$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dca0f327-3d17-47b3-9e0f-44a764e2e72d.roa File: dca0f327-3d17-47b3-9e0f-44a764e2e72d.roa (raw, json) Hash identifier: PFCQQjp1G4Diha1KXsRI8LGeSxTobtAk3Db0lNuol9A= Subject key identifier: A9:7A:9F:74:E0:CE:8B:F4:2C:67:00:7D:F0:33:7B:8C:59:D3:FB:97 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C49A718977B1C4AA01955476DFDCDD309ADBD1D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dca0f327-3d17-47b3-9e0f-44a764e2e72d.roa Signing time: Fri 20 Feb 2026 00:20:49 +0000 ROA not before: Fri 20 Feb 2026 00:20:49 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:a0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:49:a7:18:97:7b:1c:4a:a0:19:55:47:6d:fd:cd:d3:09:ad:bd:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:20:49 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=687c9738d1ecec2bbe9aadf4d84e53861119e383695b5ee32064f81a228b0611, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2c:84:84:b5:ac:43:16:19:7a:34:b9:ad:e3: 12:e6:35:6b:22:57:8e:27:21:8b:13:7b:f8:53:47: 6b:bd:5d:54:0b:82:dc:d4:bf:dd:c8:ac:a8:92:37: 31:b3:ec:d3:e6:b2:75:96:58:2e:ef:65:2c:9c:cf: 5d:3c:93:70:69:8b:4d:18:e3:2e:47:3b:dc:2a:dd: 98:76:13:2f:d8:8f:2f:48:93:72:cf:66:3f:f5:9c: c2:52:98:18:7e:d7:1a:52:8f:45:44:61:02:14:6f: 91:89:bd:c4:20:75:9c:f1:05:59:fd:39:cd:e8:4a: be:69:71:03:01:b9:7c:dc:68:2e:02:23:93:fa:d3: 94:71:76:ca:60:39:a9:d7:91:90:02:86:14:4e:f8: 96:2f:51:cf:a3:98:11:ff:e8:c6:37:05:12:f6:d4: 9f:f4:db:8d:d2:19:74:55:16:b4:f0:79:fc:88:a0: d9:99:8c:bd:aa:61:eb:19:57:76:4a:69:07:93:0d: 9f:9a:04:95:15:16:cb:d1:0f:10:1e:5b:10:48:e8: 32:0b:ae:40:e8:f8:35:b6:da:96:41:f4:19:30:1b: 88:a3:7f:98:a5:73:50:c7:d6:03:d4:b9:54:aa:4d: cb:75:cc:85:41:6c:42:13:03:e4:d7:c3:ae:ce:54: b6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7A:9F:74:E0:CE:8B:F4:2C:67:00:7D:F0:33:7B:8C:59:D3:FB:97 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dca0f327-3d17-47b3-9e0f-44a764e2e72d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:a0c0::/48 Signature Algorithm: sha256WithRSAEncryption 3f:a3:ed:c1:bb:d6:67:f5:e5:59:ce:86:a8:e1:1f:26:4f:05: a3:aa:19:7f:b2:83:65:4b:bf:03:5e:12:24:6b:48:d6:67:20: 8e:14:15:c1:b0:a3:50:fe:87:5b:f8:ee:8b:f5:73:1b:19:38: 85:38:c5:20:65:7f:ed:8a:1a:40:27:54:a2:e8:88:21:56:70: 0d:4a:16:0b:ac:ce:00:97:16:42:0b:50:98:4e:f5:3b:85:e3: 38:48:e6:04:74:80:50:43:a0:53:c1:c8:00:fa:ab:4d:13:9e: 21:6d:d5:1b:09:e5:d0:cf:3e:23:11:52:2c:5c:06:31:75:2e: 79:ed:29:1a:bd:47:a6:27:ef:e4:a5:dc:df:fe:08:3b:6c:a3: d6:9a:7d:83:fe:86:7a:93:e1:c4:7f:20:38:d7:88:b5:1f:ad: b5:ca:87:a3:05:62:c6:ea:58:9a:ee:fd:79:dc:34:98:a1:16: 82:97:3b:93:a7:01:46:8c:79:cb:a7:69:82:e2:45:1d:18:3c: 6c:9e:00:40:74:73:38:d4:3d:75:dd:dd:6e:88:f0:b3:fa:bb: be:05:77:bb:62:7a:92:10:7f:46:f7:44:a2:04:d7:9f:45:df: 4a:2b:0f:f6:86:38:a1:dc:58:7a:7c:6a:dc:33:6f:0e:f1:c4: 8d:7b:ba:62 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPEmnGJd7HEqgGVVHbf3N0wmtvR0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMjA0OVoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNANjg3Yzk3MzhkMWVjZWMyYmJlOWFh ZGY0ZDg0ZTUzODYxMTE5ZTM4MzY5NWI1ZWUzMjA2NGY4MWEyMjhiMDYxMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiyEhLWsQxYZejS5reMS5jVrIleO JyGLE3v4U0drvV1UC4Lc1L/dyKyokjcxs+zT5rJ1llgu72UsnM9dPJNwaYtNGOMu RzvcKt2YdhMv2I8vSJNyz2Y/9ZzCUpgYftcaUo9FRGECFG+Rib3EIHWc8QVZ/TnN 6Eq+aXEDAbl83GguAiOT+tOUcXbKYDmp15GQAoYUTviWL1HPo5gR/+jGNwUS9tSf 9NuN0hl0VRa08Hn8iKDZmYy9qmHrGVd2SmkHkw2fmgSVFRbL0Q8QHlsQSOgyC65A 6Pg1ttqWQfQZMBuIo3+YpXNQx9YD1LlUqk3LdcyFQWxCEwPk18OuzlS2ywIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKl6n3Tgzov0LGcAffAze4xZ0/uXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RjYTBmMzI3LTNkMTctNDdiMy05ZTBmLTQ0YTc2NGUyZTcyZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/6DAMA0GCSqGSIb3DQEBCwUAA4IBAQA/o+3Bu9Zn9eVZzoao 4R8mTwWjqhl/soNlS78DXhIka0jWZyCOFBXBsKNQ/odb+O6L9XMbGTiFOMUgZX/t ihpAJ1Si6IghVnANShYLrM4AlxZCC1CYTvU7heM4SOYEdIBQQ6BTwcgA+qtNE54h bdUbCeXQzz4jEVIsXAYxdS557SkavUemJ+/kpdzf/gg7bKPWmn2D/oZ6k+HEfyA4 14i1H621yoejBWLG6lia7v153DSYoRaClzuTpwFGjHnLp2mC4kUdGDxsngBAdHM4 1D113d1uiPCz+ru+BXe7YnqSEH9G90SiBNefRd9KKw/2hjih3Fh6fGrcM28O8cSN e7pi -----END CERTIFICATE-----Generated at Sun Mar 1 21:56:37 2026 by rpki-client