$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e09950bd-07ca-4e5c-bd3d-a17fcc36729c.roa File: e09950bd-07ca-4e5c-bd3d-a17fcc36729c.roa (raw, json) Hash identifier: WxTYSZTzds/yFbzYB4nrEUDH6P5eY5l6KOPJm77opng= Subject key identifier: 37:67:26:A6:F6:AA:96:3E:64:2A:C4:6D:6C:F6:95:F1:74:11:75:7C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6CA66AC3292E9706D6303950CE8A3AAE4909A48B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e09950bd-07ca-4e5c-bd3d-a17fcc36729c.roa Signing time: Fri 20 Feb 2026 00:10:40 +0000 ROA not before: Fri 20 Feb 2026 00:10:40 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a6:6a:c3:29:2e:97:06:d6:30:39:50:ce:8a:3a:ae:49:09:a4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:10:40 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=3d363d64f2d2236a5a2bb0ff0a8314898c4b70764384c62e38a92b7a0f60b992, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:e5:2a:74:fd:e4:f8:f1:29:83:70:61:3d: 92:97:b5:d3:fc:6f:00:3c:d1:9f:aa:f3:f4:86:64: 8f:49:1d:4f:fd:ec:ce:4a:9b:a5:11:d3:4a:69:53: 5a:27:0d:6e:15:1d:8b:9c:03:dd:4c:a2:bb:dd:1b: 4f:09:70:55:cb:9a:42:c8:54:78:21:e0:72:da:24: 7b:f7:21:56:57:52:20:52:fe:07:80:89:de:63:e4: 5a:ab:f5:dc:d4:ff:1a:a4:db:b5:fe:a0:ed:04:7d: c0:f2:c9:1d:ed:da:b2:7b:16:63:9c:26:09:7f:fb: 3d:b2:60:f0:3c:b8:2a:36:ab:13:63:24:b8:08:24: d8:01:64:9a:63:5b:e2:63:5b:a4:76:b9:8c:79:c1: 45:85:5a:32:6c:3a:ae:e2:c0:08:07:3d:b5:39:54: c5:fc:39:7b:22:b2:fc:0a:25:2d:23:db:12:53:85: 83:58:99:e8:d0:cb:60:0d:1b:9b:83:8d:32:01:62: 0d:d6:2c:86:f8:c9:b6:46:d9:4f:3d:81:a3:90:65: f7:b0:c2:93:ff:aa:cc:09:b9:30:fc:4c:57:e4:67: ed:6f:0c:b2:b3:db:a3:72:0b:89:08:dd:b2:ec:88: a3:fb:ec:fe:9d:67:cd:83:36:4a:dc:cb:1d:1d:fd: d2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:67:26:A6:F6:AA:96:3E:64:2A:C4:6D:6C:F6:95:F1:74:11:75:7C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e09950bd-07ca-4e5c-bd3d-a17fcc36729c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption 0d:50:ef:6f:eb:0e:d1:e3:a4:e5:a8:84:6e:a1:58:1f:5d:ab: f3:7c:05:ca:96:57:e3:94:24:4e:64:f2:cc:a2:76:f4:e8:ad: 47:5d:08:9e:ab:a8:a0:dd:45:e2:7a:fd:69:1b:5d:7a:9e:a8: a5:24:4e:ae:b6:84:65:68:6f:9c:9b:52:cf:f9:ad:66:e7:d0: 6a:34:c9:06:00:64:55:bc:88:b5:bf:72:7e:6b:a2:ca:6e:31: 2c:97:6a:49:6a:11:1c:64:af:b1:5a:f2:73:30:6e:0e:00:4f: 6f:12:6b:13:e2:61:7b:a6:07:8e:2b:9f:24:cf:95:43:2c:f3: ad:56:9d:cc:bc:45:c6:5e:30:d2:15:c6:02:96:fd:9d:aa:0e: 82:d2:18:a9:d6:f5:d2:1c:f6:cb:81:62:61:8f:f2:59:e2:8b: ae:26:69:b9:0e:dd:bf:4a:4f:18:d8:b4:36:3f:de:40:18:fa: dd:e1:5d:09:aa:13:77:58:cf:9b:b1:7f:b7:d0:1a:18:0d:60: af:be:8e:23:08:ef:05:0a:1e:a6:83:f2:7b:f9:aa:3f:bc:d0: 9b:50:e9:82:3e:aa:75:c3:a2:1e:7f:b9:dc:56:62:11:dc:4a: 02:d3:67:72:07:06:84:d4:e4:97:fd:91:32:ac:4f:4e:1c:08: 02:71:90:a0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbKZqwykulwbWMDlQzoo6rkkJpIswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMTA0MFoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAM2QzNjNkNjRmMmQyMjM2YTVhMmJi MGZmMGE4MzE0ODk4YzRiNzA3NjQzODRjNjJlMzhhOTJiN2EwZjYwYjk5MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb3lKnT95PjxKYNwYT2Sl7XT/G8A PNGfqvP0hmSPSR1P/ezOSpulEdNKaVNaJw1uFR2LnAPdTKK73RtPCXBVy5pCyFR4 IeBy2iR79yFWV1IgUv4HgIneY+Raq/Xc1P8apNu1/qDtBH3A8skd7dqyexZjnCYJ f/s9smDwPLgqNqsTYyS4CCTYAWSaY1viY1ukdrmMecFFhVoybDqu4sAIBz21OVTF /Dl7IrL8CiUtI9sSU4WDWJno0MtgDRubg40yAWIN1iyG+Mm2RtlPPYGjkGX3sMKT /6rMCbkw/ExX5Gftbwyys9ujcguJCN2y7Iij++z+nWfNgzZK3MsdHf3SwwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDdnJqb2qpY+ZCrEbWz2lfF0EXV8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwOTk1MGJkLTA3Y2EtNGU1Yy1iZDNkLWExN2ZjYzM2NzI5Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYfDAMA0GCSqGSIb3DQEBCwUAA4IBAQANUO9v6w7R46TlqIRu oVgfXavzfAXKllfjlCROZPLMonb06K1HXQieq6ig3UXiev1pG116nqilJE6utoRl aG+cm1LP+a1m59BqNMkGAGRVvIi1v3J+a6LKbjEsl2pJahEcZK+xWvJzMG4OAE9v EmsT4mF7pgeOK58kz5VDLPOtVp3MvEXGXjDSFcYClv2dqg6C0hip1vXSHPbLgWJh j/JZ4ouuJmm5Dt2/Sk8Y2LQ2P95AGPrd4V0JqhN3WM+bsX+30BoYDWCvvo4jCO8F Ch6mg/J7+ao/vNCbUOmCPqp1w6Ief7ncVmIR3EoC02dyBwaE1OSX/ZEyrE9OHAgC cZCg -----END CERTIFICATE-----Generated at Sun Mar 1 21:46:12 2026 by rpki-client