$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa File: c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa (raw, json) Hash identifier: +svzwdJKW+sgPPdfmlmkqQH+Aa/67INu4QnpMnRrflU= Subject key identifier: 87:5D:5E:29:D2:9F:98:9B:C5:57:5D:FD:20:D7:46:67:63:8D:B2:B4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A87F0FDE9E8EACA479CC0A7769886C4936D79ED Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa Signing time: Fri 20 Feb 2026 00:30:41 +0000 ROA not before: Fri 20 Feb 2026 00:30:41 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:87:f0:fd:e9:e8:ea:ca:47:9c:c0:a7:76:98:86:c4:93:6d:79:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:30:41 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=978529ec64a1d4999e45c59509fa3fa9f1c6c339d79ba1998b30a02b2b2cdbf2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6a:26:95:ae:8c:77:31:ba:66:ad:e3:d5:e2: 74:b3:7a:5c:48:3d:5d:3f:0c:a4:05:04:59:5b:45: 42:a9:1f:c4:6c:d5:0b:2e:86:c1:81:a4:88:55:a4: a1:13:01:f8:84:31:aa:50:e7:26:af:7d:f6:f1:3a: 4e:b6:42:2a:a5:bf:47:8b:51:25:b5:a6:9d:29:fe: c5:bc:80:51:47:73:b3:53:1c:1b:80:9c:7d:3c:01: 59:e7:e4:ad:50:c4:c5:9a:50:d5:ca:46:f4:82:91: 38:6b:8d:a0:1c:38:be:a8:d1:2d:4a:08:97:4f:a6: 3a:bc:4e:c7:69:aa:dc:b6:7a:91:56:68:e5:3f:41: 0f:ca:21:11:1f:c2:ec:49:f6:c1:ba:4d:68:64:0d: db:30:b7:cc:cf:2c:e5:c8:68:9f:88:5a:35:cc:bf: 51:59:b8:40:19:84:7a:c4:da:b0:63:72:a7:64:f7: 6a:ec:b0:e8:f1:ea:05:4d:38:e0:b9:82:f7:7c:6f: 48:27:00:7d:2e:28:93:f1:32:2a:e5:74:3a:70:6c: 36:5e:f0:b0:45:38:ee:d4:d0:06:21:b1:8d:a7:62: 42:40:e5:70:fd:85:17:97:93:61:c3:dc:71:85:3c: a9:27:dd:77:12:c3:ed:cf:24:c8:fb:34:6b:c3:77: 5c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5D:5E:29:D2:9F:98:9B:C5:57:5D:FD:20:D7:46:67:63:8D:B2:B4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:9080::/48 Signature Algorithm: sha256WithRSAEncryption 88:a0:68:67:27:30:7f:7d:f3:d7:79:46:74:f5:91:82:36:cd: 58:3e:2d:d5:57:d3:99:5c:ba:c9:09:10:09:c5:23:63:cf:98: 2d:f4:5a:dc:cf:38:f9:90:d8:25:3b:e8:e7:d5:c3:5e:ee:81: 7b:f1:5f:72:43:85:63:fb:4e:57:66:a9:4a:46:0b:42:a0:b9: ec:04:30:cc:ca:64:52:cf:71:54:9a:21:b4:38:6c:20:1c:b2: 2b:bd:1c:87:50:91:93:fb:58:aa:f8:3c:7b:d8:0f:9f:1d:44: 1a:89:85:1c:2e:c4:f0:b2:c7:0c:f2:a7:a2:a9:9f:0c:8f:30: 43:cf:4a:ed:5f:75:93:3d:a6:a3:33:fd:ce:01:c7:b7:f4:73: 22:73:29:3c:47:d4:97:d2:a2:cb:b9:aa:35:99:b9:4b:31:97: 8e:69:90:a2:0e:05:ba:4a:a2:44:2f:61:c1:79:0f:74:b9:ba: f2:8f:61:d8:58:a5:7f:c1:52:fc:a8:23:c5:e5:56:f5:73:12: b8:0a:12:10:8f:e8:77:50:0a:68:9a:aa:85:18:20:85:12:4c: fd:d3:68:5c:b0:28:f8:44:58:eb:93:c3:29:91:6f:da:dd:44: 53:8e:df:53:77:37:c5:af:2c:f2:fe:46:d8:97:8c:5e:55:4c: 3b:cd:b9:37 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCofw/eno6spHnMCndpiGxJNtee0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMzA0MVoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAOTc4NTI5ZWM2NGExZDQ5OTllNDVj NTk1MDlmYTNmYTlmMWM2YzMzOWQ3OWJhMTk5OGIzMGEwMmIyYjJjZGJmMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomomla6MdzG6Zq3j1eJ0s3pcSD1d PwykBQRZW0VCqR/EbNULLobBgaSIVaShEwH4hDGqUOcmr3328TpOtkIqpb9Hi1El taadKf7FvIBRR3OzUxwbgJx9PAFZ5+StUMTFmlDVykb0gpE4a42gHDi+qNEtSgiX T6Y6vE7HaarctnqRVmjlP0EPyiERH8LsSfbBuk1oZA3bMLfMzyzlyGifiFo1zL9R WbhAGYR6xNqwY3KnZPdq7LDo8eoFTTjguYL3fG9IJwB9LiiT8TIq5XQ6cGw2XvCw RTju1NAGIbGNp2JCQOVw/YUXl5Nhw9xxhTypJ913EsPtzyTI+zRrw3dc3wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIddXinSn5ibxVdd/SDXRmdjjbK0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M5MzYwODdkLWRmNDAtNGNhNC1hOGYyLTRiZjhmNmFjZWI2Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8pCAMA0GCSqGSIb3DQEBCwUAA4IBAQCIoGhnJzB/ffPXeUZ0 9ZGCNs1YPi3VV9OZXLrJCRAJxSNjz5gt9Frczzj5kNglO+jn1cNe7oF78V9yQ4Vj +05XZqlKRgtCoLnsBDDMymRSz3FUmiG0OGwgHLIrvRyHUJGT+1iq+Dx72A+fHUQa iYUcLsTwsscM8qeiqZ8MjzBDz0rtX3WTPaajM/3OAce39HMicyk8R9SX0qLLuao1 mblLMZeOaZCiDgW6SqJEL2HBeQ90ubryj2HYWKV/wVL8qCPF5Vb1cxK4ChIQj+h3 UApomqqFGCCFEkz902hcsCj4RFjrk8MpkW/a3URTjt9TdzfFryzy/kbYl4xeVUw7 zbk3 -----END CERTIFICATE-----Generated at Sun Mar 1 21:54:49 2026 by rpki-client