLACkyOH8+Xlw3YBeywdi2HvqlXbCDEp4mGj6B/Zvj45D3FKtzZ+ iVI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:11:55 2026 by rpki-client