$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f0035674-15ff-434e-b4d2-44fc6010a1aa.roa File: f0035674-15ff-434e-b4d2-44fc6010a1aa.roa (raw, json) Hash identifier: WoeFOH70oCK6oX8vZgU34+yfgyzKHT1KhTnZsC9Y/6o= Subject key identifier: E5:41:D7:86:A2:7E:6F:6B:79:2A:4B:1E:C6:FC:85:98:8B:D4:B6:ED Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 076097CC44957B8D8CEFAC3F009AEF5D0A388BC5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f0035674-15ff-434e-b4d2-44fc6010a1aa.roa Signing time: Sun 22 Feb 2026 00:00:40 +0000 ROA not before: Sun 22 Feb 2026 00:00:40 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:60:97:cc:44:95:7b:8d:8c:ef:ac:3f:00:9a:ef:5d:0a:38:8b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:00:40 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=c492885cc5d0b626951e9e059481b97df4b40332a67e189b7edbe08191b0bc76, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:50:85:18:5c:e8:c5:04:91:f5:bf:03:36: 0f:74:01:0b:db:65:f8:1c:db:08:a4:18:11:76:b3: cc:82:5a:93:ae:2d:1b:e2:5d:96:9b:59:65:4a:05: ad:fa:ff:3e:ce:c0:3e:ca:0a:d3:af:b3:08:46:43: ef:c8:74:ca:e3:dd:0c:e2:93:ee:25:d2:3e:e6:fd: 76:51:f7:da:8d:fa:6f:7f:99:b8:97:29:28:37:ae: b5:87:92:fb:06:4d:7b:ce:2b:8e:4e:56:6b:b9:cb: 26:0d:65:74:53:aa:cb:93:55:7c:16:cd:c0:5f:e7: fa:8a:73:4a:97:4b:3d:26:50:82:33:e0:60:44:0e: b4:b8:d2:17:0d:08:28:d4:2b:02:c6:48:a3:e5:f3: fd:38:ad:01:b6:7a:e5:3f:ba:87:1f:e0:e1:fd:dc: fd:56:2e:be:a2:1d:b8:d7:5a:ea:2f:49:ff:ff:5b: a3:90:71:b3:2f:16:40:7c:c3:39:af:ff:a9:ea:e0: 21:dc:73:74:60:16:5d:fd:c8:03:59:fb:94:d5:6a: ea:7e:01:e9:fa:15:94:3d:af:d9:91:a8:58:72:3b: ad:77:dd:3b:a7:99:fb:67:76:13:46:6c:26:b4:79: d9:a1:bd:5c:34:8a:73:af:d2:ce:84:32:2d:8a:51: ec:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:41:D7:86:A2:7E:6F:6B:79:2A:4B:1E:C6:FC:85:98:8B:D4:B6:ED X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f0035674-15ff-434e-b4d2-44fc6010a1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:e000::/40 Signature Algorithm: sha256WithRSAEncryption bf:fb:a0:3c:89:b8:28:01:19:70:c7:8a:6f:9a:ef:a0:66:63: 7e:04:06:db:84:73:a6:52:d6:cd:ec:a2:b5:13:35:ff:d5:0f: f9:85:53:c3:41:39:88:3b:92:6d:e6:dc:df:b7:eb:32:88:7d: b1:76:10:a2:18:5a:7b:60:b7:8a:e9:a4:e6:97:ee:03:cf:20: 65:d3:ef:51:e9:0a:71:19:58:23:32:d5:22:4b:63:e4:d5:6a: ca:2f:11:83:c4:99:f4:c5:3b:b4:71:fe:b8:25:1b:f7:27:37: b2:71:73:9d:8b:8c:1a:32:3b:09:b5:b1:cf:6b:06:f5:45:a8: 64:27:a3:75:39:fb:e2:48:c0:39:11:4b:7a:94:eb:6e:35:89: d0:95:56:f1:aa:0c:f2:e3:d6:b2:68:e3:27:88:e7:08:ec:55: da:aa:1c:4f:e1:76:00:0e:44:a1:d3:01:8e:9f:c6:11:1a:b0: 89:3a:14:54:f0:e0:a6:94:e3:9e:16:66:02:81:e8:2a:72:e5: ad:16:68:7f:ac:d5:23:36:dc:08:d2:46:44:01:64:af:b2:d2: 29:58:a7:a5:49:28:98:ce:36:46:88:54:1a:36:8d:d8:d7:72: 75:60:dc:1c:5c:91:04:98:ab:d3:49:62:0b:7a:e7:29:c8:ab: 80:d0:50:c8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUB2CXzESVe42M76w/AJrvXQo4i8UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMDA0MFoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAYzQ5Mjg4NWNjNWQwYjYyNjk1MWU5 ZTA1OTQ4MWI5N2RmNGI0MDMzMmE2N2UxODliN2VkYmUwODE5MWIwYmM3NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwotQhRhc6MUEkfW/AzYPdAEL22X4 HNsIpBgRdrPMglqTri0b4l2Wm1llSgWt+v8+zsA+ygrTr7MIRkPvyHTK490M4pPu JdI+5v12Uffajfpvf5m4lykoN661h5L7Bk17ziuOTlZrucsmDWV0U6rLk1V8Fs3A X+f6inNKl0s9JlCCM+BgRA60uNIXDQgo1CsCxkij5fP9OK0BtnrlP7qHH+Dh/dz9 Vi6+oh2411rqL0n//1ujkHGzLxZAfMM5r/+p6uAh3HN0YBZd/cgDWfuU1WrqfgHp +hWUPa/ZkahYcjutd907p5n7Z3YTRmwmtHnZob1cNIpzr9LOhDItilHsLwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOVB14aifm9reSpLHsb8hZiL1LbtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YwMDM1Njc0LTE1ZmYtNDM0ZS1iNGQyLTQ0ZmM2MDEwYTFhYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaOAwDQYJKoZIhvcNAQELBQADggEBAL/7oDyJuCgBGXDHim+a 76BmY34EBtuEc6ZS1s3sorUTNf/VD/mFU8NBOYg7km3m3N+36zKIfbF2EKIYWntg t4rppOaX7gPPIGXT71HpCnEZWCMy1SJLY+TVasovEYPEmfTFO7Rx/rglG/cnN7Jx c52LjBoyOwm1sc9rBvVFqGQno3U5++JIwDkRS3qU6241idCVVvGqDPLj1rJo4yeI 5wjsVdqqHE/hdgAORKHTAY6fxhEasIk6FFTw4KaU454WZgKB6Cpy5a0WaH+s1SM2 3AjSRkQBZK+y0ilYp6VJKJjONkaIVBo2jdjXcnVg3BxckQSYq9NJYgt65ynIq4DQ UMg= -----END CERTIFICATE-----Generated at Mon Mar 2 05:22:23 2026 by rpki-client