$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/280a1815-c4cc-48df-a16f-3277770f685f.roa File: 280a1815-c4cc-48df-a16f-3277770f685f.roa (raw, json) Hash identifier: g4K2MNKssrpmJ12BDxLSkQfaDqwtSykzmyy9x1PYOSk= Subject key identifier: B2:D2:11:8D:1D:4F:CD:62:CE:09:61:15:D6:06:92:88:20:08:AB:F6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 03C6129D7BF87AACF8B83650D2D04DD1387172F6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/280a1815-c4cc-48df-a16f-3277770f685f.roa Signing time: Sat 16 May 2026 00:00:05 +0000 ROA not before: Sat 16 May 2026 00:00:05 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.214.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c6:12:9d:7b:f8:7a:ac:f8:b8:36:50:d2:d0:4d:d1:38:71:72:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:00:05 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=186bcd85aa560ddd7ea324b7dcd93e8bd9b34f844f56f56901d4fcb08111d397, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:fe:35:fa:ac:b1:f4:93:d6:9d:22:d9:5f: eb:82:51:31:95:ea:92:d3:4b:71:c6:91:1c:0e:88: 34:5e:b0:5f:61:3c:6c:f9:70:ef:19:2e:b4:f4:3f: 81:90:bb:f1:18:0b:87:ac:e4:aa:20:3a:f0:10:a9: 0c:5e:d0:73:fe:21:30:e7:27:b1:97:0e:3b:70:5d: 74:01:67:75:89:1e:ab:1c:34:46:e6:6f:bf:2d:06: 74:77:ce:b9:a7:26:7c:47:ff:5e:ff:b9:e7:ef:75: a1:56:af:32:c7:37:58:70:a5:a6:08:1a:8f:5e:23: 63:11:1e:b3:a9:ba:e0:24:60:eb:f5:45:f2:cc:7c: 0f:c8:20:02:8b:00:28:7b:6b:94:d3:96:7f:a8:6f: 70:2e:33:52:bd:2e:53:a1:6f:e4:e1:ba:ab:17:7c: 6e:2b:02:de:a1:bc:72:73:86:fb:4e:cd:17:34:3c: 51:23:6c:ec:23:fc:05:93:0b:07:79:e1:91:e5:17: fb:b7:8d:cf:73:c9:c6:48:12:06:c7:90:66:50:b7: e2:23:41:17:03:bf:a5:ce:2a:f5:21:b2:f1:8a:44: ef:8b:44:ed:4d:91:c4:93:d9:0d:e2:c7:6f:01:14: a4:b5:09:b1:29:b3:d1:dc:fe:cd:54:36:2c:0d:51: 4a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D2:11:8D:1D:4F:CD:62:CE:09:61:15:D6:06:92:88:20:08:AB:F6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/280a1815-c4cc-48df-a16f-3277770f685f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.214.0.0/15 Signature Algorithm: sha256WithRSAEncryption 2e:a4:0f:d8:f9:d0:87:24:0f:1d:5b:2f:64:e1:c9:ef:47:14: 16:5c:48:fe:d3:48:81:b7:05:c9:0c:5c:cb:95:c9:26:c5:b2: e2:70:bd:1a:7e:2e:8f:19:e9:18:e1:22:3f:f8:dd:42:df:b3: ec:7e:0e:63:ab:f2:c3:de:28:a0:fb:f1:a4:b3:6d:df:df:9e: 2f:a6:ff:18:20:8c:31:59:79:e3:9d:21:e1:50:10:38:c6:02: da:d9:29:54:7f:20:0e:ff:45:70:22:5a:3f:59:09:70:d5:27: 40:8e:95:d5:c8:05:f4:c1:f1:e6:f8:30:d0:5c:da:e9:dc:35: c9:fc:18:4a:26:da:40:77:15:4c:ef:98:f5:80:3e:b4:ae:c9: 9e:16:00:25:e8:0f:f6:58:cf:92:af:73:dc:07:76:8b:07:50: bb:18:c4:93:ed:21:c0:3b:c5:1e:ce:bd:78:c2:d3:01:45:dc: 2c:60:ba:d7:c0:d1:c8:b0:06:d3:7a:5a:23:2b:f0:5d:5a:59: d2:64:96:68:86:94:ec:cc:fc:8f:0f:9a:1c:45:4b:ed:6f:e8: a7:a2:eb:bf:c9:83:32:af:b1:74:0a:9e:94:ed:e4:d4:be:30: 5a:b4:bd:a4:75:33:f2:1f:43:1b:7f:83:1c:4d:85:8b:ff:03: 28:c3:0f:3a -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUA8YSnXv4eqz4uDZQ0tBN0ThxcvYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxNjAwMDAwNVoX DTI2MDgxNDIzNTk1OVowejFJMEcGA1UEBRNAMTg2YmNkODVhYTU2MGRkZDdlYTMy NGI3ZGNkOTNlOGJkOWIzNGY4NDRmNTZmNTY5MDFkNGZjYjA4MTExZDM5NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrf+NfqssfST1p0i2V/rglExleqS 00txxpEcDog0XrBfYTxs+XDvGS609D+BkLvxGAuHrOSqIDrwEKkMXtBz/iEw5yex lw47cF10AWd1iR6rHDRG5m+/LQZ0d865pyZ8R/9e/7nn73WhVq8yxzdYcKWmCBqP XiNjER6zqbrgJGDr9UXyzHwPyCACiwAoe2uU05Z/qG9wLjNSvS5ToW/k4bqrF3xu KwLeobxyc4b7Ts0XNDxRI2zsI/wFkwsHeeGR5Rf7t43Pc8nGSBIGx5BmULfiI0EX A7+lzir1IbLxikTvi0TtTZHEk9kN4sdvARSktQmxKbPR3P7NVDYsDVFK3QIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFLLSEY0dT81izglhFdYGkoggCKv2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI4MGExODE1LWM0Y2MtNDhkZi1hMTZmLTMyNzc3NzBmNjg1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9YwDQYJKoZIhvcNAQELBQADggEBAC6kD9j50IckDx1bL2Thye9H FBZcSP7TSIG3BckMXMuVySbFsuJwvRp+Lo8Z6RjhIj/43ULfs+x+DmOr8sPeKKD7 8aSzbd/fni+m/xggjDFZeeOdIeFQEDjGAtrZKVR/IA7/RXAiWj9ZCXDVJ0COldXI BfTB8eb4MNBc2uncNcn8GEom2kB3FUzvmPWAPrSuyZ4WACXoD/ZYz5Kvc9wHdosH ULsYxJPtIcA7xR7OvXjC0wFF3CxgutfA0ciwBtN6WiMr8F1aWdJklmiGlOzM/I8P mhxFS+1v6Kei67/JgzKvsXQKnpTt5NS+MFq0vaR1M/IfQxt/gxxNhYv/AyjDDzo= -----END CERTIFICATE-----Generated at Sat Jun 13 09:15:43 2026 by rpki-client