$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf0dafc3-6328-43e8-8a36-8ecf54208001.roa File: cf0dafc3-6328-43e8-8a36-8ecf54208001.roa (raw, json) Hash identifier: pdtHY9U9wFXFvk6mrkz3u7SpcohDV/dIC7+iYXm0moA= Subject key identifier: 67:56:D3:2F:94:40:A7:F3:C6:D2:56:B4:71:96:6D:34:C0:83:88:E3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 18DB66F0032654D86E0CED64C6CF4B8439E8BD97 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf0dafc3-6328-43e8-8a36-8ecf54208001.roa Signing time: Wed 25 Feb 2026 00:00:10 +0000 ROA not before: Wed 25 Feb 2026 00:00:10 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:db:66:f0:03:26:54:d8:6e:0c:ed:64:c6:cf:4b:84:39:e8:bd:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 25 00:00:10 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=078a6fd296e0035eb0179c5ceed60a659dc89291034a8bfe9836c31c1b2232a3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:d1:81:51:26:1c:3f:d7:43:7a:7c:02:bd: c9:18:2d:2c:3d:80:a6:8e:45:1f:28:97:1c:42:53: 10:2d:2d:d8:a4:ef:19:54:cf:0f:46:68:c0:cc:ec: 3c:70:a9:9c:eb:33:6c:9e:5a:d6:7f:1c:9e:26:87: 81:31:9c:5a:ef:bc:fb:d6:c4:61:cf:c4:49:17:77: df:2a:ed:45:f6:c2:14:3c:9e:81:4a:78:7d:94:63: c3:b2:6b:ed:85:0d:4f:98:e6:c8:3f:3b:06:08:05: 4e:8d:04:bf:85:67:0e:90:19:d4:89:84:fa:5e:1e: 86:cb:53:a3:a0:d0:37:3a:f3:9a:eb:a7:37:e4:53: 90:fd:e8:4d:76:37:f1:bd:bf:71:40:ec:e4:4b:e9: 17:fe:32:4e:0d:e7:0e:18:8a:11:cd:23:7f:f3:26: 9b:11:b1:71:53:90:e4:dd:34:5f:90:29:8e:1b:f7: 1e:71:3d:a7:d7:a3:10:67:40:31:0d:e1:da:49:e3: b8:80:1c:80:a8:a8:c2:e1:e2:24:55:60:87:0d:ba: 52:ec:28:d9:a9:77:f7:f9:b2:8a:28:15:86:7d:9b: 32:01:4e:fd:c0:1e:d5:bd:a4:05:6a:b0:be:49:07: 18:f3:ff:e1:2b:8c:8e:6d:dd:ad:4d:ce:4f:e4:88: f2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:56:D3:2F:94:40:A7:F3:C6:D2:56:B4:71:96:6D:34:C0:83:88:E3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf0dafc3-6328-43e8-8a36-8ecf54208001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.58.0/24 Signature Algorithm: sha256WithRSAEncryption 41:c8:01:c0:38:df:f0:a1:06:af:0c:9d:94:f3:f2:1e:08:f0: cd:20:83:fe:ed:04:fe:fc:86:a6:71:bf:08:48:3a:43:22:3e: ee:26:9c:fc:43:ce:d1:47:7b:3d:91:1e:19:31:0a:26:cf:c1: 1a:0a:7b:87:a8:74:01:31:9b:51:b5:2f:a4:93:6a:93:5f:54: 5a:c7:60:5d:fa:95:00:b1:0b:1c:f2:a8:af:44:d2:7e:f9:b3: 31:d2:09:00:7f:0d:f5:46:3b:5e:21:d2:a3:26:e2:61:a9:1c: 02:c4:39:f6:0f:4a:42:50:57:37:06:d8:04:44:82:e4:25:be: 76:23:20:65:ce:2a:8c:c9:88:3d:b2:1d:fb:34:2c:bc:85:85: 95:3c:3f:3d:e8:04:76:ab:c7:78:4a:f5:34:12:41:f2:24:f2: 00:e6:3b:88:61:e4:cd:d9:51:28:d3:50:da:7f:a1:3a:22:bc: db:25:fb:ae:48:89:c7:8e:85:6a:45:23:51:4c:5a:75:a2:a6: cd:55:67:b0:7b:59:0a:b1:28:6c:42:42:22:19:e5:f2:a3:25: e3:23:8c:14:38:21:06:25:7e:f8:66:9d:2f:81:43:68:ab:db: f5:1b:f3:da:97:2c:4d:95:b2:5f:9c:ea:2a:6e:5e:4b:bc:ce: dd:4a:10:27 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUGNtm8AMmVNhuDO1kxs9LhDnovZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyNTAwMDAxMFoX DTI2MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMDc4YTZmZDI5NmUwMDM1ZWIwMTc5 YzVjZWVkNjBhNjU5ZGM4OTI5MTAzNGE4YmZlOTgzNmMzMWMxYjIyMzJhMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2fRgVEmHD/XQ3p8Ar3JGC0sPYCm jkUfKJccQlMQLS3YpO8ZVM8PRmjAzOw8cKmc6zNsnlrWfxyeJoeBMZxa77z71sRh z8RJF3ffKu1F9sIUPJ6BSnh9lGPDsmvthQ1PmObIPzsGCAVOjQS/hWcOkBnUiYT6 Xh6Gy1OjoNA3OvOa66c35FOQ/ehNdjfxvb9xQOzkS+kX/jJODecOGIoRzSN/8yab EbFxU5Dk3TRfkCmOG/cecT2n16MQZ0AxDeHaSeO4gByAqKjC4eIkVWCHDbpS7CjZ qXf3+bKKKBWGfZsyAU79wB7VvaQFarC+SQcY8//hK4yObd2tTc5P5IjypwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFGdW0y+UQKfzxtJWtHGWbTTAg4jjMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NmMGRhZmMzLTYzMjgtNDNlOC04YTM2LThlY2Y1NDIwODAwMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9A6MA0GCSqGSIb3DQEBCwUAA4IBAQBByAHAON/woQavDJ2U8/Ie CPDNIIP+7QT+/Iamcb8ISDpDIj7uJpz8Q87RR3s9kR4ZMQomz8EaCnuHqHQBMZtR tS+kk2qTX1Rax2Bd+pUAsQsc8qivRNJ++bMx0gkAfw31RjteIdKjJuJhqRwCxDn2 D0pCUFc3BtgERILkJb52IyBlziqMyYg9sh37NCy8hYWVPD896AR2q8d4SvU0EkHy JPIA5juIYeTN2VEo01Daf6E6IrzbJfuuSInHjoVqRSNRTFp1oqbNVWewe1kKsShs QkIiGeXyoyXjI4wUOCEGJX74Zp0vgUNoq9v1G/PalyxNlbJfnOoqbl5LvM7dShAn -----END CERTIFICATE-----Generated at Mon Mar 2 21:10:07 2026 by rpki-client