$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32a8804a-cd62-459c-9e3e-b31c5f2e004d.roa File: 32a8804a-cd62-459c-9e3e-b31c5f2e004d.roa (raw, json) Hash identifier: J293yCDPXyzY58isayGkE7KL3IX7QTqtUS9JHSCsVhU= Subject key identifier: 13:6B:EA:56:68:B8:3C:A6:F2:FE:1E:E2:9E:16:D0:B3:D8:40:B7:A5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 22916B70189494FCB891A9BEC8176C2004006FFA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32a8804a-cd62-459c-9e3e-b31c5f2e004d.roa Signing time: Wed 11 Feb 2026 00:20:08 +0000 ROA not before: Wed 11 Feb 2026 00:20:08 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 00:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:91:6b:70:18:94:94:fc:b8:91:a9:be:c8:17:6c:20:04:00:6f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:20:08 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=7b6788a5abf864766e5bd99bbd7b1f63cf1b9ab0022a73022eb38d231eb66739, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:34:2b:ae:8a:9c:52:d9:34:21:7a:a5:e5: e7:13:76:e6:93:ca:5f:ae:80:56:72:6e:fa:d1:af: 0f:cf:4b:5f:7a:de:65:ad:a3:cd:36:d1:3e:8a:fc: 99:59:95:08:62:82:9c:99:83:ab:da:2a:39:85:c3: 02:38:4b:5b:46:16:6f:02:9c:de:88:a4:2b:dc:e3: 7f:78:d8:25:a6:4b:96:40:a0:96:cb:f7:01:13:da: cb:ab:5d:58:98:a1:35:7a:65:6c:1e:fd:77:b6:67: 5c:5e:ca:04:fc:dc:ed:6f:42:2f:13:21:d2:36:b5: b9:cc:70:d4:46:b6:44:0c:8c:5b:b7:63:8e:4f:5c: be:a6:67:91:6e:88:f5:7c:30:4d:32:8d:fc:6b:ac: 3b:03:c9:d2:fc:9a:6c:10:40:64:e8:b1:19:5c:20: ce:b9:2f:71:89:cd:56:2b:2e:83:60:db:a5:ed:dc: a5:27:7c:73:7f:3e:b8:a1:26:12:a6:5d:4c:c6:8d: 69:5e:bd:f0:63:46:c3:d3:7c:18:8c:f5:d9:36:0c: 82:e4:8f:e1:92:75:56:20:2c:95:9a:79:d3:70:d1: b1:13:ee:f2:d2:58:f5:ce:c4:7a:90:48:75:c0:36: a7:e0:51:83:94:4b:48:13:49:21:2f:48:6f:b7:fa: 0e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6B:EA:56:68:B8:3C:A6:F2:FE:1E:E2:9E:16:D0:B3:D8:40:B7:A5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32a8804a-cd62-459c-9e3e-b31c5f2e004d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:c040::/48 Signature Algorithm: sha256WithRSAEncryption 53:77:fa:d3:b9:29:e8:58:a7:f5:16:43:a9:c3:c3:ee:f4:3f: 44:b8:7a:c3:11:37:77:ca:ba:31:3a:87:28:e8:2c:17:26:f3: 08:70:7a:5f:93:e7:d8:df:fc:7b:ae:fa:58:dd:73:81:59:4c: de:51:15:bc:c9:bd:70:bb:64:d6:94:ed:d1:ce:d0:7c:2c:70: 21:6e:df:82:1d:bd:10:0d:ad:fc:89:bb:bd:4a:7b:48:de:9e: c0:7a:49:30:56:ef:ba:8c:f8:2a:8f:06:ea:0e:bb:09:98:e7: 87:2a:4e:6a:94:db:b0:54:1e:47:04:14:f2:00:7b:c5:92:4b: 00:16:85:fc:b9:80:03:e6:f0:84:25:c7:eb:b9:cc:b2:ea:43: b0:4e:88:4a:5f:ca:2c:dc:32:b6:08:19:a9:55:43:16:4e:2a: 8f:df:c9:1a:ca:60:4c:f8:f4:0f:20:e9:9b:39:58:92:5d:40: 73:12:0a:53:46:af:89:f5:09:5a:0d:92:6e:59:08:5d:b6:a3: 7d:f1:49:ba:7e:8e:68:22:b8:8a:c9:a1:e6:fd:55:d6:3f:52: 0e:ae:09:fe:61:b9:83:70:37:90:ca:e5:64:5b:68:aa:35:b7: a7:4f:c0:6d:0e:b2:4b:d6:44:05:ff:4e:18:c1:73:1a:27:ca: 03:8a:80:66 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIpFrcBiUlPy4kam+yBdsIAQAb/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMjAwOFoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAN2I2Nzg4YTVhYmY4NjQ3NjZlNWJk OTliYmQ3YjFmNjNjZjFiOWFiMDAyMmE3MzAyMmViMzhkMjMxZWI2NjczOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwM0K66KnFLZNCF6peXnE3bmk8pf roBWcm760a8Pz0tfet5lraPNNtE+ivyZWZUIYoKcmYOr2io5hcMCOEtbRhZvApze iKQr3ON/eNglpkuWQKCWy/cBE9rLq11YmKE1emVsHv13tmdcXsoE/Nztb0IvEyHS NrW5zHDURrZEDIxbt2OOT1y+pmeRboj1fDBNMo38a6w7A8nS/JpsEEBk6LEZXCDO uS9xic1WKy6DYNul7dylJ3xzfz64oSYSpl1Mxo1pXr3wY0bD03wYjPXZNgyC5I/h knVWICyVmnnTcNGxE+7y0lj1zsR6kEh1wDan4FGDlEtIE0khL0hvt/oOLQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBNr6lZouDym8v4e4p4W0LPYQLelMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMyYTg4MDRhLWNkNjItNDU5Yy05ZTNlLWIzMWM1ZjJlMDA0ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6sBAMA0GCSqGSIb3DQEBCwUAA4IBAQBTd/rTuSnoWKf1FkOp w8Pu9D9EuHrDETd3yroxOoco6CwXJvMIcHpfk+fY3/x7rvpY3XOBWUzeURW8yb1w u2TWlO3RztB8LHAhbt+CHb0QDa38ibu9SntI3p7AekkwVu+6jPgqjwbqDrsJmOeH Kk5qlNuwVB5HBBTyAHvFkksAFoX8uYAD5vCEJcfrucyy6kOwTohKX8os3DK2CBmp VUMWTiqP38kaymBM+PQPIOmbOViSXUBzEgpTRq+J9QlaDZJuWQhdtqN98Um6fo5o IriKyaHm/VXWP1IOrgn+YbmDcDeQyuVkW2iqNbenT8BtDrJL1kQF/04YwXMaJ8oD ioBm -----END CERTIFICATE-----Generated at Sat Feb 21 16:22:26 2026 by rpki-client