$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/daef484d-11aa-4bc3-89ae-50742593b34c.roa File: daef484d-11aa-4bc3-89ae-50742593b34c.roa (raw, json) Hash identifier: j3NaxpX1XoUJLUfUqdRZ6LZSDLNDlLUyxuFn+H9LoO8= Subject key identifier: E2:E0:99:04:34:8C:6E:60:C4:E0:FD:40:F8:0D:25:6F:AE:5D:F1:22 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7497E5FFC97AE12D955A5D53DA0B5C41DEC671B5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/daef484d-11aa-4bc3-89ae-50742593b34c.roa Signing time: Fri 20 Feb 2026 00:00:11 +0000 ROA not before: Fri 20 Feb 2026 00:00:11 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:97:e5:ff:c9:7a:e1:2d:95:5a:5d:53:da:0b:5c:41:de:c6:71:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:00:11 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=ab1e5c7340b3b559bd79bcecd22ece107d49ca33ce3a1f57b1d9c71e6b4a1415, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fd:6a:9f:6a:0e:68:bd:9c:73:4d:85:72:07: 84:7b:31:ad:9b:de:c1:94:d7:32:10:b4:7c:e2:70: 4d:2e:d2:5d:36:1f:3b:7a:ae:b7:89:60:77:38:94: 54:6d:21:b0:80:a8:a8:4b:52:d3:fc:da:6a:df:05: 04:28:df:02:52:80:2a:6e:56:44:0f:3c:52:8f:bc: b9:4f:5e:73:3f:19:48:c2:78:02:71:3f:3a:18:07: 11:58:ad:c9:bf:1a:e5:81:99:08:76:89:28:7d:7f: 7e:cf:10:b8:35:3c:02:db:61:91:57:b6:4d:dc:da: a0:4c:43:ba:47:cd:3e:90:e3:b8:8b:67:90:26:95: 32:6f:25:b7:66:3b:bc:18:66:6a:06:b0:83:63:54: 6d:50:59:e8:de:28:1f:54:57:05:ad:3b:14:53:90: 34:d9:9f:2c:a0:3d:39:45:ad:2b:90:88:93:4e:88: 06:2a:8e:d9:ce:b5:d5:28:d8:0b:57:94:d2:35:aa: 46:a2:41:83:05:13:2f:f5:d1:3d:87:a4:07:2b:1c: 4d:fe:35:c3:36:af:cb:98:91:80:2d:f2:50:e5:fd: fa:6a:9e:20:a9:6f:7d:7c:9e:8f:82:1f:a9:c1:6c: 75:a4:98:49:eb:cd:33:2f:51:09:92:28:a4:41:01: 3e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E0:99:04:34:8C:6E:60:C4:E0:FD:40:F8:0D:25:6F:AE:5D:F1:22 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/daef484d-11aa-4bc3-89ae-50742593b34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4800::/40 Signature Algorithm: sha256WithRSAEncryption 10:44:88:69:21:34:98:e0:96:dd:2a:7d:6c:04:e1:ff:8b:d8: ff:fa:81:cb:3d:5e:f7:e8:23:4d:6a:6e:77:1f:d4:8d:84:b7: 62:ff:f8:8a:1b:40:41:b4:50:3c:57:ff:b1:a2:a6:98:a4:66: 4d:33:8c:12:15:24:3d:eb:3c:67:ef:7d:ba:82:5c:d2:04:75: cb:f3:93:f6:99:89:8e:48:b1:cf:b1:35:6b:58:38:f1:40:8c: d5:b4:f3:c9:fb:8b:b8:35:43:0b:9f:c1:c0:7e:06:ec:b3:3f: b1:21:f3:c8:d9:6c:20:fe:79:ae:6f:01:e6:e9:29:86:75:e8: c4:ea:66:63:89:dc:2e:52:44:09:dc:e9:60:34:06:38:32:0b: fa:a0:33:1d:be:c3:a6:d9:fb:34:49:39:89:ef:b5:f4:13:e8: 86:cc:39:ce:24:30:34:d4:c2:12:40:63:e5:62:f3:9c:d8:0b: 37:35:b6:85:cf:6a:2a:80:a6:bc:8f:50:ee:2f:58:74:0f:91: 62:0b:e5:88:55:c9:20:85:a3:f5:ce:95:38:99:31:e9:d1:8d: 28:34:d7:bb:4e:21:0f:16:3b:a3:33:db:9d:c4:6b:71:17:60: 83:80:c5:1e:b2:38:11:3a:3b:77:a9:12:23:81:cb:21:d0:b8: 38:fc:75:bc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdJfl/8l64S2VWl1T2gtcQd7GcbUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMDAxMVoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAYWIxZTVjNzM0MGIzYjU1OWJkNzli Y2VjZDIyZWNlMTA3ZDQ5Y2EzM2NlM2ExZjU3YjFkOWM3MWU2YjRhMTQxNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP1qn2oOaL2cc02FcgeEezGtm97B lNcyELR84nBNLtJdNh87eq63iWB3OJRUbSGwgKioS1LT/Npq3wUEKN8CUoAqblZE DzxSj7y5T15zPxlIwngCcT86GAcRWK3JvxrlgZkIdokofX9+zxC4NTwC22GRV7ZN 3NqgTEO6R80+kOO4i2eQJpUybyW3Zju8GGZqBrCDY1RtUFno3igfVFcFrTsUU5A0 2Z8soD05Ra0rkIiTTogGKo7ZzrXVKNgLV5TSNapGokGDBRMv9dE9h6QHKxxN/jXD Nq/LmJGALfJQ5f36ap4gqW99fJ6Pgh+pwWx1pJhJ680zL1EJkiikQQE+MwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOLgmQQ0jG5gxOD9QPgNJW+uXfEiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RhZWY0ODRkLTExYWEtNGJjMy04OWFlLTUwNzQyNTkzYjM0Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYUgwDQYJKoZIhvcNAQELBQADggEBABBEiGkhNJjglt0qfWwE 4f+L2P/6gcs9XvfoI01qbncf1I2Et2L/+IobQEG0UDxX/7GippikZk0zjBIVJD3r PGfvfbqCXNIEdcvzk/aZiY5Isc+xNWtYOPFAjNW088n7i7g1QwufwcB+BuyzP7Eh 88jZbCD+ea5vAebpKYZ16MTqZmOJ3C5SRAnc6WA0BjgyC/qgMx2+w6bZ+zRJOYnv tfQT6IbMOc4kMDTUwhJAY+Vi85zYCzc1toXPaiqApryPUO4vWHQPkWIL5YhVySCF o/XOlTiZMenRjSg017tOIQ8WO6Mz253Ea3EXYIOAxR6yOBE6O3epEiOByyHQuDj8 dbw= -----END CERTIFICATE-----Generated at Mon Mar 2 05:16:13 2026 by rpki-client