$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bac21e1d-59df-47ff-bfa7-6ebfc6aa52ef.roa File: bac21e1d-59df-47ff-bfa7-6ebfc6aa52ef.roa (raw, json) Hash identifier: l4b2+4ZcTAfsZe9z6h3C85TGrdvUr/k13OJvvCeSDsI= Subject key identifier: 4F:87:BF:A2:CA:C9:93:31:0E:D1:D2:A4:8C:61:AE:3F:3E:89:41:F0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 041A7C745B03B83578940D56FACAC8E0732E7B31 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bac21e1d-59df-47ff-bfa7-6ebfc6aa52ef.roa Signing time: Tue 17 Feb 2026 00:00:47 +0000 ROA not before: Tue 17 Feb 2026 00:00:47 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1a:7c:74:5b:03:b8:35:78:94:0d:56:fa:ca:c8:e0:73:2e:7b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 17 00:00:47 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=d0c4eeeadbc20cbd0d247df9e52d6398a5cfcaddc37d2d626768b3ea0b5ad655, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:7c:cf:fa:48:5d:84:c4:bf:b9:87:bf:cd: 38:35:b9:6e:d8:55:94:1f:19:62:df:77:c5:ce:f4: 28:3f:90:cb:12:03:be:0d:ae:7c:16:b6:a9:c5:5a: 24:c4:00:53:90:53:78:39:7f:1e:80:ad:86:4a:86: f5:53:18:bd:83:6e:e5:6f:56:14:d1:9a:4f:88:6f: e6:cd:ec:c8:b2:4f:53:e8:46:17:8d:b1:d9:06:63: d8:5a:05:57:00:48:e8:fc:00:06:e1:6a:78:da:a7: 3a:1d:4c:b0:62:82:66:90:0a:d0:fc:c2:e3:b7:1f: 19:5c:f6:0e:9d:20:09:b7:83:bb:db:b6:e8:8c:c1: 0f:8f:77:91:10:e1:72:1f:1b:dc:68:66:88:a6:b9: 17:bb:2a:d1:8a:68:ae:c4:d9:b3:3d:23:c5:e2:ba: 3a:5d:48:71:be:64:39:68:bf:1b:b6:c0:a5:c7:1b: 6e:3e:ba:e0:16:3f:86:65:b8:1c:e5:3f:dc:5a:2d: 8a:cb:b3:ac:82:d1:f7:4b:ac:d7:3f:cc:b6:9f:33: fb:e5:ab:26:d2:53:3b:0d:57:38:3f:62:e0:37:be: fe:ad:d3:f9:e3:04:51:28:c9:50:e5:8c:8a:e9:92: 3a:77:e6:36:41:b6:3a:db:e0:f2:1c:33:dc:9d:3d: 79:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:87:BF:A2:CA:C9:93:31:0E:D1:D2:A4:8C:61:AE:3F:3E:89:41:F0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bac21e1d-59df-47ff-bfa7-6ebfc6aa52ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2800::/40 Signature Algorithm: sha256WithRSAEncryption 16:e9:b7:18:b7:40:d1:82:44:94:98:89:50:f2:5b:25:2f:96: f9:19:56:1e:1f:18:a8:a5:26:19:c3:3c:26:3a:f7:b6:a8:dd: f1:85:4f:a0:96:8b:96:9d:a8:a5:ae:92:f6:ac:84:16:ab:27: 74:15:33:24:12:59:f5:c2:b4:c8:b7:4d:84:59:71:ec:5a:d5: 27:b5:bd:90:36:81:1c:ac:df:80:07:f7:9b:f1:73:7c:3b:7d: d5:62:d9:75:99:61:46:33:dd:a3:6e:e6:2a:96:04:3a:57:86: 28:0f:c2:95:bf:be:b3:d5:ed:b1:18:56:fe:d6:97:6c:d7:94: e6:64:2e:e2:17:93:1f:c4:9e:6c:ea:3f:d3:b8:d0:8d:a1:14: 97:fb:33:b9:d6:bf:da:34:2c:42:1f:36:e2:6a:87:57:60:e7: 59:07:ea:4a:47:07:e5:f4:32:f7:19:62:fa:de:ce:11:c7:8c: 8c:5c:0e:02:63:dc:03:ff:ab:1b:4c:55:2b:2c:85:65:a6:b6: 4f:96:2c:80:70:d0:c8:de:1d:8a:35:9e:6c:f0:92:21:a6:2b: 12:ac:db:c2:e9:a8:46:31:b7:f0:4e:95:27:37:6d:26:17:68: 26:25:de:f7:64:22:05:31:c4:80:34:af:0a:81:af:25:1a:4a: 2c:23:e1:5d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBBp8dFsDuDV4lA1W+srI4HMuezEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNzAwMDA0N1oX DTI2MDUxODIzNTk1OVowejFJMEcGA1UEBRNAZDBjNGVlZWFkYmMyMGNiZDBkMjQ3 ZGY5ZTUyZDYzOThhNWNmY2FkZGMzN2QyZDYyNjc2OGIzZWEwYjVhZDY1NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKF8z/pIXYTEv7mHv804Nblu2FWU Hxli33fFzvQoP5DLEgO+Da58FrapxVokxABTkFN4OX8egK2GSob1Uxi9g27lb1YU 0ZpPiG/mzezIsk9T6EYXjbHZBmPYWgVXAEjo/AAG4Wp42qc6HUywYoJmkArQ/MLj tx8ZXPYOnSAJt4O727bojMEPj3eREOFyHxvcaGaIprkXuyrRimiuxNmzPSPF4ro6 XUhxvmQ5aL8btsClxxtuPrrgFj+GZbgc5T/cWi2Ky7OsgtH3S6zXP8y2nzP75asm 0lM7DVc4P2LgN77+rdP54wRRKMlQ5YyK6ZI6d+Y2QbY62+DyHDPcnT15/wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE+Hv6LKyZMxDtHSpIxhrj8+iUHwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JhYzIxZTFkLTU5ZGYtNDdmZi1iZmE3LTZlYmZjNmFhNTJlZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaACgwDQYJKoZIhvcNAQELBQADggEBABbptxi3QNGCRJSYiVDy WyUvlvkZVh4fGKilJhnDPCY697ao3fGFT6CWi5adqKWukvashBarJ3QVMyQSWfXC tMi3TYRZcexa1Se1vZA2gRys34AH95vxc3w7fdVi2XWZYUYz3aNu5iqWBDpXhigP wpW/vrPV7bEYVv7Wl2zXlOZkLuIXkx/EnmzqP9O40I2hFJf7M7nWv9o0LEIfNuJq h1dg51kH6kpHB+X0MvcZYvrezhHHjIxcDgJj3AP/qxtMVSsshWWmtk+WLIBw0Mje HYo1nmzwkiGmKxKs28LpqEYxt/BOlSc3bSYXaCYl3vdkIgUxxIA0rwqBryUaSiwj 4V0= -----END CERTIFICATE-----Generated at Sun Mar 1 21:50:04 2026 by rpki-client