$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8804dfec-79d7-4390-a6a3-68e44e2370c9.roa File: 8804dfec-79d7-4390-a6a3-68e44e2370c9.roa (raw, json) Hash identifier: hLTa8HBTx7M2BHMc1AvCT5kXYTp0zDv7XfBAdtFJiDE= Subject key identifier: 32:2E:65:8D:F0:D7:BC:0B:12:13:73:99:C3:83:86:50:BD:4B:6D:7D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2DCE106FB6EF47A83FAD38128736F3C39BCAEDBC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8804dfec-79d7-4390-a6a3-68e44e2370c9.roa Signing time: Fri 23 Oct 2026 00:03:06 +0000 ROA not before: Fri 23 Oct 2026 00:03:06 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ce:10:6f:b6:ef:47:a8:3f:ad:38:12:87:36:f3:c3:9b:ca:ed:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 23 00:03:06 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=464aa1e2edc038dfbe61e05afff1f9ffea6064366a42dd0c8159a498805d9f2f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:69:fc:e3:19:15:33:1d:34:f5:f2:8a:64: d0:66:c5:f1:2e:94:d0:07:57:ae:77:2d:de:87:ea: 27:af:ce:e2:2c:26:d2:97:2a:36:17:92:ef:03:ad: b3:d9:9f:41:ce:c6:71:95:8e:6f:6b:94:4c:6f:71: c2:b9:05:a7:d5:2d:76:69:5d:c7:bf:1b:e9:f0:8d: 27:d6:74:44:99:a2:74:d3:30:7a:89:24:ad:f3:21: 0f:ff:bc:3c:04:78:66:52:d9:8d:2f:c9:b4:5a:06: a3:23:9c:fc:7a:24:1b:08:a7:5b:8b:30:55:51:13: 68:1c:91:51:c4:ca:57:cc:ca:cd:1c:a0:fc:67:e3: d0:3e:02:41:e8:a1:59:a1:7c:d1:29:fc:9a:af:62: cc:08:af:d3:24:78:26:37:27:4a:09:33:d2:8e:bf: 83:71:b8:be:4f:f5:17:cb:f6:7a:1b:90:50:91:23: af:de:61:33:b7:55:01:5b:b0:37:b9:81:77:43:f5: 2d:ed:f4:0f:af:ec:b7:1e:24:bb:a5:b2:87:c4:7c: ab:44:90:a6:2e:6e:a5:d9:c4:ab:7b:36:c6:3f:24: 93:66:b2:a4:89:98:07:61:13:79:bd:49:a4:7f:97: 13:cd:86:26:b9:ae:ba:c5:a1:7c:c9:20:d0:60:5a: e7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2E:65:8D:F0:D7:BC:0B:12:13:73:99:C3:83:86:50:BD:4B:6D:7D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8804dfec-79d7-4390-a6a3-68e44e2370c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.56.0/23 Signature Algorithm: sha256WithRSAEncryption c7:a2:c7:14:8f:8a:5c:93:b3:5e:c1:1e:0f:d6:ad:14:a0:04: 20:d0:c9:69:a4:60:db:b5:6e:b9:fa:7f:9d:18:9f:46:94:77: d3:b1:3b:a2:f8:cd:f4:de:c7:15:c9:3f:f6:84:ff:2a:6a:80: a4:55:06:28:73:b2:1f:41:2c:be:3f:33:42:f4:20:48:f1:17: 28:3c:79:1d:81:9c:4e:ac:19:1a:23:d5:bf:81:08:55:53:cf: 3a:58:02:61:4e:37:91:5c:4e:4a:a6:6b:ab:82:40:65:bc:7f: 36:87:69:8d:1b:24:d5:5b:f4:89:b6:a8:ec:2e:16:69:c2:7c: ed:a6:ab:06:ee:e7:a6:c9:ba:7a:08:59:5c:be:20:cc:52:96: c8:66:ae:c9:4f:02:b1:5e:18:02:49:31:ab:c7:ec:e8:bf:35: d0:63:5f:9d:35:89:b8:a9:86:3c:34:02:b2:be:a2:a0:14:b5: ab:50:f3:1b:13:c3:c3:ad:30:8b:69:d7:76:1e:d8:0a:9e:3b: b0:01:bf:72:61:05:a3:fd:1e:eb:d3:0f:d2:ec:45:9e:2b:d7: d5:32:ca:c3:56:fe:1a:5d:a1:09:74:66:b8:86:0c:5d:d1:4a: c0:20:96:03:8e:28:ea:0d:b8:c8:03:cc:03:9a:c2:29:ef:df: 6a:6b:51:71 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIULc4Qb7bvR6g/rTgShzbzw5vK7bwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMzAwMDMwNloX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNANDY0YWExZTJlZGMwMzhkZmJlNjFl MDVhZmZmMWY5ZmZlYTYwNjQzNjZhNDJkZDBjODE1OWE0OTg4MDVkOWYyZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE9p/OMZFTMdNPXyimTQZsXxLpTQ B1eudy3eh+onr87iLCbSlyo2F5LvA62z2Z9BzsZxlY5va5RMb3HCuQWn1S12aV3H vxvp8I0n1nREmaJ00zB6iSSt8yEP/7w8BHhmUtmNL8m0WgajI5z8eiQbCKdbizBV URNoHJFRxMpXzMrNHKD8Z+PQPgJB6KFZoXzRKfyar2LMCK/TJHgmNydKCTPSjr+D cbi+T/UXy/Z6G5BQkSOv3mEzt1UBW7A3uYF3Q/Ut7fQPr+y3HiS7pbKHxHyrRJCm Lm6l2cSrezbGPySTZrKkiZgHYRN5vUmkf5cTzYYmua66xaF8ySDQYFrnhQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDIuZY3w17wLEhNzmcODhlC9S219MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg4MDRkZmVjLTc5ZDctNDM5MC1hNmEzLTY4ZTQ0ZTIzNzBjOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK9A4MA0GCSqGSIb3DQEBCwUAA4IBAQDHoscUj4pck7NewR4P1q0U oAQg0MlppGDbtW65+n+dGJ9GlHfTsTui+M303scVyT/2hP8qaoCkVQYoc7IfQSy+ PzNC9CBI8RcoPHkdgZxOrBkaI9W/gQhVU886WAJhTjeRXE5KpmurgkBlvH82h2mN GyTVW/SJtqjsLhZpwnztpqsG7uemybp6CFlcviDMUpbIZq7JTwKxXhgCSTGrx+zo vzXQY1+dNYm4qYY8NAKyvqKgFLWrUPMbE8PDrTCLadd2HtgKnjuwAb9yYQWj/R7r 0w/S7EWeK9fVMsrDVv4aXaEJdGa4hgxd0UrAIJYDjijqDbjIA8wDmsIp799qa1Fx -----END CERTIFICATE-----Generated at Thu Nov 5 07:02:24 2026 by rpki-client