$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a92f1e22-e67b-4fa9-9cac-0c0051ee13d6.roa File: a92f1e22-e67b-4fa9-9cac-0c0051ee13d6.roa (raw, json) Hash identifier: KMPb64AI2rKedjPd4VOx1cE/3h2tiM5NAjFyN/KSydo= Subject key identifier: 16:06:A1:5D:E5:BF:6C:B2:EC:A7:10:AE:3D:90:78:19:B0:2F:8C:82 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7FEC1D6AA6F0A835D4D9F9250F673A12607A17C2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a92f1e22-e67b-4fa9-9cac-0c0051ee13d6.roa Signing time: Sat 21 Feb 2026 00:11:02 +0000 ROA not before: Sat 21 Feb 2026 00:11:02 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ec:1d:6a:a6:f0:a8:35:d4:d9:f9:25:0f:67:3a:12:60:7a:17:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:11:02 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=fc1755038292188dd4a65161aa8c062cb5be5f2ec516d9aa590c0e019d70be71, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:f2:48:d9:9d:4d:69:74:a5:88:65:d8:c7: ee:87:d4:9a:78:ca:8b:6f:a5:d4:d9:43:09:d4:1b: 51:e5:a9:9a:34:06:17:29:d7:2b:94:49:fe:6a:13: 4d:68:d6:e5:cb:44:75:c9:35:65:14:45:82:a7:2d: 1b:97:27:1a:99:b0:ba:72:fa:89:36:78:e7:6c:dc: 89:e0:32:22:a7:09:64:51:6c:5f:80:89:03:0f:29: 0f:fa:d5:04:97:39:4f:73:75:4f:39:8a:44:69:b7: e9:0a:cf:ec:5c:6f:f8:3b:d2:ed:cd:71:49:7a:a0: e2:f8:c8:0e:d7:2a:bd:cc:a0:d3:2c:56:e7:12:12: cb:88:ed:8f:6f:0c:36:d9:fd:4a:ae:08:c7:1a:1e: c5:18:8e:93:93:ef:30:40:8c:32:12:e1:b3:ee:12: 26:27:d7:5b:29:ff:a9:cd:06:45:99:85:58:45:82: 25:94:4f:58:64:38:60:73:9f:30:51:28:30:38:28: 45:1d:60:0c:b5:3a:99:35:6d:02:02:19:01:83:53: 3c:75:b3:48:df:b5:92:31:04:9a:9b:ab:45:29:c6: a1:69:85:a5:f7:d4:db:4c:bb:f9:b7:84:73:c1:71: ee:ea:8f:6a:b0:3c:af:e7:c7:ca:a5:80:c5:68:d1: 1a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:06:A1:5D:E5:BF:6C:B2:EC:A7:10:AE:3D:90:78:19:B0:2F:8C:82 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a92f1e22-e67b-4fa9-9cac-0c0051ee13d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:8000::/40 Signature Algorithm: sha256WithRSAEncryption 15:a3:b8:a4:2d:99:4a:6e:2c:3a:a5:15:09:17:b7:34:5b:48: 46:6f:c9:2e:23:f8:8a:c9:a3:48:a0:82:89:b8:17:91:a3:8c: 0c:2a:1c:13:7e:10:f9:f4:52:63:f7:41:d8:c6:68:5f:50:44: b9:1a:55:01:5b:39:e3:8f:d1:42:ad:23:13:af:21:3c:d6:37: b5:30:b5:cc:06:fd:e9:e8:b7:16:c4:92:8e:de:5e:8e:c3:2c: 09:ee:ba:41:5f:ad:24:bf:d6:89:e6:51:07:74:e5:73:13:86: 4e:fd:4b:01:9a:77:fd:a1:47:22:85:df:37:30:f4:93:ec:49: 58:b7:90:07:e6:6b:cb:73:40:ee:eb:29:74:0c:4e:22:33:a7: e7:a4:ec:28:16:9c:b1:97:92:c9:3b:83:5c:c7:a5:7f:d3:85: 22:dd:9e:7c:97:83:31:49:eb:8f:2f:96:3c:07:0b:ae:b6:ce: f8:d0:96:4a:a1:4d:e4:7d:1d:0e:10:d7:7f:0e:8c:b0:cc:8b: e8:97:de:7d:55:81:a8:7c:91:fe:bb:5a:33:a0:a9:69:3f:f4: d5:cf:26:7e:fa:ff:e6:8d:23:f3:ef:d2:77:22:13:63:d9:62: 28:d9:62:8b:67:b5:d5:fa:20:75:67:28:a0:45:ac:5d:30:9a: 47:bb:69:53 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUf+wdaqbwqDXU2fklD2c6EmB6F8IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMTEwMloX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAZmMxNzU1MDM4MjkyMTg4ZGQ0YTY1 MTYxYWE4YzA2MmNiNWJlNWYyZWM1MTZkOWFhNTkwYzBlMDE5ZDcwYmU3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoefySNmdTWl0pYhl2Mfuh9SaeMqL b6XU2UMJ1BtR5amaNAYXKdcrlEn+ahNNaNbly0R1yTVlFEWCpy0blycambC6cvqJ NnjnbNyJ4DIipwlkUWxfgIkDDykP+tUElzlPc3VPOYpEabfpCs/sXG/4O9LtzXFJ eqDi+MgO1yq9zKDTLFbnEhLLiO2Pbww22f1KrgjHGh7FGI6Tk+8wQIwyEuGz7hIm J9dbKf+pzQZFmYVYRYIllE9YZDhgc58wUSgwOChFHWAMtTqZNW0CAhkBg1M8dbNI 37WSMQSam6tFKcahaYWl99TbTLv5t4RzwXHu6o9qsDyv58fKpYDFaNEaUwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBYGoV3lv2yy7KcQrj2QeBmwL4yCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5MmYxZTIyLWU2N2ItNGZhOS05Y2FjLTBjMDA1MWVlMTNkNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOIAwDQYJKoZIhvcNAQELBQADggEBABWjuKQtmUpuLDqlFQkX tzRbSEZvyS4j+IrJo0iggom4F5GjjAwqHBN+EPn0UmP3QdjGaF9QRLkaVQFbOeOP 0UKtIxOvITzWN7UwtcwG/enotxbEko7eXo7DLAnuukFfrSS/1onmUQd05XMThk79 SwGad/2hRyKF3zcw9JPsSVi3kAfma8tzQO7rKXQMTiIzp+ek7CgWnLGXksk7g1zH pX/ThSLdnnyXgzFJ648vljwHC662zvjQlkqhTeR9HQ4Q138OjLDMi+iX3n1Vgah8 kf67WjOgqWk/9NXPJn76/+aNI/Pv0nciE2PZYijZYotntdX6IHVnKKBFrF0wmke7 aVM= -----END CERTIFICATE-----Generated at Sun Mar 1 21:51:35 2026 by rpki-client