$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b3c2b9b-025c-44df-bdca-4a903df0156c.roa File: 4b3c2b9b-025c-44df-bdca-4a903df0156c.roa (raw, json) Hash identifier: ifAPPdr9rf2tacSv0mGiv4hI5I1VGAbHcannpYoXRxw= Subject key identifier: 59:F5:F5:18:C3:0E:2B:24:3C:87:1A:67:2B:7B:BA:9D:19:F0:77:01 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 72F5FAD08017F839DB191606F7DC11CFD6457DA0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b3c2b9b-025c-44df-bdca-4a903df0156c.roa Signing time: Tue 20 Oct 2026 00:20:12 +0000 ROA not before: Tue 20 Oct 2026 00:20:12 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 43.212.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f5:fa:d0:80:17:f8:39:db:19:16:06:f7:dc:11:cf:d6:45:7d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:20:12 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=388f5edf485fcffddf25198c6f47fa5b6ec22fa66bdb8650a470f62491d55a2e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:19:53:2d:85:fd:01:90:2f:4a:f3:67:4d:a0: 3e:d2:c9:b8:46:f3:e4:50:ea:d6:3b:7b:0f:38:f0: df:18:22:9b:87:94:c7:78:be:17:02:ef:4e:00:6d: c7:73:ac:da:12:b7:76:a4:c1:66:de:b4:1e:32:b9: 39:42:3e:eb:0d:40:23:12:f5:83:16:07:50:3e:be: f8:66:e0:8c:d7:d9:f8:83:b6:c2:69:2a:4d:45:69: b4:0a:23:2a:68:bb:f5:23:77:3b:06:3c:1d:91:fa: b4:aa:7a:37:9f:83:21:19:5b:0e:84:49:fb:f6:00: 3b:30:b3:97:08:7a:7b:42:44:01:2a:7c:d6:ee:f9: 1a:9a:dd:69:7a:f1:ab:a8:34:0a:43:69:9b:cb:92: 0b:dc:dd:bc:66:33:db:f6:0d:11:47:5c:d7:56:70: 72:05:ae:3c:9b:25:73:db:bf:f6:47:22:36:9f:8e: 50:1a:2d:95:3a:33:23:7d:d3:ad:ec:dd:c3:66:c9: 77:2c:24:88:1d:da:3a:64:58:14:72:9a:ed:b4:2d: c1:8e:6a:d8:84:ef:37:25:a3:5a:49:61:82:bf:61: 10:06:99:73:01:43:f4:bb:0d:a6:55:51:7a:29:fb: ec:d7:ec:5c:0f:4c:56:8c:06:e9:78:17:7c:8e:29: 12:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F5:F5:18:C3:0E:2B:24:3C:87:1A:67:2B:7B:BA:9D:19:F0:77:01 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b3c2b9b-025c-44df-bdca-4a903df0156c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.212.67.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:74:77:0d:24:72:24:c8:60:bd:91:d9:9a:d1:e8:81:a0:c7: 36:27:24:1e:81:97:a8:0a:7e:b0:f8:0b:87:22:58:0b:8a:38: 91:fc:b7:8a:e8:dd:4d:31:69:67:99:53:93:cd:db:d5:a8:a1: 68:11:50:cb:f6:32:af:a1:57:cd:42:2b:36:96:9a:b0:0e:37: 31:ba:f1:31:19:92:b2:3f:ea:71:84:bc:70:27:98:60:5d:ed: dc:0e:65:d8:e2:0a:16:9b:d4:07:0d:3c:e0:61:08:c1:f2:5d: aa:6a:ce:ee:f8:20:d2:87:28:bb:5a:95:8d:cd:e5:90:d9:06: 32:c0:0a:52:92:11:f6:46:0f:a1:8d:d7:cc:4d:81:88:25:8a: 84:5e:d9:4e:5c:44:1e:d6:ce:a6:c4:9c:f9:76:9d:2d:ae:ae: f2:80:8c:d4:79:a9:1e:1d:b4:33:6c:51:9c:b3:a4:14:c8:b4: 65:40:c5:8c:87:35:ee:cc:0f:95:33:96:7f:85:90:a1:c4:80: 50:e5:8c:ad:ef:cb:de:bb:6e:d6:cf:3d:b2:57:00:01:41:cd: 4c:93:9c:cb:01:4f:09:55:e7:c6:4e:05:35:08:de:11:53:06: 18:49:00:6f:4e:cc:37:93:24:5b:6d:2e:47:5d:c0:eb:1c:13: 23:5a:ac:00 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUcvX60IAX+DnbGRYG99wRz9ZFfaAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMjAxMloX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAMzg4ZjVlZGY0ODVmY2ZmZGRmMjUx OThjNmY0N2ZhNWI2ZWMyMmZhNjZiZGI4NjUwYTQ3MGY2MjQ5MWQ1NWEyZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxlTLYX9AZAvSvNnTaA+0sm4RvPk UOrWO3sPOPDfGCKbh5THeL4XAu9OAG3Hc6zaErd2pMFm3rQeMrk5Qj7rDUAjEvWD FgdQPr74ZuCM19n4g7bCaSpNRWm0CiMqaLv1I3c7Bjwdkfq0qno3n4MhGVsOhEn7 9gA7MLOXCHp7QkQBKnzW7vkamt1pevGrqDQKQ2mby5IL3N28ZjPb9g0RR1zXVnBy Ba48myVz27/2RyI2n45QGi2VOjMjfdOt7N3DZsl3LCSIHdo6ZFgUcprttC3BjmrY hO83JaNaSWGCv2EQBplzAUP0uw2mVVF6Kfvs1+xcD0xWjAbpeBd8jikSpQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFFn19RjDDiskPIcaZyt7up0Z8HcBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRiM2MyYjliLTAyNWMtNDRkZi1iZGNhLTRhOTAzZGYwMTU2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9RDMA0GCSqGSIb3DQEBCwUAA4IBAQBadHcNJHIkyGC9kdma0eiB oMc2JyQegZeoCn6w+AuHIlgLijiR/LeK6N1NMWlnmVOTzdvVqKFoEVDL9jKvoVfN Qis2lpqwDjcxuvExGZKyP+pxhLxwJ5hgXe3cDmXY4goWm9QHDTzgYQjB8l2qas7u +CDShyi7WpWNzeWQ2QYywApSkhH2Rg+hjdfMTYGIJYqEXtlOXEQe1s6mxJz5dp0t rq7ygIzUeakeHbQzbFGcs6QUyLRlQMWMhzXuzA+VM5Z/hZChxIBQ5Yyt78veu27W zz2yVwABQc1Mk5zLAU8JVefGTgU1CN4RUwYYSQBvTsw3kyRbbS5HXcDrHBMjWqwA -----END CERTIFICATE-----Generated at Sun Nov 8 09:25:03 2026 by rpki-client