$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bf4d29d-b755-45e9-ad12-cad8b88b01bc.roa File: 5bf4d29d-b755-45e9-ad12-cad8b88b01bc.roa (raw, json) Hash identifier: hGuhgtw6Z6cKurCbvA4ji8HkFrE8tMYzA5aGaADs/7U= Subject key identifier: DA:45:95:86:26:AA:C6:F5:10:BF:98:71:13:E3:5A:CC:78:3D:8F:F6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 37435B9BF9FB067852E210FA8D08EB8F43B8DFB1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bf4d29d-b755-45e9-ad12-cad8b88b01bc.roa Signing time: Tue 20 Oct 2026 00:30:26 +0000 ROA not before: Tue 20 Oct 2026 00:30:26 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:43:5b:9b:f9:fb:06:78:52:e2:10:fa:8d:08:eb:8f:43:b8:df:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:30:26 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=ffd54d41bf5d10a4f6c9279453e7cf0bd05b5d61475a2b8ddf6d7172af868c65, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:76:7b:f9:70:41:86:c0:ae:95:49:8f:b3:f9: 17:4b:9e:67:18:b6:f1:b0:9a:2a:a2:80:1a:00:69: 75:f6:5d:06:81:a7:ab:fa:b4:73:7c:bb:c2:ed:3b: df:b9:51:f9:cd:39:20:96:56:d4:50:5e:d8:6b:55: 96:d4:6b:4e:9f:8e:83:d0:d2:8c:57:34:cb:d6:0e: fe:8f:35:90:49:21:d4:9f:44:72:23:0b:ab:f3:16: 2e:c2:4d:30:bb:ba:bf:0c:52:0a:37:08:64:6e:d2: 92:f2:01:d0:de:a8:ba:43:70:23:a8:c9:e9:b8:42: 74:06:0a:47:9c:f5:e4:60:a3:04:3c:78:e2:74:7d: ad:ba:13:6e:81:c0:12:9c:90:ba:67:6d:6a:b1:56: b9:01:2e:29:cf:d2:e7:b8:61:34:d3:5d:8a:2c:02: ab:df:78:c7:d7:84:3d:17:a3:9c:7e:14:92:b7:90: 6f:43:cd:d7:46:c7:64:23:60:52:ad:1c:3a:4a:7b: 2c:67:dc:cb:e1:f4:69:51:59:a2:dd:0c:79:dd:05: 8c:0c:49:7d:06:12:b2:ea:4f:1e:c9:1b:ba:fe:d9: 7a:ee:61:4d:76:2d:92:8a:ae:b7:08:ed:c5:90:34: 5b:16:2c:b6:08:e5:de:b0:83:16:1b:a5:7a:15:b2: 7e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:45:95:86:26:AA:C6:F5:10:BF:98:71:13:E3:5A:CC:78:3D:8F:F6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bf4d29d-b755-45e9-ad12-cad8b88b01bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.0.0/13 Signature Algorithm: sha256WithRSAEncryption 48:7e:32:54:e4:be:5f:d9:50:ed:60:ad:69:65:ac:81:1b:69: a3:a6:9b:7d:40:4e:d3:36:97:61:58:12:b0:e8:fb:4b:9f:87: dc:27:fc:6e:1d:8e:8b:2e:11:84:12:c0:18:06:d6:63:35:1a: 62:18:0c:70:eb:f7:00:47:00:cd:4e:06:5d:bf:2a:22:d6:8c: ae:6d:ab:80:c2:22:53:44:7a:48:c5:52:d8:59:0d:90:2a:03: 8b:17:3c:12:29:6b:45:65:c3:6b:d4:3d:70:7d:7c:4f:43:39: 05:11:54:b9:c4:64:b4:0d:fc:97:49:63:02:8b:49:e9:38:6f: d9:bd:74:64:72:81:a5:25:7e:c8:3f:b6:cb:e8:4f:5a:a4:35: 2b:46:c3:ed:b7:68:b5:8f:6b:dc:b0:fe:5a:2c:37:ae:5c:d6: c0:d5:f8:21:88:b7:21:b2:f9:2b:3a:48:f2:16:63:c5:12:b9: b4:d8:85:ac:51:7e:f8:e6:e7:cb:a7:b6:46:2f:81:8c:99:7b: 83:94:14:1f:39:56:2d:cc:ef:48:57:74:7f:f5:0d:04:f3:b7: ff:91:9f:d2:c6:73:3b:9d:b7:4c:fb:03:7b:c8:e4:91:e2:77: 3c:34:3c:ba:9f:4c:43:bb:90:e9:1e:7c:6b:b6:23:c8:f5:7e: 3e:c8:87:15 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUN0Nbm/n7BnhS4hD6jQjrj0O437EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMzAyNloX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAZmZkNTRkNDFiZjVkMTBhNGY2Yzky Nzk0NTNlN2NmMGJkMDViNWQ2MTQ3NWEyYjhkZGY2ZDcxNzJhZjg2OGM2NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnZ7+XBBhsCulUmPs/kXS55nGLbx sJoqooAaAGl19l0Ggaer+rRzfLvC7TvfuVH5zTkgllbUUF7Ya1WW1GtOn46D0NKM VzTL1g7+jzWQSSHUn0RyIwur8xYuwk0wu7q/DFIKNwhkbtKS8gHQ3qi6Q3AjqMnp uEJ0BgpHnPXkYKMEPHjidH2tuhNugcASnJC6Z21qsVa5AS4pz9LnuGE0012KLAKr 33jH14Q9F6OcfhSSt5BvQ83XRsdkI2BSrRw6SnssZ9zL4fRpUVmi3Qx53QWMDEl9 BhKy6k8eyRu6/tl67mFNdi2Siq63CO3FkDRbFiy2COXesIMWG6V6FbJ+zwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFNpFlYYmqsb1EL+YcRPjWsx4PY/2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzViZjRkMjlkLWI3NTUtNDVlOS1hZDEyLWNhZDhiODhiMDFiYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMDK9AwDQYJKoZIhvcNAQELBQADggEBAEh+MlTkvl/ZUO1grWllrIEb aaOmm31ATtM2l2FYErDo+0ufh9wn/G4djosuEYQSwBgG1mM1GmIYDHDr9wBHAM1O Bl2/KiLWjK5tq4DCIlNEekjFUthZDZAqA4sXPBIpa0Vlw2vUPXB9fE9DOQURVLnE ZLQN/JdJYwKLSek4b9m9dGRygaUlfsg/tsvoT1qkNStGw+23aLWPa9yw/losN65c 1sDV+CGItyGy+Ss6SPIWY8USubTYhaxRfvjm58untkYvgYyZe4OUFB85Vi3M70hX dH/1DQTzt/+Rn9LGczudt0z7A3vI5JHidzw0PLqfTEO7kOkefGu2I8j1fj7IhxU= -----END CERTIFICATE-----Generated at Thu Nov 5 09:02:38 2026 by rpki-client