$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bcbf4705-a888-459f-bf40-6a664a1c8aa7.roa File: bcbf4705-a888-459f-bf40-6a664a1c8aa7.roa (raw, json) Hash identifier: PYf+tbleuejm/x8ADJd3H4yaZHjZfVEmwdW6GUIY32w= Subject key identifier: 5F:36:73:8D:44:53:EB:02:10:C9:59:FC:2E:03:38:EB:4E:B9:49:56 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0CD329A9E3F9A7CDD02A0C5D3509C6FBD09B4EDB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bcbf4705-a888-459f-bf40-6a664a1c8aa7.roa Signing time: Wed 11 Feb 2026 00:20:59 +0000 ROA not before: Wed 11 Feb 2026 00:20:59 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:8840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d3:29:a9:e3:f9:a7:cd:d0:2a:0c:5d:35:09:c6:fb:d0:9b:4e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:20:59 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=d55ba8222d83ac01d5fb111ca7a8814e0ecbce1d11151b0db86fe8da819c222e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9f:44:b2:26:89:0e:05:bb:b2:90:28:94:33: 42:d5:4b:65:b3:26:f4:4a:50:a8:7f:2c:d4:4f:09: b2:9c:14:fa:04:58:2b:29:d6:66:e4:1b:64:97:00: e9:5d:c0:16:7f:de:69:66:2d:59:30:eb:fa:76:b0: ce:7e:ac:a2:3d:77:fc:f2:ff:5b:04:05:ed:b3:5c: f7:38:b5:3f:07:fe:17:2a:f8:60:fc:21:38:8d:a1: c0:7f:4d:c8:2f:08:3f:76:59:87:70:58:be:14:51: 7f:59:cc:af:d3:36:6a:f7:be:a4:be:99:74:ec:cf: 26:e7:f6:97:cf:73:23:00:4c:2e:d1:49:83:c9:90: bc:9e:af:6e:38:e7:6b:0d:fa:88:83:f6:91:91:2c: 7a:f3:29:5f:6e:f5:f3:ef:b9:de:4c:f9:51:da:6d: e9:b2:b1:1b:43:8d:7b:44:f7:ef:af:da:c4:81:92: c6:92:7c:d4:7f:4d:06:66:cd:bf:2a:ea:7f:83:f8: 02:66:73:8b:a6:71:eb:09:61:51:a7:6f:94:90:a9: 71:14:b0:90:75:12:87:ca:3b:f8:19:6b:56:22:e0: 31:8a:31:11:57:3c:b5:a4:8a:77:c2:ad:42:b7:51: 2c:52:d3:28:54:cd:2a:6d:c3:76:ce:f9:e5:e9:c6: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:36:73:8D:44:53:EB:02:10:C9:59:FC:2E:03:38:EB:4E:B9:49:56 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bcbf4705-a888-459f-bf40-6a664a1c8aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:8840::/46 Signature Algorithm: sha256WithRSAEncryption 3f:b8:6b:b2:a1:4f:6c:48:3a:3b:0e:e2:01:10:11:c7:7d:74: d8:d0:62:04:d9:cc:31:5f:2e:2c:df:0e:da:86:d9:e5:e3:63: 77:61:43:b0:80:d3:07:ca:c9:09:b4:b5:71:16:86:94:04:49: d3:ff:eb:f2:d5:e8:a0:c3:44:83:44:b7:3a:70:34:66:78:63: 41:15:86:24:cf:ad:a1:89:6c:1d:fb:89:19:82:79:19:50:9e: c9:b2:3b:1a:1f:b6:71:1c:1c:4d:94:7b:c1:44:35:40:18:fe: b1:f9:51:a1:e0:8c:dc:e2:26:dd:a8:2b:18:1c:41:38:e0:3f: a4:38:5c:80:43:99:13:91:1b:b0:2a:7c:5b:f1:6d:c2:46:eb: 31:7c:e4:de:74:db:0f:ab:91:ad:1a:5c:92:f1:37:f4:49:16: 07:56:53:21:c1:75:48:12:6e:87:fe:b1:81:2a:f6:94:15:35: e5:65:a1:89:b2:ed:f0:01:fd:66:be:7a:18:bd:da:a4:7c:95: bd:19:89:b6:16:be:f9:64:d0:55:1b:c8:d0:8b:c2:38:2e:9a: 14:7e:15:21:b6:1f:3b:80:29:1f:29:5c:79:9d:02:2a:0d:a5: 4f:73:10:6c:e4:47:c8:01:a2:17:1f:a3:cb:1c:a5:3f:c1:59: 51:c8:4f:40 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDNMpqeP5p83QKgxdNQnG+9CbTtswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMjA1OVoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAZDU1YmE4MjIyZDgzYWMwMWQ1ZmIx MTFjYTdhODgxNGUwZWNiY2UxZDExMTUxYjBkYjg2ZmU4ZGE4MTljMjIyZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw59EsiaJDgW7spAolDNC1Utlsyb0 SlCofyzUTwmynBT6BFgrKdZm5BtklwDpXcAWf95pZi1ZMOv6drDOfqyiPXf88v9b BAXts1z3OLU/B/4XKvhg/CE4jaHAf03ILwg/dlmHcFi+FFF/Wcyv0zZq976kvpl0 7M8m5/aXz3MjAEwu0UmDyZC8nq9uOOdrDfqIg/aRkSx68ylfbvXz77neTPlR2m3p srEbQ417RPfvr9rEgZLGknzUf00GZs2/Kup/g/gCZnOLpnHrCWFRp2+UkKlxFLCQ dRKHyjv4GWtWIuAxijERVzy1pIp3wq1Ct1EsUtMoVM0qbcN2zvnl6cZXQQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFF82c41EU+sCEMlZ/C4DOOtOuUlWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JjYmY0NzA1LWE4ODgtNDU5Zi1iZjQwLTZhNjY0YTFjOGFhNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba84hAMA0GCSqGSIb3DQEBCwUAA4IBAQA/uGuyoU9sSDo7DuIB EBHHfXTY0GIE2cwxXy4s3w7ahtnl42N3YUOwgNMHyskJtLVxFoaUBEnT/+vy1eig w0SDRLc6cDRmeGNBFYYkz62hiWwd+4kZgnkZUJ7JsjsaH7ZxHBxNlHvBRDVAGP6x +VGh4Izc4ibdqCsYHEE44D+kOFyAQ5kTkRuwKnxb8W3CRusxfOTedNsPq5GtGlyS 8Tf0SRYHVlMhwXVIEm6H/rGBKvaUFTXlZaGJsu3wAf1mvnoYvdqkfJW9GYm2Fr75 ZNBVG8jQi8I4LpoUfhUhth87gCkfKVx5nQIqDaVPcxBs5EfIAaIXH6PLHKU/wVlR yE9A -----END CERTIFICATE-----Generated at Mon Mar 2 03:21:59 2026 by rpki-client