$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b424c862-bbee-4123-87b5-a8a734d27574.roa File: b424c862-bbee-4123-87b5-a8a734d27574.roa (raw, json) Hash identifier: pJJk0YTrEjDpWNVnzO4IRYQkLHmn2ospVYKrKXlIgds= Subject key identifier: F6:49:B2:CD:50:70:FF:87:56:A8:20:03:09:42:63:CE:14:23:38:DA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5421AFC66423DEB0B425BE92AE267460BE3CC77A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b424c862-bbee-4123-87b5-a8a734d27574.roa Signing time: Sun 22 Feb 2026 00:40:09 +0000 ROA not before: Sun 22 Feb 2026 00:40:09 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:21:af:c6:64:23:de:b0:b4:25:be:92:ae:26:74:60:be:3c:c7:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:40:09 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=0554b89e9448311eda4c7592c0746b193d5ddec843ed853000957ff9d1360fde, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fb:37:fb:47:d7:d5:de:bf:22:22:4e:c7:93: 94:91:bd:2e:c5:a5:ac:88:53:ef:86:06:83:1e:03: 1b:8d:92:12:d0:bf:b8:4d:f6:57:80:bc:45:8d:ee: 77:8a:8f:b7:b5:47:4e:8b:e1:71:ba:79:24:e9:86: 6a:55:90:97:ac:a8:5f:f4:89:48:a1:63:f2:2f:52: c6:97:c4:17:7e:6c:9b:da:91:98:3b:65:88:a2:66: b8:9b:9c:9d:87:b3:31:c5:ac:58:c3:86:2c:ea:b4: e0:96:80:cd:94:d9:df:6b:49:f9:d2:cd:7b:de:23: 02:ca:81:4f:14:2a:93:cc:1d:c9:73:db:ab:bd:6d: 7a:31:3d:3e:22:be:a9:ee:06:73:32:a3:b8:da:c6: 7d:19:3a:71:2b:1e:4b:fe:97:bc:57:f1:08:49:7e: 98:1d:d1:11:c4:18:a7:26:9f:d8:05:5d:11:fc:fd: f6:03:eb:19:74:c0:72:5b:62:e1:ee:1c:c2:b5:ef: 57:7d:72:36:99:cb:7d:d9:39:2e:54:06:8f:71:72: 2d:e6:02:b9:4d:6b:07:d2:2e:61:3d:21:82:0b:74: 74:fc:0c:b4:ae:20:21:8f:5e:3a:a4:26:c3:15:11: 22:d3:33:1d:7f:3e:0b:a1:5a:23:75:ae:fa:a1:b5: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:49:B2:CD:50:70:FF:87:56:A8:20:03:09:42:63:CE:14:23:38:DA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b424c862-bbee-4123-87b5-a8a734d27574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 3b:6f:82:c3:26:e6:14:37:29:74:d9:1b:d4:4f:f8:ad:07:31: 56:90:68:d1:f5:57:7f:79:1c:ff:0a:80:63:8f:c6:80:b7:bb: 2d:2a:7b:44:21:27:ae:0b:1b:56:07:c5:07:12:6e:70:2d:24: 99:29:db:df:87:b6:d2:ac:26:29:55:01:1f:87:33:3c:fc:25: 8a:9f:0a:d9:ed:a0:de:a6:c9:0c:ef:b6:9e:d3:8b:3e:6c:0a: 4f:b8:43:99:45:e0:02:04:b6:e7:b2:19:03:6c:a7:a9:5d:88: 2e:ba:d6:b3:02:a8:67:87:ef:b3:b8:9c:b4:2b:d5:1f:f9:22: 10:ba:3f:83:3e:c3:a6:3a:16:cc:c1:8d:d4:22:e8:5f:68:86: 7a:95:4e:7d:f5:04:2d:79:6c:89:7b:37:19:d5:f4:e9:11:c1: 94:94:b6:1f:c6:e1:b6:4e:66:a1:06:bd:40:78:bd:41:6d:7e: c8:95:50:fa:ed:2a:59:5c:0c:0c:3d:ac:d3:88:25:a3:21:2f: 0b:de:f1:ee:d0:04:d9:2d:1f:1c:8c:57:6f:d6:43:e9:eb:33: 4c:be:98:ab:af:ef:f7:cb:5b:9a:4f:6b:20:12:8d:5a:44:43: 98:d1:6a:18:fa:f1:47:c7:63:a6:8c:aa:eb:95:28:3c:5f:b5: 77:cf:34:5e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVCGvxmQj3rC0Jb6SriZ0YL48x3owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwNDAwOVoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAMDU1NGI4OWU5NDQ4MzExZWRhNGM3 NTkyYzA3NDZiMTkzZDVkZGVjODQzZWQ4NTMwMDA5NTdmZjlkMTM2MGZkZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ps3+0fX1d6/IiJOx5OUkb0uxaWs iFPvhgaDHgMbjZIS0L+4TfZXgLxFje53io+3tUdOi+Fxunkk6YZqVZCXrKhf9IlI oWPyL1LGl8QXfmyb2pGYO2WIoma4m5ydh7MxxaxYw4Ys6rTgloDNlNnfa0n50s17 3iMCyoFPFCqTzB3Jc9urvW16MT0+Ir6p7gZzMqO42sZ9GTpxKx5L/pe8V/EISX6Y HdERxBinJp/YBV0R/P32A+sZdMByW2Lh7hzCte9XfXI2mct92TkuVAaPcXIt5gK5 TWsH0i5hPSGCC3R0/Ay0riAhj146pCbDFREi0zMdfz4LoVojda76obWVTwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPZJss1QcP+HVqggAwlCY84UIzjaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I0MjRjODYyLWJiZWUtNDEyMy04N2I1LWE4YTczNGQyNzU3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/wjAMA0GCSqGSIb3DQEBCwUAA4IBAQA7b4LDJuYUNyl02RvU T/itBzFWkGjR9Vd/eRz/CoBjj8aAt7stKntEISeuCxtWB8UHEm5wLSSZKdvfh7bS rCYpVQEfhzM8/CWKnwrZ7aDepskM77ae04s+bApPuEOZReACBLbnshkDbKepXYgu utazAqhnh++zuJy0K9Uf+SIQuj+DPsOmOhbMwY3UIuhfaIZ6lU599QQteWyJezcZ 1fTpEcGUlLYfxuG2TmahBr1AeL1BbX7IlVD67SpZXAwMPazTiCWjIS8L3vHu0ATZ LR8cjFdv1kPp6zNMvpirr+/3y1uaT2sgEo1aREOY0WoY+vFHx2OmjKrrlSg8X7V3 zzRe -----END CERTIFICATE-----Generated at Sun Mar 1 23:47:01 2026 by rpki-client