$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/274d0851-dfbc-451f-87dd-a89a7d93e743.roa File: 274d0851-dfbc-451f-87dd-a89a7d93e743.roa (raw, json) Hash identifier: WuW2Rhwb8tM7zNpBt7Du0Z9yGyBXdL4A4DkNDB/dzUM= Subject key identifier: F7:F8:3F:0B:0F:C7:69:5D:CD:C7:CF:0A:1E:4E:1C:B0:05:18:01:BB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 136079F45D4AB926C7957A686E516B6AD0A1D785 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/274d0851-dfbc-451f-87dd-a89a7d93e743.roa Signing time: Wed 11 Feb 2026 00:10:48 +0000 ROA not before: Wed 11 Feb 2026 00:10:48 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.210.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:60:79:f4:5d:4a:b9:26:c7:95:7a:68:6e:51:6b:6a:d0:a1:d7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:10:48 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=ac99ba7224c87a8faa184f6283260c8be49d14763311e2c13e39b1715baf1bb8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:bb:f4:a4:e3:e4:94:24:58:35:da:d4:28: f1:0f:71:7a:7e:a4:4f:20:a3:37:19:1f:da:f1:2a: d5:97:09:ac:9b:10:13:3d:4e:3b:ee:2b:b1:65:12: 42:50:63:c2:ee:0b:24:e4:28:14:53:46:60:82:ec: 0c:76:50:b5:f4:fb:ac:28:e1:50:5c:0e:65:95:a0: ee:fb:d5:fd:2c:4f:75:b6:ee:d6:20:43:04:0a:69: 70:35:bb:3c:c4:9e:b7:b3:e5:95:3f:51:e1:66:f9: 9f:f9:d0:e0:ab:7a:00:97:f1:45:89:0b:de:f8:23: 19:b8:45:f4:40:12:41:70:60:21:49:d1:ef:b0:51: 43:82:e6:d0:5e:c1:96:54:60:a5:86:1a:77:14:fc: 2b:52:25:76:90:95:21:3e:a1:9a:2b:e1:28:ca:68: 1b:0a:62:e6:5c:6f:17:a3:2a:21:20:ef:cd:b5:6f: 69:8d:da:b9:fa:56:b6:15:4b:bd:81:0b:bc:70:20: 29:0a:17:3b:e0:f0:92:dc:bf:b3:7f:68:39:bc:29: 32:31:ad:df:1a:65:64:df:47:49:07:5a:bf:fa:39: fd:5c:a8:88:1f:eb:17:43:21:9b:8d:e8:d2:26:cb: d3:ce:36:cb:f4:1c:8d:30:5e:59:d8:ff:26:d3:c4: 52:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F8:3F:0B:0F:C7:69:5D:CD:C7:CF:0A:1E:4E:1C:B0:05:18:01:BB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/274d0851-dfbc-451f-87dd-a89a7d93e743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.210.12.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:c4:11:e2:ba:55:7e:94:63:49:4c:2b:37:06:38:19:0d:33: 04:ea:c8:81:0c:5c:60:1d:02:56:af:c8:f9:eb:38:38:16:0f: 34:45:a0:5f:1e:57:32:db:99:13:00:74:0f:b4:b5:61:27:1a: 2d:49:55:a2:3f:28:ba:7a:e3:1c:26:e7:65:fe:33:dc:a2:ee: 03:32:d8:2e:72:89:a1:45:67:3e:11:2f:9a:64:7f:c6:ae:66: ee:e4:51:f8:e7:62:99:07:69:97:51:ea:b8:23:ac:24:8d:a6: a9:b2:c2:11:e0:08:99:5a:7b:a5:30:e3:98:b0:1e:ad:3e:c1: a6:04:a5:cf:ca:06:41:9a:a4:7e:de:1d:fb:c2:d2:13:db:7f: 0a:e8:90:c0:d8:7e:46:db:c5:f4:1e:d3:47:cc:a9:0c:73:62: 03:aa:5f:f0:6d:ae:41:41:b8:bc:da:b1:39:b8:b8:81:55:a3: af:95:bc:c8:3a:11:bc:4d:ba:37:19:cd:84:45:8f:59:84:bf: 08:c7:ee:21:30:6c:3d:2e:34:9c:1f:ea:c0:38:7d:96:b4:af: 58:1c:88:a9:0b:91:9b:7d:44:e6:f8:e3:84:de:b5:cd:1e:b6: 5f:8d:7d:ad:e0:90:35:b6:d8:93:b5:de:82:f1:9e:03:54:b7: ea:0d:25:f3 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUE2B59F1KuSbHlXpoblFratCh14UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMTA0OFoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAYWM5OWJhNzIyNGM4N2E4ZmFhMTg0 ZjYyODMyNjBjOGJlNDlkMTQ3NjMzMTFlMmMxM2UzOWIxNzE1YmFmMWJiODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRG79KTj5JQkWDXa1CjxD3F6fqRP IKM3GR/a8SrVlwmsmxATPU477iuxZRJCUGPC7gsk5CgUU0ZgguwMdlC19PusKOFQ XA5llaDu+9X9LE91tu7WIEMECmlwNbs8xJ63s+WVP1HhZvmf+dDgq3oAl/FFiQve +CMZuEX0QBJBcGAhSdHvsFFDgubQXsGWVGClhhp3FPwrUiV2kJUhPqGaK+Eoymgb CmLmXG8XoyohIO/NtW9pjdq5+la2FUu9gQu8cCApChc74PCS3L+zf2g5vCkyMa3f GmVk30dJB1q/+jn9XKiIH+sXQyGbjejSJsvTzjbL9ByNMF5Z2P8m08RS+wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFPf4PwsPx2ldzcfPCh5OHLAFGAG7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI3NGQwODUxLWRmYmMtNDUxZi04N2RkLWE4OWE3ZDkzZTc0My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK9IMMA0GCSqGSIb3DQEBCwUAA4IBAQA9xBHiulV+lGNJTCs3BjgZ DTME6siBDFxgHQJWr8j56zg4Fg80RaBfHlcy25kTAHQPtLVhJxotSVWiPyi6euMc Judl/jPcou4DMtgucomhRWc+ES+aZH/Grmbu5FH452KZB2mXUeq4I6wkjaapssIR 4AiZWnulMOOYsB6tPsGmBKXPygZBmqR+3h37wtIT238K6JDA2H5G28X0HtNHzKkM c2IDql/wba5BQbi82rE5uLiBVaOvlbzIOhG8Tbo3Gc2ERY9ZhL8Ix+4hMGw9LjSc H+rAOH2WtK9YHIipC5GbfUTm+OOE3rXNHrZfjX2t4JA1ttiTtd6C8Z4DVLfqDSXz -----END CERTIFICATE-----Generated at Sun Mar 1 22:13:16 2026 by rpki-client