$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9ba922d-bf68-4d77-858b-8fac293007e5.roa File: a9ba922d-bf68-4d77-858b-8fac293007e5.roa (raw, json) Hash identifier: F4EEMuJ3pdmr5SIa7ujgE4XMlN9nCFxUtxrsaof4vb0= Subject key identifier: CB:57:C8:0E:E6:C2:63:7E:86:5D:2B:E6:34:48:20:7C:A3:BF:60:94 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1B50EA6FE3A145E36BB85B458BAEACD5A93F4F44 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9ba922d-bf68-4d77-858b-8fac293007e5.roa Signing time: Sat 21 Feb 2026 00:01:08 +0000 ROA not before: Sat 21 Feb 2026 00:01:08 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:50:ea:6f:e3:a1:45:e3:6b:b8:5b:45:8b:ae:ac:d5:a9:3f:4f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:01:08 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=314e3cb5911b2f7abeabcf5ed85dd3e97f6e5847d3dcebdf83d88f8ad162a599, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2c:c7:92:30:90:88:2f:b5:8c:c5:e0:0e:ea: 64:7c:6b:51:1e:66:11:20:73:1f:38:35:f6:44:23: bf:e4:4f:42:2b:f5:96:c3:58:60:7a:a5:f1:59:91: 06:39:dd:7d:c6:f2:21:cf:d1:8b:23:49:ab:41:fa: bf:e6:19:38:08:ae:08:77:eb:62:4c:1b:c5:53:b1: 8c:5b:c5:c5:2c:00:bf:7d:0a:49:59:36:fc:0e:74: 66:50:78:04:a5:92:4a:4e:ba:7c:46:de:08:be:ad: b3:72:08:05:93:40:61:9a:5a:8b:2b:33:78:cb:dc: 85:d3:c6:57:3b:dc:26:f4:d0:77:ca:a9:07:6a:ba: b5:69:04:fa:98:21:d8:ee:93:f3:64:bd:bb:47:09: 6c:12:7f:c4:13:a5:cd:81:d2:9b:74:55:c9:f8:cd: 40:d6:fa:02:bf:e3:5c:b4:29:1c:f3:03:e9:90:f0: b1:ca:39:bd:af:c1:cf:4c:d6:30:78:ee:83:40:ab: d1:b6:49:b8:3b:52:c6:cd:28:61:85:55:28:b9:0f: fd:45:77:12:b2:d1:83:44:17:89:d1:35:22:1f:ca: 48:a0:da:32:37:ac:b9:bc:f2:f2:00:e7:ee:de:06: 42:7e:8b:9a:3a:9a:1a:40:09:dc:68:e9:65:57:68: 8e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:57:C8:0E:E6:C2:63:7E:86:5D:2B:E6:34:48:20:7C:A3:BF:60:94 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9ba922d-bf68-4d77-858b-8fac293007e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7::/32 Signature Algorithm: sha256WithRSAEncryption 5b:b2:49:f5:a7:a9:ca:77:c9:86:4d:43:11:65:7c:91:12:a2: 69:d3:8f:36:d3:6d:3a:f6:52:0f:f1:f3:4a:3d:ae:8c:64:c7: 0b:80:fb:e9:23:7a:cf:eb:3f:28:bd:43:11:b7:ea:4f:e8:c8: fa:2a:a7:85:54:53:51:e7:e1:b5:c1:49:b7:83:69:a1:ac:64: 24:5a:a5:41:52:da:13:14:e5:4f:1f:80:c5:ce:79:82:d8:b6: 94:50:c9:d4:87:af:83:2e:29:78:38:3d:aa:55:1b:4e:1e:31: 61:42:b7:8f:70:af:30:04:15:13:d6:7a:b7:49:52:91:66:5b: 8b:54:92:16:10:c6:4b:72:3e:50:5f:e1:c5:d8:a9:a3:38:37: e5:05:dc:5c:98:6a:fd:4d:ac:e3:63:b8:7c:d9:ad:a7:8a:7e: 2c:8b:fb:a4:5c:94:a4:b3:d0:79:b9:1e:3d:11:dd:df:ab:df: a5:f2:f3:a6:e8:1d:f9:6c:00:2d:5e:b8:03:99:e9:9d:f0:17: 97:dd:bc:e9:82:db:db:29:15:fd:44:6a:3d:8f:c3:b6:cf:ec: 27:b4:ba:be:8b:34:b5:d3:24:2a:7a:f6:ec:4f:60:e0:2f:85: c2:0a:6a:56:40:d9:e0:95:cd:5d:6e:29:26:b7:57:5d:e5:7c: 45:5f:1b:36 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUG1Dqb+OhReNruFtFi66s1ak/T0QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMDEwOFoX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAMzE0ZTNjYjU5MTFiMmY3YWJlYWJj ZjVlZDg1ZGQzZTk3ZjZlNTg0N2QzZGNlYmRmODNkODhmOGFkMTYyYTU5OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyzHkjCQiC+1jMXgDupkfGtRHmYR IHMfODX2RCO/5E9CK/WWw1hgeqXxWZEGOd19xvIhz9GLI0mrQfq/5hk4CK4Id+ti TBvFU7GMW8XFLAC/fQpJWTb8DnRmUHgEpZJKTrp8Rt4Ivq2zcggFk0BhmlqLKzN4 y9yF08ZXO9wm9NB3yqkHarq1aQT6mCHY7pPzZL27RwlsEn/EE6XNgdKbdFXJ+M1A 1voCv+NctCkc8wPpkPCxyjm9r8HPTNYweO6DQKvRtkm4O1LGzShhhVUouQ/9RXcS stGDRBeJ0TUiH8pIoNoyN6y5vPLyAOfu3gZCfouaOpoaQAncaOllV2iORwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFMtXyA7mwmN+hl0r5jRIIHyjv2CUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5YmE5MjJkLWJmNjgtNGQ3Ny04NThiLThmYWMyOTMwMDdlNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba9zANBgkqhkiG9w0BAQsFAAOCAQEAW7JJ9aepynfJhk1DEWV8 kRKiadOPNtNtOvZSD/HzSj2ujGTHC4D76SN6z+s/KL1DEbfqT+jI+iqnhVRTUefh tcFJt4NpoaxkJFqlQVLaExTlTx+Axc55gti2lFDJ1Ievgy4peDg9qlUbTh4xYUK3 j3CvMAQVE9Z6t0lSkWZbi1SSFhDGS3I+UF/hxdipozg35QXcXJhq/U2s42O4fNmt p4p+LIv7pFyUpLPQebkePRHd36vfpfLzpugd+WwALV64A5npnfAXl9286YLb2ykV /URqPY/Dts/sJ7S6vos0tdMkKnr27E9g4C+FwgpqVkDZ4JXNXW4pJrdXXeV8RV8b Ng== -----END CERTIFICATE-----Generated at Sun Mar 1 23:52:48 2026 by rpki-client