$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd0ac6ba-e775-4f86-853e-f467879f4e6c.roa File: fd0ac6ba-e775-4f86-853e-f467879f4e6c.roa (raw, json) Hash identifier: rGUNUf09wgggo9fQHmX7nDPfelvallu8P9UYG1/ZqJM= Subject key identifier: 00:63:3E:4E:8C:D5:CA:44:51:8C:45:68:49:F6:BA:10:8A:B6:68:5F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3E944BEF3EEB6AD08DEBFEA5C5C766F556EAB0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd0ac6ba-e775-4f86-853e-f467879f4e6c.roa Signing time: Wed 11 Feb 2026 00:10:30 +0000 ROA not before: Wed 11 Feb 2026 00:10:30 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:94:4b:ef:3e:eb:6a:d0:8d:eb:fe:a5:c5:c7:66:f5:56:ea:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:10:30 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=2c269437aed668fd648b2bc68ea68c83896508d83593d142437da79bdd962dc3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:3e:e5:b0:4f:3c:44:71:59:61:59:e4:3e: c4:5e:59:1e:7d:b8:05:7a:72:8f:f0:98:1b:cf:98: a1:0e:dc:1a:8d:63:8b:5e:bb:a4:95:43:d2:16:8a: 4c:82:f4:20:42:aa:82:90:eb:2d:ca:70:57:d7:6f: 69:05:c2:9c:82:93:a4:76:87:70:f2:ec:fa:55:f8: e9:22:93:51:b8:a4:17:8c:eb:0d:d8:82:22:2c:73: 3b:50:53:ae:92:4f:48:be:dd:65:0c:3f:88:7d:98: 8e:34:2e:d8:33:57:88:4d:53:ce:23:e8:2f:e9:ab: 15:bf:88:2c:e1:08:3f:18:77:8c:52:a8:7a:ff:af: e6:40:66:15:0f:d4:df:c9:41:3d:ca:47:12:e4:5b: 77:1a:c8:a0:d8:aa:99:62:d6:70:bc:ec:b4:09:81: 64:88:69:b7:87:92:cc:9e:c0:61:aa:7f:b9:ec:27: 48:26:09:c1:3f:b1:60:c1:0a:55:f0:86:28:c2:38: 16:e4:37:ed:b0:73:3e:a5:5a:b1:cd:e3:0b:b6:ba: 39:d6:04:b3:db:2c:59:cd:a4:7b:2e:69:ca:2c:67: 96:c9:d0:bd:fc:77:49:dc:f3:05:66:a6:06:54:74: 10:d3:27:3c:87:60:80:18:9d:08:8f:4d:da:38:1b: 75:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:63:3E:4E:8C:D5:CA:44:51:8C:45:68:49:F6:BA:10:8A:B6:68:5F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd0ac6ba-e775-4f86-853e-f467879f4e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:9000::/40 Signature Algorithm: sha256WithRSAEncryption 0d:21:6c:3c:c6:81:0c:8d:76:33:c7:51:a5:a0:b1:41:c2:96: 87:88:a6:03:3d:34:c5:02:da:b9:43:6e:e5:50:6d:ab:0b:b7: 8a:db:6d:49:63:74:56:cc:4e:76:9e:08:38:1c:78:6d:4d:46: d4:a7:a4:bb:87:40:86:e6:36:67:c1:0d:f2:ad:00:7b:f1:a8: f5:8c:3d:69:0e:c1:da:64:24:dd:98:79:6d:7d:06:aa:92:47: 94:82:e5:22:da:d9:a9:3f:fe:73:58:ff:f2:17:23:4c:b7:4e: 5d:16:ff:4b:8a:70:56:21:61:ce:6e:db:1b:7b:c6:51:af:ad: 15:cc:03:8c:1f:43:58:fe:ed:6b:2e:7d:a3:10:f4:e1:6a:5a: 68:b1:8a:af:0c:95:99:25:5e:cb:ef:35:0d:ce:72:dc:3b:ad: c6:3a:64:90:b1:72:60:4a:b4:e5:b6:34:af:70:89:9a:95:b9: d7:94:3c:14:57:f7:7b:54:75:76:20:8e:72:50:0d:9b:90:a8: 54:38:72:4a:9e:6f:8c:92:53:24:81:66:79:e2:fc:3b:33:ec: 72:0a:88:80:3f:46:60:f4:84:b2:2f:2d:1a:27:88:f3:a2:6c: f2:5d:83:22:8c:a9:a9:8f:5b:17:1a:d9:86:e4:55:97:03:3e: 86:0d:c8:d6 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgITPpRL7z7ratCN6/6lxcdm9VbqsDANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjYwMjExMDAxMDMwWhcN MjYwNTEyMjM1OTU5WjB6MUkwRwYDVQQFE0AyYzI2OTQzN2FlZDY2OGZkNjQ4YjJi YzY4ZWE2OGM4Mzg5NjUwOGQ4MzU5M2QxNDI0MzdkYTc5YmRkOTYyZGMzMS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvWD7lsE88RHFZYVnkPsReWR59uAV6 co/wmBvPmKEO3BqNY4teu6SVQ9IWikyC9CBCqoKQ6y3KcFfXb2kFwpyCk6R2h3Dy 7PpV+Okik1G4pBeM6w3YgiIscztQU66ST0i+3WUMP4h9mI40LtgzV4hNU84j6C/p qxW/iCzhCD8Yd4xSqHr/r+ZAZhUP1N/JQT3KRxLkW3cayKDYqpli1nC87LQJgWSI abeHksyewGGqf7nsJ0gmCcE/sWDBClXwhijCOBbkN+2wcz6lWrHN4wu2ujnWBLPb LFnNpHsuacosZ5bJ0L38d0nc8wVmpgZUdBDTJzyHYIAYnQiPTdo4G3WdAgMBAAGj ggJKMIICRjAdBgNVHQ4EFgQUAGM+TozVykRRjEVoSfa6EIq2aF8wHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv ZmQwYWM2YmEtZTc3NS00Zjg2LTg1M2UtZjQ2Nzg3OWY0ZTZjLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkBtq4kDANBgkqhkiG9w0BAQsFAAOCAQEADSFsPMaBDI12M8dRpaCx QcKWh4imAz00xQLauUNu5VBtqwu3itttSWN0VsxOdp4IOBx4bU1G1Keku4dAhuY2 Z8EN8q0Ae/Go9Yw9aQ7B2mQk3Zh5bX0GqpJHlILlItrZqT/+c1j/8hcjTLdOXRb/ S4pwViFhzm7bG3vGUa+tFcwDjB9DWP7tay59oxD04WpaaLGKrwyVmSVey+81Dc5y 3DutxjpkkLFyYEq05bY0r3CJmpW515Q8FFf3e1R1diCOclANm5CoVDhySp5vjJJT JIFmeeL8OzPscgqIgD9GYPSEsi8tGieI86Js8l2DIoypqY9bFxrZhuRVlwM+hg3I 1g== -----END CERTIFICATE-----Generated at Sun Mar 1 23:47:09 2026 by rpki-client