$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa File: 245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa (raw, json) Hash identifier: grx+7dCX9p20Z01+5atIEqevQWgE0DO92pWeVEhlFcc= Subject key identifier: 00:26:FE:53:2B:A0:BF:14:6F:B9:E2:02:8E:D6:E8:03:65:A7:60:38 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62AE8004BFEB74FB02FE842BC8E1EBF230CAF448 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa Signing time: Sun 22 Feb 2026 00:10:07 +0000 ROA not before: Sun 22 Feb 2026 00:10:07 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.249.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ae:80:04:bf:eb:74:fb:02:fe:84:2b:c8:e1:eb:f2:30:ca:f4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:10:07 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=3bd735fc781668c64d8aabae1200cae0f1d1630fb64deb3dad2963951df620ed, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:d5:bb:da:e7:24:d0:22:63:5c:12:c2:71: 70:30:71:98:c1:36:ac:17:94:78:a5:be:db:40:22: e5:26:11:fd:49:f2:51:2a:53:d0:bc:19:2f:69:cb: fc:8e:56:b4:fc:f9:d4:ab:21:31:e8:26:56:64:f1: e3:8a:e7:f4:30:4d:82:ea:c1:68:d9:f2:9d:c8:49: b2:4b:ad:6c:5e:0f:56:b2:ec:c1:ad:c2:a6:0e:c9: 32:a3:2e:28:14:ee:f3:8e:ad:e6:02:34:ca:06:cb: a6:61:82:fc:16:c1:69:33:3e:46:9f:f6:cc:e1:48: 91:d8:46:20:28:42:9d:a2:a6:a5:13:2c:58:cc:f4: f9:de:a7:c9:a7:c2:4c:6e:ed:78:4e:68:48:e6:ce: 46:6b:0a:5f:32:f6:d0:0d:a3:9a:e0:5c:40:3d:c6: b9:9c:d2:df:1a:ea:0d:6b:95:72:a5:e9:44:3d:f9: fc:6f:89:1f:1d:30:42:29:2c:3d:23:dd:09:78:11: cc:e5:fb:f6:47:00:17:bb:6b:09:a3:45:98:d0:28: e3:c4:07:47:a1:a8:54:03:1f:eb:d7:01:97:94:ef: 7c:04:af:9f:46:16:69:9c:43:bf:7f:1d:13:00:e9: d7:aa:3c:b7:b2:52:eb:c8:7a:d4:e5:f8:c1:e4:f7: 38:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:26:FE:53:2B:A0:BF:14:6F:B9:E2:02:8E:D6:E8:03:65:A7:60:38 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.44.0/22 Signature Algorithm: sha256WithRSAEncryption 55:47:8f:2a:71:0b:84:3f:ca:47:f3:d7:5a:a0:50:ae:75:f1: a4:79:23:7b:8c:3b:8a:33:e9:6a:78:57:32:6d:81:86:21:12: 8b:03:61:f3:a4:4f:84:f2:83:f0:3d:5a:8f:64:95:8b:da:a1: 9d:4c:89:2b:1a:2c:f9:2b:81:fa:2f:72:cd:13:a8:13:c3:0b: a7:85:ce:d7:84:60:12:d1:59:40:4c:72:26:d4:36:b0:20:68: 4a:bb:1f:32:fc:05:c1:88:dc:87:21:2d:5a:ac:ff:e4:5b:5e: 08:ba:69:17:9d:0f:e1:aa:5c:48:59:7a:7e:d0:03:d4:68:ea: 76:54:2c:af:ab:f9:86:8b:0d:ef:06:2b:cd:49:17:65:01:73: 0d:a6:7f:d3:a3:f4:f6:22:11:7c:0b:14:52:9d:19:1e:15:bc: 54:a7:73:e5:dc:7a:3b:49:1c:77:75:4c:0b:73:d2:08:91:f0: 17:38:cc:2d:0b:c6:b7:65:79:8a:03:8d:96:58:4e:3f:d8:fa: 6b:a8:14:53:d8:a4:32:a7:51:e7:ff:f2:7c:94:8a:02:45:0f: 62:aa:20:a6:d6:31:ab:82:8c:c5:94:1b:91:e5:ea:de:ed:5f: d5:44:fd:66:35:36:c3:32:11:2b:ce:6b:e9:55:e7:80:2e:e6: 30:37:c6:54 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUYq6ABL/rdPsC/oQryOHr8jDK9EgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMTAwN1oX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAM2JkNzM1ZmM3ODE2NjhjNjRkOGFh YmFlMTIwMGNhZTBmMWQxNjMwZmI2NGRlYjNkYWQyOTYzOTUxZGY2MjBlZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKvVu9rnJNAiY1wSwnFwMHGYwTas F5R4pb7bQCLlJhH9SfJRKlPQvBkvacv8jla0/PnUqyEx6CZWZPHjiuf0ME2C6sFo 2fKdyEmyS61sXg9WsuzBrcKmDskyoy4oFO7zjq3mAjTKBsumYYL8FsFpMz5Gn/bM 4UiR2EYgKEKdoqalEyxYzPT53qfJp8JMbu14TmhI5s5GawpfMvbQDaOa4FxAPca5 nNLfGuoNa5VypelEPfn8b4kfHTBCKSw9I90JeBHM5fv2RwAXu2sJo0WY0CjjxAdH oahUAx/r1wGXlO98BK+fRhZpnEO/fx0TAOnXqjy3slLryHrU5fjB5Pc4lwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFAAm/lMroL8Ub7niAo7W6ANlp2A4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0NWE2NWJiLTU5MWMtNDdiYy04YThjLTZjODZiMDkzZmQ4Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/ksMA0GCSqGSIb3DQEBCwUAA4IBAQBVR48qcQuEP8pH89daoFCu dfGkeSN7jDuKM+lqeFcybYGGIRKLA2HzpE+E8oPwPVqPZJWL2qGdTIkrGiz5K4H6 L3LNE6gTwwunhc7XhGAS0VlATHIm1DawIGhKux8y/AXBiNyHIS1arP/kW14IumkX nQ/hqlxIWXp+0APUaOp2VCyvq/mGiw3vBivNSRdlAXMNpn/To/T2IhF8CxRSnRke FbxUp3Pl3Ho7SRx3dUwLc9IIkfAXOMwtC8a3ZXmKA42WWE4/2PprqBRT2KQyp1Hn //J8lIoCRQ9iqiCm1jGrgozFlBuR5ere7V/VRP1mNTbDMhErzmvpVeeALuYwN8ZU -----END CERTIFICATE-----Generated at Sun Mar 1 22:08:12 2026 by rpki-client