$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00971cda-f8a5-49a0-a1dc-2285c68a8e9f.roa File: 00971cda-f8a5-49a0-a1dc-2285c68a8e9f.roa (raw, json) Hash identifier: TgHWeVk2MuO8oy65VVlm8Xs+Mf5toPUx+MjaZ/kU1nA= Subject key identifier: 8D:4C:14:38:48:99:BB:7C:5D:B7:99:1B:E9:5E:F5:90:74:56:3D:72 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5FDF5CEAC88BF0240779BA9CBD711D17257365CD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00971cda-f8a5-49a0-a1dc-2285c68a8e9f.roa Signing time: Sun 22 Feb 2026 00:01:03 +0000 ROA not before: Sun 22 Feb 2026 00:01:03 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 43.200.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:df:5c:ea:c8:8b:f0:24:07:79:ba:9c:bd:71:1d:17:25:73:65:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:01:03 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=053dae8143c0623a97362b65e701a875e83e2094031ef90b979afc85c003205a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b6:e4:0f:3d:f8:b2:8c:d2:48:72:b9:b3:71: 34:a8:3a:7a:31:11:22:e2:e0:02:3b:6a:3c:d8:4a: ee:89:fb:c2:8c:e6:ec:cb:22:29:b9:3a:94:30:5d: 16:75:42:a6:90:57:3e:db:a1:0d:df:f0:3c:9a:b7: b3:5c:85:03:6c:83:d9:fc:4a:a9:44:7d:e2:6e:64: 1b:98:82:f8:bb:60:86:ef:30:98:3d:3a:98:38:73: b0:6e:17:72:13:81:4e:37:a5:58:2f:33:db:bc:82: 99:31:6d:0c:53:86:e6:1d:b0:31:eb:a5:6f:79:76: 7a:e9:f6:23:30:33:72:88:be:e4:96:15:a0:51:b0: 02:9e:79:29:85:4a:4c:41:d4:d7:b7:ae:24:90:95: 51:c5:38:65:37:d8:51:af:41:55:63:79:eb:55:e5: 5e:d9:ae:19:5e:33:59:1b:46:ff:b5:87:20:78:38: f9:40:47:03:b8:45:d7:02:cd:0f:dd:ef:cd:e7:df: 73:92:47:33:61:19:50:a4:3e:b4:40:b0:d6:06:8c: 5d:db:77:db:15:0e:00:23:35:e4:59:79:69:32:59: c1:ad:0c:00:8b:ee:37:a6:3e:ef:0b:3b:3a:48:e3: 90:c0:15:03:e8:65:8c:4c:da:c2:9c:dc:7e:8b:58: 9e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4C:14:38:48:99:BB:7C:5D:B7:99:1B:E9:5E:F5:90:74:56:3D:72 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00971cda-f8a5-49a0-a1dc-2285c68a8e9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.200.0.0/13 Signature Algorithm: sha256WithRSAEncryption 47:2d:2a:1b:ed:80:a5:86:fd:a1:dc:62:71:47:6f:63:cd:e1: fc:fe:53:ee:6b:c7:b5:a6:68:c7:e1:5b:c7:b3:52:3b:13:de: 13:ec:e4:3f:eb:f5:3c:07:78:30:e8:c7:1d:4c:dc:a8:dd:12: 12:e9:f7:af:93:99:60:d1:44:60:b0:3a:c9:90:b2:f3:86:f9: 2d:05:d7:e0:d6:50:46:73:46:0b:32:51:a8:1e:65:6d:d1:d2: aa:0d:66:7f:27:a2:10:73:db:77:48:76:89:3e:87:71:e5:3f: 60:94:86:9a:be:65:d1:11:e2:4b:2a:1d:63:e7:63:e0:e7:8f: 6a:08:4a:92:64:ef:e8:1d:9e:2b:7c:4b:5f:b5:2b:ec:eb:e2: a3:47:2c:8d:05:9a:12:0a:5e:9c:7b:ed:65:52:b2:8a:51:f3: 94:c4:64:c3:06:ae:ef:39:09:4d:e0:64:b0:9b:c1:85:35:57: 60:9b:fc:3c:b6:de:67:37:74:a3:c9:4d:97:54:27:8d:66:76: 37:67:5e:f3:8e:c2:55:c7:d3:85:7e:ec:e0:3f:c2:6a:60:30: 75:72:46:d7:b3:28:fb:8f:99:63:76:07:e8:45:ec:1f:b4:e8: db:81:b9:b7:b0:e8:1c:77:2f:1e:f1:99:eb:05:28:c9:69:1d: 33:fa:de:e5 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUX99c6siL8CQHebqcvXEdFyVzZc0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMDEwM1oX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAMDUzZGFlODE0M2MwNjIzYTk3MzYy YjY1ZTcwMWE4NzVlODNlMjA5NDAzMWVmOTBiOTc5YWZjODVjMDAzMjA1YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrbkDz34sozSSHK5s3E0qDp6MREi 4uACO2o82EruifvCjObsyyIpuTqUMF0WdUKmkFc+26EN3/A8mrezXIUDbIPZ/Eqp RH3ibmQbmIL4u2CG7zCYPTqYOHOwbhdyE4FON6VYLzPbvIKZMW0MU4bmHbAx66Vv eXZ66fYjMDNyiL7klhWgUbACnnkphUpMQdTXt64kkJVRxThlN9hRr0FVY3nrVeVe 2a4ZXjNZG0b/tYcgeDj5QEcDuEXXAs0P3e/N599zkkczYRlQpD60QLDWBoxd23fb FQ4AIzXkWXlpMlnBrQwAi+43pj7vCzs6SOOQwBUD6GWMTNrCnNx+i1iewwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFI1MFDhImbt8XbeZG+le9ZB0Vj1yMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAwOTcxY2RhLWY4YTUtNDlhMC1hMWRjLTIyODVjNjhhOGU5Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMDK8gwDQYJKoZIhvcNAQELBQADggEBAEctKhvtgKWG/aHcYnFHb2PN 4fz+U+5rx7WmaMfhW8ezUjsT3hPs5D/r9TwHeDDoxx1M3KjdEhLp96+TmWDRRGCw OsmQsvOG+S0F1+DWUEZzRgsyUageZW3R0qoNZn8nohBz23dIdok+h3HlP2CUhpq+ ZdER4ksqHWPnY+Dnj2oISpJk7+gdnit8S1+1K+zr4qNHLI0FmhIKXpx77WVSsopR 85TEZMMGru85CU3gZLCbwYU1V2Cb/Dy23mc3dKPJTZdUJ41mdjdnXvOOwlXH04V+ 7OA/wmpgMHVyRtezKPuPmWN2B+hF7B+06NuBubew6Bx3Lx7xmesFKMlpHTP63uU= -----END CERTIFICATE-----Generated at Mon Mar 2 03:25:51 2026 by rpki-client