$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b3efb515-ba78-4d38-a2d5-bc14f4911d60.roa File: b3efb515-ba78-4d38-a2d5-bc14f4911d60.roa (raw, json) Hash identifier: nwf9AkY1EUIv70iKKOD7c7ry5gJ9RDYoojA4amUAOE0= Subject key identifier: E6:2F:83:DF:17:2F:42:95:6C:0D:01:45:06:CB:B1:6C:55:60:87:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3863F439ECE760B15854CDABFA36D0C67DD7C349 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b3efb515-ba78-4d38-a2d5-bc14f4911d60.roa Signing time: Fri 20 Feb 2026 00:30:13 +0000 ROA not before: Fri 20 Feb 2026 00:30:13 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:63:f4:39:ec:e7:60:b1:58:54:cd:ab:fa:36:d0:c6:7d:d7:c3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:30:13 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=3f1142008d72d8374cbf01b0c57c7328f89e6020523d2f7f8aa36b77ed0c7f6b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:8e:ab:5e:06:56:1d:4b:0a:6f:09:9d:bb: cf:4c:df:c1:ac:f2:00:09:47:ad:63:bc:9a:53:1e: 36:f1:90:9f:b6:fc:9b:8e:03:ce:ac:3c:3f:81:92: f9:49:75:a4:7f:5d:c7:0f:f5:0a:6b:80:a5:d2:86: 7a:a6:5b:80:6f:93:0f:82:ec:75:1a:83:ad:77:1b: 9c:fe:dd:f5:88:59:a2:d6:37:ae:e4:37:f6:1c:66: 08:f4:40:9b:ee:a8:d8:55:fd:82:d8:c7:89:2b:c6: c1:01:cf:fc:69:72:53:1e:54:25:4a:fd:0d:ba:e8: 96:40:98:11:cd:a7:c6:5a:8e:79:1a:ed:43:d3:3a: f2:e1:ee:20:01:36:af:a5:e7:a8:8b:2d:22:6b:d5: 74:ef:8c:ab:bc:70:89:be:04:98:4d:bb:72:4f:6d: 1a:10:1b:1d:c0:d3:68:27:b1:50:c3:74:19:a8:53: 9b:d4:6a:32:77:24:89:71:52:11:8b:db:45:8f:0a: 39:ed:09:b1:04:8d:23:2b:f1:d7:6c:32:4c:f2:ef: 0f:a5:23:cd:79:30:0c:83:41:c2:0b:4b:f4:95:67: a4:52:84:99:42:c8:8c:96:30:53:11:df:e0:84:37: d8:f4:0e:91:22:7c:81:b6:12:75:83:d3:11:23:08: 73:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2F:83:DF:17:2F:42:95:6C:0D:01:45:06:CB:B1:6C:55:60:87:E7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b3efb515-ba78-4d38-a2d5-bc14f4911d60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:1080::/48 Signature Algorithm: sha256WithRSAEncryption 0e:2a:44:45:5b:ed:2b:cb:f7:3b:fd:e6:92:64:48:e9:b3:13: bb:fa:9c:97:cf:65:38:f2:76:59:af:ea:69:ba:c5:0d:c9:da: 89:cd:89:c0:a4:9b:b0:df:ba:56:21:ac:d7:04:26:ae:ee:7b: 6e:07:29:58:76:ea:0b:fb:e6:86:e0:ec:c5:0d:8f:51:cd:3f: 02:43:44:b0:b3:06:62:b5:8b:76:e7:db:a9:89:44:8c:28:eb: 55:04:fc:59:cb:10:fc:ac:95:52:74:06:bd:06:7d:fd:60:44: 43:49:8c:b4:ad:c8:12:c9:85:d1:49:fd:f6:cc:c3:64:85:1a: 5f:0e:a8:76:43:45:a3:3b:e6:c8:75:0c:e0:10:9d:3a:fc:69: e2:0a:1b:13:16:b9:dc:b0:ea:10:76:34:10:2b:37:99:c6:dc: eb:b6:91:52:91:24:ce:6e:c6:28:88:15:98:22:be:80:bc:19: 3e:30:a7:87:fb:d7:bd:4c:78:66:90:b6:09:2f:5e:32:29:d3: 39:fe:57:54:f0:2a:c2:e0:ee:37:9d:a6:ca:01:34:fc:58:12: ec:f1:ff:ad:e4:4c:d1:9a:c1:18:15:33:8a:74:00:46:e1:d4: 55:c3:b2:5f:d5:e9:db:17:96:5b:42:16:b3:0a:67:73:52:6e: 0a:16:ce:79 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOGP0OeznYLFYVM2r+jbQxn3Xw0kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMzAxM1oX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAM2YxMTQyMDA4ZDcyZDgzNzRjYmYw MWIwYzU3YzczMjhmODllNjAyMDUyM2QyZjdmOGFhMzZiNzdlZDBjN2Y2YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+yOq14GVh1LCm8JnbvPTN/BrPIA CUetY7yaUx428ZCftvybjgPOrDw/gZL5SXWkf13HD/UKa4Cl0oZ6pluAb5MPgux1 GoOtdxuc/t31iFmi1jeu5Df2HGYI9ECb7qjYVf2C2MeJK8bBAc/8aXJTHlQlSv0N uuiWQJgRzafGWo55Gu1D0zry4e4gATavpeeoiy0ia9V074yrvHCJvgSYTbtyT20a EBsdwNNoJ7FQw3QZqFOb1GoydySJcVIRi9tFjwo57QmxBI0jK/HXbDJM8u8PpSPN eTAMg0HCC0v0lWekUoSZQsiMljBTEd/ghDfY9A6RInyBthJ1g9MRIwhzuwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOYvg98XL0KVbA0BRQbLsWxVYIfnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IzZWZiNTE1LWJhNzgtNGQzOC1hMmQ1LWJjMTRmNDkxMWQ2MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYRCAMA0GCSqGSIb3DQEBCwUAA4IBAQAOKkRFW+0ry/c7/eaS ZEjpsxO7+pyXz2U48nZZr+ppusUNydqJzYnApJuw37pWIazXBCau7ntuBylYduoL ++aG4OzFDY9RzT8CQ0SwswZitYt259upiUSMKOtVBPxZyxD8rJVSdAa9Bn39YERD SYy0rcgSyYXRSf32zMNkhRpfDqh2Q0WjO+bIdQzgEJ06/GniChsTFrncsOoQdjQQ KzeZxtzrtpFSkSTObsYoiBWYIr6AvBk+MKeH+9e9THhmkLYJL14yKdM5/ldU8CrC 4O43nabKATT8WBLs8f+t5EzRmsEYFTOKdABG4dRVw7Jf1enbF5ZbQhazCmdzUm4K Fs55 -----END CERTIFICATE-----Generated at Sun Mar 1 21:55:46 2026 by rpki-client