$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a78e1a16-4d56-431c-87c0-735d09420996.roa File: a78e1a16-4d56-431c-87c0-735d09420996.roa (raw, json) Hash identifier: H2cPES5MkLTRVzyJFaWt9n1qvcLUlDZTYuX/4ovKJUo= Subject key identifier: 04:44:20:43:01:41:A9:9F:DD:61:D1:9A:71:40:7A:54:B3:2D:CA:A3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 356A1F6909D70A9E2BAAB513B9D2CF8DDB0400C3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a78e1a16-4d56-431c-87c0-735d09420996.roa Signing time: Sat 21 Feb 2026 00:01:10 +0000 ROA not before: Sat 21 Feb 2026 00:01:10 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 126.228.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:6a:1f:69:09:d7:0a:9e:2b:aa:b5:13:b9:d2:cf:8d:db:04:00:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:01:10 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=edb85810c9e763ad0dffd8b7d97d3935119fe82685e9f4742fd3a1844e68873c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:25:c3:fe:08:e6:62:e2:be:d9:d9:e8:19:67: 39:a3:45:c5:19:59:bf:d7:3f:a8:1e:c7:e3:f1:d8: ae:50:8a:50:68:e0:bc:7b:a4:f0:78:e2:2a:82:96: 6d:80:98:be:b3:3b:dd:e3:74:09:70:96:17:0a:86: 67:97:e5:eb:d6:7e:f3:69:a0:9a:ca:5a:ea:09:a0: 1e:aa:74:2d:88:d3:5c:27:29:be:46:36:ee:44:47: cb:b4:f5:36:04:be:00:4e:04:dc:81:50:cf:ee:b9: 44:a6:1d:62:cb:94:a2:c2:e4:35:f1:cd:a5:98:3b: 74:a0:ab:76:39:6c:d7:de:e0:ef:2b:9b:00:42:4f: 1f:6f:16:6b:2d:d0:d6:6f:6a:89:70:d8:4b:68:b1: a4:ce:59:a0:c6:04:7a:7b:fa:78:4a:5c:d6:94:35: 21:29:89:e0:b4:f6:33:bb:af:bf:16:aa:d6:6b:a5: 8c:ea:cb:5e:a4:50:23:a2:1c:5a:48:38:7b:1a:a7: 90:2a:a3:be:6f:d4:08:20:6d:77:fe:79:e5:23:e2: d5:f3:b0:66:86:d2:bb:9a:46:4a:f3:18:22:43:bb: 0b:97:93:31:94:d8:f0:ae:d6:ff:2d:97:17:2e:68: 52:9d:85:bf:7d:f3:c6:fd:88:6f:9a:c5:d5:c3:06: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:44:20:43:01:41:A9:9F:DD:61:D1:9A:71:40:7A:54:B3:2D:CA:A3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a78e1a16-4d56-431c-87c0-735d09420996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 126.228.0.0/16 Signature Algorithm: sha256WithRSAEncryption 99:85:c1:d0:6b:a0:de:cb:6b:51:25:74:b8:84:13:20:03:57: bb:4d:e0:57:29:02:ce:ea:2c:24:9a:6c:5a:86:14:41:32:b5: c1:09:e6:a9:82:3e:50:41:be:c0:0b:34:eb:cf:e0:6b:59:dd: e3:e8:a1:38:f0:48:86:3b:38:ee:e2:9d:44:4f:32:d0:76:9c: 46:de:5d:3f:9a:c6:77:c5:47:3f:d9:4f:b1:56:51:32:cb:02: cd:1c:fc:75:ff:7c:20:7e:ca:5e:0f:3a:e1:53:38:86:87:3c: ca:3a:2e:ff:8c:dd:1e:56:32:7e:f9:01:ee:64:e5:5b:0e:0c: db:98:ed:7d:74:d0:e4:77:2f:d8:6b:01:0b:72:90:19:c9:08: ea:ed:75:39:55:25:e7:63:c4:ca:21:5f:d3:86:ab:f9:78:58: d4:eb:77:a6:a8:9c:b2:94:e4:d8:e3:d3:b5:04:dd:ac:c0:a4: ac:ee:bb:02:e5:91:c9:d7:d3:ba:11:4c:d5:6c:96:8f:29:bf: d4:f4:33:84:d4:d7:a2:78:86:38:5a:a7:db:5c:30:a1:95:a8: 68:34:92:8e:7f:3e:89:84:5f:b2:92:03:ec:59:96:f9:e8:80: 22:7d:d6:72:a9:d8:27:9d:7c:0c:04:9d:a8:77:39:46:3c:0e: 15:d7:c0:3d -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUNWofaQnXCp4rqrUTudLPjdsEAMMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMDExMFoX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAZWRiODU4MTBjOWU3NjNhZDBkZmZk OGI3ZDk3ZDM5MzUxMTlmZTgyNjg1ZTlmNDc0MmZkM2ExODQ0ZTY4ODczYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCXD/gjmYuK+2dnoGWc5o0XFGVm/ 1z+oHsfj8diuUIpQaOC8e6TweOIqgpZtgJi+szvd43QJcJYXCoZnl+Xr1n7zaaCa ylrqCaAeqnQtiNNcJym+RjbuREfLtPU2BL4ATgTcgVDP7rlEph1iy5SiwuQ18c2l mDt0oKt2OWzX3uDvK5sAQk8fbxZrLdDWb2qJcNhLaLGkzlmgxgR6e/p4SlzWlDUh KYngtPYzu6+/FqrWa6WM6stepFAjohxaSDh7GqeQKqO+b9QIIG13/nnlI+LV87Bm htK7mkZK8xgiQ7sLl5MxlNjwrtb/LZcXLmhSnYW/ffPG/YhvmsXVwwYcdwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFAREIEMBQamf3WHRmnFAelSzLcqjMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E3OGUxYTE2LTRkNTYtNDMxYy04N2MwLTczNWQwOTQyMDk5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAfuQwDQYJKoZIhvcNAQELBQADggEBAJmFwdBroN7La1EldLiEEyAD V7tN4FcpAs7qLCSabFqGFEEytcEJ5qmCPlBBvsALNOvP4GtZ3ePooTjwSIY7OO7i nURPMtB2nEbeXT+axnfFRz/ZT7FWUTLLAs0c/HX/fCB+yl4POuFTOIaHPMo6Lv+M 3R5WMn75Ae5k5VsODNuY7X100OR3L9hrAQtykBnJCOrtdTlVJedjxMohX9OGq/l4 WNTrd6aonLKU5Njj07UE3azApKzuuwLlkcnX07oRTNVslo8pv9T0M4TU16J4hjha p9tcMKGVqGg0ko5/PomEX7KSA+xZlvnogCJ91nKp2CedfAwEnah3OUY8DhXXwD0= -----END CERTIFICATE-----Generated at Mon Mar 2 01:49:05 2026 by rpki-client