$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f1524e00-a2d0-4f3b-b1e1-784f22c93f3b.roa File: f1524e00-a2d0-4f3b-b1e1-784f22c93f3b.roa (raw, json) Hash identifier: T8KXoKKGZaqkMu3O3GcUXCssVMWg6eP7gBjBLTGOn4Y= Subject key identifier: 96:2D:AB:32:9A:8F:9B:75:E1:9C:F2:25:A8:29:58:41:4E:FF:47:2F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F6725EC5B1ACC465E1B8B0EBB508F66690B3167 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f1524e00-a2d0-4f3b-b1e1-784f22c93f3b.roa Signing time: Wed 11 Feb 2026 00:10:49 +0000 ROA not before: Wed 11 Feb 2026 00:10:49 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 00:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:67:25:ec:5b:1a:cc:46:5e:1b:8b:0e:bb:50:8f:66:69:0b:31:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:10:49 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=80c0e231dd279ed9debc332c3ff09ade9eb9afe410555c60861bd208d9ed9738, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f1:5d:c8:d2:ba:4c:99:c7:9f:13:81:a0:01: 1c:05:94:18:f5:b0:34:ff:f8:e0:6f:8e:5f:f3:14: 78:bb:18:4e:70:be:a7:5e:01:5c:84:76:f6:bf:44: 3b:7b:cd:4b:9b:ff:de:b4:5f:71:ca:68:ac:0b:3c: 67:7f:97:35:47:b6:f1:b0:a0:18:84:13:7b:a5:91: 99:58:e8:dd:98:e7:0b:f9:85:74:19:93:9f:46:51: e9:15:52:68:37:0b:a9:d1:c5:c3:29:22:0b:1c:ef: ff:ad:fa:45:8e:25:7f:f5:76:50:02:6e:c5:cb:82: 49:09:55:ca:d3:7b:44:ac:50:94:85:82:68:22:2c: 27:ea:41:86:98:ac:79:fa:f7:99:7a:dc:cd:ea:cc: fa:f0:db:5b:de:3c:3c:4b:d7:8c:18:5a:08:7e:b8: 16:79:1d:79:f0:77:91:af:b9:18:ee:6c:17:d4:c5: d8:34:80:6f:40:76:50:af:83:30:c9:ce:27:09:d4: 3e:83:99:76:2f:3f:e2:c0:ca:c8:bc:f1:6e:de:51: ac:93:bc:22:4e:84:5f:23:19:03:56:0f:82:71:f3: fd:84:5d:c6:21:66:26:ae:90:1e:c7:ed:25:28:c8: ce:cd:63:a1:c3:23:b1:fc:01:90:88:79:78:b8:3c: 43:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2D:AB:32:9A:8F:9B:75:E1:9C:F2:25:A8:29:58:41:4E:FF:47:2F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f1524e00-a2d0-4f3b-b1e1-784f22c93f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:b040::/48 Signature Algorithm: sha256WithRSAEncryption 1b:0b:54:77:d6:d5:38:8b:1a:e4:6b:e6:b1:a5:b6:ab:f4:f4: 42:28:df:f0:24:83:d2:a9:ee:f9:c3:c9:58:98:de:ec:c1:93: 2b:a9:fe:90:66:2f:23:dd:56:90:56:63:df:c9:52:04:51:19: 56:02:3a:8f:7c:f6:1a:65:a4:03:f3:05:22:ec:f4:6d:d2:00: 4b:31:c8:c0:97:64:ec:e8:c0:be:78:0c:19:58:7f:d8:66:3b: af:f2:ec:61:5b:c5:87:7d:a2:7c:76:ec:c6:d2:b8:69:ac:f3: 81:69:5d:db:0d:ab:09:46:d8:41:83:ce:60:9f:b5:f2:b8:3d: 28:52:3a:95:37:9f:9f:23:9b:e8:25:1f:88:33:bf:fb:56:4e: 68:09:fe:d7:ff:dc:3d:2c:53:f5:e2:fd:33:fb:5d:54:07:b1: 8c:c5:03:16:16:2b:75:c5:9d:7d:b3:6d:17:32:e1:3a:18:e4: 45:dd:a2:37:c7:99:86:d1:ab:67:fe:0c:01:77:d7:d2:f5:ba: ab:69:43:7f:7e:c9:8e:82:9a:a8:94:72:f4:c2:0d:c1:73:6f: fe:83:c0:ce:ab:ce:b1:8f:d3:05:f5:01:82:68:6c:92:69:af: 2f:6e:48:aa:1a:4e:7e:b3:11:2e:52:ed:57:98:4e:b0:fb:e0: 50:5f:df:09 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUf2cl7FsazEZeG4sOu1CPZmkLMWcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMTA0OVoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAODBjMGUyMzFkZDI3OWVkOWRlYmMz MzJjM2ZmMDlhZGU5ZWI5YWZlNDEwNTU1YzYwODYxYmQyMDhkOWVkOTczODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/FdyNK6TJnHnxOBoAEcBZQY9bA0 //jgb45f8xR4uxhOcL6nXgFchHb2v0Q7e81Lm//etF9xymisCzxnf5c1R7bxsKAY hBN7pZGZWOjdmOcL+YV0GZOfRlHpFVJoNwup0cXDKSILHO//rfpFjiV/9XZQAm7F y4JJCVXK03tErFCUhYJoIiwn6kGGmKx5+veZetzN6sz68Ntb3jw8S9eMGFoIfrgW eR158HeRr7kY7mwX1MXYNIBvQHZQr4Mwyc4nCdQ+g5l2Lz/iwMrIvPFu3lGsk7wi ToRfIxkDVg+CcfP9hF3GIWYmrpAex+0lKMjOzWOhwyOx/AGQiHl4uDxDwQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJYtqzKaj5t14ZzyJagpWEFO/0cvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YxNTI0ZTAwLWEyZDAtNGYzYi1iMWUxLTc4NGYyMmM5M2YzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6rBAMA0GCSqGSIb3DQEBCwUAA4IBAQAbC1R31tU4ixrka+ax pbar9PRCKN/wJIPSqe75w8lYmN7swZMrqf6QZi8j3VaQVmPfyVIEURlWAjqPfPYa ZaQD8wUi7PRt0gBLMcjAl2Ts6MC+eAwZWH/YZjuv8uxhW8WHfaJ8duzG0rhprPOB aV3bDasJRthBg85gn7XyuD0oUjqVN5+fI5voJR+IM7/7Vk5oCf7X/9w9LFP14v0z +11UB7GMxQMWFit1xZ19s20XMuE6GORF3aI3x5mG0atn/gwBd9fS9bqraUN/fsmO gpqolHL0wg3Bc2/+g8DOq86xj9MF9QGCaGySaa8vbkiqGk5+sxEuUu1XmE6w++BQ X98J -----END CERTIFICATE-----Generated at Sat Feb 21 16:22:26 2026 by rpki-client