$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa File: acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa (raw, json) Hash identifier: bMoSQbc9b4KN8B0S59um80rH72DGTXibi9e2HslV3Hs= Subject key identifier: 9D:0F:56:AB:D7:5C:3F:0A:F1:A6:92:B9:98:85:4C:6E:6C:F9:5A:3D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3DC0EB985E1B50AFFE009491602C0AC3F5D8F0A7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa Signing time: Fri 20 Feb 2026 00:20:36 +0000 ROA not before: Fri 20 Feb 2026 00:20:36 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c0:eb:98:5e:1b:50:af:fe:00:94:91:60:2c:0a:c3:f5:d8:f0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:20:36 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=819eb804fcae6c8a3ea427e5481b205b8e238dfba424cf5d23cf90025251e176, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:53:a8:07:9e:32:23:8a:14:f6:73:79:c3:be: c1:2f:47:b4:d1:0d:3e:9b:38:58:95:c5:dc:8b:0a: 1d:39:b5:fb:99:81:7c:e9:cf:87:23:1b:00:8a:4f: 69:dc:f5:a5:6c:c3:5b:82:ce:89:f9:41:34:ee:48: 3a:fa:4d:db:4e:99:08:e0:c3:3a:1f:6b:95:02:d6: 2f:9a:be:ef:be:16:9a:37:93:a9:6a:41:22:bd:49: e9:0a:e2:69:be:eb:6f:1d:4b:40:e5:64:a5:d2:8e: b4:bd:54:17:ce:54:e3:2e:74:87:57:9b:36:29:aa: 5d:a3:a0:69:a0:c6:a3:6e:c5:25:a2:b2:20:60:cb: a0:64:23:25:6c:0c:44:61:11:bf:a4:e3:0a:7f:18: c7:53:ca:70:54:ea:4d:d1:75:f1:73:78:60:15:c1: da:4f:86:a7:1a:25:49:0e:14:c7:03:02:aa:ce:a4: 0a:86:60:4c:ea:0c:0d:67:51:69:ff:aa:63:08:11: b6:1b:0f:6f:75:0f:70:13:6a:f8:28:34:d6:8f:07: 8b:c4:fb:a7:aa:97:16:d5:2d:1d:58:db:33:b7:b7: f3:c9:29:74:5d:6a:84:9e:b5:a3:30:4b:34:0b:8f: 00:2a:0e:7d:5f:67:e7:b3:85:df:91:ba:f0:2a:e6: 10:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0F:56:AB:D7:5C:3F:0A:F1:A6:92:B9:98:85:4C:6E:6C:F9:5A:3D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:1000::/40 Signature Algorithm: sha256WithRSAEncryption 35:34:6a:33:61:ba:44:24:0f:3c:58:2f:03:27:5d:36:27:70: 77:42:20:de:2c:a7:9d:54:2b:e4:3d:32:12:3a:e8:ee:42:f3: 85:b9:bc:55:1e:67:db:09:b9:21:1e:58:a5:83:32:54:ea:71: 1c:f7:d5:65:4e:7b:0f:4e:64:d3:58:f6:5c:30:5d:68:69:1b: 1e:b2:cf:66:b0:63:14:12:87:b6:43:d1:99:27:22:ce:88:b6: e0:3a:c0:8b:92:ca:df:63:06:29:f1:46:b3:f7:de:dc:1d:36: ec:bc:cb:52:8b:54:9d:02:83:e2:0a:9f:7d:fb:c1:83:ee:bb: 0a:67:56:df:78:f4:d5:dc:58:67:44:2e:36:84:af:b5:96:f7: 85:52:b7:9c:58:b6:45:6e:77:dd:ac:f4:30:e8:bc:c0:76:e3: 4b:dd:06:a0:dd:e0:07:80:a8:00:ca:43:c1:b2:29:df:68:5e: c0:f4:2a:0b:68:a0:48:3c:b2:2e:1d:0d:5d:83:25:13:5c:39: 5d:6b:ff:1d:b6:fc:7c:16:60:f3:90:6e:8a:e5:a8:58:1c:55: c7:f1:7a:26:56:2d:ed:7e:7d:17:2e:21:a1:5d:41:0e:fa:de: c5:be:d8:1f:90:9d:24:5d:86:d9:38:7d:0e:fd:a9:b4:2e:02: 77:5e:2f:27 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPcDrmF4bUK/+AJSRYCwKw/XY8KcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMjAzNloX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAODE5ZWI4MDRmY2FlNmM4YTNlYTQy N2U1NDgxYjIwNWI4ZTIzOGRmYmE0MjRjZjVkMjNjZjkwMDI1MjUxZTE3NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVOoB54yI4oU9nN5w77BL0e00Q0+ mzhYlcXciwodObX7mYF86c+HIxsAik9p3PWlbMNbgs6J+UE07kg6+k3bTpkI4MM6 H2uVAtYvmr7vvhaaN5OpakEivUnpCuJpvutvHUtA5WSl0o60vVQXzlTjLnSHV5s2 Kapdo6BpoMajbsUlorIgYMugZCMlbAxEYRG/pOMKfxjHU8pwVOpN0XXxc3hgFcHa T4anGiVJDhTHAwKqzqQKhmBM6gwNZ1Fp/6pjCBG2Gw9vdQ9wE2r4KDTWjweLxPun qpcW1S0dWNszt7fzySl0XWqEnrWjMEs0C48AKg59X2fns4XfkbrwKuYQMQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJ0PVqvXXD8K8aaSuZiFTG5s+Vo9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FjZGJiZWZmLTA5OTgtNDliMi04YjVjLTJiYjExMWZjMjFjZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaABAwDQYJKoZIhvcNAQELBQADggEBADU0ajNhukQkDzxYLwMn XTYncHdCIN4sp51UK+Q9MhI66O5C84W5vFUeZ9sJuSEeWKWDMlTqcRz31WVOew9O ZNNY9lwwXWhpGx6yz2awYxQSh7ZD0ZknIs6ItuA6wIuSyt9jBinxRrP33twdNuy8 y1KLVJ0Cg+IKn337wYPuuwpnVt949NXcWGdELjaEr7WW94VSt5xYtkVud92s9DDo vMB240vdBqDd4AeAqADKQ8GyKd9oXsD0KgtooEg8si4dDV2DJRNcOV1r/x22/HwW YPOQborlqFgcVcfxeiZWLe1+fRcuIaFdQQ763sW+2B+QnSRdhtk4fQ79qbQuAnde Lyc= -----END CERTIFICATE-----Generated at Mon Mar 2 03:18:05 2026 by rpki-client