$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80b7e005-6c19-4f9e-9cbc-448f4073dd0c.roa File: 80b7e005-6c19-4f9e-9cbc-448f4073dd0c.roa (raw, json) Hash identifier: FGvFsMSGmEQNI2asTYaYnRMbDJzghvNXeHxIWfJFmUU= Subject key identifier: ED:0F:12:38:F4:C8:84:C5:07:84:3C:B6:EF:82:DE:78:47:43:7E:F3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7736322598B862F1CDE85E10D133DF700042D98F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80b7e005-6c19-4f9e-9cbc-448f4073dd0c.roa Signing time: Fri 24 Jul 2026 00:01:10 +0000 ROA not before: Fri 24 Jul 2026 00:01:10 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.212.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:36:32:25:98:b8:62:f1:cd:e8:5e:10:d1:33:df:70:00:42:d9:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 24 00:01:10 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=8a196af361a115004a0ec2b0e00737e18f8088784945ee2bcca572120d1a6cf0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:0c:23:73:34:31:35:0d:73:6c:27:98:f1: e3:40:47:c1:08:9f:6c:1f:9f:12:28:e1:c8:d2:6f: 27:0a:2f:fa:2a:f3:f5:7c:56:91:6d:5f:04:b9:50: 3c:cd:8a:e1:42:8a:1d:2b:e6:88:f3:fa:d6:c8:e7: 03:98:39:e5:24:5b:63:46:aa:cd:25:0b:81:9f:7e: 50:cb:18:08:71:c3:7e:fb:7a:58:4b:2b:01:14:48: 8f:47:d8:40:9f:f6:bc:d1:03:d2:f5:7d:e5:87:0e: 07:c8:65:da:01:98:ed:04:76:de:85:a4:90:06:10: e7:26:88:c3:92:b7:5e:3d:54:a7:87:26:e1:7c:75: 78:6f:b1:2a:96:40:94:00:91:bb:28:b9:11:0d:ac: 5b:0e:6b:76:5c:09:91:07:49:28:d4:af:75:3c:93: be:a7:05:ba:ff:72:f8:f2:18:82:f2:14:82:46:e1: 44:f5:91:c8:fc:33:9c:2b:87:c2:a9:78:47:4c:17: 07:a6:9f:3a:1d:22:ca:19:09:ea:61:61:89:f4:05: 52:87:b5:a1:50:ef:60:92:50:89:15:2a:ea:4d:eb: 4a:98:27:19:a7:a1:8c:d1:58:ca:3e:3d:74:a6:ab: e9:95:83:93:24:5b:09:6d:af:ac:7e:83:97:13:ee: 1d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0F:12:38:F4:C8:84:C5:07:84:3C:B6:EF:82:DE:78:47:43:7E:F3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80b7e005-6c19-4f9e-9cbc-448f4073dd0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.212.68.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:20:66:50:bf:4f:72:32:18:e4:24:0e:fc:a2:59:42:12:70: 68:ac:89:48:bd:47:a6:d2:f1:cc:0b:d2:ce:70:0a:ea:27:13: 1b:86:79:c6:64:62:99:28:ad:03:5b:08:17:0b:bc:26:2e:39: db:3f:01:ed:f7:4a:57:72:5b:7e:67:95:7c:fd:cf:62:c8:ac: 89:20:74:41:f8:d2:0d:12:61:44:8e:9f:bb:07:9d:d5:4a:95: 33:3e:12:01:08:ec:02:a2:68:91:90:9f:2c:69:d5:3c:16:e3: 86:92:0c:0b:e4:de:58:4b:30:89:e5:1e:79:f1:5f:ca:dc:0a: 2a:2d:a7:49:22:a9:84:37:ba:a3:0a:0b:a2:b1:1d:a1:d4:f5: 0a:c6:b1:16:08:2d:22:47:15:77:ba:a8:85:33:cf:85:45:4b: d5:3a:de:42:1a:43:96:16:5e:e5:ba:32:f8:5c:77:2d:b2:d0: 62:a2:ed:15:5e:40:ab:37:d1:fe:1f:90:82:58:f7:73:66:65: 9b:e3:71:cf:4d:ed:72:8c:fd:22:4e:c5:ad:8d:80:fe:ae:45: 02:95:e1:13:1c:52:7a:6d:a7:74:4d:b7:d0:42:e2:90:3b:17: 86:be:c8:8b:51:70:67:8d:11:5a:99:b9:bf:31:09:6a:c0:3b: 0b:0b:c8:1b -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUdzYyJZi4YvHN6F4Q0TPfcABC2Y8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyNDAwMDExMFoX DTI2MTAyMjIzNTk1OVowejFJMEcGA1UEBRNAOGExOTZhZjM2MWExMTUwMDRhMGVj MmIwZTAwNzM3ZTE4ZjgwODg3ODQ5NDVlZTJiY2NhNTcyMTIwZDFhNmNmMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2AMI3M0MTUNc2wnmPHjQEfBCJ9s H58SKOHI0m8nCi/6KvP1fFaRbV8EuVA8zYrhQoodK+aI8/rWyOcDmDnlJFtjRqrN JQuBn35QyxgIccN++3pYSysBFEiPR9hAn/a80QPS9X3lhw4HyGXaAZjtBHbehaSQ BhDnJojDkrdePVSnhybhfHV4b7EqlkCUAJG7KLkRDaxbDmt2XAmRB0ko1K91PJO+ pwW6/3L48hiC8hSCRuFE9ZHI/DOcK4fCqXhHTBcHpp86HSLKGQnqYWGJ9AVSh7Wh UO9gklCJFSrqTetKmCcZp6GM0VjKPj10pqvplYOTJFsJba+sfoOXE+4d4QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFO0PEjj0yITFB4Q8tu+C3nhHQ37zMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgwYjdlMDA1LTZjMTktNGY5ZS05Y2JjLTQ0OGY0MDczZGQwYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9REMA0GCSqGSIb3DQEBCwUAA4IBAQCbIGZQv09yMhjkJA78ollC EnBorIlIvUem0vHMC9LOcArqJxMbhnnGZGKZKK0DWwgXC7wmLjnbPwHt90pXclt+ Z5V8/c9iyKyJIHRB+NINEmFEjp+7B53VSpUzPhIBCOwComiRkJ8sadU8FuOGkgwL 5N5YSzCJ5R558V/K3AoqLadJIqmEN7qjCguisR2h1PUKxrEWCC0iRxV3uqiFM8+F RUvVOt5CGkOWFl7lujL4XHctstBiou0VXkCrN9H+H5CCWPdzZmWb43HPTe1yjP0i TsWtjYD+rkUCleETHFJ6bad0TbfQQuKQOxeGvsiLUXBnjRFambm/MQlqwDsLC8gb -----END CERTIFICATE-----Generated at Tue Jul 28 22:41:15 2026 by rpki-client