$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa File: 8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa (raw, json) Hash identifier: U2gEJen2ViCsNLeolGPNrYkclZC6JWzJS24UBOX6VqM= Subject key identifier: F7:14:A6:91:84:67:89:A0:8D:F0:4E:9B:A8:B5:40:DE:BA:47:E3:6E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 70259DEAB5CFB966BA44C3C5EBAD297A2A1A8533 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa Signing time: Tue 24 Feb 2026 00:00:33 +0000 ROA not before: Tue 24 Feb 2026 00:00:33 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:25:9d:ea:b5:cf:b9:66:ba:44:c3:c5:eb:ad:29:7a:2a:1a:85:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 24 00:00:33 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=a4d2f9ab87cc6530737ec4086f1b8d423ced83f232b3c30b4ec2e950417670ec, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:9e:2c:01:83:6d:60:c0:78:1a:d7:a5:f1: 92:a0:14:a8:2c:b0:59:d8:f4:c4:c5:8e:42:07:31: 3b:0f:bb:ff:87:1f:89:e8:e0:71:84:3a:4a:01:e7: ab:cf:28:88:fa:c5:bf:77:81:7d:de:5e:ff:a0:06: ab:c7:e7:57:0e:fe:25:6a:b5:4f:d1:54:a7:02:2b: f5:1b:7e:89:b5:f5:5b:75:57:cf:97:94:ec:ed:e4: bf:75:c8:87:11:f9:a7:b7:16:c3:4f:b6:e7:3e:03: fb:f4:ca:a7:af:ac:a7:9c:43:1b:35:72:e8:37:93: 6e:37:28:e5:9b:fb:0b:2b:10:0f:5e:b4:57:1a:95: 4a:d7:89:36:03:8a:49:38:52:22:ea:be:10:f6:f5: 89:01:46:71:18:65:f2:9c:9c:97:17:36:a4:ad:0c: 28:40:a3:56:b6:e5:39:45:47:e0:b1:12:a0:4f:c5: 6d:48:d3:0a:fc:2c:71:11:7d:b0:68:39:fa:d7:54: b9:28:9e:e7:7a:58:d0:7e:a7:6c:2b:dd:4d:42:8f: 00:e2:c1:18:ea:77:3f:76:50:8e:10:ea:a6:2b:64: 4f:ce:fc:cc:26:2e:05:bc:30:e6:30:e3:ed:c9:ae: 1d:91:81:a5:c4:80:33:04:ff:f3:8d:23:df:64:5b: 8d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:14:A6:91:84:67:89:A0:8D:F0:4E:9B:A8:B5:40:DE:BA:47:E3:6E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.65.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:3b:ef:44:a7:8a:ad:ab:3b:02:6f:f5:c4:3d:ec:d7:e6:f4: b7:ec:8d:5e:42:63:50:41:48:a9:ef:54:22:eb:e5:48:09:ba: c5:82:47:9d:4e:79:be:5b:a7:7f:e2:72:15:d3:54:ac:54:45: 45:b4:c0:f9:b5:cc:ff:bf:0b:95:dd:63:f3:a5:86:c0:62:62: 53:74:38:ce:6c:a8:1e:60:f5:68:0f:7a:c6:2c:47:08:ce:34: bc:b7:3e:e8:c4:b4:cb:eb:38:d5:50:06:2a:0c:37:a0:b6:69: 36:4a:88:d5:dc:9d:7a:91:d6:d8:a4:59:15:73:74:32:ee:1d: c1:87:7f:61:cd:47:62:a9:cf:c6:79:0a:a4:7a:18:0a:6e:b9: 4b:cb:de:55:63:e8:b6:fe:88:b9:eb:ca:45:5a:8d:db:27:e0: d6:b8:54:36:14:c6:d4:78:8d:a6:79:e3:40:b6:b2:ca:04:54: 39:df:b4:e4:7c:a2:12:5d:36:2b:d1:7c:ad:40:76:5d:3b:ef: 2d:8f:21:d9:a1:c8:55:61:fb:45:9a:df:67:13:61:85:f0:1e: f5:a6:af:f9:14:49:22:03:89:e5:f2:0f:4f:65:db:41:a5:f8: 5d:51:88:92:83:ee:0a:00:ea:26:e1:76:e4:6a:1f:56:e3:0e: 9e:34:58:27 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUcCWd6rXPuWa6RMPF660peioahTMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyNDAwMDAzM1oX DTI2MDUyNTIzNTk1OVowejFJMEcGA1UEBRNAYTRkMmY5YWI4N2NjNjUzMDczN2Vj NDA4NmYxYjhkNDIzY2VkODNmMjMyYjNjMzBiNGVjMmU5NTA0MTc2NzBlYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr6eLAGDbWDAeBrXpfGSoBSoLLBZ 2PTExY5CBzE7D7v/hx+J6OBxhDpKAeerzyiI+sW/d4F93l7/oAarx+dXDv4larVP 0VSnAiv1G36JtfVbdVfPl5Ts7eS/dciHEfmntxbDT7bnPgP79Mqnr6ynnEMbNXLo N5NuNyjlm/sLKxAPXrRXGpVK14k2A4pJOFIi6r4Q9vWJAUZxGGXynJyXFzakrQwo QKNWtuU5RUfgsRKgT8VtSNMK/CxxEX2waDn611S5KJ7neljQfqdsK91NQo8A4sEY 6nc/dlCOEOqmK2RPzvzMJi4FvDDmMOPtya4dkYGlxIAzBP/zjSPfZFuN0wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFPcUppGEZ4mgjfBOm6i1QN66R+NuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgxODdkN2ExLWVjNGUtNGNhYi1hOGM3LTkyMWE3NDkyZTg5Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9hBMA0GCSqGSIb3DQEBCwUAA4IBAQB6O+9Ep4qtqzsCb/XEPezX 5vS37I1eQmNQQUip71Qi6+VICbrFgkedTnm+W6d/4nIV01SsVEVFtMD5tcz/vwuV 3WPzpYbAYmJTdDjObKgeYPVoD3rGLEcIzjS8tz7oxLTL6zjVUAYqDDegtmk2SojV 3J16kdbYpFkVc3Qy7h3Bh39hzUdiqc/GeQqkehgKbrlLy95VY+i2/oi568pFWo3b J+DWuFQ2FMbUeI2meeNAtrLKBFQ537TkfKISXTYr0XytQHZdO+8tjyHZochVYftF mt9nE2GF8B71pq/5FEkiA4nl8g9PZdtBpfhdUYiSg+4KAOom4Xbkah9W4w6eNFgn -----END CERTIFICATE-----Generated at Sun Mar 1 23:46:55 2026 by rpki-client