$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8e374976-c936-48f8-b2ff-c3b17816a67c.roa File: 8e374976-c936-48f8-b2ff-c3b17816a67c.roa (raw, json) Hash identifier: ezFsSDqohwZ15MldBzOJEBNzPA5Wg2OcUEd1kzDSZ6E= Subject key identifier: EF:DD:B8:BA:E0:B9:B5:C8:79:DD:76:18:39:C9:AC:E5:B1:EA:42:D7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4C7A0C80D6424A937226E165BE5B666AC97CB50D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8e374976-c936-48f8-b2ff-c3b17816a67c.roa Signing time: Wed 13 May 2026 00:00:12 +0000 ROA not before: Wed 13 May 2026 00:00:12 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.212.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7a:0c:80:d6:42:4a:93:72:26:e1:65:be:5b:66:6a:c9:7c:b5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:00:12 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=e19a8c48d066e0d7b6bbcb017637789e8b5604b47c7c95e5d7fa7a1442697200, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:ba:5c:9b:38:12:0b:95:38:88:98:6c:1c: 43:f6:d5:dc:92:8a:cd:80:9e:14:ae:38:2f:24:65: 1c:8f:64:0b:2c:8f:f6:bc:49:ad:3d:94:ad:53:7f: 5d:42:3b:c8:c2:0c:66:c0:5f:a5:8d:2c:2d:32:0b: fe:9d:04:7f:63:56:bf:3e:12:a0:b6:be:c2:52:55: 8c:77:d8:93:b2:0c:bd:80:a7:95:98:63:ed:a5:5e: 5c:72:dd:ea:26:d9:9f:09:81:10:62:75:e1:ef:eb: a4:59:e6:09:ba:77:7d:81:c0:db:04:3a:97:3d:03: 48:b7:7b:e8:71:e6:99:b3:aa:5d:a3:80:cc:43:2e: dd:e8:66:f1:cb:41:7f:b1:d2:ed:5a:aa:db:2f:ff: 9b:03:ce:ed:e1:7f:dd:4d:f8:df:be:71:66:8f:1e: dd:e8:65:68:1e:8c:54:1f:b4:26:04:55:df:be:41: c0:da:7d:03:a0:20:3e:f6:6f:3c:18:f0:19:d4:06: e8:97:24:80:04:fe:56:4c:3c:97:f0:02:11:22:76: 70:78:01:bc:d8:12:bd:d5:7a:1e:83:a8:cb:38:f1: 66:e1:b6:9c:c8:56:37:c2:4e:b1:64:86:0e:66:0b: 16:3e:76:05:c4:df:82:40:0f:30:e7:20:6c:ab:53: 78:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DD:B8:BA:E0:B9:B5:C8:79:DD:76:18:39:C9:AC:E5:B1:EA:42:D7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8e374976-c936-48f8-b2ff-c3b17816a67c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.212.65.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:f1:a2:27:e0:a8:8b:55:22:da:47:4b:f3:0d:b3:e1:3f:8d: 1b:d1:fa:22:df:d3:93:b9:e9:7a:7e:52:33:2f:fe:40:53:73: 00:fd:77:17:0d:7c:31:80:f0:a2:c0:5a:78:36:93:9f:d5:60: 0c:d1:ff:46:58:d7:44:62:a4:e6:ff:8d:e3:b6:01:9f:51:69: 2e:f6:d6:cb:00:98:b8:14:9a:ec:ce:f1:c2:06:d2:35:5c:94: a5:24:26:6f:0c:92:4d:2d:58:99:b4:98:bb:05:5c:93:a2:c3: 37:8c:9a:bc:1a:8e:5b:94:7a:27:49:21:ff:8d:60:7d:08:73: 95:0b:6a:63:75:4a:aa:fc:d1:8d:d6:fe:aa:bc:c4:02:e9:69: df:5b:3c:70:f0:42:67:ea:ef:6d:e7:d2:2d:42:d9:2d:a0:23: f3:29:4e:1d:a1:75:29:c3:02:e7:8c:df:96:ff:6d:a6:c2:31: d1:bb:89:45:1c:13:90:41:04:55:dc:8a:be:e8:64:10:f9:68: 22:d6:1c:8b:52:45:a8:30:5e:ff:27:8b:08:62:8c:ae:25:0a: 86:12:2e:b5:00:36:35:d1:08:62:77:7e:8d:03:91:72:e4:c9: f7:2a:a3:28:56:c3:f8:1a:f2:7d:a8:ea:c4:72:01:3a:04:4b: 40:de:09:09 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUTHoMgNZCSpNyJuFlvltmasl8tQ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMDAxMloX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAZTE5YThjNDhkMDY2ZTBkN2I2YmJj YjAxNzYzNzc4OWU4YjU2MDRiNDdjN2M5NWU1ZDdmYTdhMTQ0MjY5NzIwMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqi6XJs4EguVOIiYbBxD9tXckorN gJ4UrjgvJGUcj2QLLI/2vEmtPZStU39dQjvIwgxmwF+ljSwtMgv+nQR/Y1a/PhKg tr7CUlWMd9iTsgy9gKeVmGPtpV5cct3qJtmfCYEQYnXh7+ukWeYJund9gcDbBDqX PQNIt3voceaZs6pdo4DMQy7d6Gbxy0F/sdLtWqrbL/+bA87t4X/dTfjfvnFmjx7d 6GVoHoxUH7QmBFXfvkHA2n0DoCA+9m88GPAZ1AbolySABP5WTDyX8AIRInZweAG8 2BK91Xoeg6jLOPFm4bacyFY3wk6xZIYOZgsWPnYFxN+CQA8w5yBsq1N4twIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFO/duLrgubXIed12GDnJrOWx6kLXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhlMzc0OTc2LWM5MzYtNDhmOC1iMmZmLWMzYjE3ODE2YTY3Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9RBMA0GCSqGSIb3DQEBCwUAA4IBAQAa8aIn4KiLVSLaR0vzDbPh P40b0foi39OTuel6flIzL/5AU3MA/XcXDXwxgPCiwFp4NpOf1WAM0f9GWNdEYqTm /43jtgGfUWku9tbLAJi4FJrszvHCBtI1XJSlJCZvDJJNLViZtJi7BVyTosM3jJq8 Go5blHonSSH/jWB9CHOVC2pjdUqq/NGN1v6qvMQC6WnfWzxw8EJn6u9t59ItQtkt oCPzKU4doXUpwwLnjN+W/22mwjHRu4lFHBOQQQRV3Iq+6GQQ+Wgi1hyLUkWoMF7/ J4sIYoyuJQqGEi61ADY10Qhid36NA5Fy5Mn3KqMoVsP4GvJ9qOrEcgE6BEtA3gkJ -----END CERTIFICATE-----Generated at Sat Jun 13 08:03:19 2026 by rpki-client