$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a47e051c-2b16-4d02-b1e0-ac267a378e13.roa File: a47e051c-2b16-4d02-b1e0-ac267a378e13.roa (raw, json) Hash identifier: nYZOap9Zaeb1RY7fVuPHWXxdUV/5c89hN1swQzAp3xw= Subject key identifier: 7F:D4:C6:FE:B6:63:58:74:3C:83:46:ED:A8:4D:EE:48:F1:A6:71:7C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0519BFEB3EAB269AD814C6027B1DD42D574DB150 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a47e051c-2b16-4d02-b1e0-ac267a378e13.roa Signing time: Wed 18 Feb 2026 00:01:14 +0000 ROA not before: Wed 18 Feb 2026 00:01:14 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:b000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:19:bf:eb:3e:ab:26:9a:d8:14:c6:02:7b:1d:d4:2d:57:4d:b1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 18 00:01:14 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=5259119ec60700ebd6ab6d6d37bd41056f5a716093c6ce6c2a2cfa21b90ef5e4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d9:8f:71:81:26:14:3a:e0:48:59:85:f8:d6: 2c:be:62:a5:42:14:98:ba:b2:49:c1:4a:e5:a3:4c: f3:51:15:4f:8b:47:28:8f:aa:be:26:33:e9:d0:24: ab:bd:f2:fe:8c:88:48:f6:71:40:83:64:76:bd:72: 27:59:56:cb:0f:45:19:72:62:34:3d:80:9e:e1:9c: 8c:2f:ad:63:53:f9:e7:c2:76:e9:2c:17:d3:9e:e3: 27:2f:8a:4a:04:3d:4f:15:e9:41:d5:27:99:bd:33: a6:e4:d0:a0:81:68:fb:5f:57:52:72:bb:2c:b3:94: cf:78:6b:00:6e:10:55:30:c4:2e:d4:11:c9:f8:75: 41:3d:c9:9e:14:44:cb:9d:39:3b:de:ad:1d:39:42: fe:17:7b:45:67:e1:ed:4a:96:cf:5a:82:eb:f2:ee: 36:a7:2f:b5:a7:d4:ca:8a:46:7d:df:0c:ff:f6:cb: 94:a9:6d:5a:5e:19:0d:fe:65:a0:97:53:c7:cd:06: 12:61:b1:13:7d:1c:f9:2e:3c:16:53:c8:5d:27:48: e3:b1:bc:b2:b9:ac:ff:9b:34:5e:21:3b:27:ab:98: 5b:c4:19:8e:9e:e3:35:31:b1:0a:5e:39:a6:ab:54: 80:a0:33:54:09:43:1e:64:46:0a:6c:cd:21:0a:77: c6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D4:C6:FE:B6:63:58:74:3C:83:46:ED:A8:4D:EE:48:F1:A6:71:7C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a47e051c-2b16-4d02-b1e0-ac267a378e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:b000::/48 Signature Algorithm: sha256WithRSAEncryption 4a:a1:ae:53:20:14:a8:95:80:12:d0:3e:bc:35:c7:31:0f:65: 4f:9e:16:a7:2c:2f:e3:24:b3:a3:9b:d9:f3:03:af:63:24:fa: 8f:e8:a1:cf:a9:36:be:d4:4b:5c:43:da:db:8c:28:58:58:d5: 34:73:87:35:60:c8:21:99:6f:0f:9e:48:92:23:d6:7f:24:f7: 11:7f:34:f5:45:ff:54:13:1a:aa:29:93:71:6c:18:03:b4:3b: f8:a6:f6:43:c2:5c:74:b1:e5:05:cb:33:de:6e:b2:e0:a0:01: 7b:bf:a8:b2:28:0a:15:25:87:09:76:ac:ff:07:67:18:a6:ca: 58:8f:33:64:e1:c5:7f:ca:2e:4c:00:1d:b3:1a:63:75:aa:ab: 3a:41:4a:84:ca:a5:4e:f3:91:35:78:99:65:57:1e:d0:60:34: 4e:3f:a0:09:3a:19:76:f8:76:37:01:81:e0:37:38:c3:cf:2f: 9b:78:d9:37:96:57:7e:fd:17:c4:14:2c:46:0a:67:e0:d8:51: 5c:bf:c2:35:ce:01:da:e9:23:c2:0c:5c:23:97:f4:1b:75:5f: c9:cd:89:44:86:9f:7c:fe:55:68:e1:c9:08:aa:7e:23:76:6b: 28:67:bc:c0:64:9c:66:51:d1:c4:d6:26:98:56:a9:90:16:d8: 54:7e:10:c0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBRm/6z6rJprYFMYCex3ULVdNsVAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxODAwMDExNFoX DTI2MDUxOTIzNTk1OVowejFJMEcGA1UEBRNANTI1OTExOWVjNjA3MDBlYmQ2YWI2 ZDZkMzdiZDQxMDU2ZjVhNzE2MDkzYzZjZTZjMmEyY2ZhMjFiOTBlZjVlNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdmPcYEmFDrgSFmF+NYsvmKlQhSY urJJwUrlo0zzURVPi0coj6q+JjPp0CSrvfL+jIhI9nFAg2R2vXInWVbLD0UZcmI0 PYCe4ZyML61jU/nnwnbpLBfTnuMnL4pKBD1PFelB1SeZvTOm5NCggWj7X1dScrss s5TPeGsAbhBVMMQu1BHJ+HVBPcmeFETLnTk73q0dOUL+F3tFZ+HtSpbPWoLr8u42 py+1p9TKikZ93wz/9suUqW1aXhkN/mWgl1PHzQYSYbETfRz5LjwWU8hdJ0jjsbyy uaz/mzReITsnq5hbxBmOnuM1MbEKXjmmq1SAoDNUCUMeZEYKbM0hCnfGawIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFH/Uxv62Y1h0PING7ahN7kjxpnF8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E0N2UwNTFjLTJiMTYtNGQwMi1iMWUwLWFjMjY3YTM3OGUxMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9rAAMA0GCSqGSIb3DQEBCwUAA4IBAQBKoa5TIBSolYAS0D68 NccxD2VPnhanLC/jJLOjm9nzA69jJPqP6KHPqTa+1EtcQ9rbjChYWNU0c4c1YMgh mW8PnkiSI9Z/JPcRfzT1Rf9UExqqKZNxbBgDtDv4pvZDwlx0seUFyzPebrLgoAF7 v6iyKAoVJYcJdqz/B2cYpspYjzNk4cV/yi5MAB2zGmN1qqs6QUqEyqVO85E1eJll Vx7QYDROP6AJOhl2+HY3AYHgNzjDzy+beNk3lld+/RfEFCxGCmfg2FFcv8I1zgHa 6SPCDFwjl/QbdV/JzYlEhp98/lVo4ckIqn4jdmsoZ7zAZJxmUdHE1iaYVqmQFthU fhDA -----END CERTIFICATE-----Generated at Sun Mar 1 23:49:29 2026 by rpki-client