$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9208ca37-666c-46cf-adea-072bc5bb150d.roa File: 9208ca37-666c-46cf-adea-072bc5bb150d.roa (raw, json) Hash identifier: MkEexJg8PoqoUB9rJvD4iYCESAA3BgY+pul7jXv4jWg= Subject key identifier: 6D:8C:D4:6F:A3:62:CD:13:58:19:E2:82:64:03:86:B0:54:70:60:46 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 05B67400A9A8E8E6B9DB5429FFADE404B3FBB0FD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9208ca37-666c-46cf-adea-072bc5bb150d.roa Signing time: Tue 24 Feb 2026 00:10:07 +0000 ROA not before: Tue 24 Feb 2026 00:10:07 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.218.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b6:74:00:a9:a8:e8:e6:b9:db:54:29:ff:ad:e4:04:b3:fb:b0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 24 00:10:07 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=ecc07cca5b3e05bc486839828478f7a984ccfc5939b15637c21ee5c4b4653ffb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ac:e5:81:85:53:e0:51:13:7b:fd:9c:00:6a: 02:1d:d0:bb:cd:70:1a:91:d4:b7:32:c1:b6:ae:50: 2f:36:65:fc:84:0a:4f:f0:51:be:4b:3f:0e:f9:e7: b3:ca:b5:0e:b6:77:8b:52:1c:37:57:9e:fb:cd:cf: b6:60:a4:2c:84:38:ad:2c:a1:78:52:9a:1d:18:e6: 1a:11:d8:17:7f:d4:e8:a2:0d:99:13:59:95:c9:83: 90:aa:bf:d7:65:7b:d5:fc:37:79:67:55:3e:63:f8: bf:a0:8d:22:03:73:e5:55:ae:30:f4:7a:a9:a9:49: 10:93:9f:cd:47:50:96:d9:a8:f5:cf:69:3d:aa:35: b0:d5:09:59:b5:ae:0a:75:aa:51:bd:de:16:7e:7f: 35:92:6d:65:60:b0:e1:5d:ac:56:2a:10:27:27:51: 90:45:e3:52:78:a3:f7:eb:a0:82:8f:a3:5f:96:b0: b8:a0:3c:4f:06:c0:f6:95:26:65:4d:27:0b:c3:e5: 84:f3:29:8a:87:ed:87:1f:fc:1e:ac:9b:c4:e3:bd: b8:83:1f:4f:c2:b0:2a:26:ff:c3:75:b8:ec:6f:0f: 4e:63:e0:3e:74:0f:1c:a5:d1:a6:08:e0:47:38:28: 70:5e:86:81:b3:8f:74:03:83:fe:7d:d6:ad:b8:96: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8C:D4:6F:A3:62:CD:13:58:19:E2:82:64:03:86:B0:54:70:60:46 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9208ca37-666c-46cf-adea-072bc5bb150d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.218.0.0/16 Signature Algorithm: sha256WithRSAEncryption 58:5e:35:8f:a0:10:d2:31:af:77:fc:da:2b:aa:21:ac:25:ab: e5:b7:2d:cf:44:29:07:70:8e:7a:3b:a6:e5:cd:9e:9c:1b:2c: 3a:5b:57:9c:8f:ca:60:83:29:2e:dd:1c:04:c5:cc:c9:e2:ec: f6:a4:bf:dc:90:fe:ac:fd:a2:6f:df:9f:b9:8b:30:f6:56:67: 7a:ca:44:14:1c:2f:22:01:da:93:7b:43:df:a0:2e:1e:dc:6f: c2:9a:c0:b3:fa:8e:ca:e5:42:5c:9b:43:d6:08:63:0a:a4:55: 82:be:32:9c:77:47:3e:4d:e5:e8:15:49:2b:63:49:9f:31:81: 1a:74:8b:90:91:d1:04:5c:e7:40:85:0e:3f:3a:ea:aa:f3:20: f6:c2:b1:25:3b:47:51:6c:b2:e4:1b:24:7b:fc:cd:ec:7b:eb: 38:e6:8b:88:26:7c:d6:bf:19:db:3c:56:d9:43:3a:ff:99:8d: 69:83:79:43:7a:c2:9a:de:db:7f:ec:c8:3a:11:9a:68:c1:ff: 5d:61:10:f8:68:ac:fd:86:27:8b:4a:23:5e:05:73:c6:5f:5a: d6:35:e0:27:92:8f:92:5d:43:83:97:d6:4c:fc:a9:6c:63:51: fa:d2:52:52:33:b5:74:49:52:c1:d5:ec:6c:78:ba:b2:cc:b7: ac:97:33:17 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUBbZ0AKmo6Oa521Qp/63kBLP7sP0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyNDAwMTAwN1oX DTI2MDUyNTIzNTk1OVowejFJMEcGA1UEBRNAZWNjMDdjY2E1YjNlMDViYzQ4Njgz OTgyODQ3OGY3YTk4NGNjZmM1OTM5YjE1NjM3YzIxZWU1YzRiNDY1M2ZmYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnazlgYVT4FETe/2cAGoCHdC7zXAa kdS3MsG2rlAvNmX8hApP8FG+Sz8O+eezyrUOtneLUhw3V577zc+2YKQshDitLKF4 UpodGOYaEdgXf9Toog2ZE1mVyYOQqr/XZXvV/Dd5Z1U+Y/i/oI0iA3PlVa4w9Hqp qUkQk5/NR1CW2aj1z2k9qjWw1QlZta4KdapRvd4Wfn81km1lYLDhXaxWKhAnJ1GQ ReNSeKP366CCj6NflrC4oDxPBsD2lSZlTScLw+WE8ymKh+2HH/werJvE4724gx9P wrAqJv/Ddbjsbw9OY+A+dA8cpdGmCOBHOChwXoaBs490A4P+fdatuJYzBQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFG2M1G+jYs0TWBnigmQDhrBUcGBGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkyMDhjYTM3LTY2NmMtNDZjZi1hZGVhLTA3MmJjNWJiMTUwZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK9owDQYJKoZIhvcNAQELBQADggEBAFheNY+gENIxr3f82iuqIawl q+W3Lc9EKQdwjno7puXNnpwbLDpbV5yPymCDKS7dHATFzMni7Pakv9yQ/qz9om/f n7mLMPZWZ3rKRBQcLyIB2pN7Q9+gLh7cb8KawLP6jsrlQlybQ9YIYwqkVYK+Mpx3 Rz5N5egVSStjSZ8xgRp0i5CR0QRc50CFDj866qrzIPbCsSU7R1FssuQbJHv8zex7 6zjmi4gmfNa/Gds8VtlDOv+ZjWmDeUN6wpre23/syDoRmmjB/11hEPhorP2GJ4tK I14Fc8ZfWtY14CeSj5JdQ4OX1kz8qWxjUfrSUlIztXRJUsHV7Gx4urLMt6yXMxc= -----END CERTIFICATE-----Generated at Sun Mar 1 21:54:44 2026 by rpki-client