$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa File: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (raw, json) Hash identifier: xkM4EMj1nW0jd1U+wxjkYr8i5dZqCvgIU9sDt8QBn+o= Subject key identifier: AA:E9:B0:A7:91:A3:6A:A0:8C:25:02:F9:BD:A2:23:53:18:D2:F2:8B Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 068FCA149F531B7937F47ADCAA173B40B79F5DC1 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa Signing time: Wed 25 Feb 2026 00:00:25 +0000 ROA not before: Wed 25 Feb 2026 00:00:25 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8f:ca:14:9f:53:1b:79:37:f4:7a:dc:aa:17:3b:40:b7:9f:5d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Feb 25 00:00:25 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=c8807930eaf91a6b4a87dc337f2eca6b745d9057a4d5cdf6ab9a5f5e80d0b734, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:23:14:93:c9:05:08:81:00:11:a2:8c:63: 5a:05:4f:69:77:f7:dc:1e:5f:83:8a:1f:42:6c:44: e7:bf:86:de:4f:61:0d:da:a1:79:dc:11:a7:33:92: 41:d5:3e:6e:d3:f4:29:09:59:9e:8e:37:9b:b2:d7: 00:8e:4e:e5:e0:c4:f0:d2:46:dd:3c:d2:21:fa:5f: 6b:ad:9a:cb:24:d7:2b:b4:79:1b:bf:d2:cc:78:4c: aa:35:2e:fe:a2:b6:09:6a:0a:26:d5:68:33:e4:da: 5b:d9:3d:19:12:d7:c7:00:c1:45:ae:cb:38:cc:97: 62:27:66:a5:51:5c:ff:03:14:00:c7:5a:56:a0:53: c2:74:92:a4:b6:fc:51:df:80:c5:36:56:0f:b9:ec: 75:3e:15:90:b5:17:2b:0f:fe:51:b8:03:b1:a6:23: 8b:16:f5:9d:77:a2:78:7e:82:43:93:43:64:22:b7: 3d:2d:88:93:3e:ea:bd:38:69:f1:08:61:87:70:9c: 9a:dd:53:b1:a9:49:13:3f:8b:0e:a0:16:ed:cf:d6: cb:ec:d5:8d:03:77:db:6a:62:38:89:93:65:96:62: f5:5a:ba:ca:12:93:ec:7c:4f:98:d2:40:81:f1:b3: dd:f6:01:0d:8c:d9:be:92:34:30:31:5c:5a:5b:f6: 4d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E9:B0:A7:91:A3:6A:A0:8C:25:02:F9:BD:A2:23:53:18:D2:F2:8B X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6700::/48 Signature Algorithm: sha256WithRSAEncryption a3:d4:43:33:a7:e0:70:47:d0:df:36:15:8a:e0:f5:c8:61:2f: 0b:ff:e5:1c:f5:05:3e:f7:e9:06:5c:95:36:e7:26:25:5c:f2: 46:a3:ad:33:ef:c9:eb:1f:34:cf:76:28:10:0d:0c:e8:7b:ad: 27:eb:ab:35:e8:56:49:52:2c:23:0a:4b:ff:b4:6a:a5:31:ff: 4c:ff:b2:1a:6d:fe:51:30:53:97:0b:3b:38:a0:f7:3f:90:63: 9c:b6:2d:e3:a3:06:16:ea:8e:2b:d8:41:68:54:13:cc:1e:c4: 9a:ac:81:0b:4f:07:6e:a2:14:6f:2b:f2:d5:f5:b3:a1:c5:c5: 68:a7:00:ed:ba:eb:ca:17:c1:f0:d5:37:40:9c:40:63:cc:ff: d0:ed:fa:90:c1:5a:bf:5b:73:18:73:5c:07:ca:8f:6f:05:9e: f4:a0:8b:91:54:ee:2c:e0:52:f3:1e:0b:dd:b5:f9:a1:f9:b9: 8f:9a:a5:0a:56:46:f7:eb:ee:fd:e9:76:c8:d7:ac:46:1e:ed: 5b:23:b6:9e:1d:22:7d:83:2c:67:cd:cb:65:df:94:cf:28:31: af:cb:db:27:e7:55:f3:34:7a:da:fd:84:6a:ac:92:57:ef:51: 53:a0:03:ed:7d:51:bd:d4:7a:f2:9a:11:88:56:0f:93:20:a8: 8e:a0:6e:24 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBo/KFJ9TG3k39Hrcqhc7QLefXcEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDIyNTAwMDAyNVoX DTI2MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYzg4MDc5MzBlYWY5MWE2YjRhODdk YzMzN2YyZWNhNmI3NDVkOTA1N2E0ZDVjZGY2YWI5YTVmNWU4MGQwYjczNDEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNgjFJPJBQiBABGijGNaBU9pd/fc Hl+Dih9CbETnv4beT2EN2qF53BGnM5JB1T5u0/QpCVmejjebstcAjk7l4MTw0kbd PNIh+l9rrZrLJNcrtHkbv9LMeEyqNS7+orYJagom1Wgz5Npb2T0ZEtfHAMFFrss4 zJdiJ2alUVz/AxQAx1pWoFPCdJKktvxR34DFNlYPuex1PhWQtRcrD/5RuAOxpiOL FvWdd6J4foJDk0NkIrc9LYiTPuq9OGnxCGGHcJya3VOxqUkTP4sOoBbtz9bL7NWN A3fbamI4iZNllmL1WrrKEpPsfE+Y0kCB8bPd9gENjNm+kjQwMVxaW/ZNMQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKrpsKeRo2qgjCUC+b2iI1MY0vKLMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 L2MxNTY0NjU5LWYzYWEtNDAyMS1hN2E1LThmNGIxYzJjNDk2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJABnAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCj1EMzp+BwR9DfNhWK 4PXIYS8L/+Uc9QU+9+kGXJU25yYlXPJGo60z78nrHzTPdigQDQzoe60n66s16FZJ UiwjCkv/tGqlMf9M/7Iabf5RMFOXCzs4oPc/kGOcti3jowYW6o4r2EFoVBPMHsSa rIELTwduohRvK/LV9bOhxcVopwDtuuvKF8Hw1TdAnEBjzP/Q7fqQwVq/W3MYc1wH yo9vBZ70oIuRVO4s4FLzHgvdtfmh+bmPmqUKVkb36+796XbI16xGHu1bI7aeHSJ9 gyxnzctl35TPKDGvy9sn51XzNHra/YRqrJJX71FToAPtfVG91HrymhGIVg+TIKiO oG4k -----END CERTIFICATE-----Generated at Sun Mar 1 22:09:14 2026 by rpki-client