$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab42bd63-eaf6-48c4-868d-5ac6fbd49235.roa File: ab42bd63-eaf6-48c4-868d-5ac6fbd49235.roa (raw, json) Hash identifier: 9QhIa7gKZcVlLhg3gCZT8jitRQ5+ueCn4EWBeAfoWOc= Subject key identifier: 06:8F:1F:6E:18:63:2F:2A:02:26:C8:2D:D4:DD:67:94:83:C9:E2:8F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 39D699CB1EB3A3D5E22E49174CE385756BD775AA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab42bd63-eaf6-48c4-868d-5ac6fbd49235.roa Signing time: Sun 15 Feb 2026 00:00:36 +0000 ROA not before: Sun 15 Feb 2026 00:00:36 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d6:99:cb:1e:b3:a3:d5:e2:2e:49:17:4c:e3:85:75:6b:d7:75:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 15 00:00:36 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=78b16a7b078ee72708c34bb2d3ab3ab889b2b94ec533afbf8fefe99114755ffc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:58:6d:6d:4f:b9:d3:8d:87:72:ac:b9:a9:8c: e5:94:71:0e:c4:f6:dd:4f:c7:67:ac:d7:4c:9f:bb: 94:65:1b:50:f6:e7:90:f8:97:58:6e:a7:3c:a3:b2: d0:24:14:47:66:cf:34:85:6a:0e:ef:bf:1d:c5:7a: 04:0e:df:9b:d5:a3:42:eb:fb:f5:72:86:07:8a:65: 2a:22:a4:27:2b:ea:16:67:a1:41:e0:ab:10:3b:bc: 7b:32:a2:68:d9:4b:03:97:40:47:fc:f2:a6:7b:23: b0:52:c2:ca:9e:e3:42:bb:0e:90:73:a0:1d:de:69: 2f:9c:52:4b:aa:60:e6:69:b1:a4:ce:7f:ab:ff:6f: 76:5b:52:9a:fc:1f:4a:34:c8:f3:b7:5c:2b:45:1e: d2:ce:4d:2f:38:60:06:8e:82:34:f2:c9:6a:d4:8c: 15:24:7a:18:86:e1:7b:c7:36:7d:65:8b:24:2f:c4: 5b:11:9d:bf:27:f2:95:88:3c:fc:98:ac:7f:c4:16: 26:23:af:80:19:d8:3c:54:96:81:42:4e:55:54:01: 30:84:1b:5f:d4:30:2e:49:ee:d5:62:c7:09:46:11: c3:b3:f0:b6:ea:45:60:71:1b:d7:95:e8:60:5b:3a: 09:b4:47:f2:3a:c5:4e:75:e5:68:d4:0b:bc:48:b9: f6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8F:1F:6E:18:63:2F:2A:02:26:C8:2D:D4:DD:67:94:83:C9:E2:8F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab42bd63-eaf6-48c4-868d-5ac6fbd49235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:9000::/40 Signature Algorithm: sha256WithRSAEncryption 65:d1:50:26:59:65:60:2e:a7:54:a3:52:6a:03:43:97:c6:06: 83:6d:51:19:55:97:a6:13:8b:6d:f1:81:15:4b:e6:f6:cd:8c: 77:8c:29:f3:73:5f:8a:16:9a:60:fd:76:1d:59:e0:c0:86:34: c8:04:3e:0f:b1:45:14:78:df:0d:18:91:db:5a:09:a2:af:fb: 3c:2f:02:ed:41:d8:5d:72:a9:a0:71:ef:9f:8c:d0:83:9f:32: a7:0c:9a:a8:95:79:2a:2d:10:63:98:ae:7e:16:42:b4:d8:9e: 02:e1:b8:4f:5a:89:49:28:28:4e:b2:06:ad:c5:c0:09:d4:5f: 81:f4:eb:67:5f:de:07:7d:13:a5:0d:24:37:25:59:e5:6e:90: 47:49:31:9e:b0:8d:77:01:65:7d:e2:ce:f9:31:04:d3:89:a4: c4:6b:85:fd:81:d1:ce:90:93:41:16:29:d8:88:3e:43:b9:7a: e3:95:1d:c9:40:83:14:7f:6f:00:95:c1:81:8c:1a:8f:43:0a: 9d:b4:2f:60:c8:a1:1f:87:dd:8f:2e:3d:1c:cb:89:dc:93:48: e9:e7:27:ed:de:89:a2:e7:9c:f6:b7:d5:ef:74:89:c5:42:21: 75:20:29:2c:35:60:f6:22:fd:60:19:d7:32:c7:aa:a8:99:c3: d6:7b:e9:0d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOdaZyx6zo9XiLkkXTOOFdWvXdaowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNTAwMDAzNloX DTI2MDUxNjIzNTk1OVowejFJMEcGA1UEBRNANzhiMTZhN2IwNzhlZTcyNzA4YzM0 YmIyZDNhYjNhYjg4OWIyYjk0ZWM1MzNhZmJmOGZlZmU5OTExNDc1NWZmYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01htbU+5042Hcqy5qYzllHEOxPbd T8dnrNdMn7uUZRtQ9ueQ+JdYbqc8o7LQJBRHZs80hWoO778dxXoEDt+b1aNC6/v1 coYHimUqIqQnK+oWZ6FB4KsQO7x7MqJo2UsDl0BH/PKmeyOwUsLKnuNCuw6Qc6Ad 3mkvnFJLqmDmabGkzn+r/292W1Ka/B9KNMjzt1wrRR7Szk0vOGAGjoI08slq1IwV JHoYhuF7xzZ9ZYskL8RbEZ2/J/KViDz8mKx/xBYmI6+AGdg8VJaBQk5VVAEwhBtf 1DAuSe7VYscJRhHDs/C26kVgcRvXlehgWzoJtEfyOsVOdeVo1Au8SLn2owIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAaPH24YYy8qAibILdTdZ5SDyeKPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FiNDJiZDYzLWVhZjYtNDhjNC04NjhkLTVhYzZmYmQ0OTIzNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYJAwDQYJKoZIhvcNAQELBQADggEBAGXRUCZZZWAup1SjUmoD Q5fGBoNtURlVl6YTi23xgRVL5vbNjHeMKfNzX4oWmmD9dh1Z4MCGNMgEPg+xRRR4 3w0YkdtaCaKv+zwvAu1B2F1yqaBx75+M0IOfMqcMmqiVeSotEGOYrn4WQrTYngLh uE9aiUkoKE6yBq3FwAnUX4H062df3gd9E6UNJDclWeVukEdJMZ6wjXcBZX3izvkx BNOJpMRrhf2B0c6Qk0EWKdiIPkO5euOVHclAgxR/bwCVwYGMGo9DCp20L2DIoR+H 3Y8uPRzLidyTSOnnJ+3eiaLnnPa31e90icVCIXUgKSw1YPYi/WAZ1zLHqqiZw9Z7 6Q0= -----END CERTIFICATE-----Generated at Sun Mar 1 21:57:52 2026 by rpki-client