$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c232a3c6-3342-4252-a5e4-80758304a961.roa File: c232a3c6-3342-4252-a5e4-80758304a961.roa (raw, json) Hash identifier: OKxtbDOVvrcls2rm1HKVIUGSnQBvyh129sK3jv+mdoA= Subject key identifier: A3:F6:16:5F:30:C5:7C:7A:F7:8E:47:B0:01:A3:FF:26:7C:CF:3F:D2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 467EC93368639A79FC413769A2935E913BBE12E1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c232a3c6-3342-4252-a5e4-80758304a961.roa Signing time: Sat 21 Feb 2026 00:00:47 +0000 ROA not before: Sat 21 Feb 2026 00:00:47 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:7e:c9:33:68:63:9a:79:fc:41:37:69:a2:93:5e:91:3b:be:12:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:00:47 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=f07ec3b642a797aba6ae9f82544f91f2c0b1c6b1bcf7c8f972f0cc6d9218cb04, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:96:44:70:78:9a:f2:31:f9:6f:3d:c1:79:98: c7:53:ad:d3:a7:7a:e2:a1:31:65:e2:65:5f:a9:fc: d9:02:12:49:e0:a3:c0:ed:47:fc:55:fb:e5:45:9b: cd:c2:4f:ca:d0:21:cb:7a:ec:39:50:29:a7:44:be: c5:bc:10:1c:e6:55:2c:33:8d:de:ce:6e:98:9d:3b: db:4a:06:2a:17:3e:f5:8f:94:1e:51:c9:27:9d:e2: a4:07:56:4e:f6:40:a3:54:e4:80:d3:97:19:43:ad: a1:aa:d7:d0:fe:cf:ec:1d:f0:25:c7:9d:d6:ba:f6: c9:80:b5:96:e7:02:6f:39:7a:48:69:c7:9e:c9:14: a0:3e:19:31:60:48:6c:86:a3:ec:43:6b:a8:79:e7: ee:d9:7e:2f:7f:e4:c3:44:f0:c8:dc:4e:89:2a:ca: 39:36:58:b1:63:46:59:b8:a0:90:9b:78:4a:36:5c: e8:ba:66:bc:cb:03:7d:d5:3e:05:13:83:e9:7c:e0: f6:4f:08:ba:29:e2:37:18:ce:3a:5b:4e:ed:5f:ac: 03:40:ed:ae:d3:fb:97:0d:50:44:fb:c2:d6:85:2b: 60:f2:3a:e7:c5:32:4f:43:3b:1c:1a:66:ed:a9:bf: 61:1b:18:6a:a3:db:e9:9b:18:5d:e2:1f:d6:ff:0a: bf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F6:16:5F:30:C5:7C:7A:F7:8E:47:B0:01:A3:FF:26:7C:CF:3F:D2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c232a3c6-3342-4252-a5e4-80758304a961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:5000::/48 Signature Algorithm: sha256WithRSAEncryption 5d:ff:a8:59:45:54:e3:20:8f:56:5a:2b:c8:cc:9f:57:d2:7b: 1e:8d:e2:fb:25:84:f4:19:c8:fc:fa:06:c3:75:f2:e0:e6:8a: 55:4b:42:e9:71:8c:17:ad:b9:1b:ba:96:8a:f4:9a:9d:e2:9f: da:2d:86:4e:e1:e5:a4:df:3e:d7:ee:37:d5:ff:67:e9:27:02: 6e:58:ea:b6:f9:0e:56:ae:8f:5d:73:22:5b:0e:d7:b1:f5:af: 67:84:e3:16:f5:05:59:1d:d4:65:85:94:97:27:49:43:c3:c8: cd:6c:d8:d9:9c:8b:1c:1a:76:25:a3:2e:f0:77:0f:7e:9d:e7: b2:47:cf:28:cc:f0:33:7f:f9:8c:3e:88:ba:af:39:5d:a1:ef: b4:41:b1:42:67:33:39:bc:52:b4:87:18:b1:2f:50:20:c6:4b: 5e:51:e7:35:90:fd:c0:d0:23:0a:88:5c:ae:52:73:08:54:ec: d1:f5:24:44:b8:6e:bf:2e:75:44:8f:3b:ab:4e:3f:8a:fa:e2: e0:84:96:9d:e6:5f:4b:77:7b:de:c9:f5:3e:2a:fb:4a:d5:d4: 5e:85:5e:e1:d8:36:50:21:de:cb:5a:a9:67:7c:41:91:24:1f: 80:5b:7d:90:78:3d:ca:2d:ca:36:f0:92:df:ba:4f:a1:4d:bb: 4f:fd:89:87 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURn7JM2hjmnn8QTdpopNekTu+EuEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMDA0N1oX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAZjA3ZWMzYjY0MmE3OTdhYmE2YWU5 ZjgyNTQ0ZjkxZjJjMGIxYzZiMWJjZjdjOGY5NzJmMGNjNmQ5MjE4Y2IwNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZZEcHia8jH5bz3BeZjHU63Tp3ri oTFl4mVfqfzZAhJJ4KPA7Uf8VfvlRZvNwk/K0CHLeuw5UCmnRL7FvBAc5lUsM43e zm6YnTvbSgYqFz71j5QeUcknneKkB1ZO9kCjVOSA05cZQ62hqtfQ/s/sHfAlx53W uvbJgLWW5wJvOXpIaceeyRSgPhkxYEhshqPsQ2uoeefu2X4vf+TDRPDI3E6JKso5 NlixY0ZZuKCQm3hKNlzouma8ywN91T4FE4PpfOD2Twi6KeI3GM46W07tX6wDQO2u 0/uXDVBE+8LWhStg8jrnxTJPQzscGmbtqb9hGxhqo9vpmxhd4h/W/wq/MwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKP2Fl8wxXx6945HsAGj/yZ8zz/SMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MyMzJhM2M2LTMzNDItNDI1Mi1hNWU0LTgwNzU4MzA0YTk2MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7FAAMA0GCSqGSIb3DQEBCwUAA4IBAQBd/6hZRVTjII9WWivI zJ9X0nsejeL7JYT0Gcj8+gbDdfLg5opVS0LpcYwXrbkbupaK9Jqd4p/aLYZO4eWk 3z7X7jfV/2fpJwJuWOq2+Q5Wro9dcyJbDtex9a9nhOMW9QVZHdRlhZSXJ0lDw8jN bNjZnIscGnYloy7wdw9+neeyR88ozPAzf/mMPoi6rzldoe+0QbFCZzM5vFK0hxix L1AgxkteUec1kP3A0CMKiFyuUnMIVOzR9SREuG6/LnVEjzurTj+K+uLghJad5l9L d3veyfU+KvtK1dRehV7h2DZQId7LWqlnfEGRJB+AW32QeD3KLco28JLfuk+hTbtP /YmH -----END CERTIFICATE-----Generated at Sun Mar 1 22:22:47 2026 by rpki-client