$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa File: 3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa (raw, json) Hash identifier: xGT/TjffaDRQWt/ZeTkovsJBLbGZpyqcikcBieuyhO8= Subject key identifier: D1:A9:B6:D9:17:CB:24:69:68:10:4A:AC:BF:B1:85:C7:3E:7F:DC:FB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 66411CF3BFFBCCCF43D2F86FC8CDBA5C7B57CD1A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa Signing time: Sun 22 Feb 2026 00:10:21 +0000 ROA not before: Sun 22 Feb 2026 00:10:21 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.212.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:41:1c:f3:bf:fb:cc:cf:43:d2:f8:6f:c8:cd:ba:5c:7b:57:cd:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:10:21 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=294688fc61c3b4a9c6271d622e73de3875662913fe36c7b346feb6bee1029678, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:73:11:82:8e:c8:75:a1:b6:61:c6:c7:4a:7e: 57:03:3e:a9:1f:2f:3a:54:c7:3a:3e:f8:de:d8:d1: ea:c0:8e:a3:40:95:bc:cf:f9:20:ad:c4:1e:1e:78: 63:21:ab:da:86:02:09:bd:90:96:05:11:7b:89:74: 5b:66:83:ec:0c:67:ef:ac:81:0d:b6:40:2e:0e:40: 94:76:95:3a:8c:30:b9:8c:f4:45:95:98:b8:c7:39: 25:80:30:bc:6e:a3:01:17:49:d2:34:ac:bc:3e:d7: 9c:c7:5f:77:13:6c:03:cc:84:dc:a4:a0:cd:a8:e4: 53:b2:32:fb:bf:8b:fd:52:f3:36:f3:f4:11:d3:24: 49:0e:0b:e4:eb:c2:9b:0f:a0:b1:de:f9:20:73:81: 67:ae:f6:aa:88:38:4d:fc:b8:47:c5:4d:03:c7:0a: f7:9f:8c:96:d0:15:41:66:eb:c0:c7:42:30:ba:f6: 3d:78:24:ec:a9:fb:cc:51:28:1a:01:58:17:ed:4d: 8e:d0:83:ee:af:d5:03:85:b3:39:c0:14:f1:d9:4c: f1:78:5e:bf:3b:d3:ad:97:9d:21:e7:3f:d1:28:26: f3:40:c1:6a:21:63:d6:11:21:93:41:c2:41:63:3e: 0e:9d:d9:b1:51:a4:11:ea:96:c0:fb:1b:13:e7:fe: 7c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A9:B6:D9:17:CB:24:69:68:10:4A:AC:BF:B1:85:C7:3E:7F:DC:FB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.212.0.0/15 Signature Algorithm: sha256WithRSAEncryption 6a:d7:41:2a:a5:91:03:19:1a:c3:62:67:3b:5a:72:b3:aa:69: 10:02:99:94:3d:cc:7d:f0:46:47:33:40:37:a1:80:90:21:62: ee:ab:70:48:ee:92:23:fc:20:21:58:83:b2:ca:7a:4a:5a:08: 6e:e7:da:eb:95:c3:83:db:73:ea:06:c8:d8:d2:ef:a5:db:65: 73:8f:19:c2:f3:39:46:9b:d9:12:e4:bf:d2:20:3b:fd:41:1b: 84:a6:17:d1:87:e6:fe:90:87:57:d9:e7:9e:3e:3b:03:75:f3: 7b:50:a0:ef:56:64:c0:6e:f7:83:45:ef:72:8c:24:84:7f:89: 9f:b2:5f:5a:18:8c:da:bb:06:20:01:86:80:24:f1:cf:76:97: 32:39:dd:36:36:b6:23:58:de:0c:81:19:25:a0:c1:15:40:b7: fe:f7:34:d7:16:ca:54:25:8a:2b:da:47:16:41:75:1f:7a:17: 71:0b:d8:19:78:dd:b2:90:d3:cc:ef:29:91:b4:6a:cc:6a:90: d1:3a:a6:8c:0a:23:de:ce:1b:7f:e5:99:e1:ac:1a:a6:ef:9f: c8:a3:d6:88:80:d6:15:bd:73:76:b4:ba:59:09:96:5d:79:a0: b0:d8:83:15:b1:0b:69:46:db:1a:38:1d:c7:9f:39:f4:c3:c1: 90:6b:24:ef -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUZkEc87/7zM9D0vhvyM26XHtXzRowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMTAyMVoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAMjk0Njg4ZmM2MWMzYjRhOWM2Mjcx ZDYyMmU3M2RlMzg3NTY2MjkxM2ZlMzZjN2IzNDZmZWI2YmVlMTAyOTY3ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HMRgo7IdaG2YcbHSn5XAz6pHy86 VMc6Pvje2NHqwI6jQJW8z/kgrcQeHnhjIavahgIJvZCWBRF7iXRbZoPsDGfvrIEN tkAuDkCUdpU6jDC5jPRFlZi4xzklgDC8bqMBF0nSNKy8Ptecx193E2wDzITcpKDN qORTsjL7v4v9UvM28/QR0yRJDgvk68KbD6Cx3vkgc4FnrvaqiDhN/LhHxU0Dxwr3 n4yW0BVBZuvAx0IwuvY9eCTsqfvMUSgaAVgX7U2O0IPur9UDhbM5wBTx2UzxeF6/ O9Otl50h5z/RKCbzQMFqIWPWESGTQcJBYz4OndmxUaQR6pbA+xsT5/58FQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFNGpttkXyyRpaBBKrL+xhcc+f9z7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhMmJjMmNjLTkyNzItNDFlYi1hM2U0LTIwNzYxZDE3MjlmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9QwDQYJKoZIhvcNAQELBQADggEBAGrXQSqlkQMZGsNiZztacrOq aRACmZQ9zH3wRkczQDehgJAhYu6rcEjukiP8ICFYg7LKekpaCG7n2uuVw4Pbc+oG yNjS76XbZXOPGcLzOUab2RLkv9IgO/1BG4SmF9GH5v6Qh1fZ554+OwN183tQoO9W ZMBu94NF73KMJIR/iZ+yX1oYjNq7BiABhoAk8c92lzI53TY2tiNY3gyBGSWgwRVA t/73NNcWylQliivaRxZBdR96F3EL2Bl43bKQ08zvKZG0asxqkNE6powKI97OG3/l meGsGqbvn8ij1oiA1hW9c3a0ulkJll15oLDYgxWxC2lG2xo4HcefOfTDwZBrJO8= -----END CERTIFICATE-----Generated at Sun Mar 1 23:38:24 2026 by rpki-client