$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac94887b-5f68-400d-969c-c7c686f570d1.roa File: ac94887b-5f68-400d-969c-c7c686f570d1.roa (raw, json) Hash identifier: hJXp86DD7JczsThK9KgYE4FMxi8ZR4jUu+2Al3kEelY= Subject key identifier: 4D:C2:E1:1C:B8:90:56:DB:D2:2E:C6:37:72:47:A2:9D:24:EE:56:F9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1FEDA7AE204A6FF90CC73F5F7930C4655CC2B504 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac94887b-5f68-400d-969c-c7c686f570d1.roa Signing time: Sat 21 Feb 2026 00:00:05 +0000 ROA not before: Sat 21 Feb 2026 00:00:05 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ed:a7:ae:20:4a:6f:f9:0c:c7:3f:5f:79:30:c4:65:5c:c2:b5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:00:05 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=38e77c451ebbdacabeb5068c14ce911f6a24ea92b7d40b6bf798bc167919bb59, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0c:37:8d:c8:5e:f6:9d:f4:e5:41:a1:3c:69: 47:35:39:ea:56:8b:8d:c6:59:e2:2c:1d:5c:2c:16: cd:b8:00:fb:35:58:d8:37:69:ac:45:51:0e:20:47: be:ba:df:a6:33:66:af:e5:f0:9e:16:f8:ac:ef:94: 7b:85:8b:db:c9:0d:7e:80:90:e6:47:a9:7e:fb:29: ab:fa:95:0c:36:96:3d:ae:f8:ea:84:87:52:06:8f: 3f:b6:73:48:75:d4:25:f4:04:90:c7:41:dc:02:61: 7a:cd:9d:68:8a:3b:8d:aa:cd:f5:02:4c:06:66:ed: 64:26:68:99:b1:ec:2c:d0:39:03:69:38:02:34:66: c3:ee:46:16:ff:cd:14:d3:30:8b:3e:ec:31:9b:1f: ae:9f:c3:7a:09:7a:35:ad:be:95:de:02:a8:f6:78: f4:59:fd:57:fd:2a:70:ad:8a:83:25:c1:af:53:eb: e2:6b:db:d1:c8:eb:a6:92:2e:0c:48:c8:95:73:b3: 5b:99:c2:ad:4d:1f:9a:03:f5:f2:bb:37:40:74:83: db:77:fe:50:f7:f1:0e:cc:94:1a:04:0f:4e:8c:73: 37:93:c4:05:7c:65:4d:9e:e9:fa:3c:cd:fe:20:83: c1:0b:d9:ed:cd:7c:0c:c9:ad:9f:84:ed:11:7a:7a: 9c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C2:E1:1C:B8:90:56:DB:D2:2E:C6:37:72:47:A2:9D:24:EE:56:F9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac94887b-5f68-400d-969c-c7c686f570d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:1000::/40 Signature Algorithm: sha256WithRSAEncryption bd:9c:4e:b3:8e:b9:5a:ef:db:c7:c9:52:5c:15:fc:80:d2:63: 9c:9b:5c:68:01:32:fd:33:60:b4:d8:f3:4b:4a:b1:a8:a5:a8: 4c:83:41:2b:f3:e6:85:bd:70:de:7f:7c:47:8f:62:3d:11:c8: dd:09:26:35:63:f9:0c:c6:be:55:89:5b:06:30:d0:03:d0:9e: 02:cd:01:78:04:b0:ee:4a:f8:03:e9:ef:9f:1b:55:43:f3:6a: 5c:5a:b3:ad:55:fc:90:de:e1:0f:3c:0b:39:34:05:0e:de:a0: 25:c8:57:6e:58:e1:60:cb:b8:45:34:45:61:e1:e6:0b:60:ea: 73:a7:16:bf:3d:56:bf:43:5a:4a:84:a6:02:4f:f6:67:b7:ab: f5:5e:c3:b0:6e:a0:cd:65:f6:8b:22:61:c2:52:09:95:65:fa: 1e:4b:bb:c5:ae:0d:73:05:66:51:de:06:e0:cf:05:d4:bc:2a: cf:90:f9:9e:18:37:8c:5b:29:bb:ad:73:b7:f4:5a:77:aa:95: 37:19:92:d4:ee:22:c3:3a:7d:b2:c6:19:79:2a:21:30:04:62: d6:68:42:e8:7e:ff:93:be:b0:a2:a0:97:dc:6e:4a:7e:ba:eb: 3e:22:02:9f:04:e9:bb:3d:f5:69:e9:ac:80:77:83:7f:6a:60: 27:62:f0:8e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUH+2nriBKb/kMxz9feTDEZVzCtQQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMDAwNVoX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAMzhlNzdjNDUxZWJiZGFjYWJlYjUw NjhjMTRjZTkxMWY2YTI0ZWE5MmI3ZDQwYjZiZjc5OGJjMTY3OTE5YmI1OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAw3jche9p305UGhPGlHNTnqVouN xlniLB1cLBbNuAD7NVjYN2msRVEOIEe+ut+mM2av5fCeFvis75R7hYvbyQ1+gJDm R6l++ymr+pUMNpY9rvjqhIdSBo8/tnNIddQl9ASQx0HcAmF6zZ1oijuNqs31AkwG Zu1kJmiZsews0DkDaTgCNGbD7kYW/80U0zCLPuwxmx+un8N6CXo1rb6V3gKo9nj0 Wf1X/SpwrYqDJcGvU+via9vRyOumki4MSMiVc7NbmcKtTR+aA/XyuzdAdIPbd/5Q 9/EOzJQaBA9OjHM3k8QFfGVNnun6PM3+IIPBC9ntzXwMya2fhO0RenqcrQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE3C4Ry4kFbb0i7GN3JHop0k7lb5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FjOTQ4ODdiLTVmNjgtNDAwZC05NjljLWM3YzY4NmY1NzBkMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8hAwDQYJKoZIhvcNAQELBQADggEBAL2cTrOOuVrv28fJUlwV /IDSY5ybXGgBMv0zYLTY80tKsailqEyDQSvz5oW9cN5/fEePYj0RyN0JJjVj+QzG vlWJWwYw0APQngLNAXgEsO5K+APp758bVUPzalxas61V/JDe4Q88Czk0BQ7eoCXI V25Y4WDLuEU0RWHh5gtg6nOnFr89Vr9DWkqEpgJP9me3q/Vew7BuoM1l9osiYcJS CZVl+h5Lu8WuDXMFZlHeBuDPBdS8Ks+Q+Z4YN4xbKbutc7f0WneqlTcZktTuIsM6 fbLGGXkqITAEYtZoQuh+/5O+sKKgl9xuSn666z4iAp8E6bs99WnprIB3g39qYCdi 8I4= -----END CERTIFICATE-----Generated at Mon Mar 2 01:59:15 2026 by rpki-client